How can I find out which members are shearing their passwords? - GoFuckYourself.com

Etik Media · 02-09-2005, 07:49 AM

I run a paysite processing with verotel. My question is:

How can I know if some member is shearing their login information to my paysite with others? If multiple IP are logging in with the same username?

Etik Media · 02-09-2005, 07:56 AM

Do you know any script that can do that?

thanks.

JFPdude · 02-09-2005, 07:56 AM

Pennywize

http://pennywize.com

Etik Media · 02-09-2005, 08:07 AM

Quote:

Originally Posted by JFPdude

Pennywize

http://pennywize.com

thanks man!

Easton · 02-09-2005, 08:08 AM

or strongbox

Etik Media · 02-09-2005, 08:15 AM

Quote:

Originally Posted by Easton

or strongbox

http://strongbox.com

url?

Easton · 02-09-2005, 08:16 AM

Quote:

Originally Posted by Etik Media

http://strongbox.com

url?

here: http://www.bettercgi.com/strongbox/

Buddah00 · 02-09-2005, 08:17 AM

get strongbox from webmastersguide.com and you won't have to worry about password trading

Harmon · 02-09-2005, 08:17 AM

Also, make sure your passfile file is hidden away from prying eyes in a protected directory

Etik Media · 02-09-2005, 08:27 AM

thanks a lot guys!!

DeadFidel · 02-09-2005, 08:40 AM

I use Virtual Solutions Sentry. You set as many ISP's as you want.
There is no need to worry, set at "one" and you will never have a problem.

Etik Media · 02-09-2005, 08:58 AM

help needed again...

Add these lines to your httpd.conf file
(Inside the corresponding VirtualHost for your site or members section)

Where can I find httpd.conf file?

Project-Shadow · 02-09-2005, 09:02 AM

Or you could get http://www.monster-submit.com/sentry/

PrivateIvy · 02-09-2005, 09:06 AM

Quote:

Originally Posted by Project-Shadow

Or you could get http://www.monster-submit.com/sentry/

Been using Password Sentry for over 2 years now... no problems whatsoever !! the best

Ivy

Rui · 02-09-2005, 09:55 AM

Quote:

Originally Posted by PrivateIvy

Been using Password Sentry for over 2 years now... no problems whatsoever !! the best

Ivy

This one (along with Pennywise that I knew about long time ago) look pretty good. Do you use PS along with any other script (for security)=?

The Sultan Of Smut · 02-09-2005, 10:16 AM

Quote:

Originally Posted by Etik Media

help needed again...

Add these lines to your httpd.conf file
(Inside the corresponding VirtualHost for your site or members section)

Where can I find httpd.conf file?

Should be able to add it to htaccess no?

RisqueWritings · 02-09-2005, 10:22 AM

Great question and great replies. I need to check that out also!

raymor · 02-10-2005, 12:15 PM

You might want to look at something a little more modern than
Pennywize and it's clones, which are just naive IP counters,
the adult industries first attempt at doing something about
this problem 8 years ago. Technology has advanced quite
ab it since then.
As explained in a widely circulated 1999 paper, Pennywize
actually makes it easier for an attacker to sucessfully perform
a dictionary attack against your site.

02-09-2005, 07:49 AM	#1
Etik Media Confirmed User Join Date: Jul 2004 Posts: 493	How can I find out which members are shearing their passwords? I run a paysite processing with verotel. My question is: How can I know if some member is shearing their login information to my paysite with others? If multiple IP are logging in with the same username?

02-09-2005, 08:08 AM	#5
Easton Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Location: Phoenix, AZ Posts: 9,825	or strongbox __________________ New models booked and shot every week... MILFs, pornstars and teens. Girls for every niche and project. Looking for high-quality affordable exclusive content? Check me out at Easton Content for all the details.

02-09-2005, 08:17 AM	#8
Buddah00 Confirmed User Join Date: May 2004 Location: The Dirty South Posts: 722	get strongbox from webmastersguide.com and you won't have to worry about password trading __________________ I want what every other man wants, I just want it more.

02-09-2005, 08:17 AM	#9
Harmon ( ͡ʘ╭͜ʖ╮͡ʘ) Industry Role: Join Date: Mar 2004 Posts: 20,010	Also, make sure your passfile file is hidden away from prying eyes in a protected directory __________________ [email protected]

02-09-2005, 10:22 AM	#17
RisqueWritings Confirmed User Join Date: Nov 2004 Location: Huntington Beach, CA Posts: 628	Great question and great replies. I need to check that out also! __________________ -Risque aka Kris

02-09-2005, 07:56 AM	#2
Etik Media Confirmed User Join Date: Jul 2004 Posts: 493	Do you know any script that can do that? thanks.

02-09-2005, 07:56 AM	#3
JFPdude Confirmed User Join Date: Jan 2002 Location: Mountains of Western North Carolina. Posts: 4,027	Pennywize http://pennywize.com

02-09-2005, 08:27 AM	#10
Etik Media Confirmed User Join Date: Jul 2004 Posts: 493	thanks a lot guys!!

02-09-2005, 08:40 AM	#11
DeadFidel Confirmed User Join Date: Jul 2003 Location: This was my wife circa 2002 Posts: 6,760	I use Virtual Solutions Sentry. You set as many ISP's as you want. There is no need to worry, set at "one" and you will never have a problem.

02-09-2005, 08:58 AM	#12
Etik Media Confirmed User Join Date: Jul 2004 Posts: 493	help needed again... Add these lines to your httpd.conf file (Inside the corresponding VirtualHost for your site or members section) Where can I find httpd.conf file?

02-09-2005, 09:02 AM	#13
Project-Shadow Confirmed User Industry Role: Join Date: Feb 2003 Posts: 7,340	Or you could get http://www.monster-submit.com/sentry/

02-10-2005, 12:15 PM	#18
raymor Confirmed User Join Date: Oct 2002 Posts: 3,745	You might want to look at something a little more modern than Pennywize and it's clones, which are just naive IP counters, the adult industries first attempt at doing something about this problem 8 years ago. Technology has advanced quite ab it since then. As explained in a widely circulated 1999 paper, Pennywize actually makes it easier for an attacker to sucessfully perform a dictionary attack against your site. __________________ For historical display only. This information is not current: support@bettercgi.com ICQ 7208627 Strongbox - The next generation in site security Throttlebox - The next generation in bandwidth control Clonebox - Backup and disaster recovery on steroids