[fritz]

Confirming that this is the case. People are freaking out like this hasn't happened before.

Has it? And still no flood protection on likes?
Seeing that annoying flood protection on search I'm surprised

While we have many custom plugins, this one is not. I might modify it, but that is the stock functionality of the plugin.

I don't know if that's the plugin you're using, but it looks like the most popular one has a flood control : https://github.com/mybbgroup/Thank-you-l...ke.php#L79

[mothered]

I know English isn't my first language but still, a vulnerability is
"Susceptibility to attack or injury; the state or condition of being weak or poorly defended."
As @mothered pointed out "There's no flood control on Likes", so yeah it's what I'd call poorly/not defended! ^^

The user's actions did not lead (and will not lead) to any form of exploitation, so It's not a vulnerability per se to defend against an attack vector.

[Oni]

Has it? And still no flood protection on likes?
Seeing that annoying flood protection on search I'm surprised

While we have many custom plugins, this one is not. I might modify it, but that is the stock functionality of the plugin.

I don't know if that's the plugin you're using, but it looks like the most popular one has a flood control : https://github.com/mybbgroup/Thank-you-l...ke.php#L79

As you've stated, that is not what we're running. We implemented the current system years ago. I'll look into it, but it's not priority #1.

I know English isn't my first language but still, a vulnerability is
"Susceptibility to attack or injury; the state or condition of being weak or poorly defended."
As @mothered pointed out "There's no flood control on Likes", so yeah it's what I'd call poorly/not defended! ^^

The user's actions did not lead (and will not lead) to any form of exploitation, so It's not a vulnerability per se to defend against an attack vector.

While people are welcome to debate the semantics of what a "vulnerability" is, I've changed the thread title to prevent any misconceptions.

Edit: Referrals issue has been fixed.

[mothered]

While people are welcome to debate the semantics of what a "vulnerability" is, I've changed the thread title to prevent any misconceptions.

Good move.

[fritz]

I know English isn't my first language but still, a vulnerability is
"Susceptibility to attack or injury; the state or condition of being weak or poorly defended."
As @mothered pointed out "There's no flood control on Likes", so yeah it's what I'd call poorly/not defended! ^^

The user's actions did not lead (and will not lead) to any form of exploitation, so It's not a vulnerability per se to defend against an attack vector.

I just mean it's still an attack, not on security though but website's "usability". But yeah that's just semantics, I get it why you can't accept the word "vulnerability" too easily
Although if it would happen too much for example it would certainly reflect on the forum's activity as notifications wouldn't be usable

[mothered]

I just mean it's still an attack, not on security though but website's "usability". But yeah that's just semantics, I get it why you can't accept the word "vulnerability" too easily
Although if it would happen too much for example it would certainly reflect on the forum's activity as notifications wouldn't be usable

I understand your viewpoint and certainly appreciate It.

It's not my Intention to debate It, so to conclude my previous post and all discussions pertaining to vulnerabilities, here's a definition from a government source In the US.

vulnerability
Definition(s):

Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source.

The operative words are "exploited" and "threat". In the case of the Likes, It was neither of the two - It did not exploit this board, nor did It pose a threat In any way, shape, or form.

[Drako]

That bot really caused some havoc today.

[Jiggly]

That bot really caused some havoc today.

Indeed it did. We've had them before, though I think this one broke a record for number of likes for me xD

What purpose do these bots serve beyond being irritating?

[mothered]

I think this one broke a record for number of likes for me xD

How many likes did you actually receive?

[Spooky]

It happened to me as well but I assumed the 90+ notifications were only from a bot. Lol.