Questions regarding pennywize password protection. paysite owners pls reply - GoFuckYourself.com

Major (Tom) · 11-28-2004, 04:46 PM

Hi guys,

I'm just curious as to why passwords are shut off by pennywize. More specifically, how many of the passwords that get shut off are from legitamate users? I know that AOL dial up users are counted as a subnet each time they log in and they get shut off often. I know some are brute forced too. But some people swear up and down that they never traded their passwords when it gets disabled, and I reset a new one and in a few days, there it is again, shut off. Now this wasnt such a big deal when my sites were small, but now its a pain in the ass. 2-3 hours a day resetting passwords and mailing them to members. I was thinking that spyware could play a role in this. Do you think these members could be victims of spyware and are telling me the truth, or they are lying to me. Pls let me know.
Duke

basschick · 11-28-2004, 06:08 PM

i think they're lying, but i suggest you talk to pennywize support.

pretty much every user who told me he didn't do it, i found referring urls on password sites with his username and password listed. also many unique visits on my stats, which isn't just about subnet, i don't think.

Bigjohn · 11-28-2004, 06:23 PM

Just because the user didn't share it doesn't mean it wasn't compromised. Some users pick stupid, easy to guess, user names and passwords. Many often use the same user/pass for every site they join, so just because they didn't specifically give yours away, they may have given it away in the past for a different site.

I usually check the logs to see where the logins are coming from and make decisions on how to treat it. Also, if you KNOW you have an honest user AND they are a good rebilling customer, you can tell pennywise to ignore that username. It's not something I would recommend, but it's an option.

Major (Tom) · 11-28-2004, 06:27 PM

Thanks! good info
Duke

jawanda · 11-28-2004, 07:42 PM

great topic Duke. Anyone else have input?

-p

AaronM · 11-28-2004, 07:53 PM

basschick and Bigjohn covered it beautifully.

Major (Tom) · 11-28-2004, 08:02 PM

Quote:

Originally posted by AaronM
basschick and Bigjohn covered it beautifully.

They did, but i'm sure there is plenty more to be covered.

Duke

11-28-2004, 04:46 PM	#1
Major (Tom) White Pride Industry Role: Join Date: Nov 2003 Location: Null Posts: 30,983	Questions regarding pennywize password protection. paysite owners pls reply Hi guys, I'm just curious as to why passwords are shut off by pennywize. More specifically, how many of the passwords that get shut off are from legitamate users? I know that AOL dial up users are counted as a subnet each time they log in and they get shut off often. I know some are brute forced too. But some people swear up and down that they never traded their passwords when it gets disabled, and I reset a new one and in a few days, there it is again, shut off. Now this wasnt such a big deal when my sites were small, but now its a pain in the ass. 2-3 hours a day resetting passwords and mailing them to members. I was thinking that spyware could play a role in this. Do you think these members could be victims of spyware and are telling me the truth, or they are lying to me. Pls let me know. Duke __________________ WHITE LIVES MATTER

11-28-2004, 06:08 PM	#2
basschick Confirmed User Join Date: Jan 2001 Location: el lay, ca usa Posts: 2,540	i think they're lying, but i suggest you talk to pennywize support. pretty much every user who told me he didn't do it, i found referring urls on password sites with his username and password listed. also many unique visits on my stats, which isn't just about subnet, i don't think. __________________ Got Gay and For Women Traffic?

11-28-2004, 06:23 PM	#3
Bigjohn Confirmed User Join Date: Feb 2003 Location: Deep inside my mind Posts: 1,118	Just because the user didn't share it doesn't mean it wasn't compromised. Some users pick stupid, easy to guess, user names and passwords. Many often use the same user/pass for every site they join, so just because they didn't specifically give yours away, they may have given it away in the past for a different site. I usually check the logs to see where the logins are coming from and make decisions on how to treat it. Also, if you KNOW you have an honest user AND they are a good rebilling customer, you can tell pennywise to ignore that username. It's not something I would recommend, but it's an option. Last edited by Bigjohn; 11-28-2004 at 06:24 PM..

11-28-2004, 06:27 PM	#4
Major (Tom) White Pride Industry Role: Join Date: Nov 2003 Location: Null Posts: 30,983	Thanks! good info Duke __________________ WHITE LIVES MATTER

11-28-2004, 07:42 PM	#5
jawanda Confirmed User Join Date: Feb 2003 Posts: 6,040	great topic Duke. Anyone else have input? -p

11-28-2004, 07:53 PM	#6
AaronM Too lazy to set a custom title Industry Role: Join Date: Oct 2001 Location: ┌∩┐ ◣_◢ ┌∩┐ Posts: 46,909	basschick and Bigjohn covered it beautifully.