Spectate (SMod)

[--ss--]

Spectate was once the Assistent Forum Manager (He may have been the manager aswell but i'm not sure) and seeing as he did a great job as that it was only fair to let him come back to the team.
I'm guessing his perms have been temp removed while he is away for security reasons .

[-Xiangu-]

Spectate was once the Assistent Forum Manager (He may have been the manager aswell but i'm not sure) and seeing as he did a great job as that it was only fair to let him come back to the team.
I'm guessing his perms have been temp removed while he is away for security reasons .

What exactly could a rogue super mod do?

[--ss--]

What exactly could a rogue super mod do?

As Spectate is away the account is left there for the taking so if someone did access the account alot of things could be done with a Smod account.

[Nick-]

As Spectate is away the account is left there for the taking so if someone did access the account alot of things could be done with a Smod account.

Depends whether they knew the ModCP details too, as far as I'm aware the only damage a Super Moderator account can do without the details is superficial and is all reversible because it'll probably be nothing more than issuing some rogue infractions or moving threads around.
Nothing that involves passwords or emails can be changed or accessed because that's all CP side and even then I don't ever remember having the ability to edit anything more than signatures/avatars/profile pictures or banning users which is all still reversible.
Although that's assuming that the hacker doesn't know the ModCP details, if that information is leaked then some more serious problems can arise e.g. random users receiving bans, bans being lifted, Staff receiving bans etc.

[QuickScriptz]

Depends whether they knew the ModCP details too, as far as I'm aware the only damage a Super Moderator account can do without the details is superficial and is all reversible because it'll probably be nothing more than issuing some rogue infractions or moving threads around.
Nothing that involves passwords or emails can be changed or accessed because that's all CP side and even then I don't ever remember having the ability to edit anything more than signatures/avatars/profile pictures or banning users which is all still reversible.
Although that's assuming that the hacker doesn't know the ModCP details, if that information is leaked then some more serious problems can arise e.g. random users receiving bans, bans being lifted, Staff receiving bans etc.

As far as I'm aware in normal vBulletin installations your password is the same for the login and ModCP is it not? Also, here is a list of things that could happen even without ModCP access:

-Permanantly Delete Threads/Posts (reversible via backup)
-Move and Edit Threads and Posts
-Close and Sticky Threads and Posts
-Give out Infractions to anyone
-Give out Warnings to anyone
->If he gives out enough could lead to auto-ban
-Anything else that involves editing of Content/Forum Moderation

In other words, nothing that couldn't be un-done, but tons of things that could be a real pain for the Forum Admins and Staff.

[Slowpoke]

As far as I'm aware in normal vBulletin installations your password is the same for the login and ModCP is it not? Also, here is a list of things that could happen even without ModCP access:

-Permanantly Delete Threads/Posts (reversible via backup)
-Move and Edit Threads and Posts
-Close and Sticky Threads and Posts
-Give out Infractions to anyone
-Give out Warnings to anyone
->If he gives out enough could lead to auto-ban
-Anything else that involves editing of Content/Forum Moderation

In other words, nothing that couldn't be un-done, but tons of things that could be a real pain for the Forum Admins and Staff.

That can't happen until 16th April. I see what you mean though.

[joshuar]

As far as I'm aware in normal vBulletin installations your password is the same for the login and ModCP is it not? Also, here is a list of things that could happen even without ModCP access:

-Permanantly Delete Threads/Posts (reversible via backup)
-Move and Edit Threads and Posts
-Close and Sticky Threads and Posts
-Give out Infractions to anyone
-Give out Warnings to anyone
->If he gives out enough could lead to auto-ban
-Anything else that involves editing of Content/Forum Moderation

In other words, nothing that couldn't be un-done, but tons of things that could be a real pain for the Forum Admins and Staff.

There is an extra password on the directory to ensure it's safety. Also a super moderators permissions are edited slightly, so I don't believe perm deleting is in place, but a backup would have to be restored unless the culprit was caught in time.

[--ss--]

As far as I'm aware in normal vBulletin installations your password is the same for the login and ModCP is it not? Also, here is a list of things that could happen even without ModCP access:

-Permanantly Delete Threads/Posts (reversible via backup)
-Move and Edit Threads and Posts
-Close and Sticky Threads and Posts
-Give out Infractions to anyone
-Give out Warnings to anyone
->If he gives out enough could lead to auto-ban
-Anything else that involves editing of Content/Forum Moderation

In other words, nothing that couldn't be un-done, but tons of things that could be a real pain for the Forum Admins and Staff.

For advanced security we have an extra login page for the ModCP which you need to enter a certain name and password aswell as your details to the account so they won't be able to access the CP .

There are other things they could do without CP access but I don't want to give anyone any ideas and it's probably reversible anyway .