We will be keeping an eye on this situation and providing updates as they become available.

Update Fri Jul 3 11:42:57 EDT: Authorize.net has set up a Twitter account to keep clients up to date on the situation. It can be accessed here:

http://twitter.com/authorizenet

This new release incorporates a raft of new features, enhancements & bugfixes which further solidify Ubersmith’s position as the premiere business & infrastructure management solution for all tiers of the web hosting industry.

The most exciting feature in this release is the new Sales Manager, Ubersmith’s new sales tool. Sales Manager allows your sales team to keep track of potential new clients & open opportunities for both new and existing clients. Tightly integrated with Support Manager, it leverages the power of Ubersmith’s world-class ticketing system to bring all your sales-related email communications into a single system.

Security is also high on the list of improvements, including a completely new hashed password system and numerous enhancements to the internal access control system to ensure the security of your data.

Ubersmith DE 1.6.4 and Pro 5.6.4 are recommended upgrades for all users of Ubersmith. Read on for the complete changelog & download information.

Download Ubersmith Pro 5.6.4 from downloads.ubersmith.com. Ubersmith DE users, please contact Ubersmith Support to schedule an upgrade.

General:

• Hashed password support
• New secure password reset system
• Add option to not email new password to user when changed by staff member
• Option to force regular password changes for staff, client & contacts
• Log addition, update & removal of admin users to the Global Event Log
• Admin minidash performance updates, allow disabling minidash
• Added support for the pt_PT locale - Português (Portugal)
• Improved support for the zh_CN locale - 简体中文
• Adjust font size in text areas

Datacenter Edition:

• Option to display inbound traffic below x-axis on bandwidth graphs
• Support for hardware devices with HTTP APIs
• Handle exceptionally large IP lists gracefully when configuring device modules
• Improve efficiency when polling switches with down ports
• Support removal of server metrics monitoring from devices
• Better handling of mis/unconfigured device modules

Sales Manager:

• New Sales Manager feature
• Sales Pipeline and Won/Lost reports

Support Manager:

• Ticket timers can be set to fire at a specific time of day
• Filter incoming tickets by custom headers
• Option to send ticket confirmations only to recognized clients
• Display timestamps on older tickets using dates instead of ‘x ago’
• Ticket post headers loaded on-demand
• Warn user if system detects they may have forgotten attachments
• Warn user when attempting to send a ticket follow-up without a valid To: address
• Support associating tickets with Orders, Devices & Opportunities
• Confirm before clearing deleted tickets

Client Manager:

• Charge queue automatically reschedules charges when a credit card is updated
• Warn user if the system detects potentially invalid dates for new services
• New Invoice List (##list_invoices##) and Total Due (##total_due##) replacements in overdue notices and invoice reminders
• Logging of all client contact changes
• Include user details in payment and refund logs
• Support generating multi-invoice PDFs
• Support searching by account creation date in Advanced Search
• Allow clients to manage which contacts receive billing emails
• Virtual Merchants credit card gateway
• Payvision credit card gateway
• Sage Bankcard credit card gateway
• Chase/Orbital credit card gateway
• Mass mail feature improvements
• Improved support for domain registration and transfers
• Daily report(s) can now be sent to a specific email address

Device Manager:

• Add ability to sort locations on Device Manager dashboard
• Update IP assignment popups & owner search interface
• Support filtering device lists by device type

Order Manager:

• Templated subjects in order followups
• cPanel order module can automatically provision multiple services
• Support multiple plan-specific coupons with the same code
• New order module to move orders manually between steps
• Improved performance of order queue/step menu

API:

• Improved comment management
• Support filtering device list output by device type
• API method for managing device monitors
• API method for interacting with device modules

System:

• Don’t rely on .htaccess to set PHP’s include_path
• General UI updates to improve performance and reduce page weight
• Popup forms automatically resize with window
• New date & time selection calendar
• Streamline installation & upgrade process
• New database schema upgrade system
• Unified http redirection method
• Improvements to ACL system
• Upgrade to jQuery 1.3.1
• Enhancements to internal SQL generation engine
• New system for generating pager links

Bugfixes:

• Deleting device with middle mouse button properly asks for confirmation
• Admin user privileges have been audited and corrected in the Client Manager
• Viewing an order now properly moves the user into the appropriate brand
• API script getmetadata.php now properly outputs data for devices
• Correct an issue where the system was limiting searches for available IP space
• Extra space removed from success message when sending reminders for multiple invoices at once
• Correct date range now displayed in invoices when pre-billing for a pro-rated period
• Service code is now properly verified to be unique when making a copy of a plan
• Correct display issue with support ticket billing
• Correct an issue when items are removed from custom data field select options
• Selecting a new contact when submitting a ticket on behalf of a client now properly updates template
• Automatically set primary contact to receive billing emails
• Fix problems with installer when iconv/mb_string/gettext modules are not installed
• Correct problems with translation of order queue names
• Correct problems displaying credits greater than $1000 on pdf invoices
• Fix problem with ticket auto-purge cron
• Fix bug in client login system allowing spaces for username
• Fix problem deleting VLANs
• Prevent double-submission of orders via the API
• Fix minor issues in Add Bank Account order module
• Correct problems with owner search on IP Assignment popups
• Reset add contact popup form when using ‘Save & New’
• Correct display issues in the charge queue update email report
• Search now allows matching client id numbers to take precedent over other matches in the same account
• Remove duplicated ticket auto-purge code
• Fix potential security issue in Apply Credit popup
• Work around browser hang after processing non-interactive order modules
• Bypass required field checks when using client search on Add Device popup
• Fix potential display issues when using special characters in client names & service descriptions
• Fix floating point bug when applying account credits
• Correct problem with Select Box Custom Data items being shown when not applicable to device.
• Fix tax display duplication issue
• Correct bug in ticket search
• Correct some instances where errors loading device details were not properly reported
• Correct display of Time Spent in tickets
• Don’t increment Invoice ID numbers unnecessarily when using daily invoicing
• Correct invalid html on Invoice Preview popup
• Properly handle non-ascii characters in email addresses and subjects
• Properly handle invalid API key in Google Maps order module
• Check parent Service ID when creating new services
• Prevent automatic application of Paypal payments to disregarded invoices.
• Fix problem with automatic redirect to client device pages
• Correct min & max length field labels on Range order form field rule popup
• Correct problem with services not being automatically re-enabled when paid via application of account credit
• Correct problems using Advanced Search to search for IPv6 addresses
• Correct problems when using certain characters in Device Manager search
• Improve handling for monitor disable/enable functionality
• Improve order form element reordering
• Fix fatal error when a problem occurs during token update
• Properly handle multi-invoice PDF generation
• Ensure service quantities are considered when coupons are applied to an order
• Properly handle taxes on setup fees for new orders
• Ensure that the Bandwidth Monitoring module can handles parenthesis in device labels
• Change default value of notify_downstream to off
• Signatures in the support manager are now brand specific
• Fix special characters in notifications being misinterpreted
• Fix blank default invoice notice configurations when adding new languages
• Fix Paypal refunds being mis-applied via IPN
• Fix display issue when adding multiple timers to a ticket
• Support old ticket view redirect behavior

We’ve gotten word today from one of our clients that they were contacted online and asked to divulge their Ubersmith login details via a web-based form. Presumably the party that contacted them used the guise that they were an Ubersmith employee asking for this information.

Ubersmith, Inc. will never contact you for login details unless it is explicitly required to resolve a problem you are encountering with a particular administrator account. We will definitely not contact you for login details out of the blue or have you fill out a form to provide them to us.

If you are contacted about login information and are not sure of the source, or are uncomfortable with the situation, please email

support at ubersmith dot com

so we can be sure that nothing untowards is going on. Also, if you find yourself confronted with a phishing attempt, please let us know as soon as we can so we can get the complaint process rolling and contact the proper authorities.

N.B.: In this particular case, the attacker was offering an ‘update’ to Ubersmith. As our Datacenter Edition clients know, we perform all DE upgrades. Customers of our Ubersmith product should know that downloads and updates are only available from the official Ubersmith downloads site:

http://downloads.ubersmith.com/

If you have any questions about this incident, please feel free to email us or give us a call.

Team Ubersmith

According to the information provided by PayPal, IPN (Instant Payment Notification) transactions will be delayed by the downtime. This means any payments you receive during this time via PayPal may not be immediately reflected within Ubersmith. Even once the downtime period is over, there is often a backlog of IPN notifications, which can lead to delays of an hour or more. This is not a problem with your Ubersmith configuration!

For more information about PayPal’s maintenance announcement, please visit this site.

Team Ubersmith

Should you need to reach us, please email

support at ubersmith dot com

If your query is of an emergency nature, please email

911 at ubersmith dot com

This post will be updated as soon as telephone service is restored. We apologize for the inconvenience.

Update: Our phones seem to be functional once again, so if you need to contact the Ubersmith offices, feel free to do so!