Pass sharing sites - To all site owners - GoFuckYourself.com - Adult Webmaster Forum

X

martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#1

Pass sharing sites - To all site owners

07-08-2006, 09:39 AM

just stumpled upon this...
http://www.villainess.com/
isn't there anything that can be done about these pass sharing sites?

AFF, cams.com seem to be the main sponsors ....

Make Money
Tags: None
bobby666

boots are my religion

Join Date: Nov 2005

Posts: 21765
Share

Post
#2

07-08-2006, 10:40 AM

see the same sites hacked as 3 years ago, when i still was far away of becomming a webmaster

i think the webmasters of the sites recognice what has happened when they view their daily bandwith stats

so i ask for the reason why staceys dungeon for instance is an open site for three years?
Comment
SiMpLe

Confirmed User

Join Date: Feb 2002

Posts: 3221
Share

Post
#3

07-08-2006, 10:47 AM

Originally posted by martinsc

AFF, cams.com seem to be the main sponsors ....

SURPRISE!!!

Sean Holland
Vice President
OrbitalPay / Global Electronic Technology (GET)
SKYPE: iam.sean ::: sholland at orbitalpay.com
888-775-1500
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#4

07-08-2006, 11:35 AM

Originally posted by SiMpLe

SURPRISE!!!

Make Money
Comment
Anar_j

Confirmed User

Join Date: Sep 2005

Posts: 430
Share

Post
#5

07-08-2006, 01:16 PM

Teencash.com - Top converting teen cash program, where 1000s of pic, movie, tube ready FHGs...

Top Sites: Babysitter Movies*Teen Lesbian Land*Girls Left Alone*Teen Sleep Over*Teen Emery

ICQ:176-922-400
Comment
Roald

SecretFriends.com

Join Date: May 2001

Posts: 27911
Share

Post
#6

07-08-2006, 01:26 PM

same old shit

WE ARE BUYING PAY SITES! CONTACT ME

ClubSweethearts | ManUpFilms | SinfulXXX | HOT * AdultPrime * HOT

Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com | telegram: roaldr
Comment
Sinstar

Confirmed User

Join Date: Mar 2006

Posts: 1206
Share

Post
#7

07-08-2006, 02:14 PM

Pass sharing sucks.
Comment
scottybuzz

Too lazy to set a custom title

Join Date: May 2006

Posts: 14799
Share

Post
#8

07-08-2006, 02:34 PM

yeh truley sucks

$$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#9

07-08-2006, 08:40 PM

Originally posted by Anar_j

what are you happy about?

Make Money
Comment
tony286

lurker

Join Date: Aug 2002

Posts: 57021
Share

Post
#10

07-08-2006, 08:45 PM

Can we sue the sponsors for supporting people who steal?
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#11

07-08-2006, 11:46 PM

Originally posted by tony404

Can we sue the sponsors for supporting people who steal?

interesting question..

Make Money
Comment
themanager

Confirmed User

Join Date: Apr 2006

Posts: 508
Share

Post
#12

07-09-2006, 12:56 AM

I don't think that is right we should think of a way to stop it.
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#13

07-09-2006, 08:49 AM

Originally posted by themanager

I don't think that is right we should think of a way to stop it.

any ideas?

Make Money
Comment
Matt 26z

So Fucking Banned

Join Date: Apr 2002

Posts: 18481
Share

Post
#14

07-09-2006, 09:06 AM

Originally posted by themanager

I don't think that is right we should think of a way to stop it.

You are about 10 years too late on that one.
Comment
Dirty Dane

Sick Fuck

Join Date: Feb 2004

Posts: 9491
Share

Post
#15

07-09-2006, 09:14 AM

Originally posted by martinsc

any ideas?

Organize it.
If the porn industry had something like the music industry. But I don't think it will happen
Comment
shack

Confirmed User

Join Date: Oct 2004

Posts: 539
Share

Post
#16

07-09-2006, 09:17 AM

It's how some paysites drive traffic, they leak a password, or give the webmaster one, get the site listed, get a few people in, then kill the password.

Gets impression on your members area, and further traffic to the front end once you kill the password.

It's only bandwidth

Last edited by shack; 07-09-2006, 09:18 AM.
Comment
rotterdammer

Confirmed User

Join Date: Feb 2006

Posts: 1523
Share

Post
#17

07-09-2006, 10:00 AM

Thats pretty bullshit what you say, there are shit loads of wordlist in different niches that contain 10.000 passwords for bangbros. Sites like BB and Nastydollars dont even seem to care about their passes being cracked.

The only way paysite owners can stop this is to get as many wordlists as possible and ban all the words for people who want to signup.

Especially the following user:pass

december:januari
abcde:fghijk
username:password

Maybe bangbros doesnt care because of the promotion but i know that site you mention is only the top of the iceberg.

There are several password forums like passwordparadise.net that have 100.000 passes to paysites.

My Best Sponsors: 1 2 3 4 5 6 7 8 9 10

Im Making Over $1000 / Month With OrgyCash! Get Inside Now! - Big List Of Domains For Sale!
Comment
fris

I have to go potty

Join Date: Aug 2002

Posts: 56010
Share

Post
#18

07-09-2006, 10:02 AM

or make the passwords harder, people that pick their own are too simple

Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.

Only Fans Data

20+ Custom Adult Themes and Plugins
Comment
rotterdammer

Confirmed User

Join Date: Feb 2006

Posts: 1523
Share

Post
#19

07-09-2006, 10:15 AM

Yeah thats also very true fris!

My Best Sponsors: 1 2 3 4 5 6 7 8 9 10

Im Making Over $1000 / Month With OrgyCash! Get Inside Now! - Big List Of Domains For Sale!
Comment
Pimpin_J

Confirmed User

Join Date: Jul 2006

Posts: 3637
Share

Post
#20

07-09-2006, 10:22 AM

The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers".
The weakest point is the "human" webmaster!
They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user")
Bruteforcing was 1990...
So better keep your stuff updated and check for suspect files on your server.
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#21

07-09-2006, 10:47 PM

Originally posted by Pimpin_J

The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers".
The weakest point is the "human" webmaster!
They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user")
Bruteforcing was 1990...
So better keep your stuff updated and check for suspect files on your server.

couldn't agree more...

Make Money
Comment
Beejeebers

Confirmed User

Join Date: Oct 2004

Posts: 290
Share

Post
#22

07-09-2006, 10:54 PM

How are generated user/pass combos harder to encrypt?

If you have a user/pass/id number combo, you would screw over 95% of the scripts that script kiddies use to hack the sites in the first place.
Comment
frakyou

Registered User

Join Date: Jun 2006

Posts: 2
Share

Post
#23

07-09-2006, 10:57 PM

Seems like it would be easy to prevent this. Different people logging in under the same account would have different ip adresses.
Comment
CaptainHowdy

Too lazy to set a custom title

Join Date: Dec 2004

Posts: 94196
Share

Post
#24

07-09-2006, 11:05 PM

Originally posted by Anar_j

Uh ??
Comment
Pimpin_J

Confirmed User

Join Date: Jul 2006

Posts: 3637
Share

Post
#25

07-10-2006, 08:16 AM

Originally posted by Beejeebers

How are generated user/pass combos harder to encrypt?

If you have a user/pass/id number combo, you would screw over 95% of the scripts that script kiddies use to hack the sites in the first place.

Its definatly harder to decrypt if its generated! Most sites use DES decryption and to decrypt it you need a good wordlist. Generated means more salts = takes much longer to decrypt. Now its getting to the math part where i have to pass course i always was stoned in math..
But i hope you get my point now, why its more usefull to use generated passwords to prevent hackers.

Easy example -> check the web for suze passes or for bangbros..youll find a shitload of passes. But try to get a pass for partyhardcore and/or perfect gonzo sites...
Youll see what i mean..

Last edited by Pimpin_J; 07-10-2006, 08:18 AM.
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#26

07-10-2006, 09:59 PM

Originally posted by Pimpin_J

Its definatly harder to decrypt if its generated! Most sites use DES decryption and to decrypt it you need a good wordlist. Generated means more salts = takes much longer to decrypt. Now its getting to the math part where i have to pass course i always was stoned in math..
But i hope you get my point now, why its more usefull to use generated passwords to prevent hackers.

Easy example -> check the web for suze passes or for bangbros..youll find a shitload of passes. But try to get a pass for partyhardcore and/or perfect gonzo sites...
Youll see what i mean..

Make Money
Comment
czarina

Webmaster Extraordinaire

Join Date: Jul 2002

Posts: 10751
Share

Post
#27

07-10-2006, 10:41 PM

Just do passwords away and invent something else, yeah, like what?
Comment
nofx

Too lazy to set a custom title

Join Date: Nov 2002

Posts: 16826
Share

Post
#28

07-10-2006, 10:44 PM

everone should img src it to death or packet it offline

Often times I wonder why
There's love and hate, theres live or die.
When sickness comes I must decide:
When feelings go, theres suicide.
Comment
BIGTYMER

Junior Achiever

Join Date: Nov 2004

Posts: 17066
Share

Post
#29

07-10-2006, 11:01 PM

Those passwords suck.
Comment
BV

wtf

Join Date: Sep 2001

Posts: 10914
Share

Post
#30

07-10-2006, 11:10 PM

it's free traffic guys
it's free traffic guys

there i said it twice
Comment
germ

( o Y o )

Join Date: Oct 2002

Posts: 3108
Share

Post
#31

07-10-2006, 11:19 PM

i say we stop promoting the sponsors that pay the password sharing sites.

its always aff and cams.com. they know wtf is going on, but they dont do anything about it. if other people stopped promoting them because of it, it may make them sit up and take notice that keeping one affiliate is making them lose a hell of a lot more.
Comment
UtahSaints

Confirmed User

Join Date: Jan 2005

Posts: 1538
Share

Post
#32

07-10-2006, 11:25 PM

hmmm. fucked up...

Enjoy Bucks - Enjoy Bucks
Comment
aico

Moo Moo Cow

Join Date: Mar 2004

Posts: 14748
Share

Post
#33

07-10-2006, 11:28 PM

Stop it? No!!!!!! I get mad hits from "leaked" passwords.
Comment
Bro Media - BANNED FOR LIFE

MOBILE PORN: IMOBILEPORN

Join Date: Jan 2004

Posts: 16502
Share

Post
#34

07-10-2006, 11:35 PM

Originally posted by martinsc
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#35

07-12-2006, 03:26 AM

Originally posted by LOL :D

Make Money
Comment
fr0gman

Confirmed User

Join Date: Feb 2005

Posts: 2093
Share

Post
#36

07-12-2006, 03:41 AM

Originally posted by martinsc

any ideas?

Unplug the Internet.

Earn up to $.03 per Visitor -> No Click Monetization!

"Because the World Wide Web is all about two things: horrifyingly stupid psychodrama, and naked chicks."

Wild College Videos | ICQ: 7746696
Comment
martinsc

Too lazy to set a custom title

Join Date: Jun 2005

Posts: 27043
Share

Post
#37

07-20-2006, 05:15 AM

just another bump.
someone has to do something about this...

Make Money
Comment
bizarredollars

Confirmed User

Join Date: Mar 2006

Posts: 1582
Share

Post
#38

07-20-2006, 05:23 AM

How often does this shit keep coming up?? Invest in a script, and profit from the traffic.. easy as... I tested this a few years back, I posted a password to one of my own sites, left it working for a couple of days, blocked it and made a shit load of sales thanks to a well designed 401 page.

Good scripts don't cost much.. the investment is well worth it.

Fuck, I wrote my own.. I might start selling it at $25 per pop, lol.

[email protected]
icq: 205-252-550
Comment
bizarredollars

Confirmed User

Join Date: Mar 2006

Posts: 1582
Share

Post
#39

07-20-2006, 05:30 AM

Originally posted by Pimpin_J

The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers".
The weakest point is the "human" webmaster!
They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user")
Bruteforcing was 1990...
So better keep your stuff updated and check for suspect files on your server.

Very good points.. another good tip - alter your apache config to use a file other than .htaccess for access rights.. something more random. It is very easily done, and adds another lair of security.

The best thing to do is have a seperate server just for your members only section, random names for your htaccess file, and for your scripts.. only let your billing agent know where the real files are located.

Even then, there are scripts that can email/page you when bandwidth goes way beyond normal levels, so you are alerted when your bandwidth suddenly jumps to an unusually high level.

Keep your software up to date, use a tracker to monitor for advisories that are relevent to your setup. If in doubt, hire someone who knows what they are doing - they are worth their weight in gold.

[email protected]
icq: 205-252-550
Comment
bizarredollars

Confirmed User

Join Date: Mar 2006

Posts: 1582
Share

Post
#40

07-20-2006, 05:32 AM

Originally posted by germ

i say we stop promoting the sponsors that pay the password sharing sites.

its always aff and cams.com. they know wtf is going on, but they dont do anything about it. if other people stopped promoting them because of it, it may make them sit up and take notice that keeping one affiliate is making them lose a hell of a lot more.

Be careful with this tho.. I for one plan to setup some 'password sites', that feature only links to 'hacked' sites that I have made and host myself.. I will be exploiting the password site traffic.. and I don't want the people I am sending traffic to getting pissed off, when I am not doing anything to hurt anyone.

I will of course inform my sponsors of my plans before putting their links up.. and will mostly be sending traffic to my own sites.

[email protected]
icq: 205-252-550
Comment
jayeff

Confirmed User

Join Date: May 2001

Posts: 2944
Share

Post
#41

07-20-2006, 06:03 AM

Originally posted by tony404

Can we sue the sponsors for supporting people who steal?

Good question.

On content-stealing sites, "conspiracy to defraud" would apply, because breach of copyright is an established crime and the sponsors on those sites are (knowingly) profiting from the sites' activities. The practical problem in the UK (and therefore possibly in the US and elsewhere) is that this is a criminal offense and an interested party would have to convince the public prosecutor to pursue the case. Software companies have successfully gone this route, but porn operators...?

The additional issue with password sites is whether what they are doing is a criminal or a civil matter. AFAIK that hasn't been tested and given the state of this industry, I wouldn't hold your breath.

Originally posted by germ

i say we stop promoting the sponsors that pay the password sharing sites.

I'm in the middle of removing links to the sponsors who give TBP special discounts, but after seeing Lens' responses to the content-theft sites issue a couple of days ago, yes, when that is done I'm taking down my links to AFF and its associated sites. I have been promoting them since 1998 and I'm not under any illusion that my action, by itself, will make the slightest difference to AFF's policies. However, by promoting sponsors who support those who undermine this industry, we are also failing to back those who do work in an ethical manner. So in effect, that's score 2 for the bad guys each time we fail to act.
Comment
Brujah

Beer Money Baron

Join Date: Jan 2001

Posts: 22157
Share

Post
#42

08-11-2006, 09:29 AM

Ohh noooess...

Free Premium Domain Lists and Tools at Clickmojo.com

For Sale: Obscenity.com
Comment

Previous template Next

Working...