CCBill powerless against password traders? - GoFuckYourself.com - Adult Webmaster Forum

X

baycouples

Confirmed User

Join Date: Mar 2004

Posts: 1341
Share

Post
#1

CCBill powerless against password traders?

06-23-2006, 12:13 AM

So, for the first time since I've started one of our pay sites http://WetlookPro.com - someone has posted their password on password hacking sites and tens of thousands of people had access to my content.

I've emailed CCBill asking them how that could have happened and they told me that there is not much they could have done.

I'm fucking amazed!!! What the hell are they doing over there??

Are you saying that they haven't programmed some simple code that limits access to each username to, say, 5 to 10 IPs per day???? I mean obviousely this one username has gotten logged into by about 30,000 IPs. Are you telling me that CCBill has nothing to protect us against that???

Please tell me I'm an idiot who doesn't understand something and tell me how to get smarter about this.
Tags: None
Shoehorn!

Die With Your Boots On

Join Date: Oct 2003

Posts: 22872
Share

Post
#2

06-23-2006, 12:17 AM

CCBill isn't responsible for protecting your sites against password trading. Get Strongbox.
Comment
fallenmuffin

Confirmed User

Join Date: Nov 2005

Posts: 8170
Share

Post
#3

06-23-2006, 12:17 AM

Originally posted by Shoehorn!

CCBill isn't responsible for protecting your sites against password trading. Get Strongbox.

Agreed. You can't expect your merchant do everything for you. It's your business protect at as your child.
Comment
venus

Confirmed User

Join Date: Jan 2003

Posts: 3112
Share

Post
#4

06-23-2006, 12:18 AM

CCbill does not run your site, you do. Security is your responsibility. There have been tons of posts on here about securing sites. Here is a start for you tho, this software will protect your members area and is cheap
http://www.monster-submit.com/sentry/

Muscle/Fitness Adult Affiliate Program
Since 1997 www.venuscash.com
Comment
Jakke PNG

ex-TeenGodFather

Join Date: Nov 2001

Posts: 20306
Share

Post
#5

06-23-2006, 12:20 AM

Originally posted by baycouples

Please tell me I'm an idiot who doesn't understand something and tell me how to get smarter about this.

You're an idiot, and you don't understand that after ccbill creates the password, they don't know anything about the users doings, it's all in YOUR server. They just create the password for you. The users don't log in thru ccbill.

Get a password-protect script like strongbox mentioned above.
http://www.bettercgi.com/strongbox/

..and I'm off.
Comment
Dveron

Confirmed User

Join Date: Dec 2002

Posts: 2794
Share

Post
#6

06-23-2006, 12:21 AM

Get Strongbox
http://www.bettercgi.com/strongbox/

Adult Comics Club - Updated Bi-Daily. 60% Recurring Payouts. Exclusive Comic Content.
Comment
Jace

FBOP Class Of 2013

Join Date: Jan 2004

Posts: 35562
Share

Post
#7

06-23-2006, 12:22 AM

dude, why would a processing company be responsible for protecting your server against attacks?

that would be like getting mad at your host for your billing going down
Comment
Shoehorn!

Die With Your Boots On

Join Date: Oct 2003

Posts: 22872
Share

Post
#8

06-23-2006, 12:23 AM

Originally posted by Jace

dude, why would a processing company be responsible for protecting your server against attacks?

that would be like getting mad at your host for your billing going down

Or like getting mad at your security script for scrubbing too hard.
Comment
fallenmuffin

Confirmed User

Join Date: Nov 2005

Posts: 8170
Share

Post
#9

06-23-2006, 12:24 AM

Originally posted by Jace

dude, why would a processing company be responsible for protecting your server against attacks?

that would be like getting mad at your host for your billing going down

or like G.W. Bush attacking Iraq for Afghanistan attacks.
Comment
Jace

FBOP Class Of 2013

Join Date: Jan 2004

Posts: 35562
Share

Post
#10

06-23-2006, 12:25 AM

Originally posted by Shoehorn!

Or like getting mad at your security script for scrubbing too hard.

haha, nice one

"god damn you ray at strongboxxx! no one can sign up to my sites because their credit cards are being declined!!!!"
Comment
Pron Don

Internet Entrepeneur

Join Date: Jun 2006

Posts: 571
Share

Post
#11

06-23-2006, 12:25 AM

yeah i can see how that would be a shitty problem

Sig currently being donated to science.

don of pron at gmail dot com
Comment
V_RocKs

Damn Right I Kiss Ass!

Join Date: Nov 2003

Posts: 32448
Share

Post
#12

06-23-2006, 12:35 AM

Originally posted by baycouples

Please tell me I'm an idiot who doesn't understand something and tell me how to get smarter about this.

You are an idiot. You must not have done much homework on owning a paysite.

#1 - CCBILL has an option to mail the users their usernames and passwords and to generate them for them. Use it.

#2 - The people click a member button on CCBILL.com or your domain? So how the fuck is CCBILL supposed to know you have 30,000 people using one password if they are not logging in through CCBILL? Get a password trading script and a form login script. Usually one in the same.

#3 - Stop blaming others because you have no clue.
Comment
gooddomains

Too lazy to set a custom title

Join Date: Jul 2003

Posts: 10127
Share

Post
#13

06-23-2006, 12:37 AM

Do you have any idea what you're doing ?
Comment
biftek

So Fucking Banned

Join Date: Jan 2005

Posts: 1030
Share

Post
#14

06-23-2006, 12:58 AM

just the typical attitude of people today , looking for a way to pass the blame on , don't worry about blaming yourself for the crappy setup , need to find someone else to blame
Comment
aico

Moo Moo Cow

Join Date: Mar 2004

Posts: 14748
Share

Post
#15

06-23-2006, 01:07 AM

LOL... it's called CC BILL, not CC Run your site.
Comment
rvincent

Confirmed User

Join Date: Feb 2005

Posts: 431
Share

Post
#16

06-23-2006, 01:07 AM

Get strongbox indeed; got it installed on my site 1 month ago and they were extremely quick and profesional.

Victoria Holyns : promote her siteHERE !
Comment
studiocritic

Confirmed User

Join Date: Jun 2005

Posts: 2442
Share

Post
#17

06-23-2006, 01:16 AM

so is this guy too embarassed to reply now?

how do these people get to owning sites?

254342256
Comment
lagwagon

Confirmed User

Join Date: Jul 2001

Posts: 8464
Share

Post
#18

06-23-2006, 01:18 AM

someone needs a hug

FTVGirls - FTVMilfs - DanielleFTV
Comment
V_RocKs

Damn Right I Kiss Ass!

Join Date: Nov 2003

Posts: 32448
Share

Post
#19

06-23-2006, 01:25 AM

Like your photos BTW.. Wet look is my favorite look for a woman.
Comment
Violetta

Affiliate

Join Date: Jul 2004

Posts: 28735
Share

Post
#20

06-23-2006, 02:19 AM

I have had my problems with password traders myself, but ccbill wont fix shit for you. If you host with Webair.com they can set up some stuff for you!

M&A Queen
Comment
jono

Confirmed User

Join Date: Aug 2004

Posts: 617
Share

Post
#21

06-23-2006, 04:52 AM

Get Strongbox.

Web: http://www.K8TIE.com
Email: gfy[at]k8tie.com ICQ: 28-638-063
Comment
Dirty Dane

Sick Fuck

Join Date: Feb 2004

Posts: 9491
Share

Post
#22

06-23-2006, 05:02 AM

If 30.000 IPs log in with same username? u really have a security problem
Comment
shunga

Confirmed User

Join Date: Apr 2001

Posts: 994
Share

Post
#23

06-23-2006, 05:10 AM

As mentioned, you need a script to prevent pass sharing, or hacking. You have to be responsible for that, as well as analysing sales for evidence of carding, so billing isn't a fire and forget deal.

Clockwork Cash - ICQ: 355-26-288 / Email: admin AT clockworkcash DOT com
Asian Paysites : Exclusive Content : NATS or CCBill
Thai Cuties : Shave Asians : JAVondemand
Comment
Big_Red

Confirmed User

Join Date: Jun 2006

Posts: 4147
Share

Post
#24

06-23-2006, 05:49 AM

Drop a bill for stronbox. And your worries are over. Have a nice day.

60% Revshare.
http://www.boobycash.com We got the boobs and the cash!
ICQ 198-580-197 24/7 support
Comment
justsexxx

Too lazy to set a custom title

Join Date: Aug 2001

Posts: 13723
Share

Post
#25

06-23-2006, 06:15 AM

You're an idiot who doesn't understand something and get strongboxx or password sentry etc...

Questions?

ICQ: 125184542
Comment
tranza

ICQ: 197-556-237

Join Date: Jun 2003

Posts: 57559
Share

Post
#26

06-23-2006, 06:26 AM

I believe this thread deserves some OWNED pictures....

I'm just a newbie.
Comment
biftek

So Fucking Banned

Join Date: Jan 2005

Posts: 1030
Share

Post
#27

06-23-2006, 06:33 AM

i guess someone didn't fully read "dummies guide to running a porn site"
Comment
fitzmulti

I Like Depth Of Field!

Join Date: Jan 2003

Posts: 14861
Share

Post
#28

06-23-2006, 08:17 AM

Originally posted by Jace

dude, why would a processing company be responsible for protecting your server against attacks?

that would be like getting mad at your host for your billing going down

EXACTLY! Or complaining to your server that the check for payment of your sales didn't show up!
:P

www.SexyGirlsCash.com

CONTACT // FITZMULTI AT GMAIL.COM //
{Please include a message so I know you are from GFY! I get too many spam "add requests"!}
Comment
seeric

..........

Join Date: Aug 2004

Posts: 41917
Share

Post
#29

06-23-2006, 08:20 AM

Originally posted by Shoehorn!

Or like getting mad at your security script for scrubbing too hard.

hahahahahaha fuck i'm dyin in here.

get strongboxxx and be done with it. 100 bucks and you're finished.
Comment
TheSenator

Too lazy to set a custom title

Join Date: Feb 2003

Posts: 13330
Share

Post
#30

06-23-2006, 08:23 AM

DUMMY DUMMY

Well, live and learn.

ISeekGirls.com since 2005
Comment
blackfeet

Confirmed User

Join Date: Jun 2003

Posts: 589
Share

Post
#31

06-23-2006, 08:35 AM

just disable the user and password.
Comment
Josh Winters

Registered User

Join Date: Feb 2006

Posts: 8
Share

Post
#32

06-23-2006, 08:48 AM

Get HackerLock by WebStream

We may be able to save you 25 ? 40% on your present Credit Card Processing....and STOP ALL PASSWORD CHEATS!

Low rates for membership and novelty sites starting at 10%
Real-time credit card processing
On-time and accurate payouts since 1997
Memberships or products
Get set up immediately
No programming required...we set you up
No setup fees, no monthly fees
Flexible payment options
One-time and recurring billing options
Flexible shopping cart back end
Real-time stats showing sales projections
24/7 client support and Help Desk

If you are interested in a quote, let me know.

Josh Winters
WebStream Internet Solutions

[email protected]
IM: [email protected]

(888) 932-2333 Toll-Free
(954) 730-7127 Local
(954) 733-7067 Fax
(954) 730-7405 Help Desk

Josh Winters

[email protected]
www.webstream.net
IM: [email protected]
Comment
johnnyhey

Confirmed User

Join Date: Jan 2004

Posts: 1172
Share

Post
#33

06-23-2006, 09:34 AM

go the ATM, withdraw $20 and go buy a clue

CandyDreams.com

shooter for hire

info[at]candydreams.com
ICQ:96563638
AIM: johnnyhey
Comment
Tdog

Confirmed User

Join Date: May 2006

Posts: 2707
Share

Post
#34

06-23-2006, 10:08 AM

Originally posted by Dveron

Get Strongbox
http://www.bettercgi.com/strongbox/

This is a good program, use this. If you still get passwords out there then blame strongbox and not CCBill.

SOLOGIRLPAYS.COM
Very Hot Solo Girls now paying 50% sales,rebills and 10% webmaster referral.
Free Hosted Galleries are ready to go !!
Comment
czarina

Webmaster Extraordinaire

Join Date: Jul 2002

Posts: 10751
Share

Post
#35

06-23-2006, 10:14 AM

have your host run something like iprotect or such on your server
Comment
D

Confirmed User

Join Date: Jan 2006

Posts: 7412
Share

Post
#36

06-23-2006, 11:14 AM

And if it hasn't been said enough...

Get Strongbox.

Ray > *

-D.
ICQ: 202-96-31
Comment
gooddomains

Too lazy to set a custom title

Join Date: Jul 2003

Posts: 10127
Share

Post
#37

06-23-2006, 11:16 AM

where is this boy now? Send off to bed by mommy ?
Comment
OG LennyT

Wall Street Pimp

Join Date: Jun 2003

Posts: 14345
Share

Post
#38

06-23-2006, 11:23 AM

The worse complaints I got as a tech at CCBill were asshole webmasters calling to bitch their password list was 'hacked' by pswd trading sites.

They expected us to go in and shut those sites down... seriously.

somethings never change

Tradeking - my online broker | 4.95 a trade | make real $$
Comment
baycouples

Confirmed User

Join Date: Mar 2004

Posts: 1341
Share

Post
#39

06-23-2006, 12:22 PM

Originally posted by studiocritic

so is this guy too embarassed to reply now?

how do these people get to owning sites?

Well, there is not much to reply to. I was very open minded in my post. I was upset, but I was ready to listen. I'm going to buy and install the Strongbox script within the week.

However, most people didn't understand my point and if they didn't - I don't think I want to spend too much time explaning it to them.

The fact is that I understand very well how the CCBill's code works. What I'm saying is that CCBill could have implemented something like the software by strongbox into their script ( no matter where it resides ). It's been a decade since they've started doing business and I would have expected them to be the "complete payment solution" as they claim to be. The password trader protection code is not something that requires brain surgery experience. I'm just simply saying that CCBill could have done that as part of their service.
Comment
Matt 26z

So Fucking Banned

Join Date: Apr 2002

Posts: 18481
Share

Post
#40

06-23-2006, 12:28 PM

I guess the bar is still getting lower and lower to own a paysite.
Comment
Sebastian Sands

Confirmed User

Join Date: Mar 2005

Posts: 5223
Share

Post
#41

06-23-2006, 12:47 PM

Originally posted by baycouples

Well, there is not much to reply to. I was very open minded in my post. I was upset, but I was ready to listen. I'm going to buy and install the Strongbox script within the week.

However, most people didn't understand my point and if they didn't - I don't think I want to spend too much time explaning it to them.

The fact is that I understand very well how the CCBill's code works. What I'm saying is that CCBill could have implemented something like the software by strongbox into their script ( no matter where it resides ). It's been a decade since they've started doing business and I would have expected them to be the "complete payment solution" as they claim to be. The password trader protection code is not something that requires brain surgery experience. I'm just simply saying that CCBill could have done that as part of their service.

Why do you make CC bill responsible for that? why not your hosting company? Same difference.

By the way you just gave the site out on a board full of surfers, plus you said you will get something within the next week or so. Expect to get another brute force attack because now these guys know you have no protection, they know that no one will do anything about it until you get protection.
Comment
shunga

Confirmed User

Join Date: Apr 2001

Posts: 994
Share

Post
#42

06-23-2006, 01:01 PM

I'd like to see CCBill tighten up on one or two things, but this isn't one of them.

Clockwork Cash - ICQ: 355-26-288 / Email: admin AT clockworkcash DOT com
Asian Paysites : Exclusive Content : NATS or CCBill
Thai Cuties : Shave Asians : JAVondemand
Comment

Previous template Next

Working...