Why do so many forum software types and mods have version numbers?

I never really got this, especially as it's a nice target for hackers to search for in Google more than anything, and some forum software like phpBB I read removed it. Why doesn't vBulletin and Invision Power Board not have it by default? Why do all these modifications make it so difficult to remove this simple piece of data?

Wouldn't it be better if this thing was left off everything in the first place?

 

Is this like removing the software from your site? I kinda dont get it. Sorry

 

No.

He means in the copyright line at the bottom of forum pages where it generally says something like, "Powered By XXXSoftware Version 10.2.3".

The 10.2.3 in that example tells the entire world what exact version of the software you're using, thereby opening up to would-be hackers the known security vulnerabilities of that version.

So if you remove the version #, it gives you (the teeniest bit of) security from the less-experienced hackers out there.

Since obfuscation really isn't all that great of a security measure, I actually LIKE to see what version a forum I'm on is using. If it's a version or two back, that might concern me a little because the admin is not installing updates as regularly as they should be, therefore opening HUGE security holes.

 

I'll go with this. If the software version is known then the average forum user knows what to expect. If it is somewhat current then that means someone is managing the site.

Alternatively sites running really old versions may mean they have expert staff running the site and a huge number of add on's such as vborg or "soemthingawefull" which is on vB 2.?.?


Or really old versions probably mean 'run away' LOL...

 

Really old versions (2.x.x for vB), yeah, RUN AWAY!

Any currently supported version (3.6.x + for vB, for example), then you should be fine as long as it's the latest release of that version.

 

Unfortunately, the average forum user wouldn't even begin to know what it means.

But for those that have an interest in security (either people like us or hackers), version number is VERY important.

 

There are reasons not to update to the latest and greatest versions of software, you can't just expect individuals to all out upgrade immediately.

While, I agree, security by obscurity is not the best security, it still provides a little bit. Sometimes users don't want to update from version x to version y. A perfect example of this is going from 3.6 to 3.7, or 3.7 to 3.8, as both of these have some pretty intense resource usage increases. Maybe X hack doesn't work with 3.8 or work properly? We don't know what's what there, so, in some cases, hiding the version is the only necessary option.

 

I know I'm using the wrong terminology here, but in that post, by version I meant the latest security release of the version you're using. It's perfectly acceptable to be using vB 3.6, as long as the latest update is installed (in most cases there are security fixes in each update).

I don't believe that vB 3.5 is supported or updated anymore, so seeing a forum using THAT version, I would think about it before I joined.

I hope that clears up my post a little.

 

I think some people actually like to show off their version number somewhat when it comes to their competition using lower versions who are unable to upgrade because of x mods/problems or lack of time and care. Its like "Yeah were on the latest and greatest" for some.