vBulletin: Exploits, Bugs, Exposed Customer Data – We’ve got it all!

“The world as we have created it is a process of our thinking. It cannot be changed without changing our thinking.” ― Albert Einstein

Perhaps Internet Brands (IB) could learn a thing or two from this quote by Einstein. In their eyes, things were looking up for them. For a period of nearly three years, IB was in the news for the lawsuit they filed against XenForo. This lawsuit happened to coincide first public beta release of XenForo as IB announced the lawsuit one day prior to XF beta launch and claimed it was a mere coincidence. IB was also accused of bullying XF and its developers Kier Darby and Mike Sullivan so they received some negative attention for it. After the lawsuit was finally settled in February 2013, IB was hopeful to put this behind them and move on, and was hoping people would essentially forget about the previous events that took place in fear that it would continue to “tarnish” their reputation.  In the mean time in the private license holder forum at vBulletin we have vB staff members openly bashing customers, disrespecting them and showing absolutely no professionalism at all towards customers.

The reality is, the great reputation vB once had only came due to the strong community and quality development of the old team before Jelsoft was acquired by Internet Brands, and this is when things started to go downhill (in 2009 Kier Darby, Mike Sullivan and Scott MacVicar all left vB/IB)

IB was merely riding the wave of the old development team and the older quality versions of vB and as expected once the original core team left, the quality of the product suffered as a result: This brings us to vBulletin 5 Connect. Not only was vB5 released as “gold” lacking many basic features that vB4 had but the forum software is considered to be a joke by many forum administrators and even some of the largest forum sites that were previously using vBulletin made the switch to XenForo ditching vB all together.

This takes us back to the quote above and the lack of change IB is doing with their thinking. Internet Brands continues to treat their customers so poorly and with such disrespect. The heads at IB made a terrible move by essentially forcing out the old, extremely qualified developers. They followed this bad move by filing a frivolous lawsuit against XF which only lead to increased negative attention and uproar from the community. They ignored any feedback from the community (i.e., their customers) and made a bad situation even worse by releasing the joke of a software that is vBulletin 5…But wait there’s more! In the latest fiasco which Veritas covered earlier – a recent breach on vBulletin.com which resulted in vBulletin sending out emails urging users to change their passwords because of this hack. The hacker group claimed they used a zero-day exploit, an exploit for a previously unknown vulnerability in order to compromise the vBulletin.com server and download the user database. In sum, vBulletin was using a copy of the live database on a test system and “forgot” to patch it to fix this bug. In doing this, they left the door open to these hackers and risked (and exposed) the personal details of us, the customers.
How’s that for quality?

Some free advice for you Internet Brands: change your thinking, stop disrespecting and ignoring your customers and learn from the mistakes you have made from the past if you want any chance to succeed. Doing otherwise will result you being a mere footnote in Wikipedia when people are reading about vB vs. XF since most people will have migrated to XenForo by then.

  • Mart

    Informative piece – I learned a lot from the specifics ! Does anyone know where my business can get ahold of a template VA 10-10M document to type on ?