It is in fact very hard. Theymos has made numerous security changes into the code
I'm still running Windows for Workgroups, due to ninja security fixes I expertly coded back in the early 90s. Also Edlin.
Topic: I suggest to update SMF (Read 626 times)
I'm still running Windows for Workgroups, due to ninja security fixes I expertly coded back in the early 90s. Also Edlin.
I would use more modern forum. anyway...
The forum was down when I tried to visit last night (Location time) what was the problem?
Just a DDOS attack, see other topic: https://bitcointalksearch.org/topic/bitcointalk-downtime-or-just-me-edit-ddos-attack-confirmed-as-per-theymos-1609071
The forum was down when I tried to visit last night (Location time) what was the problem?
Note that SMF 2.1 is actually the dev version, SMF 2.0 is the latest stable release. If you run a SMF site, you probably should be on SMF 2.0.
However, I personally believe bitcointalk is easily the most secure SMF site out there, both by security fixes (some of which are still present in latest SMF 1&2), security improvements (like the password hashing) and disabled features. (Although SMF is fundamentally not very secure.) I agree that updating to SMF 2 would cost a lot of time and very likely add new vulnerabilities.
However, I personally believe bitcointalk is easily the most secure SMF site out there, both by security fixes (some of which are still present in latest SMF 1&2), security improvements (like the password hashing) and disabled features. (Although SMF is fundamentally not very secure.) I agree that updating to SMF 2 would cost a lot of time and very likely add new vulnerabilities.
This has been discussed before. It isn't going to happen. The next major update to the forum software (besides security bugs) will be the new forum software.
I am not sure how hard is to update SMF but if that process is not something insanely problematic maybe forum crew shout try it?
It is in fact very hard. Theymos has made numerous security changes into the code and other features such that it would be very difficult to port the changes over and ensure that there are no new bugs introduced and no new security issues introduced. Note that these changes are not plugins but rather changes to the base SMF itself. 
As far as I can tell that new forum is being developed since dawn of time. There is no information about ETA.
It has been in development for a long period of time, yes. However, the beta of the new forum is currently live. It is not as far away as it once was.I am not sure how hard is to update SMF but if that process is not something insanely problematic maybe forum crew shout try it?
There would be little point in doing so. Any security bugs that the new version would solve would likely be overshadowed by the amount of security holes fixed in the current version. To port these fixes over to a new version of SMF would take a lot of time and effort for very little reward. The forum is currently having new software developed; upgrading SMF would be a waste of time. In addition to this, AFAIK theymos has a lot of self made security fixes added to this specific version. It would be a pain to transfer those over.
As far as I can tell that new forum is being developed since dawn of time. There is no information about ETA.I am not sure how hard is to update SMF but if that process is not something insanely problematic maybe forum crew shout try it?
The forum is currently having new software developed; upgrading SMF would be a waste of time. In addition to this, AFAIK theymos has a lot of self made security fixes added to this specific version. It would be a pain to transfer those over.
SMF is now at version 2.1
Bitcointalk.org is usign SMF 1.1. I would like to use new SMF with current widgets like trading and sign campaign.
I think it is not hard to integrate these plugins to new SMF.
Regards.
Bitcointalk.org is usign SMF 1.1. I would like to use new SMF with current widgets like trading and sign campaign.
I think it is not hard to integrate these plugins to new SMF.
Regards.
Jump to: