TalkBass App To Be REMOVED/DELETED [security concerns]

Discussion in 'TalkBass Mobile App Support' started by paul, Dec 21, 2014.

  1. paul

    paul Staff Member Founder Administrator

    Jul 20, 2000
    Texas
    Hello all. I'm writing with some bad news for TalkBass App users: the TalkBass app (rebranded Tapatalk) is going to be deleted from the app stores, and it will no longer work for anyone, because we are going to uninstall the Tapatalk Plugin from our forums on Dec 22nd.

    I didn't take this lightly. Every day close to 2,000 TalkBass'ers log in with the app. This is going to hurt our bottom line, and create a huge customer service headache. However, the TalkBass community is our most valuable asset, and the security of your information is our TOP priority....

    Ok, so.... WHY TAKE THE APP AWAY?

    1. Security. This is the big one, that my decision is mostly based on. I have good reason to fear that the data of our users may be at high risk of compromise should we continue to run Tapatalk's plugin. Taptalk's own xenforo support forum was hacked last week, with all user data, passwords, and email stolen. The security "culture" at Tapatalk is quite despicable. Security fixes are slow, silent, and misleading. Security issues are ignored, sometimes files are silently fixed and version numbers are not updated, and we forum admins are left in the dark. Lately, multiple XSS vulnerabilities have been discovered in the xenforo tapatalk plugin, and Tapatalk is silently fixing on their site while leaving the xenforo community in the dark.
    2. BUGS. Have been a constant battle. The last straw: The Tapatalk plugin for xenforo throws the software into a loop, sending out duplicate and triplicate alerts to forum watchers. So anyone posting to a highly watched forum (ie, Bass Guitar Classifieds) has to wait sometimes 20+ seconds for their thread to "go through". Result: duplicate threads posted 2x, 3x, even 14x as frustrated users mash the "submit new thread" button. This bug has gone unfixed for over a year.
    3. User Interface Inconsistency. Tapatalk is built to work with stock XenForo. All of our customizations, from Classifieds thumbnails and prices, to Supporting Memberships, to the Media Gallery, to the upcoming Reviews section and Wiki, are all unsupported by the app.
    4. XenForo is 100% responsive. Now with PushBullet push notifications to ALL or ANY of your devices. There's little need for an app whenwww.TalkBass.com automatically formats itself to your mobile device. Simply go to your user menu -> external accounts to turn on PushBullet push notifications (you just need the PushBullet free app, and a free PushBullet account)

    I know this decision is going to hurt a lot of folks who love the app. And it will be a 'dealbreaker' for some I'm sure, who will quit TalkBass (please try talkbass in your mobile browser first - you may be surprised!). But I have to act in the best interest of the TalkBass community, and I have no doubt that this decision is doing just that.

    Edit: We plan to pull the plug on the app/tapatalk late Dec 22nd.
     
    Last edited: Dec 21, 2014
  2. carsonchilders

    carsonchilders Carson Childers Supporting Member

    Nov 10, 2012
    Lexington, Kentucky
    Uh oh. Are there plans to find another way to create an app/use a different service?
     
    SirMjac28 and Bass5150 like this.
  3. drumsnbass

    drumsnbass Bassic User

    Dec 13, 2004
    Phoenix AZ area
    Man what a bummer. Despite minor issues I LOVE the mobile app...
     
  4. paul

    paul Staff Member Founder Administrator

    Jul 20, 2000
    Texas
    We will take a look at ForumRunner, but the fact that it's been bought out by Internet Brands sends a chill down my spine (they're the ones who bought out vbulletin and sent it down the tubes).

    Having a new dedicated app written for us is daunting and expensive, but there are other admins in the xenforo community who are exploring this idea, and at some future date we may be able to team up and crowdfund something.
     
    dfp, billbuhlman, mtb777 and 4 others like this.
  5. paul

    paul Staff Member Founder Administrator

    Jul 20, 2000
    Texas
    I'm very sorry. Can I ask, what are some things you love about the app, vs using TalkBass in your mobile browser?
     
  6. carsonchilders

    carsonchilders Carson Childers Supporting Member

    Nov 10, 2012
    Lexington, Kentucky
    I'd donate!
     
    nataku333, mbelue and Fxpmusic like this.
  7. drumsnbass

    drumsnbass Bassic User

    Dec 13, 2004
    Phoenix AZ area
    The ease of Alerts, Participating and Watched all on one simple list. I probably spend 75% of my time in the app when on TB.
     
  8. two fingers

    two fingers Opinionated blowhard. But not mad about it. Inactive

    Feb 7, 2005
    Eastern NC USA
    Yeah I use both (app and browser) on my phone. The browser version (mobile web version?) works pretty well. The only down side is having to zoom in and out to hit links (for my big fingers anyway) but once you get used to that it is a pretty seamless experience.
     
    MrBKerth, MSavoy, CPplaysBASS and 2 others like this.
  9. jwr

    jwr

    Jun 28, 2010
    Overland Park, KS
    The app is a thousand times simpler to use than a mobile browser. No need to zoom in, has all the useful functions of the site, notifies you on your cell of messages and updates.


    Honestly I think this is probably the worst idea I've heard from tb. You said yourself how many people use it. Are you willing to lose that traffic because I know my use will go way down along with others.
     
  10. carsonchilders

    carsonchilders Carson Childers Supporting Member

    Nov 10, 2012
    Lexington, Kentucky
    Ditto, it's all about the push notifications/flexibility of push notifications for me. I would rather receive those instead of email alerts. It's also more intuitive than the browser version format wise.
     
  11. I also like the ease of getting notifications in the App especially the forum subject threads that I have grown to like and find interesting and fun. Keep us posted!
     
  12. drumsnbass

    drumsnbass Bassic User

    Dec 13, 2004
    Phoenix AZ area
    Realistically Paul, I would sooner everyone get a notice that TB in "not a secure forum so use a unique password" than see the app go away.

    Plus I agree the iPhone alerts are great.
     
    drurb, StrangerDanger and SunnBass like this.
  13. paul

    paul Staff Member Founder Administrator

    Jul 20, 2000
    Texas
    Thanks for the feedback. I'm going to do all I can to make this hurt less and value your input. So for alerts, we've already implemented PushBullet so hopefully still having push notifications will help. As for participated and watched in the same list, would a viable option be to adjust your settings so that you're automatically watching (with no email notification) all threads that you post in? That would remove the need for 'participated'...
     
    JMacBass65 and ctmullins like this.
  14. jwr

    jwr

    Jun 28, 2010
    Overland Park, KS
    Isn't there a way on Talkbass end of things to protect information? I mean how could our info be compromised if you guys have it protected?
     
    jackflash likes this.
  15. paul

    paul Staff Member Founder Administrator

    Jul 20, 2000
    Texas
    Sorry I can't agree with you. Running an insecure site with a disclaimer that "your info might be stolen" is not something I want to do. Sorry! Plus I just don't want to give Tapatalk access to our database anymore.
     
    Lackey, squidtastic, Fiset and 7 others like this.
  16. drumsnbass

    drumsnbass Bassic User

    Dec 13, 2004
    Phoenix AZ area
    I don't know about others out there, but I for one certainly do not expect 'anything' on the net to be secure.
     
    TerribleLiar23 likes this.
  17. paul

    paul Staff Member Founder Administrator

    Jul 20, 2000
    Texas
    Tapatalk needs access to all of our information in order to do its thing. Once they have it, it's out of our hands.
     
  18. drumsnbass

    drumsnbass Bassic User

    Dec 13, 2004
    Phoenix AZ area
    It's your baby and you have to do as you see fit Paul, but this user will surely miss the app.
     
    mtb777 and TinIndian like this.
  19. Tom Lane

    Tom Lane Gold Supporting Member

    Personally, I very much appreciate your making the tough call here, and applaud your reasoning. I'll miss the mobile app but as an IT app developer/manager with more than 25 years in the biz, I've dealt with firms like your description of Taptalk and have found that NOTHING good comes from doing business with such sloppy businesses. IMO, you've made the smart call, and BTW, thanks for watching out for us.
     
  20. jwr

    jwr

    Jun 28, 2010
    Overland Park, KS
    Agreed. Maybe there's a viable second option for an app? Later down the road.
     
    rapidfirerob, gregmon79 and paul like this.