LazyLion
King of de Jungle
- Joined
- Mar 17, 2005
- Messages
- 105,605
What else do you expect mybb to do if they receive a legally obtained court order to disclose the IP address? Ignore it? You signed the terms and conditions when registering.
But they have an uphill battle thereafter, because the forum merely requires an email address - not full contact details. They then need a court order to obtain the necessary details from your ISP. Which in itself could prove problematic if you've used a proxy. It's not just a case of asking for the details - I know for a fact (based on personal experience) that rpm will do his utmost to protect forumites in this situation purely based on principle. It isn't merely a case of ask and ye shall receive. That would set an atrocious precedent...
Ja, you guys are worrying about nothing. rpm has gone on record here to say he would do everything in his power first before he released any info on a forum member. Please give him the benefit of the doubt.
Besides, the CC's case here is a long uphill battle which could literally take years. They would be better off, just shoring up the hole and being more careful on future releases.
As someone else said... the flaw was not with the "hackers", the flaw was with the document. If that person did not open it someone else would have.