epass: was there a security breach? - GoFuckYourself.com

rowan · 04-26-2006, 04:02 PM

http://www.gofuckyourself.com/showthread.php?t=599968

No response to my question in this thread... usually if there's a wholesale change of passwords it means there's been a breach. I can't imagine that you would not have recent db backups.

I'm happy to be proven wrong! Please clarify!

pstation · 04-26-2006, 04:06 PM

been wondering this myself, if there really was some sort of DB corruption I'd think they could just rollback the passes to before they were messed up. but then again, i have absolutely no clue how their system works

woj · 04-26-2006, 04:08 PM

minusonebit · 04-26-2006, 04:19 PM

Quote:

Originally Posted by pstation

been wondering this myself, if there really was some sort of DB corruption I'd think they could just rollback the passes to before they were messed up. but then again, i have absolutely no clue how their system works

All databases work relatively the same. Either they were too stupid to keep backups (not out of the question for them) or they were hacked. Only two possible explanations.

They have carefully avoided this question everytime I or anyone else has posted it. Silence is always an admission of guilt. So we can conclude that there was a breach. Only we dont know how bad.

crockett · 04-26-2006, 04:32 PM

If there had been a breech, wouldn't they legally have to notify all users? After all peoples credit card and personal info could have been compromised and I'd think they would legally have to let us know, or they could be held labial.

HairToStay · 04-26-2006, 04:33 PM

Not all passes were lost though .... I have 2 accounts and my oldest account was fine, but the one I opened in the past 6 months had a password change.

Michael O · 04-26-2006, 05:04 PM

I was told it was a database issue and thats what I have been posting, I have posted everything I know.

rowan · 04-26-2006, 05:46 PM

Quote:

Originally Posted by Keyser Soze

I was told it was a database issue and thats what I have been posting, I have posted everything I know.

Could you perhaps ask for more information from your bosses?

BTW I'm not blaming you for what has happened. I'm just concerned about the security of my details.

V_RocKs · 04-26-2006, 06:15 PM

My password on 3 accounts did not change so there was no complete rollover of passwords... I know a lot of people who say they had no issue during the problem so it looks like a DB issue...

To the person who thinks you can just roll shit back, you are a shithead... ;)

woj · 04-26-2006, 06:25 PM

Quote:

Originally Posted by V_RocKs

To the person who thinks you can just roll shit back, you are a shithead... ;)

If everything was backed up as it should have been, I don't see any reason why it would be impossible to recover data from a backup.. Can you clarify why you think it would be impossible to recover data from a backup in this situation?

minusonebit · 04-26-2006, 06:54 PM

Quote:

Originally Posted by rowan

Could you perhaps ask for more information from your bosses?

Yes, this would be nice. Its almost always better to tell what really happened than to make the customer wonder about it.

rowan · 04-26-2006, 07:15 PM

Quote:

Originally Posted by V_RocKs

To the person who thinks you can just roll shit back, you are a shithead... ;)

I'm sure it would have been relatively simple to restore only password hashes and include a note on the "wrong username or password screen" to the effect that people who changed their password recently have to request a new one via <link>. Certainly much easier than having thousands of users having password issues.

DamageX · 04-26-2006, 07:26 PM

Quote:

Originally Posted by rowan

I'm sure it would have been relatively simple to restore only password hashes and include a note on the "wrong username or password screen" to the effect that people who changed their password recently have to request a new one via <link>. Certainly much easier than having thousands of users having password issues.

After all your (and everyone else's) dealings with epassporte, don't you think that would make a bit too much sense?

shaliza · 04-27-2006, 01:37 PM

https://gfy.com/fucking-around-and-business-discussion/602765-epassporte-lie-proof-inside-drama-pics.html

madawgz · 04-27-2006, 01:39 PM

epassporte wouldnt let anything happen to your money

minusonebit · 04-27-2006, 05:56 PM

Quote:

Originally Posted by madawgz

epassporte wouldnt let anything happen to your money

Yeah, right.

European Lee · 04-27-2006, 05:58 PM

Quote:

Originally Posted by madawgz

epassporte wouldnt let anything happen to your money

Regards,

Lee

Michael O · 04-27-2006, 06:03 PM

Quote:

Originally Posted by minusonebit

Yeah, right.

minusonebit.

I don't understand your other thread:
https://gfy.com/fucking-around-and-business-discussion/602765-epassporte-lie-proof-inside-drama-pics.html

You say we send you a new password and you logged in to change the password to your old but your account were not affected by this database issue.
Are you just posting to trying to create drama where there is none?
You were told what happened with the database issue now if you have any real problems or questions about your account you are welcome to contact me directly or post them here.

Michael O · 04-27-2006, 06:04 PM

Quote:

Originally Posted by European Lee

Regards,

Lee

Please see my reply to minusonebit.

Did you ever pay what you owed to the designer and what happened to the email list you got from Oprano?

Michael O · 04-27-2006, 06:09 PM

I am seriously tried of this BS if you want the gloves to come off go ahead guys.

I am all for constructive critism and I will try to help anyone with any problems or questions they might have but I am not going to sit back and watch you two or anyone else continue this BS.
Enough is enough.

Michael O · 04-27-2006, 06:11 PM

As always if you have any real concerns or questions both Shaliza and myself are here to answer them.

Furious_Male · 04-27-2006, 06:12 PM

Don't let them see you sweat.

European Lee · 04-27-2006, 06:15 PM

Quote:

Originally Posted by Furious_Male

Don't let them see you sweat.

To late

Regards,

Lee

GiveIntoMe · 04-27-2006, 06:20 PM

Quote:

Originally Posted by European Lee

Regards,

Lee

LOL LOL LOL LOL LOL LOL LOL

you gotta win that $1k from Epassporte for that.

minusonebit · 04-27-2006, 06:20 PM

Quote:

Originally Posted by Keyser Soze

minusonebit.

I don't understand your other thread:
https://gfy.com/fucking-around-and-business-discussion/602765-epassporte-lie-proof-inside-drama-pics.html

You say we send you a new password and you logged in to change the password to your old but your account were not affected by this database issue.
Are you just posting to trying to create drama where there is none?
You were told what happened with the database issue now if you have any real problems or questions about your account you are welcome to contact me directly or post them here.

I think I have very clearly stated my problem and your implying that I made it up to create fake drama really pisses me off. Let me summarize my issue for you, since you didnt seem to get it all down:

I woke up one day and made a purchase with my ePass virtual card from APMEX.com. A charge was authorized. APMEX requires that all orders be shipped to the address on file. A couple of days after the intial order, I called APMEX to see why the order was still pending. They explained to me that ePass sent them an AVS response of "global". They said that because of this, they put the order on pend and canceled the auth.

I explained to APMEX I would get it straightened out and call them back. I tried to login to my ePass account several times. I could not get in. I was sure I was using the right password. So I opened up GFY to see if there was an issue. Sure enough, there was an "epass down" thread. I read, I appeared to have the symptoms that were described, so I used the link to reset the password as instructed. Boom, account can be gotten into.

Once into my account, I could see the pending auth and I posted for support in getting the auth removed. We went around and around on the auth issue.

While I was trying to get into my account, APMEX was calling you and asking how they could get the auth off my card and they also wanted ePass to verify my address, which they eventually did. You told APMEX to fax you a release form. Which they did. APMEX faxed you the release form twice (in addition to voiding the auth as VisaNet specs provide for) and it didnt get removed until I called in and yelled at someone there and posted here and ICQd you similtaniously. Finally, the auth was removed, APMEX was satisified that the order was OK so they re-ran the charge and accepted the order despite the "global" AVS flag. Yiou later explained in your ICQ convo that ePassporte does not support AVS.

Then last night I made my little password discovery. It seemed to indicate that ePass wasnt being truthful so I decided to post it here for the community to digest. Someone from ePass came along and posted a relatively reasonable (but unverifiable) explanation for all the trouble. Given the fact that ePassporte has a shady reputation (alot like iBill, only not quite as bad yet) I dont know whether to belive it or not. But I am not one to call someone a liar unless I am sure I am on solid ground, and as such, I consider it truth until I see evidence to the contrary. I said as much in 'my' thread.

And thanks for your permission to contact your support team or post for support. I appreciate that. Silly me, I thought thats what I got when I was a paying customer. But thanks, I feel much better now that I have your permission to contact support. Right now, my only unresolved issue is your condescending remarks, which you are free to apologize for any time you like at which time that issue too will be considered closed.

minusonebit · 04-27-2006, 06:34 PM

Quote:

Originally Posted by Keyser Soze

I am seriously tried of this BS if you want the gloves to come off go ahead guys.

Hey pal, let me let you in on a little secret: The gloves are ALWAYS off when it comes to other people fucking around with my money. And I am sure most everyone else here takes about the same approach.

For the reasons explained in the last post, my issue was legitimate and your job is to resolve legitimate issues.

If you dont like your job, then quit.

BSleazy · 04-27-2006, 06:36 PM

Quote:

Originally Posted by woj

If everything was backed up as it should have been, I don't see any reason why it would be impossible to recover data from a backup.. Can you clarify why you think it would be impossible to recover data from a backup in this situation?

Why not just re-issue passwords to make sure there's no problems?

BSleazy · 04-27-2006, 06:39 PM

By the way I love Epassporte. Never had a problem with anything at all. Had to call support once and that issue was taken care of immediately.

OzMan · 04-27-2006, 06:44 PM

Quote:

Originally Posted by crockett

... or they could be held labial.

I met three Epassporte employees at Internext who I would be more than willing to to hold labially anytime.

Michael O · 04-27-2006, 06:50 PM

Quote:

Given the fact that ePassporte has a shady reputation (alot like iBill, only not quite as bad yet)

Are you comparing ePassporte to IBill?
Tell me about one person that haven't gotten their money from ePassporte?
Or how you think ePassporte compare to IBill

Quote:

It seemed to indicate that ePass wasnt being truthful so I decided to post it here for the community to digest.

The title of your thread were "ePassporte: Another Lie. Proof Inside. (Drama) (Pics)"

Quote:

But I am not one to call someone a liar unless I am sure I am on solid ground, and as such, I consider it truth until I see evidence to the contrary. I said as much in 'my' thread.

The title of your thread were "ePassporte: Another Lie. Proof Inside. (Drama) (Pics)"
When did ePassporte lie about what happened?

Quote:

And thanks for your permission to contact your support team or post for support. I appreciate that. Silly me, I thought thats what I got when I was a paying customer. But thanks, I feel much better now that I have your permission to contact support. Right now, my only unresolved issue is your condescending remarks, which you are free to apologize for any time you like at which time that issue too will be considered closed.

It was a statement letting anyone know that if they have problems or questions we are here to help and people shouldn't hesitate to contact us, if you read it another way I apologize for not making myself more clear.

Quote:

Yiou later explained in your ICQ convo that ePassporte does not support AVS.

I also asked if that could be the explanation in one of the earlier threads where you posted about the issue you had:
https://gfy.com/fucking-around-and-business-discussion/601168-epassporte-support.html

Quote:

If you dont like your job, then quit.

I do like my job but I am not going to sit back and watch people continue to bash ePassporte.

minusonebit · 04-27-2006, 07:01 PM

You know what Keyser Soze? Go fuck yourself.

I am not going to get into a flame war here. I'm not making money on this thread and so its a waste of my time. I just bought another website yesterday and it will make money if I work on building it, so I will focus on that.

Like I said:

Then last night I made my little password discovery. It seemed to indicate that ePass wasnt being truthful so I decided to post it here for the community to digest. Someone from ePass came along and posted a relatively reasonable (but unverifiable) explanation for all the trouble. Given the fact that ePassporte has a shady reputation (alot like iBill, only not quite as bad yet) I dont know whether to belive it or not. But I am not one to call someone a liar unless I am sure I am on solid ground, and as such, I consider it truth until I see evidence to the contrary. I said as much in 'my' thread.

I am comparing ePassporte to iBill in the way that both have a reputation of being incomptent and constantly fucking things up. One only needs to conduct a search on this board to see that statement holds water.

I am not bashing ePassporte. ePassporte took a shit on the rug and I put ePassporte's nose in it. The shit has been removed from the rug (only the stain is left, the stain being your snide comments) and so the issue is over with as far as I am concerned until my account gets fucked up again.

We're not gonna go back and forth on this like two little kids. Well, you can, but you'll be talking to yourself.

minusonebit · 04-27-2006, 07:09 PM

And one last thing, Keyser Soze: I didnt see your post to that thread until just now. Had you told me that right off the batt, it would have saved alot of problems.

But none the less, your managers are ultimately to blame for this then because they should have never turned you loose on the floor if you dont even know the basic compnents of a transaction. Its a major disservice to both employee and customer when managers throw people into support roles without making sure they know whats going on.

rowan · 04-28-2006, 03:15 AM

bump4drama

ok, I'm not really interested in the drama, I just want to know that my details are safe. Keyser, please ask your bosses if they can give us any more details. As a good netizen - particularly one who has CC and bank account details on file - there should at least be some disclosure of any security breaches.

Again, I am happy to be proven wrong if it's not that...

prime · 04-28-2006, 03:24 AM

did anyone lose a buck due to this issue?
if not then get over it

fris · 04-28-2006, 03:27 AM

epass makes my life easier since paypal doesnt take adult

04-26-2006, 04:02 PM	#1
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	epass: was there a security breach? http://www.gofuckyourself.com/showthread.php?t=599968 No response to my question in this thread... usually if there's a wholesale change of passwords it means there's been a breach. I can't imagine that you would not have recent db backups. I'm happy to be proven wrong! Please clarify!

04-26-2006, 04:08 PM	#3
woj <&(©¿©)&> Industry Role: Join Date: Jul 2002 Location: Chicago Posts: 47,882	__________________ Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000 Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

04-26-2006, 04:32 PM	#5
crockett in a van by the river Industry Role: Join Date: May 2003 Posts: 76,806	If there had been a breech, wouldn't they legally have to notify all users? After all peoples credit card and personal info could have been compromised and I'd think they would legally have to let us know, or they could be held labial. __________________ In November, you can vote for America's next president or its first dictator.

04-26-2006, 04:33 PM	#6
HairToStay Confirmed User Join Date: Oct 2002 Location: Southcoast, Mass. Posts: 1,521	Not all passes were lost though .... I have 2 accounts and my oldest account was fine, but the one I opened in the past 6 months had a password change. __________________ Make bank by giving your surfers free pics every day and it costs you NOTHING! Use POTD Sponsors to find adult sponsors in more than 75 niches who offer a POTD feature!

04-26-2006, 05:04 PM	#7
Michael O More Cowbell Industry Role: Join Date: Jul 2001 Location: Nakhom Nowhere Posts: 10,607	I was told it was a database issue and thats what I have been posting, I have posted everything I know. __________________ Truth Teller

04-26-2006, 04:06 PM	#2
pstation Confirmed User Join Date: Jul 2003 Location: chicago Posts: 1,135	been wondering this myself, if there really was some sort of DB corruption I'd think they could just rollback the passes to before they were messed up. but then again, i have absolutely no clue how their system works

04-26-2006, 06:15 PM	#9
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	My password on 3 accounts did not change so there was no complete rollover of passwords... I know a lot of people who say they had no issue during the problem so it looks like a DB issue... To the person who thinks you can just roll shit back, you are a shithead... ;)

04-27-2006, 01:37 PM	#14
shaliza Confirmed User Industry Role: Join Date: Dec 2002 Location: toronto Posts: 548	https://gfy.com/fucking-around-and-business-discussion/602765-epassporte-lie-proof-inside-drama-pics.html __________________ Email: shaliza.somani at ePassporte dot com

04-27-2006, 01:39 PM	#15
madawgz 8.8.8.8 Industry Role: Join Date: Mar 2006 Location: Noordermarkt Posts: 30,509	epassporte wouldnt let anything happen to your money __________________ TAEMDLRMSKRJIXMRLSMRJ.

04-27-2006, 06:09 PM	#20
Michael O More Cowbell Industry Role: Join Date: Jul 2001 Location: Nakhom Nowhere Posts: 10,607	I am seriously tried of this BS if you want the gloves to come off go ahead guys. I am all for constructive critism and I will try to help anyone with any problems or questions they might have but I am not going to sit back and watch you two or anyone else continue this BS. Enough is enough. __________________ Truth Teller

04-27-2006, 06:11 PM	#21
Michael O More Cowbell Industry Role: Join Date: Jul 2001 Location: Nakhom Nowhere Posts: 10,607	As always if you have any real concerns or questions both Shaliza and myself are here to answer them. __________________ Truth Teller

04-27-2006, 06:12 PM	#22
Furious_Male Doing the grind since 99 Industry Role: Join Date: Oct 2003 Location: Buffalo NY Posts: 16,883	Don't let them see you sweat. __________________ Living in Virtual Reality Contact: Email (preferred): furiousmale .at. gmail - Skype: live:shanedws

04-27-2006, 06:39 PM	#28
BSleazy Confirmed User Industry Role: Join Date: Aug 2002 Location: USA Posts: 6,721	By the way I love Epassporte. Never had a problem with anything at all. Had to call support once and that issue was taken care of immediately. __________________ icq 156131086

04-27-2006, 07:01 PM	#31
minusonebit So Fucking Banned Join Date: Feb 2006 Location: [email protected] Posts: 7,391	You know what Keyser Soze? Go fuck yourself. I am not going to get into a flame war here. I'm not making money on this thread and so its a waste of my time. I just bought another website yesterday and it will make money if I work on building it, so I will focus on that. Like I said: Then last night I made my little password discovery. It seemed to indicate that ePass wasnt being truthful so I decided to post it here for the community to digest. Someone from ePass came along and posted a relatively reasonable (but unverifiable) explanation for all the trouble. Given the fact that ePassporte has a shady reputation (alot like iBill, only not quite as bad yet) I dont know whether to belive it or not. But I am not one to call someone a liar unless I am sure I am on solid ground, and as such, I consider it truth until I see evidence to the contrary. I said as much in 'my' thread. I am comparing ePassporte to iBill in the way that both have a reputation of being incomptent and constantly fucking things up. One only needs to conduct a search on this board to see that statement holds water. I am not bashing ePassporte. ePassporte took a shit on the rug and I put ePassporte's nose in it. The shit has been removed from the rug (only the stain is left, the stain being your snide comments) and so the issue is over with as far as I am concerned until my account gets fucked up again. We're not gonna go back and forth on this like two little kids. Well, you can, but you'll be talking to yourself.

04-27-2006, 07:09 PM	#32
minusonebit So Fucking Banned Join Date: Feb 2006 Location: [email protected] Posts: 7,391	And one last thing, Keyser Soze: I didnt see your post to that thread until just now. Had you told me that right off the batt, it would have saved alot of problems. But none the less, your managers are ultimately to blame for this then because they should have never turned you loose on the floor if you dont even know the basic compnents of a transaction. Its a major disservice to both employee and customer when managers throw people into support roles without making sure they know whats going on.

04-28-2006, 03:15 AM	#33
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	bump4drama ok, I'm not really interested in the drama, I just want to know that my details are safe. Keyser, please ask your bosses if they can give us any more details. As a good netizen - particularly one who has CC and bank account details on file - there should at least be some disclosure of any security breaches. Again, I am happy to be proven wrong if it's not that...

04-28-2006, 03:24 AM	#34
prime Confirmed User Join Date: Feb 2005 Location: Manila Posts: 400	did anyone lose a buck due to this issue? if not then get over it __________________ \| offshore solutions \| manual labor \| staff leasing \| and more! Dedicated -Motivated-Managed Employees icq.: 309570461 live chat

04-28-2006, 03:27 AM	#35
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	epass makes my life easier since paypal doesnt take adult __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff