Thread: Password sites
View Single Post
Old 01-22-2008, 02:46 PM  
gmr324
Confirmed User
 
Industry Role:
Join Date: Aug 2006
Posts: 1,199
Quote:
It's the password sites that are the problem, people bitch about tube sites posting there content but where do you think the tube site owners/uploaders get the content from?

I can almost guarantee they are getting access to
it through password forum sites and using cracked passwords.
We at PhantomFrog have always maintained that the ONLY TRUE litmus test of a password protection system (whether its ProxyPass, Pennywize, Strongbox) is whether the stolen passes
that are published on password trading sites are WORKING!!! If you can find working passes there, then the password protection system you're using
is failing to do its job. Period.

Just go to wt50.com and you'll find a well
organized index of password trading forums. And those are just the public ones. There are also private paid membership ones as well where
leechers pay so the stolen passwords have a longer lifetime. Many of these forums have been closed only to re-open under a different domain and host with their entire leecher membership intact. So, closing them down only makes the snake rear its ugly head in a different spot. The solution is to
block and change the stolen passwords. If the hackers and leechers who frequent these trading forums only find dead passwords, they will become frustrated and turn their attention to improperly protected sites.

I have personally observed discussion threads between hackers who are tearing their hair out about why previously wide open sites have
suddenly become unexploitable for stealing passwords. Those sites had recently installed Phantom Frog. Its nice to turn the tables and have the hackers, instead of the webmasters, be the ones who are losing sleep!!!

The next reply in this thread will outline the capabilities of Phantom Frog and how you can
install a Free Trial version of the system to
evaluate it for yourself.

Last edited by gmr324; 01-22-2008 at 02:48 PM..
gmr324 is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote