Did DP send anything to their affiliates letting them know the site isn't taking signups?

bad luck has a tendancy to hit everyone at some point. Getting people to use their credit cards online was tough enough without this kinda shit scaring them.

We will absolutely cover any loss in joins to match any webmasters daily average over the past few months.

Please get in touch with me and shortly as the site is back up ; we will add any missing revenues.

Thank you

As a software developer this is some thing I cant understand. This is not unique to DP, I think the hack into Sony gaming network also found people storing PW / CC info in clear. It takes 1 line of code to do a MD5 hash.

How would you re-bill if it was hashed irreversibly ? :P
I agree it should not be cleartext, but if they're rebilling or something similar, it has to be reversible.

Neeko ... I'm more concerned about the 85 affiliate accounts that here hacked/acquired/whatever ... what can you tell us about that? Will you/have you contacted the affected affiliates to at least let them know their affiliate accounts were compromised?

funny thing i wanted to signup to digital playground site the other day to check out their content, glad i didn't now

Fuck no, I have to come here to find out wtf happened. Only noticed now that my links have been going nowhere.

It should be AES. Just dont store the key in the PHP file which I have seen more then once :-)

I see the affiliate site is back up, but apparently they changed all the login passwords .. which makes sense .. still no official notice from Manwin/DP to affiliates about what's going on and what to expect though ...

also to rebill you definitely do not need to store the cvv2, billing address, etc. all that you need is the # and expiration date.

Lightning doesn't strike in the same place twice. And for sure not 3 times in a short period of time.

Either Manwin have seriously pissed someone, with the ability to hack into their servers, or they have a mole. No not the little cute furry kind.

What ever the lack of damage control and limitation here is something you would expect of me. After they were hacked the first time, alarm bells should of been ringing, second time someone needs to get it fixed ASAP.

If it happens again????????????????

Do you need an answer or was it a rhetorical question?

It was the talk of the day in Barcelona. Hope they can fix it, Digital Playground is a nice brand

Freeones affiliate u/p was in that list.

what really sucks for them I suppose is that they pretty much lost all of their rebills.

considering everyone that has their cc info stolen will need to cancel their cards and I can't imagine most people signing back up

since they own 95% of the porn industry of course most hack attacks are going to hit them.

since you are a moron so you can't understand that.

so where is megaupload link to the full dump? :)

Read this elsewhere:

http://www.trekp.com/posters/gw210-disgruntled.jpg

A possible good old fashioned disgruntled employee revenge motive for the leak(?)...hmmm - wouldn't be the first time.

ADG

yeah, been in contact with manwin already about it.

Hey Firequartz,

The email went out. In a nutshell ; all passwords have been reset. Please use the 'forgot password' to receive the new pass and get in and adjust your account.Other than that, we will compensate all affiliates for lost revenue taking daily average earnings over the past 2 months.

If there are any questions about this or anything else ; please contact me directly. I am always available via email around the clock.

Looking into the future : Some amazing tools for all affiliates coming up! Your DP revenue will explode in the near future :thumbsup

Thanks!

http://static.techspot.com/images/te...er_hacking.jpg

Over 40,000 people will have to cancel their credit cards and manually re-sign up? :helpme :Oh crap

How many people will sign up again with a company that caused their data to be compromised in the first place?

ADG

Neeko .. I haven't received an email .. and yes I checked my junk mail filters ...

and I see it's down again anyway ...

http://zone-h.org/mirror/id/17184557

btw check for freeones in this page

yup some gfy'ers on there.

they should audit the security of their other websites before it is too late...

Thanks for posting so we can check if our passwords were released pornmasta.

I have yet to see any evidence that CC data were compromised.

"72,000 customers" >> how many hits to send to get this amount of customers ???

So http://www.alexa.com/siteinfo/digitalplayground.com#
page rank = 23935
So it makes something like 100000 visitors per day.

"72,000 customers" <<<

I don't promote digitalplayground, but let's say that their conversion ratio is 1/1000 (that's pretty good).
I means that it would make 100 new sales per day ???

720 days to reach it ?
I don't think that the average member stays 720 days.
So they have to store CC numbers of old customers in their servers ? (stored in clear text !)

Something is wrong in this story...

and they need to be their own billing processor... (that's probably wrong)

So i guess they have been hacked long time ago....

way off.

Reminds me of your Media Revenue "investigation"... :1orglaugh :winkwink:

http://chzmemebase.files.wordpress.c...et-grandma.jpg

Have you ever thought that maybe you're just not cut out for investigative journalism... :upsidedow

the current page rank of one of my website is 19000... something.
And i make 90 000- 110 000 visitors per day :winkwink:

"one of the five biggest porn sites"

>>

probably not in term of traffic (twistys and digitaldesire are far bigger)

so let's take 5 big websites:

naughtyamerica.com paysite, alexa rank 2081
brazzers.com 1043
realitykings.com 1750
twistys.com 3011
digitaldesire.com 6663

virtuagirl.com 10350

Digital Playground.com 23935

not even close to the top 5. http://www.alexa-xxx.com/

Go fuck yourself

and they list only paysites...

I didnt claim to be a journalist. Aside U/P all we have seen is a statement by the hackers that wanted to protect the members of the site by not releasing any CC info.

At the same time the release of U/P allowed hackers to abuse such data and login to email and social media accounts. Their agenda is spamming, phishing and identity thieft. Its your choice to believe with no skepticism what they write.

and what's happen if the website has been hacked before by other hackers ? (it would explain why CC numbers are stored in clear text )

Regarding mediarevenue, we posted an update last month. Maybe the next one will be a news story. I don't understand why the repeated irony from your side. We turned down a six figures adveriser, we spent the time to collect info and we connected with the right authorities. If you feel we did poorly job you are free to do something yourself.

DP is using reputable, 3rd party billing providers that do not give you access to such billing info. Even when you are using your own merchant account, your gateway provider doesnt give you such access.

so they have been hacked before... (don't tell me that it is not possible)

(and these 2nd hackers are perhaps good guys)

what is free ?

Thats crazy. Per visa rule you can't store that shit on your servers.

Theo

I have a couple of things that are bothering me about this...one is that the hackers did post partial cc numbers and ccv codes, names addy etc.

But the biggest one that bothers me is that I was contacted by someone in IT who resigned because of what Manwin was doing. Flat out said he wont go to jail for manwin. Sour grapes...could be but theres enough history to make me wonder.

obviously I havent vetted this enough to make it a post but as someone else here said the problem with being a shitbag is everyone always thinks you are up to no good

An md5 hash won't slow a cracker down much, the GPU in a modern video card can crack an md5'd password relatively easily. You can even crack common passwords by searching for the md5 value on google.

http://www.google.com/search?hl=en&s...f2&btnG=Search

as a programmer, i can tell you that you can salt your hashes....

http://en.wikipedia.org/wiki/Salt_(cryptography)

You can still find entries with common passwords by brute forcing every possible salt combination (rather than every possible password combination)

A better way is to make a single password computationally expensive to crack, for example hashing it 10,000 times with an algorithm to change the salt each time. Even if the method used to generate the hash is known (say, by inspecting the code used to authenticate logins) you've made the cracker's job 10,000 times harder.

And some of you morons thought by a couple people getting busted that Anonmous was done... Guess again LMFO!