Tapatalk Forum App for xenForo - iOS / Android / Windows Phone Mobile App [Deleted]

[Snelvuur]

Would be nice if they updated this to 2.3.4 too, since i just upgraded via the normal first page only to find out that on their site its newer..

 

[ehd]

Today we discovered that someone had used an exploit in a third party plugin on the Tapatalk support forums,

which one?

 

[Floyd R Turbo]

I would like to know this as well. Anytime there is an exploit I want to know about it

They has to roll back their entire forum a week "as a safety precaution" and reset all passwords.

 

[Mouth]

which one?

Absolutely - if this is a common 3rd party XF add-on, then we all need to know!!

 

[SneakyDave]

Knowing Tapatalk, it probably was their own add-on that had the exploit, but they don't want to admit to another security issue.

That would be bad for business.

 

[Mouth]

Knowing Tapatalk, it probably was their own add-on that had the exploit [...]

They specifically said 3rd party - so if it turned out to be their own, that would make they complete liars and not just bad to business, but utter disastrous!

 

[Floyd R Turbo]

https://support.tapatalk.com/threads/passwords-stolen.27443/#post-145151

... The code was located in such a way that any entry of a password would have been logged. I will pass the code to the Xenforo developers so that it can be looked at for a clearer picture of what happened.

 

[Mouth]

FYI ... if you disable the TapaTalk plugin, users are still able to access the site using TT app, even 6+ hours later and seeing new posts.

 

[Floyd R Turbo]

Wow. I saw your post here too. Nice catch.

 

[ehd]

FYI ... if you disable the TapaTalk plugin, users are still able to access the site using TT app, even 6+ hours later and seeing new posts.

just rename /mobiquo

 

[SneakyDave]

Why just disable it? Uninstalling it and deleting all the files seems to be the smart choice.

 

[Mouth]

just rename /mobiquo

Why just disable it? Uninstalling it and deleting all the files seems to be the smart choice.

Thanks, done that (rename) ... my post was to share info with others, in case they too think that disabling the add-on should mean it's not functional anymore.

 

[SamL]

I didn't see it posted here yet, but there are posts in the TT support forum that indicate a Wordpress installation on the same server was the vector of compromise, rather than an XF plugin. It's really unfortunate that they weren't more clear about that up-front.

Speaking only for myself, this was the absolute last straw with regards to Tapatalk. Life is too short to keep having to deal with continual plugin issues and keep up with their abysmal support forums. I unpublished from their directory, uninstalled the plugin, and removed the files. It feels satisfying to be rid of.

 

[Mouth]

I didn't see it posted here yet

FYI ... https://xenforo.com/community/threa...scloses-emails-and-passwords-but-which.88906/

 

[sylvain]

I've uninstalled Tapatalk from the addons list.

Directories were still present on the server so I renamed tapatalk and mobiquo directories. I also went to tapatalk web site and disabled my forum.

Is there something more I should do to make sure Tapatalk is completely removed from my forum?

Thanks

 

[TPerry]

I just pulled it off of my 3 XenForo forums and about to remove it from the myBB ones. Kind of hate to do it with those though since they are not responsive. I need to look around for a free responsive capable forum script that is good.

 

[tapatalk]

tapatalk updated Tapatalk Forum App for xenForo - iOS / Android / Windows Phone Mobile App with a new update entry:

Code Improvements & New Options

1. Optimized in-app registration for smoother and safer information transaction.
2. Added 'Automatic approval for users registered from Tapatalk' option in forum admin CP.
3. Support for auto-set forum API key.
4. Enhanced security of code.

Read the rest of this update entry...

 

[Superfluous]

Anyone confirm is Tapatalk plug in is secure / should I use it? I only migrated to Xenforo on Saturday and my users are crying out to replace the old vbulletin mobile apps.

 

[rainmotorsports]

Anyone confirm is Tapatalk plug in is secure / should I use it? I only migrated to Xenforo on Saturday and my users are crying out to replace the old vbulletin mobile apps.

No more or less than it ever has been. Its up to you. Either your users want it and you want to provide it or you don't. Haven't had any issues with it that wasn't experienced on VB.

 

[Superfluous]

No more or less than it ever has been. Its up to you. Either your users want it and you want to provide it or you don't. Haven't had any issues with it that wasn't experienced on VB.

Ok, it's just that the last dozen or so posts on this thread have been complaining about security vulnerabilities. I provide the vBulletin Apps for free to my users, I wouldn't want to recommend to them that they all buy Tapatalk, just for me to pull it a week later if there are still unresolved security issues - so I thought I'd get some advice on here first from other users.