All scripts are Vulnerable, I do not see what the big deal is.
Shit, 40 Million cards were recently compromised via a processor, why ya folks think this kinda thing is "incredible"?
Exactly and I'm sure brad will seal it air tight now!!
SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.
Since he was "logged in" to your computer as the apache account which you are using to move public information, he didn't "hack" anything. He used a world usable account (nobody) to access world readable data.
The fact that these issues were there in the first place is fucking insane. You really should fire your hosting company because their technicians don't deserve their title.
These problems truely are admin 101. It'd be like you accepting an unsigned contract. Or a signature from a 16 year old company employee. You know you'd never do something so basically silly. Your admins set your server up so badly it is laughable.
Also someone should have been combing your logs once in a while to see what files are being accessed and by whom. A few grep commands later and your security/admin guy would be wondering what the fuck is going on. But you don't have one. Why? Because you treat people like dirt.
if double meaning posts and satirical worthless comments meant to distract from the ineptness of brad's product were a contest- his ball-lickers would win every time. all of the "cute" stuff does not change the huge retardation exhibited in these threads. nice try though! that meaningless banter only works on your board.
b.s. ball-lickers are blind and stupid. i won't do biz with any of you
if double meaning posts and satirical worthless comments meant to distract from the ineptness of brad's product were a contest- his ball-lickers would win every time. all of the "cute" stuff does not change the huge retardation exhibited in these threads. nice try though! that meaningless banter only works on your board.
b.s. ball-lickers are blind and stupid. i won't do biz with any of you
Did you write that with a jawbreaker in your mouth, sithllly?
Why is there a reference to ccbill file structures on this page?
Because it is an exploit list. You run it against a domain and it tells you what hit 200, and what 404,403,501,502,etc...
A list like that is WIDELY well known in the 15 years old hacking circles...
Anyone still using that ccbill directory structure is a lamer.
The new scructure is to have a very long random directory such as,
s9afhjJHJKGHWS99rkjssfjhsfksf
So that a hacker can't guess it.
More importantly, password protecting the directory is vital and so is turning off directory indexing. Installation performed and untouched since 2002 would still have the old structure and contain the same problems as Brad is currently experiencing. Like not having the password file itself under the website root directory and/or not password protecting its directory.
Googling for "index of"+ccbill.log is an interesting way of finding them....
BTW, the information in my post should be nothing new to anyone here. If it is, you really need to talk to a security guy like Fris because you are clueless.
Watching Brad rant is kinda funny because it is about what it'd be like to see him ranting about specifics on fuel injected car engines in the company of machanics... To them he would seem to be rambling.
XPays... So.. you are saying that people kiss Brad's ass because they might have a use for him some time later... The whole don't burn your bridges thing... I am wondering, besides for SIC and ES, what does he do?
BTW, the information in my post should be nothing new to anyone here. If it is, you really need to talk to a security guy like Fris because you are clueless.
Watching Brad rant is kinda funny because it is about what it'd be like to see him ranting about specifics on fuel injected car engines in the company of machanics... To them he would seem to be rambling.
XPays... So.. you are saying that people kiss Brad's ass because they might have a use for him some time later... The whole don't burn your bridges thing... I am wondering, besides for SIC and ES, what does he do?
Loryn (3:16 PM):
I love it, just as long as we keep the bedroom door closed from all ears then we can have throw down hard core sex that makes us money haha
fuck it we can have sex on money never did that before
Loryn (3:16 PM):
I love it, just as long as we keep the bedroom door closed from all ears then we can have throw down hard core sex that makes us money haha
fuck it we can have sex on money never did that before
Comment