ePassporte: Another Lie. Proof Inside. (Drama) (Pics) - Page 2 - GoFuckYourself.com

darksoul · 04-27-2006, 09:07 AM

Quote:

Originally Posted by wonderman

I am still in process of withdrawing 7000 from my epassporte account. The fact that I can take only 300 dollars a day is sort of annoying. Worse than that is when it takes 6 days to get the money. That is way to long.

7000/300 = 23.33 which is nowhere close to 6

CDSmith · 04-27-2006, 10:00 AM

Quote:

Originally Posted by darksoul

7000/300 = 23.33 which is nowhere close to 6

Uh, I think he means it takes 6 days to recieve each $300 from the time he requests it.

If the rest of what he was saying is true, then you're right, it will take him over 23 requests of $300 to get all of his money.

And that to me sounds very ridiculous, if true.

GiveIntoMe · 04-27-2006, 10:58 AM

hahahahahahahahahahahahahahahahahahahahahahahahaha hahahahahahahahahahahahahahahahahahaha Gift Accounthahahahahahahahahahahahahahahahahahahahahah ahahahahahahahahahahahahahahahahahahahahahahahahah ahahahahaha

shaliza · 04-27-2006, 01:27 PM

Quote:

Originally Posted by minusonebit

You know what?

I always have thought that ePassporte's whole "scrambled passwords in the DB" story is bullshit. Now I know.

I signed into my account a second ago using the password they e-mailed me and went to change my password back so I can use "my" password to get into my account.

When I went to change it, I get this message:

Now, if they lost my password in this DB mess, how would the system know that I used that password before? Its lost, remember? So once again, ePassporte has blown smoke up my ass. Someone ain't tellin the truth.

What really happened, ePassporte? I cant wait to hear the explanation here.

Last week, ePassporte's LDAP server crashed and our backup was corrupted. The result: a number of account passwords were automatically reset. I know this issue was inconvenient for our account holders and we are extremely sorry for this. Most of you are able to login now and use your accounts again but if anyone is still having troubles, please feel free to contact me or Keyser and we will ensure your issue is handled immediately.

Were these accounts hacked??? NO! In fact, the database issue made it even harder for anyone to access any ePassporte account.

Some accounts were not effected by the crash however we were unable to differentiate between these accounts. Minusondebit, your account was one that was NOT effected but as I said we were unable to differentiate so we simply reset the password on accounts we thought would have an issue. We store the last three passwords with a one way encryption scheme. That means we can encrypt them, but we cannot decrypt them. We take the password that you enter and we encrypt it and compare it to the old encrypted password. If it matches, we don't let you use it again for security purposes.

I hope this answers your questions and everyone can put away their popcorn and milk duds.

pythonx · 04-27-2006, 01:36 PM

A password is mostly stored encrypted in a database, you can calculate hash-codes for a password and store this encrypted pass but it's not possible the other way around. So if passes are stored in a seperate database and the other DB lost it's data, than they can still compare passwords you try to use.

MontrealPimp · 04-27-2006, 01:50 PM

how come they are not using md4 passwords anymore?

European Lee · 04-27-2006, 02:05 PM

Quote:

Originally Posted by shaliza

Last week, ePassporte's LDAP server crashed and our backup was corrupted. The result: a number of account passwords were automatically reset. I know this issue was inconvenient for our account holders and we are extremely sorry for this. Most of you are able to login now and use your accounts again but if anyone is still having troubles, please feel free to contact me or Keyser and we will ensure your issue is handled immediately.

Were these accounts hacked??? NO! In fact, the database issue made it even harder for anyone to access any ePassporte account.

Some accounts were not effected by the crash however we were unable to differentiate between these accounts. Minusondebit, your account was one that was NOT effected but as I said we were unable to differentiate so we simply reset the password on accounts we thought would have an issue. We store the last three passwords with a one way encryption scheme. That means we can encrypt them, but we cannot decrypt them. We take the password that you enter and we encrypt it and compare it to the old encrypted password. If it matches, we don't let you use it again for security purposes.

I hope this answers your questions and everyone can put away their popcorn and milk duds.

That certainly would seem to explain the password issues however...

How does that explain all the recent emails people have been getting to their Epassporte email account addresses example; [email protected] containing links to pornsites in them?

Regards,

Lee

Michael O · 04-27-2006, 02:36 PM

Quote:

Originally Posted by European Lee

That certainly would seem to explain the password issues however...

How does that explain all the recent emails people have been getting to their Epassporte email account addresses example; [email protected] containing links to pornsites in them?

Regards,

Lee

When people forward their ePassporte email address all emails send to [email protected] is forwarded this is why they see spam emails forwarded thru ePassporte.
But there is a filter in place so these emails don't show up in their inbox at https://mail.epassporte.com

Like stated earlier Lee if you have any real concerns or problems with your account you are welcome to contact either Shalize or me.

V_RocKs · 04-27-2006, 02:58 PM

I like to eat paste.

minusonebit · 04-27-2006, 06:04 PM

Quote:

Originally Posted by shaliza

Last week, ePassporte's LDAP server crashed and our backup was corrupted. The result: a number of account passwords were automatically reset. I know this issue was inconvenient for our account holders and we are extremely sorry for this. Most of you are able to login now and use your accounts again but if anyone is still having troubles, please feel free to contact me or Keyser and we will ensure your issue is handled immediately.

Were these accounts hacked??? NO! In fact, the database issue made it even harder for anyone to access any ePassporte account.

Some accounts were not effected by the crash however we were unable to differentiate between these accounts. Minusondebit, your account was one that was NOT effected but as I said we were unable to differentiate so we simply reset the password on accounts we thought would have an issue. We store the last three passwords with a one way encryption scheme. That means we can encrypt them, but we cannot decrypt them. We take the password that you enter and we encrypt it and compare it to the old encrypted password. If it matches, we don't let you use it again for security purposes.

I hope this answers your questions and everyone can put away their popcorn and milk duds.

This does answer my questions. I am not really sure I can trust anything ePassporte says due to the history of past indescretions. But this at least is a reasonable explanation, so in absence of anything else, I'll accept it as though it were truth.

The only thing I still wonder about is your statement that my account was not one that was affected. I know for a fact that I was not able to login to my account after trying several times. Did I fat-finger my password each time I tried to login? Perhaps. Is it likely? I dont think so. Oddly enough, when I did the reset, everything was fine and dandy. I dont really care about this as its like crying over spilled milk now.

But I closed out my debit card this morning anyway, just to be safe. An ounce of prevention is worth a dumptruck load full of cure.

With regard to my password, so if I understand your response correctly, if I change my password three more times to something different each time, the third time will kick the oldest password out of the DB and I'll be able to return to using 'my' password?

minusonebit · 04-27-2006, 06:33 PM

Wrong thread.

gooddomains · 04-29-2006, 12:37 AM

always such a drama

Marshal · 04-29-2006, 04:07 AM

Quote:

Originally Posted by woj

After taking a moment to analyze the "evidence", I concluded there are 2 possible logical explanations to all this:

1. They are telling the truth (there were some database problems)

The database got corrupted, stuff like that happens. Normally what happens in a situation like that everyone panics for a min, then someone in the group realizes, "Wait a min, don't we have a backup from last night?" Database gets restored, missing data since the backup is recovered from the log files. End result: Everything is back to normal. However, everything was not back to normal, everything got recovered except the passwords. Also, it's worth noting, that certain accounts were not effected at all by this "database problem." I don't see any logical explanation for that under this scenario.

2. There was a hacking attempt (which may or may not have been successful)

Hacking attempt was detected and narrowed down to certain accounts. For example, brute force attack was detected, and a list of accounts with failed logins in the past 24 hours was compiled. As a precaution, passwords to effected accounts were changed to minimize possible damage. This explains why only certain accounts were effected.

I guess there are also other possible explanations, like programmer error for example. Programmer was doing work on the database, and accidently wiped out half the passwords. But in my opinion they would all fall into "1" category, database corruption that can be easilly recovered.

the voice of the sanity, at last!

darksoul · 04-29-2006, 04:23 AM

Quote:

Originally Posted by Keyser Soze

When people forward their ePassporte email address all emails send to [email protected] is forwarded this is why they see spam emails forwarded thru ePassporte.
But there is a filter in place so these emails don't show up in their inbox at https://mail.epassporte.com

Like stated earlier Lee if you have any real concerns or problems with your account you are welcome to contact either Shalize or me.

try again because epass doesn't accept outside emails ?
this is not from forwards.

04-27-2006, 10:58 AM	#53
GiveIntoMe Confirmed User Join Date: Jan 2006 Posts: 516	hahahahahahahahahahahahahahahahahahahahahahahahaha hahahahahahahahahahahahahahahahahahaha Gift Accounthahahahahahahahahahahahahahahahahahahahahah ahahahahahahahahahahahahahahahahahahahahahahahahah ahahahahaha __________________ Help me build www.MikesPornBlog.com

04-27-2006, 01:36 PM	#55
pythonx Confirmed User Join Date: Aug 2004 Posts: 430	A password is mostly stored encrypted in a database, you can calculate hash-codes for a password and store this encrypted pass but it's not possible the other way around. So if passes are stored in a seperate database and the other DB lost it's data, than they can still compare passwords you try to use.

04-27-2006, 01:50 PM	#56
MontrealPimp Confirmed User Join Date: Feb 2005 Posts: 937	how come they are not using md4 passwords anymore?

04-27-2006, 02:58 PM	#59
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,413	I like to eat paste.

04-27-2006, 06:33 PM	#61
minusonebit So Fucking Banned Join Date: Feb 2006 Location: [email protected] Posts: 7,391	Wrong thread.

04-29-2006, 12:37 AM	#62
gooddomains Too lazy to set a custom title Join Date: Jul 2003 Location: Netherlands Posts: 10,127	always such a drama