[inertstatic]

LOL... my password was 11 days old.

[diehli]

Got the 10-day thing, too. Vertical Scope is garbage.

[inertstatic]

Originally Posted by diehli

Got the 10-day thing, too. Vertical Scope is garbage.

Yeah another truck form I read went though the process of separating from them about a year ago. Garbage.

[da_mink]

hey VS, so many promises, still no responses......

Do you guys even have a security guy? or just a high priced consultant (Alex Holden) that talks vastly more than he acts?

not that they're telling us but;
They lost our passwords AGAIN FFS
http://www.canadianbusiness.com/busi...cked-websites/

[diehli]

Originally Posted by Joshisanalligator

Totally not a bot...

I love how your quoted post demonstrates VS's ineptitude.

[Mr. Stealthy]

This 10 day password thing is rediciculous and is pretty close to driving me away from the site...

[diehli]

Originally Posted by da_mink

hey VS, so many promises, still no responses......

Do you guys even have a security guy? or just a high priced consultant (Alex Holden) that talks vastly more than he acts?

not that they're telling us but;
They lost our passwords AGAIN FFS
http://www.canadianbusiness.com/busi...cked-websites/

Here's the text of that article; note the bolded part:

VerticalScope confirms user information stolen from six hacked websites

The Canadian Press | Nov 13, 2017

Toronto-based VerticalScope Inc. says six of the community websites it administers were hacked last month in the latest of a recent series of data breaches affecting Canadian online user information.

The company says in an emailed statement an “unauthorized party” gained access to community member data for six of its websites on Oct. 17 and 21 and some of the data was disclosed online.

It says the data did not include credit card or banking information but did include usernames, email addresses, encrypted passwords, user identifications, registration dates and IP addresses for websites including DIYchatroom.com, PBnation.com, HysterSisters.com, ToyotaNation.com, JeepForum.com and WatchUSeek.com.

Alex Holden of Hold Security, LLC, says his American cybersecurity firm was able to intercept hackers’ attempts to sell data stolen from VerticalScope and tracked down screenshots containing current secure information to confirm the breaches had taken place.

He says the attack was “rather sophomoric” and its success doesn’t reflect well on VerticalScope’s cybersecurity readiness, adding it’s unclear how many people had their confidential information stolen.

VerticalScope, which is majority owned by TorStar Corp., says it has caused all of the passwords on the sites to expire and has notified affected users. It says the breach has been reported to the federal Privacy Commissioner, Toronto Police Service and the RCMP cybercrime unit.

About 8,000 Canadians had personal information and, in some cases, credit card information, exposed in the massive Equifax cyberbreach that occurred in July but wasn’t reported until September.

[diehli]

It's time for PbN to leave VS. Altho some of the bells & whistles may be lost, PbN's inability to keep spammers off the site & keep users' information secure is more important than some badges & ASM stuff.

[inertstatic]

Originally Posted by diehli

It's time for PbN to leave VS. Altho some of the bells & whistles may be lost, PbN's inability to keep spammers off the site & keep users' information secure is more important than some badges & ASM stuff.

Agreed.

[da_mink]

Originally Posted by diehli

It's time for PbN to leave VS. Altho some of the bells & whistles may be lost, PbN's inability to keep spammers off the site & keep users' information secure is more important than some badges & ASM stuff.

What bells and whistles? The increase in spam and failure to keep users personal information secure is entirely on VS, before them there were no major issues.

The majority of the changes were made before the site was ever sold to Crowdgather in 2011. Heck, I am pretty sure that the only time this forum was in active development was the first 7 years. The CG sale allowed them to implement PBN Pursuit.

Since CG sold PBN to VS,I have not seen ANY changes to the functionality of the forums. It still runs the hacked together VB3.5 it always has.

And don't get too sold on the idea of leaving VS, Ed sold PBN to CG. To quote Sanjay(old owner of CG and PBN)
"Crowdgather is the sole owner of the PbNation.com website, domain name, as well as all intellectual property rights and good will associated with the community"

Crowdgather sold their forums to VS in 2014 to pursue marijuana opportunities.
In the interest of full disclosure, I have worked as a consultant for CG in 2015

[Bloodhound15]

Originally Posted by da_mink

What bells and whistles? The increase in spam and failure to keep users personal information secure is entirely on VS, before them there were no major issues.

The majority of the changes were made before the site was ever sold to Crowdgather in 2011. Heck, I am pretty sure that the only time this forum was in active development was the first 7 years. The CG sale allowed them to implement PBN Pursuit.

Since CG sold PBN to VS,I have not seen ANY changes to the functionality of the forums. It still runs the hacked together VB3.5 it always has.

And don't get too sold on the idea of leaving VS, John sold PBN to CG. To quote Sanjay(old owner of CG and PBN)
"Crowdgather is the sole owner of the PbNation.com website, domain name, as well as all intellectual property rights and good will associated with the community"

Crowdgather sold their forums to VS in 2014 to pursue marijuana opportunities.
In the interest of full disclosure, I have worked as a consultant for CG in 2015

So basically, "suck it up buttercup"? Lol

[Pump Scout]

Originally Posted by da_mink

...John sold PBN to CG.

Just to be clear, this isn't correct. That would have been Ed.

[Ford]

How hard is it to salt a password you store on a DB?

Good thing I only use passwords on this site I already believe to be hacked anyway...

[miguelcont96]

I know this isn't the ideal place to ask for a story... but how was that exactly? Ed sold PBN to CG and John bought it back? I only started foruming two or three years ago so I don't know.

[Ford]

Originally Posted by miguelcont96

I know this isn't the ideal place to ask for a story... but how was that exactly? Ed sold PBN to CG and John bought it back? I only started foruming two or three years ago so I don't know.

Long ago there was a place called paintballcity.com. It was like this place, but with bigger promises that weren't kept =P

[tall white guy]

Originally Posted by miguelcont96

I know this isn't the ideal place to ask for a story... but how was that exactly? Ed sold PBN to CG and John bought it back? I only started foruming two or three years ago so I don't know.

I'm sure someone more knowledgeable will pop in and answer this, but my understanding is that the site was sold to CG and then CG sold it to VS. I don't believe John ever owned the site.

The security issues are a concern, but, like was previously mentioned, we're out of luck. Luckily, we still have this forum to complain incessantly about clear, persistent issues in paintball, even when we know it is futile.

[TargetIndy]

Originally Posted by miguelcont96

I know this isn't the ideal place to ask for a story... but how was that exactly? Ed sold PBN to CG and John bought it back? I only started foruming two or three years ago so I don't know.

Here's the history of PbN (As I know it). Fair warning, my memory of the history has faded a bit.

PbN was started by Tony Rieker in 2001 when paintballcity.com became a subscription-based forum. I believe Kyle Christensen and another John (not John Dresser) were involved and had some ownership from the beginning.

At one point PbN became large enough that it needed some financial assistance. Tony's dad, Ed, bought in. I can't remember if he bought PbN outright, or if Tony and Kyle retained some ownership (the other John had been bought out by this point).

PbN was sold to Crowdgather in a deal that involved cash and stock in Crowdgather. Eventually Crowdgather sold to Vertical Scope, the company which currently owns PbN.

[da_mink]

Originally Posted by TargetIndy

Here's the history of PbN (As I know it). Fair warning, my memory of the history has faded a bit.

PbN was started by Tony Rieker in 2001 when paintballcity.com became a subscription-based forum. I believe Kyle Christenson and another John (not John Dresser) were involved and had some ownership from the beginning.

At one point PbN became large enough that it needed some financial assistance. Tony's dad, Ed, bought in. I can't remember if he bought PbN outright, or if Tony and Kyle retained some ownership (the other John had been bought out by this point).

PbN was sold to Crowdgather in a deal that involved cash and stock in Crowdgather. Eventually Crowdgather sold to Vertical Scope, the company which currently owns PbN.

That's the story as I know it, I inadvertently mixed up ed and john. I have fixed the initial comment.

[jonotwist]

lol pbn Equifaxgate.

[da_mink]

Originally Posted by VS Admin

Thanks all,

More info to follow in the am.

Jeff M

Still waiting two weeks later.....

[firefoxx04]

Originally Posted by Ford

How hard is it to salt a password you store on a DB?

Good thing I only use passwords on this site I already believe to be hacked anyway...

Right? Or to have SSL in 2017 (almost 2018). Seriously.

Its so easy these days, its a one line command on pretty much any Linux web server.

sudo certbot --apache

Seriously, everyone take a look at your address bar. See that complaint in the top left talking about "insecure connection"? Yeah, thats your browser telling you that every single time you log in, anyone on your network can see the password in the clear. I've been screaming about this for a while (and im not the only one).

it's absolutely unacceptable.