Quote from: Security Engineer on August 29, 2019, 10:44:20 PM

Quote from: DroomieChikito on August 29, 2019, 10:35:59 PM

Quote from: Security Engineer on August 29, 2019, 04:46:09 PM

administrator of this forum without any knowledge of programming. I have read his post from the very first one and nothing indicates he had any knowledge of programming.

Bitcointalk are Big forum have over 2.6 Million member need knowledge of management. And not necesarry know about programing.
Manager can recruit people who have knowledge about it.

That is correct DroomieChikito! Wink

If @theymos do what I recommended to him here: https://bitcointalk.org/index.php?topic=5179950.msg52306296#msg52306296 and in PM than he never again would need to even think about that something bad happens to the server(s) of BitcoinTalk. In the current state BitcoinTalk is vulnerable. If he does what I recommended it will mitigate all types of attacks once and forever.

I'm sorry, but what exactly is the issue with the session ID? It proves nothing.

I can add any "session id" i want (you can replace PHPSESSID with anything at all.. it doesn't matter..) .. -> http://archive.is/ljBAZ

Code:

https://bitcointalk.org/index.php?ogfidfsighdsfkjgdsfklhdsfkljhsdfkljghdfkljsg=youraas1&action=profile;u=3

Doesn't prove that that is my actual session ID. It doesn't mean anything

Quote

This topic will loose it relevance immediately: https://bitcointalk.org/index.php?topic=309785.msg3326091#msg3326091 (https://bitcointalk.org/index.php?topic=309785.msg3326091#msg3326091) meaning that no more bounty. Some regarding the forum and email can be still ongoing but he would need to rewrite the entire post.

That would be weird considering the topic has been relevant from the moment it was created.

You have a lot of talk, but no proof of anything thus far. If there really is a vulnerability to be exploited, why would the bounty page lose relevance? If anything it's the opposite; you'll stand to make a nice amount of money.. ?

Quote

If he does what I recommended it will mitigate all types of attacks once and forever.

Sounds like you want him to upgrade to some malicious version. I'm sorry but if you think theymos is going to fall for such an obvious troll, well, you'll be unpleasantly surprised.
I just realized i'm just feeding the troll. Fuck me.