Paysite owners, google is not your friend.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • JSA Matt
    So Fucking Banned
    • Aug 2003
    • 5464

    #1

    Paysite owners, google is not your friend.

    We all know that password sites are a big enough problem, but now we have google indexing these password sites and making it that much easier for surfers to gain free entry.

    I'm going to use BradShaw as an example here since he likes being the center of attention.

    Do a google search for the member's area URL to 24 inches of pain.
    "24inchesofpain.com/members"

    http://www.google.com/search?num=100...22&btnG=Search

    This should give you a pretty good idea of what is going on... the first password I tried gave me access.

    I personally went through all of our sites and deleted or changed a LARGE number of working passwords. I would also recommend ProxyPass to take advantage of this traffic source
  • Harmon
    ( ͡ʘ╭͜ʖ╮͡ʘ)
    • Mar 2004
    • 20016

    #2
    Welcome to 1997 dude
    [email protected]

    Comment

    • JSA Matt
      So Fucking Banned
      • Aug 2003
      • 5464

      #3
      Originally posted by Harmon
      Welcome to 1997 dude
      You're my hero

      Comment

      • Skripter
        Registered User
        • May 2005
        • 40

        #4
        Hah.. think thats bad?
        _http://www.google.com/search?q=*%3A*%40www.24inchesofpain.com%2Fmembers

        And you can replace your site with any other. Works the same.

        Comment

        • Dalai lama
          Strength and Honor
          • Jul 2004
          • 16540

          #5
          First password worked for me too, didnt even had to visit a site for it.

          A program you can trust.
          Gallerybooster Run multiply TGPs of 1 script

          Comment

          • JSA Matt
            So Fucking Banned
            • Aug 2003
            • 5464

            #6
            Originally posted by Skripter
            Hah.. think thats bad?
            _http://www.google.com/search?q=*%3A*%40www.24inchesofpain.com%2Fmembers

            And you can replace your site with any other. Works the same.
            that's great

            Comment

            • ry0t
              So Fucking Banned
              • Feb 2003
              • 4160

              #7
              Seriously it boils down to having something like strongbox so the passwords will locked out. Then there will be no problem. You can actually redirect the traffic and make money on them. So yes google is your friend.

              Comment

              • Halcyon
                Spread The Pink!
                • Dec 2002
                • 8609

                #8
                damn...between this and the checks thread... sounds grim.
                HAL on TEDx:

                Comment

                • Fletch XXX
                  GFY HALL OF FAME DAMMIT!!!
                  • Jan 2002
                  • 60840

                  #9
                  if password sites "were a problem" paysite owners wouldnt be working deals out with them.


                  Want an Android App for your tube, membership, or free site?

                  Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

                  Comment

                  • mufas
                    Confirmed User
                    • Sep 2004
                    • 1054

                    #10
                    Originally posted by Harmon
                    Welcome to 1997 dude

                    Comment

                    • JSA Matt
                      So Fucking Banned
                      • Aug 2003
                      • 5464

                      #11
                      Originally posted by Fletch XXX
                      if password sites "were a problem" paysite owners wouldnt be working deals out with them.

                      quiet you

                      Comment

                      • JSA Matt
                        So Fucking Banned
                        • Aug 2003
                        • 5464

                        #12
                        Originally posted by ry0t
                        Seriously it boils down to having something like strongbox so the passwords will locked out. Then there will be no problem. You can actually redirect the traffic and make money on them. So yes google is your friend.
                        If you read my post, I recommended ProxyPass for this

                        Comment

                        • WiredGuy
                          Pounding Googlebot
                          • Aug 2002
                          • 34517

                          #13
                          You see this as a bad thing where I see this as a great thing. This is a great way to see exactly which password sites are indexing your sites so you can prevent them in future. Google isn't the problem here, its the password sites. Google is telling you exactly which sites is contributing to the problem. To me, this is a good thing. Just grab a list of all the password sites that google returns and setup a mod rewrite for all referrals to a landing page. I do of course think a password protection script is also needed on top of this.

                          WG
                          I play with Google.

                          Comment

                          • JSA Matt
                            So Fucking Banned
                            • Aug 2003
                            • 5464

                            #14
                            Originally posted by WiredGuy
                            You see this as a bad thing where I see this as a great thing. This is a great way to see exactly which password sites are indexing your sites so you can prevent them in future. Google isn't the problem here, its the password sites. Google is telling you exactly which sites is contributing to the problem. To me, this is a good thing. Just grab a list of all the password sites that google returns and setup a mod rewrite for all referrals to a landing page. I do of course think a password protection script is also needed on top of this.

                            WG
                            Blocking the password sites themselves does nothing to resolve this problem. That is the whole point of this thread. Google makes it so you never have to touch a password site.

                            Besides, this thing is indexing pages that are not password related, just random people uploading level 10 password lists from IRC.

                            Comment

                            • wallst
                              Confirmed User
                              • Aug 2004
                              • 1621

                              #15
                              worked for me.

                              http://www.whereisit.org/Forums/viewtopic/t=7588.html
                              Earl Miller Cash
                              20th Congress

                              Comment

                              • gregtx
                                Confirmed User
                                • Jan 2002
                                • 1929

                                #16
                                Originally posted by JSA Matt
                                We all know that password sites are a big enough problem, but now we have google indexing these password sites and making it that much easier for surfers to gain free entry.

                                I'm going to use BradShaw as an example here since he likes being the center of attention.

                                Do a google search for the member's area URL to 24 inches of pain.
                                "24inchesofpain.com/members"

                                http://www.google.com/search?num=100...22&btnG=Search

                                This should give you a pretty good idea of what is going on... the first password I tried gave me access.

                                I personally went through all of our sites and deleted or changed a LARGE number of working passwords. I would also recommend ProxyPass to take advantage of this traffic source

                                we have used proxypass for years.. appearantly it had not killed those user/passes... as it takes 5 simultaneous users to disable... by the time I checked none seemed to work..
                                Processing Partners http://www.processingpartners.com

                                Comment

                                • JSA Matt
                                  So Fucking Banned
                                  • Aug 2003
                                  • 5464

                                  #17
                                  Originally posted by gregtx
                                  we have used proxypass for years.. appearantly it had not killed those user/passes... as it takes 5 simultaneous users to disable... by the time I checked none seemed to work..
                                  I'm guessing due to this thread it was tried enough times for ProxyPass to catch them. That is why I did not use our own sites as an example, because none of the passwords will work

                                  Comment

                                  • Trax
                                    [----------------------]
                                    • Aug 2001
                                    • 14486

                                    #18
                                    this ain't big news
                                    its not shame on google lol
                                    its about programs that don't make use of such info
                                    searching the web for stolen passes is not that hard lol

                                    Comment

                                    • WiredGuy
                                      Pounding Googlebot
                                      • Aug 2002
                                      • 34517

                                      #19
                                      Originally posted by JSA Matt
                                      Blocking the password sites themselves does nothing to resolve this problem. That is the whole point of this thread. Google makes it so you never have to touch a password site.

                                      Besides, this thing is indexing pages that are not password related, just random people uploading level 10 password lists from IRC.
                                      Think about what I said though. By using Google, you have a list of password sites. By disabling referrers from these password sites, your sites won't get listed on the password sites anymore since they're all being redirected. So if they're not on the password sites, they won't get indexed in Google in future.

                                      WG
                                      I play with Google.

                                      Comment

                                      • JSA Matt
                                        So Fucking Banned
                                        • Aug 2003
                                        • 5464

                                        #20
                                        Originally posted by WiredGuy
                                        Think about what I said though. By using Google, you have a list of password sites. By disabling referrers from these password sites, your sites won't get listed on the password sites anymore since they're all being redirected. So if they're not on the password sites, they won't get indexed in Google in future.

                                        WG
                                        Most password sites do not even link to your site, especially since a patch is required to use the username:[email protected] syntax. Copy & pasting the URL will bypass your theory.

                                        I do see what you are saying and this being in google is not necessarily a bad thing. Like I said originally, this post was intended for paysite owners to disable the passwords and take advantage of the traffic coming from google. This traffic is more valuable than most people know.

                                        Comment

                                        Working...