GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   NATS vs MPA3 - which one and why (https://gfy.com/showthread.php?t=416467)

hammer2001 01-15-2005 06:58 PM

Quote:

Originally Posted by PBucksJohn
You're hilarious. I've never seen someone talk out of their ass so much in my life.

John, thanks for your input! Say, I heard many good things about your product. Is it really impossible for a program owner to shave? Can you lay out some of the pros and cons of your system?

:1orglaugh :1orglaugh :1orglaugh

You gotta love your job, whoring message boards and asking people on ICQ to post positive comments in your threads

Nathan 01-15-2005 07:04 PM

Quote:

Originally Posted by hammer2001
You gotta love your job, whoring message boards and asking people on ICQ to post positive comments in your threads

I know, hard to beleive, but we actually do not need to do that. Our clients love our system so much, they come to these threads themself and post.

TMM_John 01-15-2005 07:07 PM

Quote:

Originally Posted by hammer2001
John, thanks for your input! Say, I heard many good things about your product. Is it really impossible for a program owner to shave? Can you lay out some of the pros and cons of your system?

:1orglaugh :1orglaugh :1orglaugh

You gotta love your job, whoring message boards and asking people on ICQ to post positive comments in your threads

Riiight.

Welcome to my ignore. I don't waste my time on nobodies who don't even say who they are. You're nothing but an alternative personality of a competitor. Goodbye.

Dragon Curve 01-15-2005 08:11 PM

Quote:

Originally Posted by Nathan
Whats that supposed to mean? You talking about the one you find in the copyright header in files like config.php?

For which client of ours do you work?



You said (in later posts) that you would do it without decompiling. That would mean you would need to get it from wherever the source sits, which is our servers. So how would you get it WITHOUT illegally gaining access to our servers? You said yourself that this would be illegal in australia also.



Ok, great. So now if I am a webmaster, I check my links and suddenly see "hey, WTF, where is my affiliate code gone to??". You saying thats transparent? Strange definition of transparent to me. We would catch you in a heartbeat.



Typical reply by someone that actually can not do what they claim...

Seriously curious which client of ours you work for though.

Haha what? Where has my affiliate code gone to? What on earth are you talking about? I could make something that emulated track.php transparently without raising a heartbeat. Let's see. track.php tracks the campaign/site/program combination from the query string and logs it. It then redirects to the site in question. Sets cookies and the like, all pretty straight forward. Anyone with 5 minutes and a brain could do that. Are you trying to argue someone couldn't easily replace track.php with their own code and make it simulate yours? Because if you are, you're a moron.

I am more than willing to achieve my bet. But of course, I'd need it to be sanctioned by you guys so that you couldn't turn around and badger me later.

All I sense is arrogance. If you sanction it, I could write a track.php which could easily implement shaving TRANSPARENTLY.

But since you're throwing things like "We're going to sue you!" out there - why would I bother? I just find it funny you're so naive and so arrogant.

Dragon Curve 01-15-2005 08:13 PM

Quote:

Originally Posted by Nathan
We encode the script to prevent people from auditing it?? WTF. What gave you that idea? We encode the script to prevent people stealing from us and to prevent people editing the code.

If you had any clue about open-source you'd understand why I made that statement. Source code for a lot of things is readily available to allow third party companies to audit the code and verify its integrity and security. Thus users can feel confident that the code they are running is flawless and isn't going to break on them.

You seem to have very little clue about development for the guy who wrote NATS.

TMM_John 01-15-2005 08:20 PM

Quote:

Originally Posted by Dragon Curve
Haha what? Where has my affiliate code gone to? What on earth are you talking about? I could make something that emulated track.php transparently without raising a heartbeat. Let's see. track.php tracks the campaign/site/program combination from the query string and logs it. It then redirects to the site in question. Sets cookies and the like, all pretty straight forward. Anyone with 5 minutes and a brain could do that. Are you trying to argue someone couldn't easily replace track.php with their own code and make it simulate yours? Because if you are, you're a moron.

I am more than willing to achieve my bet. But of course, I'd need it to be sanctioned by you guys so that you couldn't turn around and badger me later.

All I sense is arrogance. If you sanction it, I could write a track.php which could easily implement shaving TRANSPARENTLY.

But since you're throwing things like "We're going to sue you!" out there - why would I bother? I just find it funny you're so naive and so arrogant.

Again, I'll let Fabian do the tech stuff. He's asleep for the night tho.

However, if you can help us in anyway to make things harder than we're looking to help you out also not sue you.

Dragon Curve 01-15-2005 08:20 PM

Quote:

Originally Posted by Nathan
Do you use Windows? Do you use ICQ? Do you use an E-Mail app? Do you have the source to all of that?

Why do you think you need the source? Do tell me. What good does the source do you? You want to change the app? You want to add features that you can only add by modifying the existing files?

Enlighten me.

Here's some enlightenment for you Nathan. Linux is entirely open-source. There are programs for ICQ, which are open-source, email - open-source.

You know that language you developed NATS in? PHP? You may be shocked, but IT is in fact open-source!

All I sense from you, Nathan, is that you're entirely arrogant and not entirely intelligent. You are defending yourself with every inch of strength and attacking pretty much everyone in this thread.

Your posts are utter rubbish and you still won't stand up and say, yes, it is possible for someone to wrap around NATS to implement shaving. Wrapping is an idea that is years old. TCP wrapping? SOCKS wrapping? Hell, how about a kernel module that wraps system calls? IDSs etc.?

You'd have to be an utter fool to argue you can't simulate your code by wrapping around it with another file.

Dragon Curve 01-15-2005 08:24 PM

Quote:

Originally Posted by Nathan
Me? On the weekends. Sometimes, not often though. I do not talk to our clients often in general really, my primary job is not support or sales.



Actually, they do like how requests are treated. You know why? Because our software actually is stable, efficiant and easy to use. It has a LOT of features already and the best part of it, we keep adding new features EVERY DAY. Those are features clients requested btw. Oh, and in case you did not realize, all our clients have new ideas every day, and the best and most important ones are picked and added to NATS constantly. The more clients we have, the more awesome features NATS will have and all our clients love using every single one of them.

The programs you call "mom & pop programs" could very well grow to a substantial size rather fast. And with the help of our software, a lot of clients have grown their programs very nicely over the course of using it.
You seem very angry, do you have a problem with all these programs that might take traffic away from your big program? (If you even have one.)
I won't even comment on the shave remark, shows that you actually do not read.



So, you suggest that you buy a source code that, in Brad's example, took them 2 years to write, and then you hire a local programmer who first has to sit there and read and understand the source so he can even modify it without breaking something that might sit in another area of the system.

Also, I find it extremely interesting that many of our clients actually had their OWN software or bought an app with source before, and at some point they noticed that it was just not cost effective for them to keep the in house programmers required and the headache was too much that it was easier to go with a solution like NATS which they knew had the backing of the community and also had the backing of a software company dedicated to make this the best product on the market in every aspect. The input of all the clients to make the product even better was of course also a "small" plus. ;)

To each one their own of course, no reason to get mad at me for anything.

"Our clients love us and our features are awesome and ours is the best program in the entire world!" Grow up.

And as for the local programmer side of things. If you actually attended any kind of tertiary qualifications for development, you'd have been taught the term "documentation."

Most DECENT code is well documented to enable other developers to work with the same code. Thus, a new programmer will not "break" the code as you put it, but will be able to easily follow the code by using the documentation provided. This is how IT is professionally developed. Contractors come in and out; many people work on long-term projects.

You sound to me like you're self-taught and rather defensive about your skills/knowledge. Please, before you post again, it may be wise to actually research the techniques involved in development.

Dragon Curve 01-15-2005 08:27 PM

Quote:

Originally Posted by PBucksJohn
Again, I'll let Fabian do the tech stuff. He's asleep for the night tho.

However, if you can help us in anyway to make things harder than we're looking to help you out also not sue you.

The point I'm trying to make is, you can make it as hard as you possibly can, but it's not impossible. Most developers could quite easily write something to shave.

I think the point is that you guys are strongly AGAINST shaving and that you will not make it easy for anyone to do. That is a GOOD thing. However, coming in and attacking people for saying "yes it's possible to write something for shaving" and becoming incredibly defensive is NOT good.

BradShaw 01-15-2005 08:28 PM

", we have more in writting and supporting software. We're a software company who bases our product on feedback from our many clients."


What other software have you guys developed? Just curious.

TMM_John 01-15-2005 08:30 PM

Quote:

Originally Posted by BradShaw
", we have more in writting and supporting software. We're a software company who bases our product on feedback from our many clients."


What other software have you guys developed? Just curious.

Many many web based applications. I'll let Fabian toot his own horn when he wakes up in the morning. Affiliate software since 1997 (mostly private stuff).

TMM_John 01-15-2005 08:32 PM

Quote:

Originally Posted by Dragon Curve
The point I'm trying to make is, you can make it as hard as you possibly can, but it's not impossible. Most developers could quite easily write something to shave.

I think the point is that you guys are strongly AGAINST shaving and that you will not make it easy for anyone to do. That is a GOOD thing. However, coming in and attacking people for saying "yes it's possible to write something for shaving" and becoming incredibly defensive is NOT good.

I don't think we attacked anyone for saying that. People are often quick to think a disagreement on a message board is "attacking". That's hardly ever the case from us. The only time I ever feel I'm really mad at someone is when they make it personal. Feel free to call us and speak to us or meet us in person and you'll realize what we're about like those who met us in Vegas and know us before then do.

hydro 01-15-2005 08:43 PM

nothing can beat a custom system :)

BradShaw 01-15-2005 08:47 PM

Fabien own NATS? I am confused? I thought Nathan and John owned it. Fabien the one that sold Porn Track?

TheMob 01-15-2005 08:47 PM

just do a search across the boards, lots of helpful threads already!

Clarion 01-15-2005 08:51 PM

I agree that custom is better. But prepackaged/managed software CAN be so much easier...and faster to get... and usually cheaper.

Theo 01-15-2005 09:25 PM

I don't see how an advanced custom affiliate script can be better than the one coded and supported from a company dedicated on this. I've been a client of Direct Response that operates probably the most advanced mainstream affiliate/network platform. (directtrack) These people have been developing the same product since '97, they have done innumerable upgrades/debugging, their own datacenter and so on. If someone would try to clone it he would need a huge amount of money and time and he would have to keep it supported with capable coders. Does it worth the hassle, time and money? No. What are the benefits of a custom script? To request something more to be added? This can be done too when you deal with serious companies.

jigg 01-15-2005 09:44 PM

If employees of either NATS or MPA3 are able to login in admin mode to obviously work the script bugs etc, what's to say they aren't lifting information out - emails of webmaster surfers etc?

What of webmaster SSN numbers, how are these protected?


just curious

wiggitywack 01-15-2005 09:46 PM

Brad

I think Fabian and Nathan are the same guy. Nathan is Fabians icq nic

Theo 01-15-2005 09:55 PM

Quote:

Originally Posted by jigg
If employees of either NATS or MPA3 are able to login in admin mode to obviously work the script bugs etc, what's to say they aren't lifting information out - emails of webmaster surfers etc?

What of webmaster SSN numbers, how are these protected?


just curious


What about the billing companies? They have access too. The merc.gateways? same thing. Hosting company? Probably too. I can see the concern, but I would consider it as a big issue if it was the only one.

jigg 01-15-2005 10:03 PM

I use generated passes on my hosting, and my root pass is getting changed after I have the admins look at my server.

I was talking more about an outsourced admin person, someone who's not in the company's office, but different country

jigg 01-15-2005 10:08 PM

and I dont give out my SSN when signing up for porn sites but have to with some or most sponsors, and some of them don't even have HTTPS forms for that

Carlito 01-15-2005 11:15 PM

Quote:

Originally Posted by PBucksJohn

As far as the legal thing. I'm pretty sure "hacking" which decompiling source code is considered is illegal in most countries with indoor plumbing.


It's only illegal if you sell it, or use it to benefit from.

Nathan 01-16-2005 02:18 AM

Quote:

Originally Posted by Dragon Curve
Haha what? Where has my affiliate code gone to? What on earth are you talking about? I could make something that emulated track.php transparently without raising a heartbeat. Let's see. track.php tracks the campaign/site/program combination from the query string and logs it. It then redirects to the site in question. Sets cookies and the like, all pretty straight forward. Anyone with 5 minutes and a brain could do that. Are you trying to argue someone couldn't easily replace track.php with their own code and make it simulate yours? Because if you are, you're a moron.

I am more than willing to achieve my bet. But of course, I'd need it to be sanctioned by you guys so that you couldn't turn around and badger me later.

All I sense is arrogance. If you sanction it, I could write a track.php which could easily implement shaving TRANSPARENTLY.

But since you're throwing things like "We're going to sue you!" out there - why would I bother? I just find it funny you're so naive and so arrogant.

That is what I am talking about, you can easily make a track.php of your own which loads our track.php 80% of the time and the other times just does the redirect to the tour. But unless you pass the reseller id along, it is NOT transparent is it? And once you do that, as long as you do not make other changes to the system, the sale is tracked.

I am not arrogant btw, and not naive. I'm proud of my programming, thats it really.

Nathan 01-16-2005 02:24 AM

Quote:

Originally Posted by Dragon Curve
If you had any clue about open-source you'd understand why I made that statement. Source code for a lot of things is readily available to allow third party companies to audit the code and verify its integrity and security. Thus users can feel confident that the code they are running is flawless and isn't going to break on them.

You seem to have very little clue about development for the guy who wrote NATS.

I know that one of the reasons of open source is auditing. That does not change the fact that the reason why we encoded it is to SECURE our property. If we did not do that we could not have licensed it and everyone could have stolen our ideas. Why would anyone let that happen in a commercial environment?

From how you talk, you must be some open-source-lover. Do you read through the source of every single program you want to use before actually using it?

BTW, if open-source is there to have apps run "flawless"... I wonder why the heck there are new security holes found in open source apps every day. Does not seem to help much that great open-source idea, huh?

Of course, you will now come and say "but non-open-source apps have even more holes".....

Nathan 01-16-2005 02:34 AM

Quote:

Originally Posted by Dragon Curve
Here's some enlightenment for you Nathan. Linux is entirely open-source. There are programs for ICQ, which are open-source, email - open-source.

You know that language you developed NATS in? PHP? You may be shocked, but IT is in fact open-source!

LOL. Great examples. You know what isn't open-source that we use? Zend Optimizer, Zend Licence Manager, Zend Encoder. You know why? Because it HAS to be closed source to secure its inner workings.

And you are correct, Linux is entirely open-source. And I am using ICQ apps which are open-source too (they can nolonger connect me to ICQ, but heck, ICQ 4 is just annoying). This is all great.

Quote:

Originally Posted by Dragon Curve
All I sense from you, Nathan, is that you're entirely arrogant and not entirely intelligent. You are defending yourself with every inch of strength and attacking pretty much everyone in this thread.

Your posts are utter rubbish and you still won't stand up and say, yes, it is possible for someone to wrap around NATS to implement shaving. Wrapping is an idea that is years old. TCP wrapping? SOCKS wrapping? Hell, how about a kernel module that wraps system calls? IDSs etc.?

You'd have to be an utter fool to argue you can't simulate your code by wrapping around it with another file.

I have no idea if you did not read what I write here. Or if this is the first thread you read about this (doubt it since you are so extremely pissed at me)... I said MULTIPLE times that it is possible to add stuff to shave AROUND NATS. The only thing I have also said is that its NOT as easy as everyone thinks to do so transparently.

Can you do anything else than insult me? No idea why you react so extremely aggressive. What did I do to make you so pissed at me?

I have explained in the previous post why simply wrapping track.php does not help in transparency...

Nathan 01-16-2005 02:39 AM

Quote:

Originally Posted by Dragon Curve
The point I'm trying to make is, you can make it as hard as you possibly can, but it's not impossible. Most developers could quite easily write something to shave.

I think the point is that you guys are strongly AGAINST shaving and that you will not make it easy for anyone to do. That is a GOOD thing. However, coming in and attacking people for saying "yes it's possible to write something for shaving" and becoming incredibly defensive is NOT good.

I did not attack you for saying its possible to write something for shaving aroudn NATS. I attacked you for saying it would take 5 minutes. Thats simply not true. There are more things you need to do than you might think... Do not pretend to be a know-it-all. I might be more intelligent than you think ;)

Nathan 01-16-2005 02:54 AM

Quote:

Originally Posted by BradShaw
", we have more in writting and supporting software. We're a software company who bases our product on feedback from our many clients."

What other software have you guys developed? Just curious.

Like John said, we wrote other affiliate apps, for privat use only. Multiple ones over the years.

Me myself, I wrote a big number of statistical apps. I guess you would call it "counters" ... really more than that though: PornTrack, Counted!, SexTrail, PornGraph. I wrote log-analysers too.

I also wrote a web server (daemon) system, but it was never released due to lack of time. It works well though.

I wrote big parts of a WebCam-Network's backend and some of the frontend.

And then a bunch of smaller apps that I really forgot about already.

Nathan 01-16-2005 02:57 AM

Quote:

Originally Posted by BradShaw
Fabien own NATS? I am confused? I thought Nathan and John owned it. Fabien the one that sold Porn Track?

3 people own Too Much Media, I am one of them.

Nathan = Fabian. Btw, its _FABIAN_ and not Fabien. Why does everyone mess up my name? :(

PornTrack? I wrote it, did not sell it though. I got fucked by my ex partner (Preston) on it. Lost a bunch of $$. That was YEARS ago though.

Nathan 01-16-2005 03:00 AM

Quote:

Originally Posted by jigg
If employees of either NATS or MPA3 are able to login in admin mode to obviously work the script bugs etc, what's to say they aren't lifting information out - emails of webmaster surfers etc?

What of webmaster SSN numbers, how are these protected?


just curious


You do not have to give us admin access to NATS. We do not HAVE to update your script if you think we have any interest in "lifting" any information from your database. We are the last to do that though, we have 0 interest in it.

We do understand the concern and thats why we let you lock us out. And when we want to update your scripts, we can walk you through doing that yourself.

jayeff 01-16-2005 03:15 AM

If someone - user or programmer - wants to go the open source route, fair enough, but let's not start talking as if it is anywhere near the norm. I worked as a consultant project manager for several years with a lot of household name companies and I can count on my fingers the number of times I came across unencoded software in production use.

Never mind software intended for sale to multiple clients, contracts for custom-coded software often did not include intellectual ownership of the software and it was therefore encoded. Clients might have access to the plain code, but that was usually for specific reasons and in controlled circumstances. Even software developed in-house was commonly encoded before going into a production environment. None of which prevented auditing, custom coding on request, etc.

Unless a program is a relatively simple one, or you put far greater resources into understanding it than any honest person or business is likely to commit, you don't need to see the code and doing so won't benefit you in any way. So why expect the author to make analysis of his work easier than it need be?

That aspect of this thread apart, I have to wonder at the motivation behind some of the posts knocking NATS. So what if their software is as vulnerable to cheating sponsors as any other? That doesn't make them guilty of anything worse than maybe over-hyping that it hasn't got any shave features built in and their promise to go after anyone who adds their own. Maybe they will do that, maybe not, but no-one has suggested they have already turned a blind eye to such abuse.

Which all makes it a bit odd that in this thread anyway, they have come in for more flack than Mansion, who actually were caught supporting sponsors with features intended to cheat their affiliates.

Dragon Curve 01-16-2005 04:17 AM

Quote:

Originally Posted by Nathan
That is what I am talking about, you can easily make a track.php of your own which loads our track.php 80% of the time and the other times just does the redirect to the tour. But unless you pass the reseller id along, it is NOT transparent is it? And once you do that, as long as you do not make other changes to the system, the sale is tracked.

I am not arrogant btw, and not naive. I'm proud of my programming, thats it really.

But the click is not tracked. So we wrap signup.php as well. Very difficult =P

Dragon Curve 01-16-2005 04:23 AM

Quote:

Originally Posted by Nathan
I know that one of the reasons of open source is auditing. That does not change the fact that the reason why we encoded it is to SECURE our property. If we did not do that we could not have licensed it and everyone could have stolen our ideas. Why would anyone let that happen in a commercial environment?

From how you talk, you must be some open-source-lover. Do you read through the source of every single program you want to use before actually using it?

BTW, if open-source is there to have apps run "flawless"... I wonder why the heck there are new security holes found in open source apps every day. Does not seem to help much that great open-source idea, huh?

Of course, you will now come and say "but non-open-source apps have even more holes".....

Please tell me you're not that naive. Fair enough you want to protect your property - but there are laws for that. I'm sure there's nothing amazing about your PHP that is so revolutionary that it will be stolen.

Moreover, I do love open-source and there's definitely nothing wrong with that. I'm sure your servers are running Linux/FreeBSD, which is open-source. You use PHP, which is open-source. You use MySQL, which is open-source. I'm not required to read through the source of every application I run because I am confident that it has been audited correctly by the open-source community several times over. But it certainly helps when I am curious as to how a certain application is working.

It's also rather useful when developing FOR a certain application. For example, developing an Apache module - the source is essential.

And finally, you've proved you have NO clue about security. Go subscribe to bugtraq and see the spread of vulnerabilities. Linux/FreeBSD/OpenBSD .. hell ANY of the Unixes haven't had a major remote vulnerability in yonks. Lets see about Windows - two DCOM vulnerabilities in the last year? More IIS vulnerabilities. The list goes on.

You'd have to be absolutely out of your mind to try to tell me, that closed-source applications are somehow more secure. The reason bugs are often found in open-source applications, is because they are much more easily audited. So while the open-source applications have the non-critical bugs ironed out of them, people are stumbling across MAJOR vulnerabilities in things like Windows all the time.

How about the fundamental flaw in the Windows messaging system that allows anyone to escalate privileges? Shatter?

Clearly, you have no idea what I'm talking about because you haven't researched that much into security. But trust me, I have. I'm not going to sit here and argue what OS is more secure or something stupid like that. I'm just going to say, that open-source makes me feel much safer on the boxes I use.

Dragon Curve 01-16-2005 04:30 AM

Quote:

Originally Posted by Nathan
LOL. Great examples. You know what isn't open-source that we use? Zend Optimizer, Zend Licence Manager, Zend Encoder. You know why? Because it HAS to be closed source to secure its inner workings.

And you are correct, Linux is entirely open-source. And I am using ICQ apps which are open-source too (they can nolonger connect me to ICQ, but heck, ICQ 4 is just annoying). This is all great.



I have no idea if you did not read what I write here. Or if this is the first thread you read about this (doubt it since you are so extremely pissed at me)... I said MULTIPLE times that it is possible to add stuff to shave AROUND NATS. The only thing I have also said is that its NOT as easy as everyone thinks to do so transparently.

Can you do anything else than insult me? No idea why you react so extremely aggressive. What did I do to make you so pissed at me?

I have explained in the previous post why simply wrapping track.php does not help in transparency...

Why does it have to be closed-source? Some pretty major companies run entirely open-source software. Major encryption algorithms are open-source. SHA/MD5/etc. So really, unless it is using a very weak method of encryption, Zend Optimizer doesn't need to be closed-source. This is what we in the industry call "security by obscurity" which is generally shunned upon as it is, evidently, not secure.

I am not "pissed" - more attacking your arrogance. The fact that you are trying to promote your program is the best out there and everybody loves it is just way too over the top. I have absolutely nothing against NATS - but when you start directly saying you'd "sue" me if I did this, "no this definitely isn't possible!" It's ridiculous and unprofessional. Being humble is often a wise idea.

Oh, and my explanation in my previous posts as to how to get around that is there as well. Wrap track.php to shave the clicks; wrap signup.php to shave the sales. Of course, you'd have to write something to add a member to the database into the wrapped signup.php but that's not difficult.

The fact is, it could easily be done. And it's far from a huge job. I could do it in 5 minutes I'm sure; others may take longer.

Nathan 01-16-2005 04:30 AM

Quote:

Originally Posted by Dragon Curve
But the click is not tracked. So we wrap signup.php as well. Very difficult =P

Yes, so now you have to at the same time you wrap track.php also wrap signup.php ... to achive anything effective. Means, to make it transparent you also have to implement your own cascading system that works like NATS does or a webmaster (or us btw) could see you messing with the system at that end.

So now you have 2, no 3 points of failure of your great shaving wrapper around NATS, which are all prone for us to detect you doing something weird with the traffic.

Dragon Curve 01-16-2005 04:34 AM

Quote:

Originally Posted by Nathan
Yes, so now you have to at the same time you wrap track.php also wrap signup.php ... to achive anything effective. Means, to make it transparent you also have to implement your own cascading system that works like NATS does or a webmaster (or us btw) could see you messing with the system at that end.

So now you have 2, no 3 points of failure of your great shaving wrapper around NATS, which are all prone for us to detect you doing something weird with the traffic.

The signup.php could simply modify the "nats" variable with the new campaignid and then include() the old signup.php. Transparent to the user, and the signup can go as planned.

Simple enough. 10 lines of code?

Nathan 01-16-2005 04:44 AM

Quote:

Originally Posted by Dragon Curve
Please tell me you're not that naive. Fair enough you want to protect your property - but there are laws for that. I'm sure there's nothing amazing about your PHP that is so revolutionary that it will be stolen.

If there is nothing revolutionary in our system, I wonder why all our features are more advanced than any of the competition. It has nothing to do with me scripting some amazing PHP, its the features and how we make them work which is the thing we protect.


Quote:

Originally Posted by Dragon Curve
Moreover, I do love open-source and there's definitely nothing wrong with that. I'm sure your servers are running Linux/FreeBSD, which is open-source. You use PHP, which is open-source. You use MySQL, which is open-source. I'm not required to read through the source of every application I run because I am confident that it has been audited correctly by the open-source community several times over. But it certainly helps when I am curious as to how a certain application is working.

It's also rather useful when developing FOR a certain application. For example, developing an Apache module - the source is essential.

It was obvious you love open-source. And I have never said there is anything wrong with it. And yes, we use FreeBSD, PHP, MySQL. All open-source. Whats your point? Because we use those we have to understand that its essential to use the open-source system for anything we do? You do not need to know how NATS works. If a client of ours has a specific question about the inner workings we TELL them. We do not have to give them the whole source of NATS. The is intellectual property and any way we can we will protect it.

BTW, there are books about writing Apache modules. The source is actually not essential. ;)

Quote:

Originally Posted by Dragon Curve
And finally, you've proved you have NO clue about security. Go subscribe to bugtraq and see the spread of vulnerabilities. Linux/FreeBSD/OpenBSD .. hell ANY of the Unixes haven't had a major remote vulnerability in yonks. Lets see about Windows - two DCOM vulnerabilities in the last year? More IIS vulnerabilities. The list goes on.

You'd have to be absolutely out of your mind to try to tell me, that closed-source applications are somehow more secure. The reason bugs are often found in open-source applications, is because they are much more easily audited. So while the open-source applications have the non-critical bugs ironed out of them, people are stumbling across MAJOR vulnerabilities in things like Windows all the time.

How about the fundamental flaw in the Windows messaging system that allows anyone to escalate privileges? Shatter?

Did I _EVER_ say windows was more secure or had less bugs? Stop interpreting what I write. _YOU_ said that the reason you like open-source is that people know the app is FLAWLESS. FreeBSD and/or Linux has been open-source for a long time, who cares if there were no major security holes in the OS itself for over a year. Does that mean its flawless?? Far from it. Also, you come here and compare flaws in FreeBSD/Linux with IIS for Windows?!? There is more to unix system than the OS itself. SSH, APACHE, MySQL, sendmail (oh god sendmail), and what not. Did you forget about those? They all have had security problems in the past, and plenty of them.

My point was that open-source software is FAR FROM flawless like YOU claimed the whole point of open-source would be.

Quote:

Originally Posted by Dragon Curve
Clearly, you have no idea what I'm talking about because you haven't researched that much into security. But trust me, I have. I'm not going to sit here and argue what OS is more secure or something stupid like that. I'm just going to say, that open-source makes me feel much safer on the boxes I use.

Of course, yet again, I am stupid, have no clue, you know it better, I have never heard of security, and am in general a stupid idiot which does not have a brain.

So sorry I pissed you off so much... LOL

Dragon Curve 01-16-2005 04:52 AM

Quote:

Originally Posted by Nathan
If there is nothing revolutionary in our system, I wonder why all our features are more advanced than any of the competition. It has nothing to do with me scripting some amazing PHP, its the features and how we make them work which is the thing we protect.




It was obvious you love open-source. And I have never said there is anything wrong with it. And yes, we use FreeBSD, PHP, MySQL. All open-source. Whats your point? Because we use those we have to understand that its essential to use the open-source system for anything we do? You do not need to know how NATS works. If a client of ours has a specific question about the inner workings we TELL them. We do not have to give them the whole source of NATS. The is intellectual property and any way we can we will protect it.

BTW, there are books about writing Apache modules. The source is actually not essential. ;)



Did I _EVER_ say windows was more secure or had less bugs? Stop interpreting what I write. _YOU_ said that the reason you like open-source is that people know the app is FLAWLESS. FreeBSD and/or Linux has been open-source for a long time, who cares if there were no major security holes in the OS itself for over a year. Does that mean its flawless?? Far from it. Also, you come here and compare flaws in FreeBSD/Linux with IIS for Windows?!? There is more to unix system than the OS itself. SSH, APACHE, MySQL, sendmail (oh god sendmail), and what not. Did you forget about those? They all have had security problems in the past, and plenty of them.

My point was that open-source software is FAR FROM flawless like YOU claimed the whole point of open-source would be.



Of course, yet again, I am stupid, have no clue, you know it better, I have never heard of security, and am in general a stupid idiot which does not have a brain.

So sorry I pissed you off so much... LOL

Firstly - how are your features oh so much better? Because honestly I don't see anything so incredible. It's a well put together system, but it's not rocket science.

The fact is, you're talking about me as an "open-source lover" as if there's something horribly wrong about that. And you're arguing that open-source software has FAR more bugs (you actually said that). And yet, you're running that. So why didn't you develop in Windows, with ASP.Net and SQL Server?

Oh, and when was the last time you wrote an Apache module? I'm sorry, never? I've written quite a number of them and trust me, the source is essential. No book could replace being able to actually see how things are working. Talk from experience, not your time at the local bookstore.

No, you didn't say that. You said that open-source software has a lot more security flaws. Which is false.

What is also false, is that Apache, MySQL, sendmail, etc. is part of a Unix system. No, it's not. Apache, MySQL, sendmail and the like are applications that run most often on Unix systems. Apache and MySQL both have Win32 ports.

Now, compare Apache to IIS over the last three years and honestly tell me Apache has had more flaws. Do the same with any two open-source vs. closed-source applications.

I only say you have no clue, because you simply don't. Go visit bugtraq, read it for a few months. There are security companies who just constantly audit the open-source code. So let's think logically. The open-source code is getting audited by numerous, separate people ALL the time. The closed-source code is audited by the developers and that's it.

Logically, what is going to have more bugs? Seriously, you'd have to be extremely naive to think open-source is going to be buggier. That is one of the many advantages of open-source software.

The Zend suite of software is an attempt to push PHP commercial. The Zend engine in PHP is completely open-source and if the encoder was half decent, there would be no problem pushing it open-source.

Nathan 01-16-2005 04:54 AM

Quote:

Originally Posted by Dragon Curve
Why does it have to be closed-source? Some pretty major companies run entirely open-source software. Major encryption algorithms are open-source. SHA/MD5/etc. So really, unless it is using a very weak method of encryption, Zend Optimizer doesn't need to be closed-source. This is what we in the industry call "security by obscurity" which is generally shunned upon as it is, evidently, not secure.

The reason Zend optimizer is closed-source is because it works with encoded php scripts and they do not plan to make it easier for anyone to write similar encoding apps. At least thats what I am guessing.

This arguing back and forth about open or closed source is useless. You obviously have a fundamental difference in thinking in this area. We prefer to encode our source code to protect it against tampering with and steeling by our competition. If you do not agree with that... thats not my problem. I have good reasons and all our clients and a LOT of other people agree.

Quote:

Originally Posted by Dragon Curve
I am not "pissed" - more attacking your arrogance. The fact that you are trying to promote your program is the best out there and everybody loves it is just way too over the top. I have absolutely nothing against NATS - but when you start directly saying you'd "sue" me if I did this, "no this definitely isn't possible!" It's ridiculous and unprofessional. Being humble is often a wise idea.

Why in gods name would we not promote our program as the best out there? You want us to say "We are great, but program XYZ is really better."???? Are you totally losing your mind now? We WOULD sue you if you went, got nats from us, then put a shaving system around it, and then used NATS and shaved around it. Of course we would friggin sue you. You just caused major harm to OUR business and ALL of our clients! Why in gods name would we NOT sue you!?

If have not said its impossible. I have said its not as easy as you think ;) Read what I write.

Quote:

Originally Posted by Dragon Curve
Oh, and my explanation in my previous posts as to how to get around that is there as well. Wrap track.php to shave the clicks; wrap signup.php to shave the sales. Of course, you'd have to write something to add a member to the database into the wrapped signup.php but that's not difficult.

The fact is, it could easily be done. And it's far from a huge job. I could do it in 5 minutes I'm sure; others may take longer.

5 Minutes, good. :) You kick ass. I still do not agree that it is that easy though.

Nathan 01-16-2005 04:56 AM

Quote:

Originally Posted by Dragon Curve
The signup.php could simply modify the "nats" variable with the new campaignid and then include() the old signup.php. Transparent to the user, and the signup can go as planned.

Simple enough. 10 lines of code?

LOL... 10 lines of code to do that? Dude, you are not as good as you think you are...

Also, great system, just shitty when a reseller checks your cascade with his reseller code and somehow notices that, hmmm... why the fuck does NATS send the resellerid 0 or at least one that is not me to the friggin biller. Now that is weird huh?


All times are GMT -7. The time now is 12:57 PM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123