![]() |
![]() |
![]() |
||||
Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. |
![]() ![]() |
|
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. |
|
Thread Tools |
![]() |
#1 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
![]() Many years ago we found that leaving emails in Affiliate Programs un-encrypted to be a real hazard. A program using MPA3 was hacked via another script placed on the MPA3 server of the client, and as a result their db got accessed.
The hackers wanted the email lists of both the affiliates as well as the members who had joined their paysites ? and the result was obvious. To avoid such abuse, in case of a potential hacking incident, we have a firm belief that your email lists inside of the program/db MUST be encrypted. It is only in this way you can protect both your affiliates as well as your members from being exploited. As an affiliate you should check to see if the program you are promoting is using MPA3. This is not always obvious, as MPA3 programs have the ability to look different from program to program, so be sure to ask the affiliate rep. if they are using MPA3. And if not ? tell them that they should do it to protect yourself and the members you send the programs way. Anyone/program owners that wants the strongest encryption possible can request private/public key encryption for the emails. We highly recommend it. It is not just you, the affiliate, that is affected ? it is also the members you have worked so hard to get to sign up for the program you are promoting. If the hard earned members you get to sign up for a program is spammed after signing up ? rest assured that they will be even harder to get to sign up for another site again later. So to summarize ? MPA3 has for many years encrypted the emails stored within an affiliate program to best protect the program owners from loss in the event of a security breach. ![]() ![]()
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#2 |
Confirmed User
Industry Role:
Join Date: Apr 2003
Location: knee deep in dirty diapers
Posts: 1,960
|
lol, very timely!
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#3 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Timely? I would say it has always been timely, and necessary.
![]()
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#4 |
BACON BACON BACON
Industry Role:
Join Date: Nov 2002
Location: Poems everybody, the laddie fancies himself a poet
Posts: 35,457
|
I see what you did here
![]() |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#5 |
Confirmed User
Industry Role:
Join Date: Jul 2008
Location: In your back seat with duck tape
Posts: 4,568
|
well wheres the list of programs?
__________________
High Performance Vps $10 Linode Manage your Digital Ocean, Linode, or Favorite Cloud Server. Simple, fast, and secure Server Pilot |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#6 |
Confirmed User
Industry Role:
Join Date: Oct 2011
Location: Munich
Posts: 411
|
I was just waiting for this.
__________________
http://kazymjir.com/ |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#7 |
Confirmed User
Industry Role:
Join Date: Nov 2002
Location: San Francisco
Posts: 5,653
|
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#8 |
Confirmed User
Industry Role:
Join Date: Oct 2011
Location: Munich
Posts: 411
|
x3
![]()
__________________
http://kazymjir.com/ |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#9 |
working on my tan
Industry Role:
Join Date: Mar 2005
Location: Florida/Kentucky
Posts: 39,151
|
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#10 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
If You are a program owner OR an affiliate - Email me to get first looks at the all new MPA3 V5 demo.
Demo will otherwise be publicly available shortly :-) |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#11 |
Confirmed User
Industry Role:
Join Date: Sep 2002
Location: In a land FAR FAR away
Posts: 3,726
|
Very Nicely done.
Definitely an important feature. |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#12 |
Marketing & Strategy
Industry Role:
Join Date: Jun 2001
Location: Former nomad
Posts: 14,293
|
Vultures. Fucking vultures, I tell you.
![]()
__________________
Whitehat is for chumps If you don't do it, somebody else will - true story!
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#13 |
Confirmed User
Industry Role:
Join Date: Feb 2010
Posts: 655
|
wow,justy wow!
![]() |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#14 |
Damn Right I Kiss Ass!
Industry Role:
Join Date: Dec 2003
Location: Cowtown, USA
Posts: 32,409
|
striking while the iron is hot
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#15 |
Confirmed User
Industry Role:
Join Date: May 2012
Posts: 124
|
everyone is now safe
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#16 |
( ͡ʘ╭͜ʖ╮͡ʘ)
Industry Role:
Join Date: Mar 2004
Posts: 20,010
|
OY is no fucking joke.
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#17 |
Porn Pusher
Industry Role:
Join Date: Jul 2007
Location: It's a dry heat
Posts: 13,341
|
Is there a confirmed security issue inside NATS?
or is this the work of some rogue employee(s)?
__________________
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#18 |
Confirmed User
Industry Role:
Join Date: May 2012
Posts: 124
|
i think nats4 encrypts emails, old nats i don't think does. the servers who's emails were compromised were probably hacked through 1 of 1000 different ways and there's many others that have probably been hacked and dont even know it and encrypting emails doesn't mean anything
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#19 | |
( ͡ʘ╭͜ʖ╮͡ʘ)
Industry Role:
Join Date: Mar 2004
Posts: 20,010
|
Quote:
![]() |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#20 | |
Leaner, Meaner, Faster
Industry Role:
Join Date: Aug 2002
Location: Vegas
Posts: 20,959
|
Quote:
My guess would be that WTF didn't hack anything. They probably just bought an email list. I get offers to buy different program's email list at least a couple of times a month. EVERYTHING is for sale. ![]() But anyway...a good hosting company would have already made sure your NATS database is secure. A few simple steps to lock it down against "average" hacking. (nothing will stop a good hacker of course...nothing) |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#21 | |
Confirmed User
Industry Role:
Join Date: May 2012
Posts: 124
|
Quote:
you typically can't rely on hosts but some do a better job than others, but when there's a will there's a way |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#22 | |
Leaner, Meaner, Faster
Industry Role:
Join Date: Aug 2002
Location: Vegas
Posts: 20,959
|
Quote:
Nobody wants a box hacked inside their network. It opens up the whole network to a possible problem. Bottom line is it's up to you to get in touch with your hosting company and do everything you can to tighten up security and close any backdoors that might be open. But again...most email lists are for sale by the program owners anyway. That used to be kinda valuable. These days? Not so much. Everybody knows the handful of affiliates left with any traffic and ability to send sales. The tens of thousands of others are practically useless. lol Hell, I used to be able to send a lot of traffic and sales. Spam me these days and get my info and I sign up...it ain't a big deal. ![]() ![]() ![]() Who really knows what the real story is. As I said, why go to the trouble of hacking when you can just buy the damn list for cheap. And even then, it isn't worth much. Is Freeones an affiliate? Check. Are you working social networks? Check. Viral marketing. Check. That pretty much covers it in 2012 unfortunately for paysite owners. ![]() |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#23 | |
Confirmed User
Industry Role:
Join Date: May 2012
Posts: 124
|
Quote:
|
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#24 | |
Leaner, Meaner, Faster
Industry Role:
Join Date: Aug 2002
Location: Vegas
Posts: 20,959
|
Quote:
I've had tons of discussions with Bill at Phantom Frog, my own guy who works for me, and the guys at Choopa (where I host). And we've implemented many, many security things that are helpful. I've never been offered any other kind of data for sale other than emails. There isn't any credit card info that you can get (because it is never in your database to begin with). And as I was saying earlier...the emails just aren't valuable anymore (affiliate emails that is...member emails are still valuable of course). Hell, 99.9% of the people getting spammed on GFY can't send any sales or traffic anymore if they wanted to thanks to what piracy has done to the business of selling paysite memberships. ![]() But buying and selling data has always been done anyway. I remember about 10 years ago I had first bought my subscription to "Spam Arrest" because I was getting thousands of emails a day to sell me viagra and diamonds, etc. I was at the Sands Expo Center for Internext that year and told a program owner that I had just gotten Spam Arrest and how good it worked. He laughed and told me that his company had been offered their mailing list and the ability to be put on a permanent "safe" list so that their spam mails would always go through to everybody irregardless of their Spam Arrest settings. lol I had no idea that kind of thing happened. But it was educational to me for sure. |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#25 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
"Anyone/program owners that wants the strongest encryption possible can request private/public key encryption for the emails. We highly recommend it."
I'll just quote myself here...
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#26 |
Confirmed User
Industry Role:
Join Date: May 2012
Posts: 124
|
I guess emails are really only valuable thing to webmasters, maybe competitor information also, depending on the business
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#27 | |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Quote:
![]()
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#28 |
Choice is an Illusion
Industry Role:
Join Date: Feb 2005
Location: Land of Obama
Posts: 42,635
|
![]() |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#29 |
So Fucking Banned
Industry Role:
Join Date: May 2012
Location: Brazil
Posts: 2,056
|
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#30 |
Confirmed User
Industry Role:
Join Date: Apr 2012
Posts: 168
|
Happy we changed over to MPA 4months ago
![]()
__________________
---------------------------- ![]() http://www.boinkcash.com Skype: Bulksolutions ICQ 303 164 941 Email brent at ptbmedia dot com |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#31 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Nice to have you guys. Always good to have companies like yours who are are doing serious business.
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#32 |
Confirmed IT Professional
Industry Role:
Join Date: Nov 2005
Location: Hollywood, CA
Posts: 3,744
|
I have to add my input being a security guy. Using a key on the same server which is hacked to encrypt anything still doesn't solve a thing. A knowledgeable attacker will still be able to get access. There is no such thing as full encryption using a single server.
![]()
__________________
The Best Affiliate Software, Ever. |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#33 |
Etology.com
Industry Role:
Join Date: Jul 2005
Location: Hollywood CA
Posts: 18,388
|
People eat spam in Hawaii. I think it tastes good
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#34 | |
Too lazy to set a custom title
Join Date: Mar 2002
Location: Australia
Posts: 17,393
|
Quote:
If a field needs to be de-encrypted for use "in the clear" on say a profile form or for mailing out a sales notification, there's going to be some code which does the decryption, along with a key, located on the server. May make it a little harder to retrieve the emails, but certainly not impossible. |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#35 | |
Leaner, Meaner, Faster
Industry Role:
Join Date: Aug 2002
Location: Vegas
Posts: 20,959
|
Quote:
Plus, as I said earlier...why bother hacking when most of that data is up for sale by a lot of program owners for the last 15 years or more? |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#36 |
So Fucking Lame
Industry Role:
Join Date: Jun 2009
Location: St. Petersburg, FL
Posts: 12,156
|
The only problem is:
1) too few use MPA 2) the ones that do that I've tried convert for shit. I'd trade spam for cash any day of the week. I blocked wtfbucks.com in SpamArrest and haven't seen an email since. |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#37 | |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Quote:
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#38 |
So Fucking Banned
Industry Role:
Join Date: Jun 2012
Posts: 422
|
Use a 2 razor on sides and back and a 4 on the top. I'll shave at home thank you.
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#39 |
...
Industry Role:
Join Date: Apr 2003
Posts: 2,280
|
NATS already released a security patch for Nats 3 today, and they told their clients to patch asap and to enable encryption
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#40 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Epitome - Tons of programs use MPA3, but you might not even know about is as it does not contain a "mpa3" tag in the linking codes, and you can choose to use any type of linking code you prefer. Secondly, I have no idea who you are and what you do - but your arbitrarily misleading and without proof comment about ratios, is laughable at best. Please stick to facts and not to gossip.
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#41 | ||
Confirmed User
Join Date: Nov 2005
Posts: 2,167
|
Quote:
Quote:
Have met only 1 hosting where that was the case, all other dont care about anything other then you hosting with them, and start to supposedly care when shit hits the fan and becomes public (eventho they knew about it prior to shit hitting the fan). Hypocrisy at it's finest.
__________________
agentGFY *at* gmail.com |
||
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#42 | |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Quote:
Question, is it an option in Nats4 or obligatory?
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#43 |
Leaner, Meaner, Faster
Industry Role:
Join Date: Aug 2002
Location: Vegas
Posts: 20,959
|
I have a question...a couple of years back we encrypted the emails on our SQL database.
We use PhantomFrog for password protection...it immediately could no longer work. Since it authenticates against the data base and checks for username and email in order to work...it fucked everything up. So we unencrypted it again (we only encrypted it at the urging of the NATS techs to begin with). Here is my question: How do you get around something like that if you have the emails encrypted? We do a lot of other things in our members area at Claudia Marie (member profiles, etc.) that also depend on username/email to authenticate (not to mention two different members areas, one for affiliate joins and one for type ins that also require that info). If a persons setup NEEDED to have the emails unencrypted...does MPA3 give them that option? |
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#44 |
Registered User
Industry Role:
Join Date: Jul 2003
Location: Encrypted. Access denied.
Posts: 31,779
|
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#45 | |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Quote:
But there is no need for that. Our integration with PhantomFrog is set so that they contact an MPA3 script to change the member's password, and MPA3 sends an email to the members notifying them that their password has changed, and providing them the new password. If public/private keys encryption is used, MPA3 can send a request to a server where the private key is, and this other server can send the email. Or we can queue the emails that need to be sent in the MPA3 db, and the server that has the private key can connect to the MPA3 db, decrypt the addresses, and send the queued emails.
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#46 |
Too lazy to set a custom title
Industry Role:
Join Date: Dec 2004
Location: Happy in the dark.
Posts: 93,506
|
I feel much better now ...
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#47 | |
Leaner, Meaner, Faster
Industry Role:
Join Date: Aug 2002
Location: Vegas
Posts: 20,959
|
Quote:
![]() |
|
![]() |
![]() ![]() ![]() ![]() ![]() |
![]() |
#48 |
Industry Pioneer
Industry Role:
Join Date: Oct 2002
Location: USA/EU/ASIA
Posts: 5,401
|
Thanks Robbie.
I will hit you up this week to show you the all new MPA3 V5 demo - I am sure you will like what you see. ![]()
__________________
Around since 1997, and the company that introduced "Cascading Billing" in MPA3® Affiliate Management and Tracking Software ![]() Outsourcing With A Norwegian Twist - NordBits - Inquire within! |
![]() |
![]() ![]() ![]() ![]() ![]() |