Is security on your list of 'things to do'? - GoFuckYourself.com

Project-Shadow · 08-25-2004, 02:45 PM

A business thread [shock horror]

When you create a new site [paysite] what do you put on your list of things to do?

Content, Promotion, how will it affect your current sites etc.

How many of you honestly put security up there with making money off your sites?

Just to proove a point, post your site and odds are at least 1 working pass will be floating around on google.

Try me.

Platinumpimp · 08-25-2004, 02:46 PM

this should be good

Downtime · 08-25-2004, 02:53 PM

TweetyBird · 08-25-2004, 02:54 PM

Quote:

Originally posted by Project-Shadow

Try me.

lol

psili · 08-25-2004, 02:58 PM

We use session based authentication and I'm not saying our site and content is 100% secure, I do get users who write in asking for their passwords to be changed because they were dumb enough to share them and can't login because their buddies are using up their available sessions.

Even if a user is fucking around with a query string, I try and limit the script errors from bad data coming in via POST or GET, if not only to feel safer, but also to keep from looking stupid when someone can see you have a "parse error on line 20 of ....".

Granted, 100% of problems aren't caught either, but it's always in the back of the head to prevent / limit.

Platinumpimp · 08-25-2004, 02:59 PM

nobody got the balls to post their site?

Project-Shadow · 08-25-2004, 03:01 PM

Quote:

Originally posted by psili
We use session based authentication and I'm not saying our site and content is 100% secure, I do get users who write in asking for their passwords to be changed because they were dumb enough to share them and can't login because their buddies are using up their available sessions.

So you don't feel that this is grounds for termination of an account? If its a member that rebills, then sure maybe you could cut some slack, but someone who signs up then shares their pass.. i'd terminate, praying they don't chargeback

psili · 08-25-2004, 03:02 PM

Quote:

Originally posted by PlatinumPimp
nobody got the balls to post their site?

http://www.ten.com/

European Lee · 08-25-2004, 03:03 PM

http://www.dilf.com

Regards,

Lee

psili · 08-25-2004, 03:04 PM

Quote:

Originally posted by Project-Shadow
So you don't feel that this is grounds for termination of an account? If its a member that rebills, then sure maybe you could cut some slack, but someone who signs up then shares their pass.. i'd terminate, praying they don't chargeback

I've never had a user ask twice to change their account password. They feel stupid enough because they can't jerk off. But yea, I guess we could be more "strict" in enforcement.

KRosh · 08-25-2004, 03:05 PM

Quote:

Originally posted by Project-Shadow
A business thread [shock horror]

When you create a new site [paysite] what do you put on your list of things to do?

Content, Promotion, how will it affect your current sites etc.

How many of you honestly put security up there with making money off your sites?

Just to proove a point, post your site and odds are at least 1 working pass will be floating around on google.

Try me.

www.nuttedon.com

psili · 08-25-2004, 03:06 PM

Quote:

Originally posted by psili
http://www.ten.com/

Yo, I'm out for the night. If anyone can hack the site please be kind and wait to do it tomorrow morning so I don't get a page at 2am

otherwise, good topic.

Project-Shadow · 08-25-2004, 03:10 PM

Psili, before you dash, I'd like to say that I have found a list, which was posted yesterday, but none of the passes work. So you've got something working there.

raymor · 08-25-2004, 11:01 PM

Quote:

psili
http://www.ten.com/

My spider found some passwords for ten.com a while back.
I think about security everyday, but then that's because
I'm in the business of securing your sites.

08-25-2004, 02:45 PM	#1
Project-Shadow Confirmed User Industry Role: Join Date: Feb 2003 Posts: 7,340	Is security on your list of 'things to do'? A business thread [shock horror] When you create a new site [paysite] what do you put on your list of things to do? Content, Promotion, how will it affect your current sites etc. How many of you honestly put security up there with making money off your sites? Just to proove a point, post your site and odds are at least 1 working pass will be floating around on google. Try me.

08-25-2004, 02:46 PM	#2
Platinumpimp Logos and such. Industry Role: Join Date: Jan 2004 Location: Kingdom of the Netherlands Posts: 10,214	this should be good __________________ I design logo's.

08-25-2004, 02:53 PM	#3
Downtime Confirmed User Industry Role: Join Date: May 2004 Location: America. Posts: 7,320	bump __________________ #27024067

08-25-2004, 02:58 PM	#5
psili Confirmed User Join Date: Apr 2003 Location: Loveland, CO Posts: 5,526	We use session based authentication and I'm not saying our site and content is 100% secure, I do get users who write in asking for their passwords to be changed because they were dumb enough to share them and can't login because their buddies are using up their available sessions. Even if a user is fucking around with a query string, I try and limit the script errors from bad data coming in via POST or GET, if not only to feel safer, but also to keep from looking stupid when someone can see you have a "parse error on line 20 of ....". Granted, 100% of problems aren't caught either, but it's always in the back of the head to prevent / limit. __________________ Your post count means nothing.

08-25-2004, 02:59 PM	#6
Platinumpimp Logos and such. Industry Role: Join Date: Jan 2004 Location: Kingdom of the Netherlands Posts: 10,214	nobody got the balls to post their site? __________________ I design logo's.

08-25-2004, 03:03 PM	#9
European Lee Confirmed User Join Date: Dec 2002 Location: Daytona Beach Posts: 7,133	http://www.dilf.com Regards, Lee __________________ YOUR TRAFFIC IS SAFE WITH US - CONDOM CASH PUTTING THE GAY ADULT INDUSTRY ON YOUR PC!! AFFORDABLE 2257 COMPLIANT GAY + BI CONTENT

08-25-2004, 03:10 PM	#13
Project-Shadow Confirmed User Industry Role: Join Date: Feb 2003 Posts: 7,340	Psili, before you dash, I'd like to say that I have found a list, which was posted yesterday, but none of the passes work. So you've got something working there.