Pennywize type solutions

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • rock-reed
    Confirmed User
    • May 2005
    • 1892

    #1

    Pennywize type solutions

    Hello everyone...

    We know that Pennywize/Trafficwize is an industry solution for protecting your sites.

    But was wondering... Are there any other good options?

    Thank you for all that reply.
    ---
    Ethnic niche? Black-Asian-Latina ?
    Contact me and lets talk traffic.

    rockreed@ that thing they call the google mail

    When you E-mail Me, PLZZZZ make the Subject Title:

    >>>>>> GFY!

    So I do not lose you in Spam.
  • Jace
    FBOP Class Of 2013
    • Jan 2004
    • 35562

    #2
    Strongboxxx man...the ONLY way to go

    How does the Strongbox security systemtm compare to PennyWize?
    First off, the Strongbox security systemtm isn't really directly compareable to PennyWize or anything else out there that I know of. To explain why, I have to get a little technical. Before I do, let me point out that with the Strongbox security systemtm there is no monthly fee and no reliance on someone elses server for your protection. Pennywize is an old solution to an old problem. The script kiddies, real hackers, and just plain password sites figured out how to beat PennyWize around 1999-2000. As more and more password sites and software did their end runs around PennyWize, we began developing the Strongbox security systemtm as the next generation in security. Now for the technical part: Pennywize and similar services are needed because most web sites today use something called "Basic Authentication", which is implemented in a part of Apache called "mod_auth". This "Basic Authentication" is the system where the gray box pops up asking for your username and password. When the designers of mod_auth first released the design for that system, they were very careful to point out that it was not intended to be secure. It was intended to be a very basic system that could be used to put a password on your stats page until something better was designed. One major weakness is that Basic Authentication - the pop up gray box - does not distinguish between the two main phases that you learn about in security 101. The first day of a computer security course you'll hear about the two phases of "authentication", making sure the user is who they say they are, and "authorization", checking if they are allowed to access this particular page, etc. The authentication phase is when they login, the authorization happens every time they view a page or image. With basic auth, they never login. Their username and password is sent by the browser every time it requests a page or image. Because they never actually login, you never get to thoroughly check them out. For example, the Strongbox security systemtm can analyze which countries login requests are coming from, something that the monthly fee services cannot do because of the hit-by-hit analysis their old fashioned approach requires. There are a lot of other problems too, like the fact that the whole thing is based on a very short password that can be shared. Pennywize and similar programs try to tape up the holes in basic auth. That's a very tall order, because basic auth is built like a chain link fence - way too many holes to try to keep taped up. PennyWize and similar programs end up working like a burglar alarm inside the fence - trying to detect an intruder after they get in and then trying to deal with them after it's too late. the Strongbox security systemtm, on the other hand, gets rid of the whole "basic authentication" fence and puts up a thick brick wall instead. It doesn't tape up any holes, because it throws that fence full of holes in the trash pile behind the woodshed and puts in it's own far superior system. PennyWize and similar systems are also easily defeated by proxy based attacks. See the above question about proxies.
    http://www.bettercgi.com/strongbox/index.html

    Comment

    • Tat2Jr
      Confirmed User
      • Feb 2001
      • 4882

      #3
      What Jace said.... strongbox is the best.... hand's down. And Ray rocks the support like no other.

      Pennywize is the same as putting up a hand written note asking them to not enter if they haven't paid compaired to strongbox.

      http://www.bettercgi.com/strongbox/index.html
      NICHE MONEY >> Ass WorshipPantiesSolo TeenPantyhose
      Serving up exclusive fetish sites since 1997!

      Comment

      • Jakke PNG
        ex-TeenGodFather
        • Nov 2001
        • 20306

        #4
        Yeah, we also use strongbox, and it's a kick-ass software.
        ..and I'm off.

        Comment

        • rock-reed
          Confirmed User
          • May 2005
          • 1892

          #5
          Jace,
          and the guys...

          Thank you so much for opening our eyes to new options!


          Kind regards!
          And thanks AGAIN!
          ---
          Ethnic niche? Black-Asian-Latina ?
          Contact me and lets talk traffic.

          rockreed@ that thing they call the google mail

          When you E-mail Me, PLZZZZ make the Subject Title:

          >>>>>> GFY!

          So I do not lose you in Spam.

          Comment

          • breaker
            Confirmed User
            • Oct 2003
            • 652

            #6
            I switched from Pennywize to ProxyPass. Great support!
            Cash Breaker
            Latinas Deliciosas Blonde Loves Black She's Fuckable Fresh Blowjobs
            ICQ: 147104800

            Comment

            • Shoehorn!
              Die With Your Boots On
              • Oct 2003
              • 22872

              #7
              Originally posted by Jace
              Strongboxxx man...the ONLY way to go



              http://www.bettercgi.com/strongbox/index.html
              I agree.

              Comment

              Working...