hacked password site. - GoFuckYourself.com

smack · 03-23-2002, 01:44 AM

webmasters/webmistresses, if you could put an annual dollar amount on the loss of resources to hacked password sites, what would it be? i have heard that they may not actually a large threat? your opinions?

Wizzo · 03-23-2002, 01:47 AM

IMO, they aren't that big of a problem.

Tanker · 03-23-2002, 01:52 AM

if your password protection is good

you can make a fortune off of a few hacked passwords

so there really not a loss there more of a gain all those surfers being redirected to the front end of the site

tha_timinator · 03-23-2002, 02:23 AM

i can hardly imagine that those surfers that visit password-sites (the cheapest of the cheapest of the cheapest freeloaders out there) will EVER open their wallet AT ALL...

so in that way it'll still only be extra cost (bandwidth)

hyper · 03-23-2002, 02:25 AM

Quote:

Originally posted by tha_timinator
i can hardly imagine that those surfers that visit password-sites (the cheapest of the cheapest of the cheapest freeloaders out there) will EVER open their wallet AT ALL...

so in that way it'll still only be extra cost (bandwidth)

there's always popup hell

Oliver Klozov · 03-23-2002, 04:11 AM

Shared passwords may work for getting new members sometimes but hacked passwords are very different and will make you lose money.

Hacked passwords are passwords that are stolen from your site via a brute Force attack.

A Brute Force attack is when someone hits your site with thousands of usernames and passwords in the hopes of getting "lucky". Often they use a list of common passwords or whole password files stolen from someones pay site. Remember most people use the same username and password over and over again, so getting "lucky" is not that hard.

If someone steals a password from your site they are stealing a password from a valid paying customer, a customer that rebills every month. When you have to delete that password your blocking your paying customers access.

Think about it..........we all work so very hard to keep our rebilling customers happy why would you risk pissing that customer off by deleting his password?

The people who share passwords are not going to be rebilling anyways but the guy that is stealing valid, happy, paying customers passwords is costing you money.

You may not even know how much money your losing.

I have not even touched on the issue of increase server loads from the bonehead hackers that hit you hard and fast with a Brute Force Attacks.

Solution.......we are finishing a Unix/Linux program that blocks brute force attacks, even when those attacks are coming from multi proxy servers.

Stay tuned to www.noabusesoftware.com

Nothing there yet but coming soon!

Fatum · 03-23-2002, 04:31 AM

Quote:

there's always popup hell

Why use popup hell, make a mirror of your members area page and change all links to a blind link sponsor. The guy would click at least 3-5 links before he discoveres whats going on

Wiredoctor · 03-23-2002, 04:49 AM

Quote:

Originally posted by Fatum

Why use popup hell, make a mirror of your members area page and change all links to a blind link sponsor. The guy would click at least 3-5 links before he discoveres whats going on

Why even do that (which is not a bad idea my friend) but just fuck em and send them straight to an impression sponsor and get paid for everyone of the hits, plus you wont spend 1 cent on wasted bandwidth...

cheaters

Sleepy · 03-23-2002, 06:34 AM

Quote:

Originally posted by Wiredoctor

but just fuck em and send them straight to an impression sponsor and get paid for everyone of the hits

Care to recommend an impression sponsor who will accept that traffic ? I have tried that trick before but nobody ever wants traffic that shitty.

NetRodent · 03-23-2002, 10:27 AM

Quote:

Originally posted by Oliver Klozov

Solution.......we are finishing a Unix/Linux program that blocks brute force attacks, even when those attacks are coming from multi proxy servers.

Two decent ways to screw with people who try brute force attacks:

1. Drop the route to them... They can 'syn' all they want but they'll never get an 'ack'.

2. Start sending http 200 responses instead of the standard 401.

JakeR · 03-23-2002, 10:33 AM

We just shoot them off to 4free sponsors.

spacedog · 03-23-2002, 10:36 AM

Quote:

Originally posted by Sleepy

Care to recommend an impression sponsor who will accept that traffic ? I have tried that trick before but nobody ever wants traffic that shitty.

http://www.rawtocash.net/cgi-bin/signup.cgi?ref=11051

Rod · 03-23-2002, 11:59 AM

Quote:

Originally posted by spacedog

http://www.rawtocash.net/cgi-bin/signup.cgi?ref=11051

ACCOUNT CLOSED

LOL

YDG · 03-23-2002, 12:09 PM

Quote:

Originally posted by Wiredoctor

Why even do that (which is not a bad idea my friend) but just fuck em and send them straight to an impression sponsor and get paid for everyone of the hits, plus you wont spend 1 cent on wasted bandwidth...
cheaters

Anyone got any other per impression sponsor?
(Not second page hit tracking)

beemk · 03-23-2002, 12:15 PM

couldnt someone just make a program that blocks proxy servers from logging in? if they're using their isp you could just call them and tell the isp what they're doing it theres a good chance the isp will cancel their account. or better yet, take some of the proxy addresses, contact the admin of the proxy server and explain the situation and im sure the proxy server admin will be more than happy to give you their ip address, then call the isp. once these guys report other guys getting busted for this, they may think twice before they try and hack your site.

kmanrox · 03-23-2002, 12:17 PM

Quote:

Originally posted by Rod

ACCOUNT CLOSED

LOL

baahahahaha

Fatum · 03-23-2002, 12:58 PM

Quote:

ACCOUNT CLOSED

Thats the funniest shit i have ever see in this board
You are the man Spacedog!

Babaganoosh · 03-23-2002, 02:09 PM

Quote:

Proof that Spacedog is a spaz

ACCOUNT CLOSED

BWAAAAAHAHAHAHAHA. Nice work fruitpie

03-23-2002, 03:32 PM

baaaaaaawwwwaaaahhaahahhahaaahaahaaaaaaa

Jakke PNG · 03-23-2002, 03:41 PM

Spacedog's my hero.

tayloryum · 03-23-2002, 03:44 PM

use an htaccess file to redirect hacked password traffic to one of the join 4 free programs that are out there. bandwidth costs are not an issue and it might even make you a few bucks.

fuct · 03-23-2002, 08:25 PM

smack · 03-23-2002, 08:26 PM

hell yeah guys thanks. sorry i haven't been near a computer for couple hours to check this post again. i know it sounds like a newbie question and admitidaly it is

so i appreciate the response.

03-23-2002, 01:44 AM	#1
smack Push Porn Like Weight. Industry Role: Join Date: Mar 2002 Location: Inside .NET Posts: 10,652	hacked password sites. webmasters/webmistresses, if you could put an annual dollar amount on the loss of resources to hacked password sites, what would it be? i have heard that they may not actually a large threat? your opinions? __________________ Cry havoc and let slip the dogs of war. Last edited by smack; 03-23-2002 at 01:45 AM..

03-23-2002, 01:47 AM	#2
Wizzo 2011 GFY Hall of Fame! Industry Role: Join Date: Nov 2000 Location: Back in Texas! Posts: 15,224	IMO, they aren't that big of a problem. __________________ Looking for Opportunity!

03-23-2002, 01:52 AM	#3
Tanker Confirmed User Industry Role: Join Date: Nov 2000 Location: Oakville, Ontario, Canada Posts: 9,287	if your password protection is good you can make a fortune off of a few hacked passwords so there really not a loss there more of a gain all those surfers being redirected to the front end of the site __________________ Tanker ICQ 3427575 CCBTools Now featured in the CCBill.com APP STORE

03-23-2002, 02:23 AM	#4
tha_timinator Confirmed User Join Date: Jan 2001 Location: Amsterdam, the Netherlands Posts: 590	i can hardly imagine that those surfers that visit password-sites (the cheapest of the cheapest of the cheapest freeloaders out there) will EVER open their wallet AT ALL... so in that way it'll still only be extra cost (bandwidth) __________________ CELEBRITYSTART.COM

03-23-2002, 04:11 AM	#6
Oliver Klozov Confirmed User Join Date: Jul 2001 Location: San Diego, Ca. USA Posts: 629	Shared passwords may work for getting new members sometimes but hacked passwords are very different and will make you lose money. Hacked passwords are passwords that are stolen from your site via a brute Force attack. A Brute Force attack is when someone hits your site with thousands of usernames and passwords in the hopes of getting "lucky". Often they use a list of common passwords or whole password files stolen from someones pay site. Remember most people use the same username and password over and over again, so getting "lucky" is not that hard. If someone steals a password from your site they are stealing a password from a valid paying customer, a customer that rebills every month. When you have to delete that password your blocking your paying customers access. Think about it..........we all work so very hard to keep our rebilling customers happy why would you risk pissing that customer off by deleting his password? The people who share passwords are not going to be rebilling anyways but the guy that is stealing valid, happy, paying customers passwords is costing you money. You may not even know how much money your losing. I have not even touched on the issue of increase server loads from the bonehead hackers that hit you hard and fast with a Brute Force Attacks. Solution.......we are finishing a Unix/Linux program that blocks brute force attacks, even when those attacks are coming from multi proxy servers. Stay tuned to www.noabusesoftware.com Nothing there yet but coming soon! __________________ Babe-Bucks.com ICQ 895-80-702 oliversgirls at gmail.com

03-23-2002, 10:33 AM	#11
JakeR Confirmed User Join Date: Jun 2001 Location: il and nc Posts: 1,760	We just shoot them off to 4free sponsors.

03-23-2002, 12:15 PM	#15
beemk CLICK HERE Industry Role: Join Date: Jan 2002 Posts: 20,829	couldnt someone just make a program that blocks proxy servers from logging in? if they're using their isp you could just call them and tell the isp what they're doing it theres a good chance the isp will cancel their account. or better yet, take some of the proxy addresses, contact the admin of the proxy server and explain the situation and im sure the proxy server admin will be more than happy to give you their ip address, then call the isp. once these guys report other guys getting busted for this, they may think twice before they try and hack your site. __________________ I host with Vacares

03-23-2002, 03:32 PM	#19
X37375787 Guest Posts: n/a	baaaaaaawwwwaaaahhaahahhahaaahaahaaaaaaa

03-23-2002, 03:41 PM	#20
Jakke PNG ex-TeenGodFather Industry Role: Join Date: Nov 2001 Location: Suomi Finland Perkele Posts: 20,306	Spacedog's my hero. __________________ ..and I'm off.

03-23-2002, 03:44 PM	#21
tayloryum Confirmed User Join Date: Jan 2002 Location: Chicago, IL, USA Posts: 423	use an htaccess file to redirect hacked password traffic to one of the join 4 free programs that are out there. bandwidth costs are not an issue and it might even make you a few bucks. __________________ Free Live Web Cam Girls Content for Promotion These girls CONVERT LIKE CRAZY - do yourself a favor and sign-up today!

03-23-2002, 08:25 PM	#22
fuct Confirmed User Join Date: Dec 2001 Location: in a nice leather chair Posts: 203	.. __________________ code monkey

03-23-2002, 08:26 PM	#23
smack Push Porn Like Weight. Industry Role: Join Date: Mar 2002 Location: Inside .NET Posts: 10,652	hell yeah guys thanks. sorry i haven't been near a computer for couple hours to check this post again. i know it sounds like a newbie question and admitidaly it is so i appreciate the response. __________________ Cry havoc and let slip the dogs of war.