Potential leak of profile information

[jimdahl]

A flaw was recently fixed in the software that powers this forum that could have been used to extract profile information about the forum's members.

 

http://community.invisionpower.com/topic/404033-active-security-exploit/

 

I've run extensive log reports and see no evidence that there have been any attempts to use stolen credentials to access the forum, though you should always be sure to use different passwords on different sites (in particular, the password you use to access your email should not be used with your email address as a login anyplace else!)

 

It's possible that any email addresses that were stolen could see an increase in spam.

 

I'll keep a very close on the security of the forum itself in coming days.

[andtheHomeoftheSIOUX!!]

Thanks for the heads up.  Always appreciate all the work you put into this site.