wojjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
UnifiedStats... 100% secure?
Collapse
X
-
-
Well, I'm sure some people switched to unifiedstats but we haven't had more cancels than usual and not less new members than usual. You need to realize that adult is only a part of StatsRemote and I'm sure most adult webmasters will stay with us as wellOriginally posted by candyflipI'd be interested to know how many people dropped from his subscription list month to get him to stoop to this.
Comment
-
I'm sure you have a large number of subscribers, that's why I'm sitting here wondering why you even care. Unless of course....hmmmm...what was it I was saying before?Originally posted by J BWell, I'm sure some people switched to unifiedstats but we haven't had more cancels than usual and not less new members than usual. You need to realize that adult is only a part of StatsRemote and I'm sure most adult webmasters will stay with us as well
You could have easily contacted John and let him know. But he competition so you can to attack him here. No need to sugar coat and say that you had the best of intentions. We can see what's going on
Free Webmaster Stats Checking ProgramComment
-
Originally posted by J BWell, it seems like nobody else noticed so far. Maybe other people noticed but didn't care. Maybe sponsors already saw the URL's including the usernames and passwords in their referrer logs but didn't care or didn't know what to do with it. I don't know.
Well I know...let me clear it up for you...you are a piece of shit, no two ways about it.
A pathetic attempt at trying to make a shit storm out of something and raise concern in webmaster's eyes...it was an issue requiring attention...but you are trying to make it out as so much more...
There are exactly 2 things to do in this situation...report it to the world and try to make a shit storm out of it in a feeble attempt to protect your business...(and at the same time expose yourself as being an utter fucking asshole)
...or let me know about it, and get the problem resolved...which would have been the proper thing to do if you really care about the webmasters (what we are both here to do asshole)...
...this to prevent the situation which you are suggesting where a BoobDollars as you pointed to in your detective work above would be looking at their referrer logs for passwords...find one...and start plugging away everywhere on the net with a username and password hoping for it to work. Even though when you sign up for BoobDollars they can do the exact same thing with the username and password you choose...you are a joke.
It was an issue needing attention (on the webpage, not in the application)...but it's painfully obvious you are doing everything you can to exploit it for your benefit...which only raises any percieved risk you see here....the same risk involved when you enter a username and password into most websites on the net and the kid next door to you is sniffing the line and grabbing your username/password which are going over in plain text...I'm not saying this didn't need to be corrected...and I just did so.
Since you are just slinging shit...here are the facts for everyone else:
1) This only could occur if you clicked on a referral link in the splash page after starting up the application...and it does not affect your stats/your usernames and passwords for programs ect...and if this did occur, you would have to believe a respectable (something JB obviously doesn't know much about) program would find them on their own, and then start guessing what programs...the exact same you risk you incur when you sign up for programs across the net...
2) You exposing this shows absolutely no respect for the webmasters...it only made a small issue worse...and you know this. It's disgusting that you have to resort to this level to try and help protect your business...anything to keep your webmaster's paying I guess...
3) I am as honest as they come JB...just look at the responses above...
4) You are a complete shitheadComment
-
-
Hmmm....Originally posted by UnifiedStats_John... piece of shit ... shit storm ... utter fucking asshole ... asshole ... shithead...
Comment
-
John you forgot assclown... which J B clearly is
must suck watching his recurs go down the shitterComment
-
I really don't understand how none of you are at least just a little bit upset that there was/is a problem with exposed passwords? Your passwords don't matter at all to you? What other problems might US have?Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted
Windows VPS now available
Great for TSS, Nifty Stats, remote work, virtual assistants, etc.
Click here for more details.Comment
-
Then again, I don't really know how US works so I'm still kind of confused here...Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted
Windows VPS now available
Great for TSS, Nifty Stats, remote work, virtual assistants, etc.
Click here for more details.Comment
-
yeah, that will work on people here...Originally posted by J BHmmm....
it's obvious you put your own interests ahead of webmasters and tried to create drama and twist shit knowing most people aren't really aware of the details of what's going on here...
you are going to have a hard time trying to convince people of whatever you are trying to get at here...just look at the responses above...
Hey I certainly didn't want to get into a shit slinging match over this...but it's apparent that's how you operate and I pretty much have to as you are desparately trying to question UnifiedStats's credibility...
Speaking of quotes...here's one for you: (and I even took your advice) ...that's what runnning your mouth gets you JB...and to your paying customers of all people...and know they can leave you too...
Posted: Wed Dec 29, 2004 2:58 am Post subject: CCBill... complaints... insults
--------------------------------------------------------------------------------
We just released an update and CCBill and other programs are working again.
Just a few comments...
1.) If you think we're lazy (like some people posted) please cancel your subscription and check your stats manually again... or write your own stats checking software.
2.) If it's unacceptable for you to wait one week for an update (whether it's Christmas or not) I'm afraid you need to cancel your subscription as well. We usually release updates bi-weekly and if something is urgent they are released faster... like this time.
Flame awayComment
-
That's exactly what I'm talking about here...a pathetic attempt from a company which has cornered the market for years and tries to attack a company coming along which is threatening their market share.Originally posted by SlyThen again, I don't really know how US works so I'm still kind of confused here...
Putting his own interests ahead of webmaster's interests and trying to create the perception you are in danger when using our product.
It's shameful...Comment
-
Comment
-
Agreed, just without the all hate words... I use StatsRemote and I love it....Originally posted by UnifiedStats_JohnWell I know...let me clear it up for you...you are a piece of shit, no two ways about it.
A pathetic attempt at trying to make a shit storm out of something and raise concern in webmaster's eyes...it was an issue requiring attention...but you are trying to make it out as so much more...
There are exactly 2 things to do in this situation...report it to the world and try to make a shit storm out of it in a feeble attempt to protect your business...(and at the same time expose yourself as being an utter fucking asshole)
...or let me know about it, and get the problem resolved...which would have been the proper thing to do if you really care about the webmasters (what we are both here to do asshole)...
...this to prevent the situation which you are suggesting where a BoobDollars as you pointed to in your detective work above would be looking at their referrer logs for passwords...find one...and start plugging away everywhere on the net with a username and password hoping for it to work. Even though when you sign up for BoobDollars they can do the exact same thing with the username and password you choose...you are a joke.
It was an issue needing attention (on the webpage, not in the application)...but it's painfully obvious you are doing everything you can to exploit it for your benefit...which only raises any percieved risk you see here....the same risk involved when you enter a username and password into most websites on the net and the kid next door to you is sniffing the line and grabbing your username/password which are going over in plain text...I'm not saying this didn't need to be corrected...and I just did so.
Since you are just slinging shit...here are the facts for everyone else:
1) This only could occur if you clicked on a referral link in the splash page after starting up the application...and it does not affect your stats/your usernames and passwords for programs ect...and if this did occur, you would have to believe a respectable (something JB obviously doesn't know much about) program would find them on their own, and then start guessing what programs...the exact same you risk you incur when you sign up for programs across the net...
2) You exposing this shows absolutely no respect for the webmasters...it only made a small issue worse...and you know this. It's disgusting that you have to resort to this level to try and help protect your business...anything to keep your webmaster's paying I guess...
3) I am as honest as they come JB...just look at the responses above...
4) You are a complete shitheadComment
-
I don't quite understand what's the point of this quote. We run a business and provide people with a valuable tool. But we're not here to get insulted if one program changes their stats right before Christmas and we don't fix it right away. People that work hard also need time to relax and spend time with their families and I wouldn't call anybody back to the office over Christmas just because one program changed their stats. If people can't deal with this I can't help it. If there had been a serious problem, e.g. StatsRemote not working at all, we would have fixed it right away like we always did in the last 3+ years if there was a serious problemOriginally posted by UnifiedStats_Johnyeah, that will work on people here...
it's obvious you put your own interests ahead of webmasters and tried to create drama and twist shit knowing most people aren't really aware of the details of what's going on here...
you are going to have a hard time trying to convince people of whatever you are trying to get at here...just look at the responses above...
Hey I certainly didn't want to get into a shit slinging match over this...but it's apparent that's how you operate and I pretty much have to as you are desparately trying to question UnifiedStats's credibility...
Speaking of quotes...here's one for you: (and I even took your advice) ...that's what runnning your mouth gets you JB...and to your paying customers of all people...and know they can leave you too...
Posted: Wed Dec 29, 2004 2:58 am Post subject: CCBill... complaints... insults
--------------------------------------------------------------------------------
We just released an update and CCBill and other programs are working again.
Just a few comments...
1.) If you think we're lazy (like some people posted) please cancel your subscription and check your stats manually again... or write your own stats checking software.
2.) If it's unacceptable for you to wait one week for an update (whether it's Christmas or not) I'm afraid you need to cancel your subscription as well. We usually release updates bi-weekly and if something is urgent they are released faster... like this time.
Flame away
Comment
-
He's just pointing out an example of your attitude towards clients. And you say you started this thread out of concern for webmasters.Originally posted by J BI don't quite understand what's the point of this quote. We run a business and provide people with a valuable tool. But we're not here to get insulted if one program changes their stats right before Christmas and we don't fix it right away. People that work hard also need time to relax and spend time with their families and I wouldn't call anybody back to the office over Christmas just because one program changed their stats. If people can't deal with this I can't help it. If there had been a serious problem, e.g. StatsRemote not working at all, we would have fixed it right away like we always did in the last 3+ years if there was a serious problem
Comment
-
We take good care of our clients and we always try to provide the best support possible... but if people insult us I'm not quiet about it. As I said... If people can't deal with this I can't help it. Most of our clients appreciate our software and our supportOriginally posted by candyflipHe's just pointing out an example of your attitude towards clients. And you say you started this thread out of concern for webmasters.
Comment
-
I think it's pretty obvious it has nothing to do with your reaction time for the problem...rather how you communicate with your paying customers and people in general...Originally posted by J BI don't quite understand what's the point of this quote. We run a business and provide people with a valuable tool. But we're not here to get insulted if one program changes their stats right before Christmas and we don't fix it right away. People that work hard also need time to relax and spend time with their families and I wouldn't call anybody back to the office over Christmas just because one program changed their stats. If people can't deal with this I can't help it. If there had been a serious problem, e.g. StatsRemote not working at all, we would have fixed it right away like we always did in the last 3+ years if there was a serious problem
Again, you have made an attempt to make US out for something we are not...and again people called bullshit on it...just look at the threads above...even your clients agree with me...Comment
-
Originally posted by J BI know what you mean and I knew people would say stuff like this before I started the thread but ask yourself this question... should I have waited until somebody else discovered it and they keep 'sharing' the usernames and passwords of their users? Doesn't make sense to me
did you open a support ticket with your issue first or did you bitch on the board first.Comment
-
-
You mean I should communicate like this?Originally posted by UnifiedStats_John...rather how you communicate with your paying customers and people in general...
Originally posted by UnifiedStats_John... piece of shit ... shit storm ... utter fucking asshole ... asshole ... shithead...
What did I say that wasn't true? I pointed out that only people that use the same password for unifiedstats and other systems were affected. I also pointed out that only people that actually clicked the links were affected. Is this correct or not?Originally posted by UnifiedStats_JohnAgain, you have made an attempt to make US out for something we are not...
BTW not all affiliate programs are run by honest people and I definitely wouldn't like it if my username and password showed up in the referrer logs of any site. We both know that many people use the same password for many systems. Also, some sites don't have their stats password protected, so anybody can access them.Comment
-
You really are an asshole huh?Originally posted by J BYou mean I should communicate like this?
What did I say that wasn't true? I pointed out that only people that use the same password for unifiedstats and other systems were affected. I also pointed out that only people that actually clicked the links were affected. Is this correct or not?
BTW not all affiliate programs are run by honest people and I definitely wouldn't like it if my username and password showed up in the referrer logs of any site. We both know that many people use the same password for many systems. Also, some sites don't have their stats password protected, so anybody can access them.
Comment
-
That's pretty much what makes JB an assclown imho.Originally posted by Alvaroi started using unified stats and its really great
thanks john for this really great free product
thanks JB for pointing it out to me
Unified Stats is the fucking bomb...Comment
-
You are pathetic JB and just don't know when to stop talking...Originally posted by J BYou mean I should communicate like this?
You jumped in other threads of mine and acted like a child like this before and I didn't stoop to your level as I'm not here to have messageboard fights with people like you and I didn't feel you were directly affecting my reputation with your rants...
but in this case, I have to call you out for what you are because it is so painfully obvious what you are trying to do here (it was your only intention and to elude to anything else is ridiculous)
and apparently it has no effect on you the fact that everyone in this thread agrees with me, yet you just keep acting like a kid
I wont keep repeating myself to help keep your drama going...listen to everyone else here if you don't want to listen to me...Originally posted by J BWhat did I say that wasn't true? I pointed out that only people that use the same password for unifiedstats and other systems were affected. I also pointed out that only people that actually clicked the links were affected. Is this correct or not?
BTW not all affiliate programs are run by honest people and I definitely wouldn't like it if my username and password showed up in the referrer logs of any site. We both know that many people use the same password for many systems. Also, some sites don't have their stats password protected, so anybody can access them.Comment
-
I never jumped in any threads of yours. The thread you're talking about had 'StatsRemote' in the subject. That was the only time I was talking about unifiedstats before today.Originally posted by UnifiedStats_JohnYou jumped in other threads of mine and acted like a child like this before and I didn't stoop to your level as I'm not here to have messageboard fights with people like you and I didn't feel you were directly affecting my reputation with your rants...Comment
-
And you only mentioned it today because you were looking out for your fellow webmasters.Originally posted by J BI never jumped in any threads of yours. The thread you're talking about had 'StatsRemote' in the subject. That was the only time I was talking about unifiedstats before today.
Sure.
Comment
-
Thanks Alvaro...glad to have you on boardOriginally posted by Alvaroi started using unified stats and its really great
thanks john for this really great free product
thanks JB for pointing it out to me
The sad thing here is JB just can't grasp this concept...maybe it does make him feel better to act like this, but in the end it only paints a bad picture of himself and his company...and helps UnifiedStats grow...
As I've said before in threads you felt the need to jump in like this...it's time to let it go JB...have some dignity man...Comment
-
Because Sly nothing was really exposed. Basically it's something like this.Originally posted by SlyI really don't understand how none of you are at least just a little bit upset that there was/is a problem with exposed passwords? Your passwords don't matter at all to you? What other problems might US have?
You log into unified stats members area to download the program and the url looks like this.
username:[email protected]/members/
Now you click the link to boobdollars from within the members area.
If boobdollars looks through his referral logs he's going to see this url
username:[email protected]/members/...as a referrer.
So now he knows someone's username and password to unified stats.
He doesn't know your user/pass for any programs or any other sites, just that he can log into unified stats and look around with your username/password.
WOW, what a security flaw
What I find hilarious is that JB has had months to try and pick apart unified stats and this was the best he could do. Fucking pathetic.
I've got half a mind to cancel my stats remote subscription and go with unified.sig too bigComment
-
Well let's look at a different scenario then. Who's to say John didn't add someone to the splash page that would use the information dishonestly? Not that John would know they were dishonest, but that would be the worse part about it. The fact that your username and password are being transmited (or were) is the problem. You never know who has access to what, and this thread was simply put up for those that use the same username/password for other things... if any.Originally posted by Lenny2Because Sly nothing was really exposed. Basically it's something like this.
You log into unified stats members area to download the program and the url looks like this.
username:[email protected]/members/
Now you click the link to boobdollars from within the members area.
If boobdollars looks through his referral logs he's going to see this url
username:[email protected]/members/...as a referrer.
So now he knows someone's username and password to unified stats.
He doesn't know your user/pass for any programs or any other sites, just that he can log into unified stats and look around with your username/password.
WOW, what a security flaw
What I find hilarious is that JB has had months to try and pick apart unified stats and this was the best he could do. Fucking pathetic.
I've got half a mind to cancel my stats remote subscription and go with unified.
Last edited by jwerd; 07-30-2005, 09:29 PM.Yii Framework Guru - Seasoned PHP vet - Partner @ XXXCoupon.comComment
-
It's a free program. He put his affiliate ID on the links in case people aren't yet members of those programs so he could earn an extra little coin. Your accusation and 'advisory' is completely garbage. If you sign up for an affiliate program, and you are signed up with other affiliate programs -- YOU BETTER CHANGE YOUR PASSWORDS!! Haha, fuck man. that's not even a good attempt. Or how about TGP's and partner accounts w/ known references?
You want to save your business, great. But you've got an obsticle infront of you and it's not going to be as easy as making up some kind of lame security advisory which is totally irrelevant. You have two options: cut your losses, or buy out your competition.Comment
-
Also, any webmaster forum you sign up to.. The administrators can get your password. And it wouldn't be that hard for them to find out what programs you are promoting, what your epassporte is, etc. Simply because a tool has a link with a ref code, which "MAY" share your username in the statistics, should be the last last of your worries!Originally posted by sickbeatzIt's a free program. He put his affiliate ID on the links in case people aren't yet members of those programs so he could earn an extra little coin. Your accusation and 'advisory' is completely garbage. If you sign up for an affiliate program, and you are signed up with other affiliate programs -- YOU BETTER CHANGE YOUR PASSWORDS!! Haha, fuck man. that's not even a good attempt. Or how about TGP's and partner accounts w/ known references?
You want to save your business, great. But you've got an obsticle infront of you and it's not going to be as easy as making up some kind of lame security advisory which is totally irrelevant. You have two options: cut your losses, or buy out your competition.Comment
-
You get what you pay for...
Thanx for the heads up J B.
Oh and John... this attitude and the namecalling just made you look quite unprofessional to be honest.
Maybe part of the reason UnifiedStats didnt work as a paid service?!
More power to you J B, as always professional manners and attitude.
What people fail to see is that a stats-program handles a lot of sensitive data and personally I would never trust this data to any free program out there especially if the owner had such an attitude and made so obvious mistakes as transmitting sensitive data (username & password) via unsecured links.
Just my
SteveFacilitation - BizDev - Traffic - Consulting - Marketing
Skype: jokerempire | Silent Circle: joker
Comment
-
lol all your anti unified stats arguments are a joke.
IF A PROGRAM WANTED YOUR PASSWORD IT WOULD TAKE 20 SECONDS TO CODE IN SO WHEN YOU LOGGED IN THEY WOULD HAVE IT AUTOMATICALLY.
this isn't the only way some program could ever get your login info.Comment
-
I'll say it again Steve, I'm as honest as they come and I called it as I saw it...and it's quite obvious it's the majority opinion in this thread...even his own clients agreed with me on his complete lack of taste for a post like this...Originally posted by JOKEREMPIREYou get what you pay for...
Thanx for the heads up J B.
Oh and John... this attitude and the namecalling just made you look quite unprofessional to be honest.
Maybe part of the reason UnifiedStats didnt work as a paid service?!
More power to you J B, as always professional manners and attitude.
What people fail to see is that a stats-program handles a lot of sensitive data and personally I would never trust this data to any free program out there especially if the owner had such an attitude and made so obvious mistakes as transmitting sensitive data (username & password) via unsecured links.
Just my
Steve
You have mispoken above in your description of what is occuring...but of course that was his objective in making this post...but to clear it up for others, what happened only affected a tiny percentage of any traffic occuring from the website...and it posed no greater risk than any other general use of the net and has been detailed repeatedly above by many different people (and it only involved the unifiedstats username)...the risk didn't need to be on that page, and the issue was immediately corrected...
How you can find any class and professionalism in the antics he's resorted to is beyond me...Comment
-
Competition is healthy and we will all benefit from this, US and SR will try their best to get webmasters to use their products, so as webmasters we will benefit. I use US personally. Peace
Comment
-
This is pretty low. I would think JB would have a little more business ethic then to just post some stupid mistake in US that isn't really that big of a leak. I mean common it wasn't that big of a hole imo. I can't really understand why a sponsor would actually want the login for US. Wouldn't give them anything unless you used the same password for all your sponsors (which is kind of stupid) and they would have to go through a bunch of programs etc to check it...then what they can see your stats?? big whoopComment
-
JB is scared of competition again. I think it isn't fair from him to start this thread
I am still looking for new mature trades. Let's tradeComment
-
I got a general idea of what happen but not fully following..it's a little early here. If your user/pass is compromised in the logs, couldn't a sponsor use your info to log into your unified stats area (as you) and see how much you make from your various sponsors?HomemadeVideoPass.com - High converting Homemade mega site!
StolenPornVideos.com - The hottest site on the web converting like crazy!
ReelPass.com - Offer your surfers 15+ exclusive movie sites for one low priceComment
-
no, the username and password is for the website only (for the message board and support area) and none of your info/data ect is stored there...all of your program passwords are stored encryped on your computer along with your stats...Originally posted by onlymoviesI got a general idea of what happen but not fully following..it's a little early here. If your user/pass is compromised in the logs, couldn't a sponsor use your info to log into your unified stats area (as you) and see how much you make from your various sponsors?Comment
-
^^^^^^ did this idiot even bother to read the thread?Originally posted by JOKEREMPIREYou get what you pay for...
Thanx for the heads up J B.
Oh and John... this attitude and the namecalling just made you look quite unprofessional to be honest.
Maybe part of the reason UnifiedStats didnt work as a paid service?!
More power to you J B, as always professional manners and attitude.
What people fail to see is that a stats-program handles a lot of sensitive data and personally I would never trust this data to any free program out there especially if the owner had such an attitude and made so obvious mistakes as transmitting sensitive data (username & password) via unsecured links.
Just my
SteveComment
-
He actualy treats his customers like that.....shiiiittOriginally posted by UnifiedStats_JohnPosted: Wed Dec 29, 2004 2:58 am Post subject: CCBill... complaints... insults
--------------------------------------------------------------------------------
We just released an update and CCBill and other programs are working again.
Just a few comments...
1.) If you think we're lazy (like some people posted) please cancel your subscription and check your stats manually again... or write your own stats checking software.
2.) If it's unacceptable for you to wait one week for an update (whether it's Christmas or not) I'm afraid you need to cancel your subscription as well. We usually release updates bi-weekly and if something is urgent they are released faster... like this time.
Flame away
nasty
Comment
-
something tells me you didn't even bothered reading the threadOriginally posted by JOKEREMPIREYou get what you pay for...
Thanx for the heads up J B.
Oh and John... this attitude and the namecalling just made you look quite unprofessional to be honest.
Maybe part of the reason UnifiedStats didnt work as a paid service?!
More power to you J B, as always professional manners and attitude.
What people fail to see is that a stats-program handles a lot of sensitive data and personally I would never trust this data to any free program out there especially if the owner had such an attitude and made so obvious mistakes as transmitting sensitive data (username & password) via unsecured links.
Just my
Steve
Comment








Comment