A Plea for Moderation

[telum12]

I work in medical. I am not just saying things unfortunately. Wish I was. One of the main reasons why I even use a different password for this forum and game than anywhere else because of my concerns of security issues. I'm used to security audits and if I ever brought up phpBB to a security audit they would laugh at me think it is a joke. Kudos to Razfen for fast sniping with the site though. Also can think of a few instances such as the time someone brute forced the logins to gain access to login credentials of users... Mistakes are often made, we are just human. I think you guys do your best to make things as secure as possible but I have doubts in how exactly secure everything is and would be more satisfied to see a proper security audit result if you guys have one.

Point originally was also not about security, it was more of the fact that the forum is becoming dated (which often has security flaws).

That's dumb. Which CVEs are the "serious security flaws" you're referring to? What software replacement do you suggest which has no security flaws? Wtf are you talking about "brute forcing the logins..."? In what world does the security of this forum require a security audit? Who cares you work in medical?

This might be the dumbest post I've read all week, and I've read multiple shubla posts...

[LostJustice]

Literally there are serious security issues with the current system and it is dated: Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group

Not even talking about going to a fancy website but this forum has been the same since I first found Haven and Hearth and has serious security flaws which have already been found before. It needs work or something.

Oh? Care to point them out? Or are you just saying things?

Another one I can think of is that the standard right now is two factor authentication for any user accounts to prevent people from gaining access to passwords and just signing into different sites with it assuming they used the same passwords.

[bumfrog]

A great opportunity was missed here. You made a sequel to Plea for Moderation but didn’t even think of a catchy sequel title, hell even “A Plea for Moderation 2” would’ve been better than nothing

I recommend: “A Plea for Moderators: Falling On Deaf Ears”

Please take this time to add more suggestions, my fellow Hearthlings!

[MadNomad]

Please take this time to add more suggestions, my fellow Hearthlings!

sounds like a tempting suggestion

[shubla]

No your server will never be official. It is a joke, a meme, literally unbearable.

I think you're living in your own make believe world here. Almost 400 users already and real discussion going on. Even 50% of devs have joined. Wake up!

the current unofficial one that majority uses. .

Its just a circlejerk of like a dozen people! Doesn't matter how many people have accidentally joined into it if they don't ever discuss/even read anything!

In the properly moderated discord there is plenty of discussion every month, last time today about bunny slippers. Such genuine and wholesome discussion, wow. And it will only keep increasing as people get positive experiences instead of toxic circlejerk.

People don't complain and can't complain because you banned them and sit in your own little bubble

Some people from other discord joined and started spamming and trolling etc. Now the trolling continues as they are accusing of arbitrary bans. No delusions here, only bad trolling attempts that no one will ever swallow, so don't bother to try.
Sadly I can't recall what they exactly did anymore(one was spamming/trolling in the rules channel in which accidentally just anyone could start threads in), but no one has been banned for anything else than behavior on this exact server.
Worry not, such thing wont happen again as I've started logging discussions such that there will be some logs describing behavior of users to justify why they were banned.

Literally Jordan Coles has given an example of how to handle this. Just read. I am literally in 20+ support discords and they ALL handle it very well. Even League has a community discord that is extremely well moderated with little intervention from moderation teams. Proper set up as he mentioned plus bots literally handle majority of the gritty work that is on that discord.

I'm not saying that its not possible. I'm just pointing out how devs probably think it is.
I agree that it is probably quite easy to moderate discord, mostly because of rigorous account verification.
What is not so easy is perhaps deciding when and what things to moderate. And that will take up devs time in the end.

C&I threads linked

And your point is? I think they're all very valid suggestions and ideas. If you disagree with them then go and tell why precisely, instead of accusing them to be spam!

literally Jordan Coles

Who is this Jordan Coles? Why should I know what he has said? Is there a forum discussion? You could link it if you want me to take a look at it.

the forum is becoming dated (which often has security flaws).

So new software does not have security flaws? Ok bro!
Shouldn't old software be good and reliable instead of dangerous? I'm sure that codebase of such popular and old software such as phpBB is quite well studied by many. If there were serious security vulnerabilities and maintenance of project was stopped thus that they'd not be fixed then that would be bad, but to my knowledge the project is still being maintained.

Linking a cve site is meaningless anyways.
https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-15031/year-2019/Google-Chrome.html
Look at this, 312 vulnerabilities in google chrome in year 2019 alone! If something is dangerous its the browser that you're using to browse this forum.

One that you linked about phpbb contains 57 vulnerabilities, some of them dating back to as far as 2002, thats a pretty small amount in 20 years or so. (Not sure if the list is extensive though)
And out of those only few were of high score.

Most vulnerabilities on cve are of no practical harm anyway.

[MadNomad]

Even 50% of devs have joined. Wake up!

I don't even know why they are still sitting in the unmoderated cesspool, I know they are not looking at it but it's just a shame to sit there as a figurehead instead of leaving it (surely it is a sign of not caring and not support)

nice to know that 50% of devs have joined your server though

[Kaios]

No your server will never be official. It is a joke, a meme, literally unbearable.

I think you're living in your own make believe world here. Almost 400 users already and real discussion going on. Even 50% of devs have joined. Wake up!

I don't like the unofficial discord either, but I do agree that "shubla's discord channel" doesn't equate to an official discord any more than the other one does. If they were to seriously consider that as an option then it needs to be created and controlled entirely by the devs.

[MadNomad]

New mods: shubla, madnomad

Ask enough and they may feel tempted to do so

I wouldn't mind opportunistically removing some garbage posts, but sadly I can not be relied on in the long run, as I am here on the forums periodically (currently since a few weeks or so, maybe months, I do not count days like this) and I do not even know how much patience I would have for this

So yeah, I would gladly accept this role, any improvement is better than nothing, I haven't applied or sent any PMs to Jorb or Loftar on the matter asking for it, perhaps I should as a true HnH and forum addict? (yes, devs, I'm pointing at you for making a game so good that I am an addict)

Indeed I might be just a common fool, but most of people who complained about me in the recent weeks are 100 times worse in this aspect, in other words, do not try to pick out a thorn out of someone's eye without removing a whole log from your own

It reaches my ears that people on unmoderated cesspool discord claim that I have said things that I never said and shittalk me behind my back in general,
it's awesome to have fanboys, isn't it? (no, I do not really mean it)

As for new mods I think maybe Shubla would be ok, and would like to finally see him in green, but changed my mind about Jordancoles because recently I have discovered that he is not so good at analysis of what someone says and might have an issue with diagnosis

I am not surprised that MagicManICT got fed up with this forum pathola, who with a little bit of common sense would like to do such sisyphean work for so many years?

for anyone wondering, MadNomad hasn't received any punishments from the devs, apparently he is not considered worthy of this by them, cry moar

[VDZ]

Literally there are serious security issues with the current system and it is dated: Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group

Being "dated" by itself is not a problem (in fact, you could easily argue the other way around, that it's "time-tested").

https://www.cvedetails.com/vulnerability-list/vendor_id-1529/Phpbb.html

There's plenty. I don't know how to check which version you run, but feel free to browse.

All of these seem to be about either add-on modules (you can hardly blame phpBB itself for those) or ancient versions. The apparent lack of vulnerabilities in up-to-date default phpBB speaks in its favor compared to newer, unproven software.

[ricky]

I don't even know why they are still sitting in the unmoderated cesspool, I know they are not looking at it but it's just a shame to sit there as a figurehead instead of leaving it (surely it is a sign of not caring and not support)

Yeah, the forums ARE pretty rough nowadays aren't they? Oh, wait a second, are you talking about the discord server?


I like how literally everyone in this thread is pleaing for moderation and the best answer we've received is "well if you have any ideas I'm all ears!" As if the answer isn't simply "moderate the forums"

Here's an idea since you asked: delete C&I. Be honest, when's the last time you checked it? It's not worth the effort to maintain and at this point all it serves as is a vector for disingenuous people to post "ideas" that are so incredibly bad that everyone's reaction is to call the OP retarded. When you're ready to start accepting user input again, reopen C&I. current staffing does not allow for extraneous subforums to exists.