Paysite owners, google is not your friend. - GoFuckYourself.com

JSA Matt · 05-23-2005, 11:23 AM

We all know that password sites are a big enough problem, but now we have google indexing these password sites and making it that much easier for surfers to gain free entry.

I'm going to use BradShaw as an example here since he likes being the center of attention.

Do a google search for the member's area URL to 24 inches of pain.
"24inchesofpain.com/members"

http://www.google.com/search?num=100...22&btnG=Search

This should give you a pretty good idea of what is going on... the first password I tried gave me access.

I personally went through all of our sites and deleted or changed a LARGE number of working passwords. I would also recommend ProxyPass to take advantage of this traffic source

Harmon · 05-23-2005, 11:25 AM

Welcome to 1997 dude

JSA Matt · 05-23-2005, 11:26 AM

Quote:

Originally Posted by Harmon

Welcome to 1997 dude

You're my hero

Skripter · 05-23-2005, 11:29 AM

Hah.. think thats bad?
_http://www.google.com/search?q=*%3A*%40www.24inchesofpain.com%2Fmembers

And you can replace your site with any other. Works the same.

Dalai lama · 05-23-2005, 11:29 AM

First password worked for me too, didnt even had to visit a site for it.

JSA Matt · 05-23-2005, 11:31 AM

Quote:

Originally Posted by Skripter

Hah.. think thats bad?
_http://www.google.com/search?q=*%3A*%40www.24inchesofpain.com%2Fmembers

And you can replace your site with any other. Works the same.

that's great

ry0t · 05-23-2005, 11:32 AM

Seriously it boils down to having something like strongbox so the passwords will locked out. Then there will be no problem. You can actually redirect the traffic and make money on them. So yes google is your friend.

Halcyon · 05-23-2005, 11:32 AM

damn...between this and the checks thread... sounds grim.

Fletch XXX · 05-23-2005, 11:32 AM

if password sites "were a problem" paysite owners wouldnt be working deals out with them.

mufas · 05-23-2005, 11:34 AM

Quote:

Originally Posted by Harmon

Welcome to 1997 dude

JSA Matt · 05-23-2005, 11:34 AM

Quote:

Originally Posted by Fletch XXX

if password sites "were a problem" paysite owners wouldnt be working deals out with them.

quiet you

JSA Matt · 05-23-2005, 11:35 AM

Quote:

Originally Posted by ry0t

Seriously it boils down to having something like strongbox so the passwords will locked out. Then there will be no problem. You can actually redirect the traffic and make money on them. So yes google is your friend.

If you read my post, I recommended ProxyPass for this

WiredGuy · 05-23-2005, 11:38 AM

You see this as a bad thing where I see this as a great thing. This is a great way to see exactly which password sites are indexing your sites so you can prevent them in future. Google isn't the problem here, its the password sites. Google is telling you exactly which sites is contributing to the problem. To me, this is a good thing. Just grab a list of all the password sites that google returns and setup a mod rewrite for all referrals to a landing page. I do of course think a password protection script is also needed on top of this.

WG

JSA Matt · 05-23-2005, 11:41 AM

Quote:

Originally Posted by WiredGuy

You see this as a bad thing where I see this as a great thing. This is a great way to see exactly which password sites are indexing your sites so you can prevent them in future. Google isn't the problem here, its the password sites. Google is telling you exactly which sites is contributing to the problem. To me, this is a good thing. Just grab a list of all the password sites that google returns and setup a mod rewrite for all referrals to a landing page. I do of course think a password protection script is also needed on top of this.

WG

Blocking the password sites themselves does nothing to resolve this problem. That is the whole point of this thread. Google makes it so you never have to touch a password site.

Besides, this thing is indexing pages that are not password related, just random people uploading level 10 password lists from IRC.

wallst · 05-23-2005, 12:21 PM

worked for me.

http://www.whereisit.org/Forums/viewtopic/t=7588.html

gregtx · 05-23-2005, 12:30 PM

Quote:

Originally Posted by JSA Matt

We all know that password sites are a big enough problem, but now we have google indexing these password sites and making it that much easier for surfers to gain free entry.

I'm going to use BradShaw as an example here since he likes being the center of attention.

Do a google search for the member's area URL to 24 inches of pain.
"24inchesofpain.com/members"

http://www.google.com/search?num=100...22&btnG=Search

This should give you a pretty good idea of what is going on... the first password I tried gave me access.

I personally went through all of our sites and deleted or changed a LARGE number of working passwords. I would also recommend ProxyPass to take advantage of this traffic source

we have used proxypass for years.. appearantly it had not killed those user/passes... as it takes 5 simultaneous users to disable... by the time I checked none seemed to work..

JSA Matt · 05-23-2005, 12:33 PM

Quote:

Originally Posted by gregtx

we have used proxypass for years.. appearantly it had not killed those user/passes... as it takes 5 simultaneous users to disable... by the time I checked none seemed to work..

I'm guessing due to this thread it was tried enough times for ProxyPass to catch them. That is why I did not use our own sites as an example, because none of the passwords will work

Trax · 05-23-2005, 12:42 PM

this ain't big news
its not shame on google lol
its about programs that don't make use of such info
searching the web for stolen passes is not that hard lol

WiredGuy · 05-23-2005, 12:48 PM

Quote:

Originally Posted by JSA Matt

Blocking the password sites themselves does nothing to resolve this problem. That is the whole point of this thread. Google makes it so you never have to touch a password site.

Besides, this thing is indexing pages that are not password related, just random people uploading level 10 password lists from IRC.

Think about what I said though. By using Google, you have a list of password sites. By disabling referrers from these password sites, your sites won't get listed on the password sites anymore since they're all being redirected. So if they're not on the password sites, they won't get indexed in Google in future.

WG

JSA Matt · 05-23-2005, 12:59 PM

Quote:

Originally Posted by WiredGuy

Think about what I said though. By using Google, you have a list of password sites. By disabling referrers from these password sites, your sites won't get listed on the password sites anymore since they're all being redirected. So if they're not on the password sites, they won't get indexed in Google in future.

WG

Most password sites do not even link to your site, especially since a patch is required to use the username:[email protected] syntax. Copy & pasting the URL will bypass your theory.

I do see what you are saying and this being in google is not necessarily a bad thing. Like I said originally, this post was intended for paysite owners to disable the passwords and take advantage of the traffic coming from google. This traffic is more valuable than most people know.

05-23-2005, 11:23 AM	#1
JSA Matt So Fucking Banned Join Date: Aug 2003 Location: San Diego, CA Posts: 5,464	Paysite owners, google is not your friend. We all know that password sites are a big enough problem, but now we have google indexing these password sites and making it that much easier for surfers to gain free entry. I'm going to use BradShaw as an example here since he likes being the center of attention. Do a google search for the member's area URL to 24 inches of pain. "24inchesofpain.com/members" http://www.google.com/search?num=100...22&btnG=Search This should give you a pretty good idea of what is going on... the first password I tried gave me access. I personally went through all of our sites and deleted or changed a LARGE number of working passwords. I would also recommend ProxyPass to take advantage of this traffic source

05-23-2005, 11:25 AM	#2
Harmon ( ͡ʘ╭͜ʖ╮͡ʘ) Industry Role: Join Date: Mar 2004 Posts: 20,010	Welcome to 1997 dude __________________ [email protected]

05-23-2005, 11:29 AM	#5
Dalai lama Strength and Honor Join Date: Jul 2004 Location: Europe Posts: 16,540	First password worked for me too, didnt even had to visit a site for it. __________________ A program you can trust. Gallerybooster Run multiply TGPs of 1 script

05-23-2005, 11:32 AM	#8
Halcyon Spread The Pink! Join Date: Dec 2002 Location: TrampStampStudios.com Posts: 8,609	damn...between this and the checks thread... sounds grim. __________________ HAL on TEDx:

05-23-2005, 11:32 AM	#9
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	if password sites "were a problem" paysite owners wouldnt be working deals out with them. __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

05-23-2005, 11:29 AM	#4
Skripter Registered User Join Date: May 2005 Posts: 40	Hah.. think thats bad? _http://www.google.com/search?q=%3A%40www.24inchesofpain.com%2Fmembers And you can replace your site with any other. Works the same.

05-23-2005, 11:32 AM	#7
ry0t So Fucking Banned Industry Role: Join Date: Feb 2003 Location: Boston Posts: 4,160	Seriously it boils down to having something like strongbox so the passwords will locked out. Then there will be no problem. You can actually redirect the traffic and make money on them. So yes google is your friend.

05-23-2005, 11:38 AM	#13
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,487	You see this as a bad thing where I see this as a great thing. This is a great way to see exactly which password sites are indexing your sites so you can prevent them in future. Google isn't the problem here, its the password sites. Google is telling you exactly which sites is contributing to the problem. To me, this is a good thing. Just grab a list of all the password sites that google returns and setup a mod rewrite for all referrals to a landing page. I do of course think a password protection script is also needed on top of this. WG __________________ I play with Google.

05-23-2005, 12:21 PM	#15
wallst Confirmed User Join Date: Aug 2004 Location: South East Posts: 1,621	worked for me. http://www.whereisit.org/Forums/viewtopic/t=7588.html

05-23-2005, 12:42 PM	#18
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	this ain't big news its not shame on google lol its about programs that don't make use of such info searching the web for stolen passes is not that hard lol