Pennywize type solutions - GoFuckYourself.com

rock-reed · 06-20-2006, 10:02 PM

Hello everyone...

We know that Pennywize/Trafficwize is an industry solution for protecting your sites.

But was wondering... Are there any other good options?

Thank you for all that reply.

Jace · 06-20-2006, 10:06 PM

Strongboxxx man...the ONLY way to go

Quote:

How does the Strongbox security systemtm compare to PennyWize?
First off, the Strongbox security systemtm isn't really directly compareable to PennyWize or anything else out there that I know of. To explain why, I have to get a little technical. Before I do, let me point out that with the Strongbox security systemtm there is no monthly fee and no reliance on someone elses server for your protection. Pennywize is an old solution to an old problem. The script kiddies, real hackers, and just plain password sites figured out how to beat PennyWize around 1999-2000. As more and more password sites and software did their end runs around PennyWize, we began developing the Strongbox security systemtm as the next generation in security. Now for the technical part: Pennywize and similar services are needed because most web sites today use something called "Basic Authentication", which is implemented in a part of Apache called "mod_auth". This "Basic Authentication" is the system where the gray box pops up asking for your username and password. When the designers of mod_auth first released the design for that system, they were very careful to point out that it was not intended to be secure. It was intended to be a very basic system that could be used to put a password on your stats page until something better was designed. One major weakness is that Basic Authentication - the pop up gray box - does not distinguish between the two main phases that you learn about in security 101. The first day of a computer security course you'll hear about the two phases of "authentication", making sure the user is who they say they are, and "authorization", checking if they are allowed to access this particular page, etc. The authentication phase is when they login, the authorization happens every time they view a page or image. With basic auth, they never login. Their username and password is sent by the browser every time it requests a page or image. Because they never actually login, you never get to thoroughly check them out. For example, the Strongbox security systemtm can analyze which countries login requests are coming from, something that the monthly fee services cannot do because of the hit-by-hit analysis their old fashioned approach requires. There are a lot of other problems too, like the fact that the whole thing is based on a very short password that can be shared. Pennywize and similar programs try to tape up the holes in basic auth. That's a very tall order, because basic auth is built like a chain link fence - way too many holes to try to keep taped up. PennyWize and similar programs end up working like a burglar alarm inside the fence - trying to detect an intruder after they get in and then trying to deal with them after it's too late. the Strongbox security systemtm, on the other hand, gets rid of the whole "basic authentication" fence and puts up a thick brick wall instead. It doesn't tape up any holes, because it throws that fence full of holes in the trash pile behind the woodshed and puts in it's own far superior system. PennyWize and similar systems are also easily defeated by proxy based attacks. See the above question about proxies.

http://www.bettercgi.com/strongbox/index.html

Tat2Jr · 06-20-2006, 10:56 PM

What Jace said.... strongbox is the best.... hand's down. And Ray rocks the support like no other.

Pennywize is the same as putting up a hand written note asking them to not enter if they haven't paid compaired to strongbox.

http://www.bettercgi.com/strongbox/index.html

Jakke PNG · 06-20-2006, 10:57 PM

Yeah, we also use strongbox, and it's a kick-ass software.

rock-reed · 06-20-2006, 11:39 PM

Jace,
and the guys...

Thank you so much for opening our eyes to new options!

Kind regards!
And thanks AGAIN!

breaker · 06-20-2006, 11:55 PM

I switched from Pennywize to ProxyPass. Great support!

Shoehorn! · 06-21-2006, 12:13 AM

Quote:

Originally Posted by Jace

Strongboxxx man...the ONLY way to go

http://www.bettercgi.com/strongbox/index.html

I agree.

06-20-2006, 10:02 PM	#1
rock-reed Confirmed User Join Date: May 2005 Posts: 1,892	Pennywize type solutions Hello everyone... We know that Pennywize/Trafficwize is an industry solution for protecting your sites. But was wondering... Are there any other good options? Thank you for all that reply. __________________ --- Ethnic niche? Black-Asian-Latina ? Contact me and lets talk traffic. rockreed@ that thing they call the google mail When you E-mail Me, PLZZZZ make the Subject Title: >>>>>> GFY! So I do not lose you in Spam.

06-20-2006, 10:56 PM	#3
Tat2Jr Confirmed User Join Date: Feb 2001 Location: Sunny California Posts: 4,882	What Jace said.... strongbox is the best.... hand's down. And Ray rocks the support like no other. Pennywize is the same as putting up a hand written note asking them to not enter if they haven't paid compaired to strongbox. http://www.bettercgi.com/strongbox/index.html __________________ NICHE MONEY >> Ass Worship • Panties • Solo Teen • Pantyhose Serving up exclusive fetish sites since 1997!

06-20-2006, 10:57 PM	#4
Jakke PNG ex-TeenGodFather Industry Role: Join Date: Nov 2001 Location: Suomi Finland Perkele Posts: 20,306	Yeah, we also use strongbox, and it's a kick-ass software. __________________ ..and I'm off.

06-20-2006, 11:39 PM	#5
rock-reed Confirmed User Join Date: May 2005 Posts: 1,892	Jace, and the guys... Thank you so much for opening our eyes to new options! Kind regards! And thanks AGAIN! __________________ --- Ethnic niche? Black-Asian-Latina ? Contact me and lets talk traffic. rockreed@ that thing they call the google mail When you E-mail Me, PLZZZZ make the Subject Title: >>>>>> GFY! So I do not lose you in Spam.

06-20-2006, 11:55 PM	#6
breaker Confirmed User Join Date: Oct 2003 Location: .EU Fiasco Posts: 652	I switched from Pennywize to ProxyPass. Great support! __________________ Cash Breaker Latinas Deliciosas Blonde Loves Black She's Fuckable Fresh Blowjobs ICQ: 147104800