password forums. if you run a pay site. read this

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • fris
    I have to go potty
    • Aug 2002
    • 55790

    #1

    password forums. if you run a pay site. read this

    http://www.protectadult.com/forumsecurity.php

    we have released the monster list.

    and a bit of an update just to keep you updated
    Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.


    My Newest Theme
  • Juggernaut
    Confirmed User
    • Jan 2003
    • 753

    #2
    Adding these URL's to a blocklist, doesn't prevent people from copy and pasting the hacked URL directly into their browser.

    You've just given free porn to all the surfers on GFY, by the way.

    Comment

    • nmcog
      Confirmed User
      • Sep 2004
      • 825

      #3
      Just force all passwords to be randomly generated and let members pick their own username.

      Comment

      • fris
        I have to go potty
        • Aug 2002
        • 55790

        #4
        Originally posted by nmcog
        Just force all passwords to be randomly generated and let members pick their own username.

        useless

        still crackable
        Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.


        My Newest Theme

        Comment

        • SomeCreep
          :glugglug
          • Mar 2003
          • 26118

          #5
          Originally posted by fris
          http://www.protectadult.com/forumsecurity.php

          we have released the monster list.

          and a bit of an update just to keep you updated
          Uhm, use common sense. Dont post that list on this board.

          Edit: Surfers will bookmark those urls.
          Last edited by SomeCreep; 04-14-2005, 04:21 AM.

          Webair Hosting

          I use and recommend Webair for hosting.

          Comment

          • Trax
            [----------------------]
            • Aug 2001
            • 14486

            #6
            useless...

            Comment

            • goldman
              Confirmed User
              • Nov 2004
              • 212

              #7
              CTRL-D....

              hmmm.................................
              http://pass.nejcpass.com/
              this ones the best from what i can remember.........

              there r a further 1000 password sites out there
              SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, you may use a 624x80 instead of a 120x60. Let me repeat... A 120 x 60 button and no more that 3 lines of DEFAULT SIZE AND COLOR text.

              Comment

              • BIGTYMER
                Junior Achiever
                • Nov 2004
                • 17066

                #8
                The sufers here are going to love those forums...

                Comment

                • Triple 6
                  Confirmed User
                  • Feb 2002
                  • 5394

                  #9
                  why the fuck is it so hard for these paysites to monitor IP's and grant access to no more then 2 uniques per day on each account? its fucking easy. wake up.
                  SIG TOO SMALL! Maximum 1200x600 button and no more than 30 text lines of ALL SIZES and COLORS. Unless your sig is for a GFY top banner sponsor, then you may use a 6240x4800 instead of a 1024x800.

                  Comment

                  • nmcog
                    Confirmed User
                    • Sep 2004
                    • 825

                    #10
                    Originally posted by fris
                    useless

                    still crackable
                    I've lurked for a while on IRC password trading channels (from efnet to thundercity), everytime some paysites get requested, everyone says that one is impossible because they autogenerate the password.

                    I've also talked with some of the ops who've been doing it since 1999 and they say the only way is to actually crack the server and not bruteforce which turns into a whole different game.

                    Comment

                    • fris
                      I have to go potty
                      • Aug 2002
                      • 55790

                      #11
                      Originally posted by nmcog
                      I've lurked for a while on IRC password trading channels (from efnet to thundercity), everytime some paysites get requested, everyone says that one is impossible because they autogenerate the password.

                      I've also talked with some of the ops who've been doing it since 1999 and they say the only way is to actually crack the server and not bruteforce which turns into a whole different game.
                      its actually all bruteforced.

                      htacess is really easy to crack.

                      have a good dictionary list. and big proxy list. run it through over 2 million times and you will crack it. some sites are being smart and doing form logins. which are the smart way to go. thats why people use proxy's to crack. because of course if they see more than 2 ips from the same host they will ban.

                      we shut down password trading channels on dalnet last december. that was where most of the trading was done.
                      Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.


                      My Newest Theme

                      Comment

                      • MandyBlake
                        The one and only!
                        • Nov 2002
                        • 17761

                        #12
                        that's why we have password protection software.
                        Mandy's Playhouse
                        Her First Fat Girl
                        If you're interested in promoting my sites, ICQ me! 178411921

                        Comment

                        • MGibson
                          So Fucking Banned
                          • Jan 2005
                          • 772

                          #13
                          Actually make a fake part of your site, put it on a password forum. Fill the fake part with upsells. Money does come in...

                          Comment

                          • jMP
                            Registered User
                            • Jan 2003
                            • 5

                            #14
                            Originally posted by fris
                            http://www.protectadult.com/forumsecurity.php

                            we have released the monster list.

                            and a bit of an update just to keep you updated
                            Thanks for the laugh
                            Now go find the other 5 million sites and their mirrors


                            Your security team beat pennywise? OMG! How lame are these guys if that?s their claim to password security fame.

                            Comment

                            • VeriSexy
                              Join The Royal Family
                              • Apr 2002
                              • 25463

                              #15
                              Originally posted by fris
                              http://www.protectadult.com/forumsecurity.php

                              we have released the monster list.

                              and a bit of an update just to keep you updated

                              Good job
                              Looking for a KICK ASS TEEN SPONSOR? Check out ROYAL CASH - THE KING OF TEEN!
                              Incredible webmaster tools FHGs, Morphing Blog and RSS Feeds, Embedded FLV & WMV Videos
                              .
                              With TOP RATIO Sites like


                              ATMovs.com | iTeenVideo.com |
                              TeenSexMovs.com | TeenSexMania.com


                              Comment

                              • Jake
                                Confirmed User
                                • Nov 2001
                                • 3056

                                #16
                                Originally posted by Triple 6
                                why the fuck is it so hard for these paysites to monitor IP's and grant access to no more then 2 uniques per day on each account? its fucking easy. wake up.
                                Yes and then you'll spend the entire day unblocking pissed off AOL users. Or worse, they'll just cancel or chargeback their membership because they can't get access to the site.

                                Comment

                                • jMP
                                  Registered User
                                  • Jan 2003
                                  • 5

                                  #17
                                  Originally posted by fris
                                  its actually all bruteforced.


                                  "have a good dictionary list"

                                  .
                                  .
                                  And where do you think the good wordlists come from?
                                  If you?re going to handout security advice you might want to actually understand the game first.

                                  I can?t believe I doubled my post count in one night
                                  Last edited by jMP; 04-14-2005, 06:50 AM.

                                  Comment

                                  • Cassie
                                    Confirmed User
                                    • Mar 2003
                                    • 3139

                                    #18
                                    Originally posted by jMP
                                    .

                                    I can?t believe I doubled my post count in one night

                                    ICQ: 309756847
                                    ]

                                    Comment

                                    • kyree666
                                      Registered User
                                      • Feb 2005
                                      • 30

                                      #19
                                      Originally posted by jMP
                                      .
                                      And where do you think the good wordlists come from?
                                      If you?re going to handout security advice you might want to actually understand the game first.

                                      I can?t believe I doubled my post count in one night

                                      lol been saying that for years...do I know you/of you jMP I believe I do

                                      screw dealing with dictionary files...people are creatures of habit...get one passfile, you're into many other sites...

                                      for people running pay sites your best bet is to make it as diffecult as possible, make it more trouble than it's worth...form login with visual your best bet....but even that's not uncrackable...lemme rephrase that...your best bet...learn wtf you are doing, quit leaving it up to your hosts to protect you...quit being so god damn lazy, quit worrying about making that quick buck...learn about server configurations,quit being button pushers, START caring about your memebrs and offer them some security...learn how to crack, and you will learn how to protect
                                      there are many sites that crackers will not even bother touching...why ? because the owners went to the trouble of finding out how people are getting in, instead of sitting around crying about it happening...do you really think shutting down an irc channel, or a website is gonna keep people out? get a clue....this si the same old tired shit it hasa been for years...you find a way to keep crackers out...we build a better mousetrap....but look at the brite side....handing out passwords tends to weed out the competition, and break the asshats that run shitty sites


                                      moral of this rant......get off your lazy fucking asses and learn wtf you're doing before you call yourself a pr0n webmaster

                                      kyree

                                      Comment

                                      • High_Times
                                        Confirmed User
                                        • Apr 2005
                                        • 115

                                        #20
                                        This thread will show you how to make it difficult as possible:
                                        http://www.gofuckyourself.com/showthread.php?t=459989

                                        Comment

                                        • Johny Traffic
                                          Confirmed User
                                          • Apr 2003
                                          • 5461

                                          #21
                                          Originally posted by Triple 6
                                          why the fuck is it so hard for these paysites to monitor IP's and grant access to no more then 2 uniques per day on each account? its fucking easy. wake up.
                                          What about ISP's that dont give the user a fixed IP?


                                          hosted flv's, hosted galleries, morphing rss feeds, free content, free sites, hosted blog

                                          Comment

                                          • Mutt
                                            Too lazy to set a custom title
                                            • Sep 2002
                                            • 34431

                                            #22
                                            Originally posted by kyree666
                                            lol been saying that for years...do I know you/of you jMP I believe I do

                                            screw dealing with dictionary files...people are creatures of habit...get one passfile, you're into many other sites...

                                            for people running pay sites your best bet is to make it as diffecult as possible, make it more trouble than it's worth...form login with visual your best bet....but even that's not uncrackable...lemme rephrase that...your best bet...learn wtf you are doing, quit leaving it up to your hosts to protect you...quit being so god damn lazy, quit worrying about making that quick buck...learn about server configurations,quit being button pushers, START caring about your memebrs and offer them some security...learn how to crack, and you will learn how to protect
                                            there are many sites that crackers will not even bother touching...why ? because the owners went to the trouble of finding out how people are getting in, instead of sitting around crying about it happening...do you really think shutting down an irc channel, or a website is gonna keep people out? get a clue....this si the same old tired shit it hasa been for years...you find a way to keep crackers out...we build a better mousetrap....but look at the brite side....handing out passwords tends to weed out the competition, and break the asshats that run shitty sites


                                            moral of this rant......get off your lazy fucking asses and learn wtf you're doing before you call yourself a pr0n webmaster

                                            kyree
                                            why do you surfers hang out here? seems like there is a growing group of pr0n webmasters groupies. surfers who are fascinated by the behind the scenes machinery of the web porn machine.
                                            I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

                                            Comment

                                            • fris
                                              I have to go potty
                                              • Aug 2002
                                              • 55790

                                              #23
                                              bringing up old threads

                                              nice

                                              glad i took that list down.

                                              i still wanna do a security aduit on paysites running proxypass, strongbox, and writeup a review. on the products.
                                              Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.


                                              My Newest Theme

                                              Comment

                                              Working...