Don't post anything sensitive here, and I mean "private" parts of the site as well, like your PMs or your e-mail address or anything like that. Keep in mind that deleted posts and PMs may not be actually deleted from the database.
I know about that, but it's always good to remind everyone.
My question was more pointed towards admin and developers that maintain forum software and fix bugs.
Just because no one managed to shut bitcointalk down doesn't mean that it can't happen in the future so this thread could serve as a good reminder for theymos that he has to keep up with security (which I am sure that he is already doing, but not a bad thing to remind about it every once in a while).
Exactly.
I am sure there are people who would gladly hurt and destroy bitcointalk if they had the chance.
If the reports regarding 4chan's operations are true, then bitcointalk.org's security is much better than that. Other than SMF 1.x, which we maintain directly, I believe that all of the software we're using is maintained and kept up-to-date. We also offer
security bounties.
I have to say that I was a bit concerned and worried that we are using older modified SMF version.
Security bounties info should be more visible in my opinion.
The best thing you can do to reduce the damage in case of another bitcointalk.org hack is to delete your old PMs.
This is a really good advice.
I am sure there are many members keeping a bunch of PMs in their account.
I'm really sad that 4chan is down. Hopefully it comes back soon. Even though I haven't been very active there recently, I consider myself a 4channer more than I consider myself an American: it's one of my cultural bedrocks. I'd probably personally contribute quite a bit of money to some project to revive it, if necessary.
Interesting.
I didn't know you were once active member of 4chan.