XenForo is not open source. also, XenForo is not Linux or FreeBSD, it's a piece of third-party software.
and anyone claiming that any OS is "super secure" is... possibly misunderstanding how security works. perhaps you could say FreeBSD is...
Exactly. Us open source heads always brag about how both linux and freebsd are super secure, and then we have our forums pwnd like this. Its pretty embarrassing.
Once upon a time I reported a bug with Red Hat. Every time I asked for a status update I was told the bug was confirmed, fixed and it would be included in the next point release. And with every point release the bug wasn't fixed. It took 4 minor...
I was using the term "admins" to refer to everyone involved in running the FreeBSD operation - from the foundation to the developers and contributors and ... and...
We all have a rôle, however small, in one way or another.
The solvers for the "package sql stuff", here where not the admins, doing great job on the forum bye the way, they where simple mortal users like me, noticing it & the real workhorses fixing it , where it behind in the mailinglists, kudos to...
XenForo is not open source. also, XenForo is not Linux or FreeBSD, it's a piece of third-party software.
and anyone claiming that any OS is "super secure" is... possibly misunderstanding how security works. perhaps you could say FreeBSD is...
This is literally what happened.
SirDice and myself both caught the defacement live (and in some way, caused it by being online -- see point 3 in quote).
SirDice analyzed the code (which was put in a simple post), nuked the user and their post...
The topic of this thread is "what happened".
I was reading a thread about poudriere and when I clicked page 2 I saw the result of the hack. It was a strange feeling.
If I should wander off topic and view my personal opinion on how this Forum...
Setting DNS to localhost (127.0.0.1 or ::1) was a stroke of genius! People running a webserver on the same machine would get 404 Page not Found or similar server errors. The rest of us got Connection Refused errors. It had me puzzled for a while...
You are only as good as the latest software you're running and the ability to keep up with those. We had a failure in keeping up with XF and that will not happen again. This was the first security event in the 18 years that these forums have...
There is also Ultimate++ but the woe of these is reliance on internal or 'simple' GUI libraries that tend to not look well on high resolution high DPI displays. I've already been disproven in my generalizations but where I come from, developers...
XenForo is not open source. also, XenForo is not Linux or FreeBSD, it's a piece of third-party software.
and anyone claiming that any OS is "super secure" is... possibly misunderstanding how security works. perhaps you could say FreeBSD is...
Hi guys, sorry that the FreeBSD Forums were offline for a couple of hours.
We were hit by an exploit against a slightly outdated XenForo version that we were still running.
The same exploit hit quite a number of XenForo installations today...
Sorry, it worked without any issue for me. I didn't have any version of node or electron previously installed, and let
pkg install joplin-desktop do all the installation and configuring.
The security of the OS isn't going to stop a parsing bug in a web application. That's how most, if not all, hacks happen nowadays. It very rarely happens because of a bug in the OS itself.
To add to an old thread. I had two machines where mdo -i worked as expected. However, on a third machine I'd get
cred() failed: Operation not permitted
It turned out that this was because on the 3rd machine, I wasn't a member of the wheel...
This is literally what happened.
SirDice and myself both caught the defacement live (and in some way, caused it by being online -- see point 3 in quote).
SirDice analyzed the code (which was put in a simple post), nuked the user and their post...
vim has a nasty security vulnerability with no CVE yet:
https://www.openwall.com/lists/oss-security/2026/03/30/3
To disable, add this to your ~/.vimrc:
set nomodeline
To check if you're vulnerable, run from vim:
:echo &modeline
It should be 0.
Not that I could find in our situation. I took apart their injected javascript. It didn't do much besides redirecting to a github repo that hosted the "defacement" page. That defacement page also contained some javascript, but that was nothing...
By Drew Gallatin, reproduced with permission.
In Memoriam: Kenneth N. Smith
I recently found out that Ken Smith (kensmith) recently passed away. Ken was on the RE team for many years, and was the lead RE for several releases around the...
The topic of this thread is "what happened".
I was reading a thread about poudriere and when I clicked page 2 I saw the result of the hack. It was a strange feeling.
If I should wander off topic and view my personal opinion on how this Forum...
I'm spoiled. My current build server is a dual Xeon E5-2667 with 192 GB of memory. USE_TMPFS=all, PARALLEL_JOBS=6 and ALLOW_MAKE_JOBS=yes. This thing is slicing through my package list like a hot knife through butter. Especially compared to my...
Perhaps simpler and cheaper is to take another mainboard with CPU and memory from an older computer as this.
But then the question is, why it happened, if the PSU is the cause.
As I wrote above, the problem was not new, I had a similar problem...
Perhaps simpler and cheaper is to take another mainboard with CPU and memory from an older computer as this.
But then the question is, why it happened, if the PSU is the cause.
As I wrote above, the problem was not new, I had a similar problem...
Thought so. Just wanted to make sure. Maybe this is the CPU having given up the ghost, it's the part with the smallest transistors in the system (and maybe the most). Do you have the chance to change that? Might be a lot cheaper than the complete...
The topic of this thread is "what happened".
I was reading a thread about poudriere and when I clicked page 2 I saw the result of the hack. It was a strange feeling.
If I should wander off topic and view my personal opinion on how this Forum...
No need to entirely remove them, they are listed in kld_list in rc.conf, just remark that line so the modules aren't automatically loaded. Also disable SDDM, LightDM, SLiM or any of the other display managers you might have enabled. Do the...
The battery was almost 'empty', but putting a new one did not help.
I tried with other PSU, the MB has a standby light when it gets electricity and it lights, when I turn with the MB on, then the power meter I have in the plug jumps from 0...
Checking the PSU first step would be to simply only connect a spinning disc and see if it spins up.
WRT switches, the switches in many a power distribution cords will generate quite an arc when flipped. When that collapses, there is a voltage...
Absorbs electricity (I have a meter on the plug), the MB is fanless, but the fan of the PSU moves, the screen remains blank without cursor.
Since without RAM it does not peep as it should do, it has probably not reached the point of testing RAM...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.