|   |   |   | ||||
| Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. | 
|    | 
| 
 | |||||||
| Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. | 
|  | Thread Tools | 
|  09-22-2006, 10:37 AM | #1 | 
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | 
				
				ADULTBLACKHAT: Comus gives away 13k webmaster emails
			 This post is related to http://www.gofuckyourself.com/showthread.php?t=636295 and is dedicated to sixzero?s friends from: Russia, China, Australia, New Zealand, Italy, USA, Germany, Amsterdam, Turkey, Korea, Europe, Asia, North America, South America, the Pacific and AfricaLol. Now, if this guy wasn?t so cocky maybe I would?ve just keept my mouth shut. But since he has no clear intention of taking care of this heres how you can get 13k submitter email addresses from Comus. If you read the gfy thread you will see that Comus has problems protecting some files which have no reason to be available to public, and according to sixzero they have no usefull information. Well, you guess, I tend to disagree. EDITED BY VENDZILLA You only need a line to get the emails from the file: awk -F?:? ?print $2′ submitlog.txt|sort -u Wait theres more, see: http://xxxonfire.com/comussites.html thats the list of all sites using Comus which you can easily fetch and download all submitlog.txt files. At the end of it you?ll have 13k unique webmaster emails. If you ever wondered where all your emails are fetched from that could be one source. If you are a webmaster running comus place an .htaccess file in the ct/includes directory with the line: deny from all, till sixzero fixes his shit, if ever. Stay tuned for more tips and tricks  Tune into http://www.adultblackhat.com for more things from the dark side. | 
|   |           | 
|  09-22-2006, 10:40 AM | #2 | 
| Butterfly Bucks Industry Role:  Join Date: Sep 2005 Location: Bangkok 
					Posts: 1,422
				 | Ooooooh I mean whoa! 
				__________________ 100% Real Thai Girls - Tiniest Pornstar in the world Thainee.com & Dream Teen Tussinee.com Asian Teens, Asian EMO, Asian G/Fs THAI GIRLS WILD   | 
|   |           | 
|  09-22-2006, 10:41 AM | #4 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
  
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 10:42 AM | #5 | 
| Now choke yourself! Industry Role:  Join Date: Apr 2006 
					Posts: 12,085
				 | Well, that log format is pretty retarded, as is storing the md5 hash. I've seen worse, though. It's not like you're allowed to directly input the computed MD5, and trying to find a key that matches for a hash collission would still take forever. Interesting post, regardless! 
				__________________ | 
|   |           | 
|  09-22-2006, 10:44 AM | #6 | 
| Confirmed User Join Date: Feb 2005 Location: Illinois 
					Posts: 577
				 | Damn good thing I don't use it. Gary | 
|   |           | 
|  09-22-2006, 10:44 AM | #7 | 
| Too lazy to set a custom title Industry Role:  Join Date: Sep 2003 
					Posts: 22,651
				 | well......fuck...... | 
|   |           | 
|  09-22-2006, 10:45 AM | #8 | 
| Confirmed User Join Date: Feb 2002 
					Posts: 5,042
				 | Drama       | 
|   |           | 
|  09-22-2006, 10:45 AM | #9 | 
| CRAZY MOFUKKA Industry Role:  Join Date: Jun 2006 
					Posts: 3,296
				 | wow, craziness | 
|   |           | 
|  09-22-2006, 10:46 AM | #10 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 but you've just got 13k emails you can spam. 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 10:47 AM | #11 | 
| So Fucking Banned Join Date: Oct 2003 Location: icq: 121189 
					Posts: 18,889
				 | I'd hit that. In fact I think I will right now. LOL j/k | 
|   |           | 
|  09-22-2006, 10:48 AM | #12 | 
| Biker Gnome Industry Role:  Join Date: Mar 2004 Location: cell#324 
					Posts: 23,200
				 | Raven, Tony has been notified of the problem, He didn't give away those email address's, you did! Tony is working on a patch for that with the new release. It's not very professional to put up a thread with emails like that, you should have contacted Tony with that, or me! 
				__________________ Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that | 
|   |           | 
|  09-22-2006, 10:49 AM | #13 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 10:50 AM | #14 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 Read the original thread. Tony was notified a shitload of time ago. He just needs to drop an .htaccess there no rocket sience. And you think I'm the only one that knows this shit ? You ever wondered were all the spam is comming from ? 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 10:51 AM | #15 | 
| Ryde or Die Industry Role:  Join Date: Dec 2002 Location: California-Shanghai 
					Posts: 19,568
				 | Thanks For The Email List!!! Awesome!@ | 
|   |           | 
|  09-22-2006, 10:53 AM | #16 | 
| Too lazy to set a custom title Industry Role:  Join Date: Dec 2004 Location: Happy in the dark. 
					Posts: 93,664
				 | Dammmmmmmmmmmmmmmmmmmmmmmm!! 
				__________________ Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted Windows VPS now available Great for TSS, Nifty Stats, remote work, virtual assistants, etc. | 
|   |           | 
|  09-22-2006, 10:55 AM | #17 | |
| Biker Gnome Industry Role:  Join Date: Mar 2004 Location: cell#324 
					Posts: 23,200
				 | Quote: 
 
				__________________ Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that | |
|   |           | 
|  09-22-2006, 10:55 AM | #18 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Lets put his retarted reply here so people know how much he cares. Quote: 
 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 10:56 AM | #19 | 
| So Fucking What Industry Role:  Join Date: Jan 2004 Location: Whore Island 
					Posts: 14,445
				 | The email list can be found by signing up for www.weconvert.com | 
|   |           | 
|  09-22-2006, 10:56 AM | #20 | |
| So Fucking Banned Join Date: Oct 2003 Location: icq: 121189 
					Posts: 18,889
				 | Quote: 
    | |
|   |           | 
|  09-22-2006, 10:57 AM | #21 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 But the vulnerability is there for long time and Tony full of himself said its nothing. 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 11:00 AM | #22 | |
| Now choke yourself! Industry Role:  Join Date: Apr 2006 
					Posts: 12,085
				 | Quote: 
 
				__________________ | |
|   |           | 
|  09-22-2006, 11:01 AM | #23 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 Actually I've been quite nice because I offered the webmasters and Tony the quick solution, wasn't I ?  Just drop an .htaccess in there. 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 11:02 AM | #24 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 11:05 AM | #25 | |
| Biker Gnome Industry Role:  Join Date: Mar 2004 Location: cell#324 
					Posts: 23,200
				 | Quote: 
 
				__________________ Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that | |
|   |           | 
|  09-22-2006, 11:06 AM | #26 | |
| Biker Gnome Industry Role:  Join Date: Mar 2004 Location: cell#324 
					Posts: 23,200
				 | Quote: 
 
				__________________ Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that | |
|   |           | 
|  09-22-2006, 11:10 AM | #27 | 
| Confirmed User Industry Role:  Join Date: Dec 2002 Location: in your head 
					Posts: 3,625
				 | Raven Core whats your personal problem with comus and or tony? im sure if you would have mailed us i would have caught that email too as i do read the support emails... So whats the problem, and whats your real nick? im sure the raven core is a nick you use to stir up shit...as it has 39 posts and is regged in sept 2006 :S 
				__________________ icq:148573096 skype:dabone2 email:boneless(a)mgpteam(.)com | 
|   |           | 
|  09-22-2006, 11:13 AM | #28 | 
| Biker Gnome Industry Role:  Join Date: Mar 2004 Location: cell#324 
					Posts: 23,200
				 | he registered today, first post he said he was going to start some shit 
				__________________ Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that | 
|   |           | 
|  09-22-2006, 11:14 AM | #29 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 I call it full disclosure. 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 11:16 AM | #30 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 Second Tony's answer to the original thread looked like he doesn't diserve to be announced. Afterall he has all his friends from Russia, China, Australia, New Zealand, Italy, USA, Germany, Amsterdam, Turkey, Korea, Europe, Asia, North America, South America, the Pacific and Africa watching his back. 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 11:18 AM | #31 | |
| Confirmed User Industry Role:  Join Date: Dec 2002 Location: in your head 
					Posts: 3,625
				 | Quote: 
 
				__________________ icq:148573096 skype:dabone2 email:boneless(a)mgpteam(.)com | |
|   |           | 
|  09-22-2006, 11:21 AM | #32 | |
| Registered User Join Date: Sep 2006 
					Posts: 45
				 | Quote: 
 Now fix that thing. 
				__________________ You suck at the interweb | |
|   |           | 
|  09-22-2006, 11:31 AM | #33 | 
| PostMaster General Join Date: Aug 2006 
					Posts: 10,781
				 | holy shit, is this forreal? 
				__________________ | 
|   |           | 
|  09-22-2006, 11:42 AM | #34 | 
| Confirmed User Join Date: Aug 2006 Location: Montevideo 
					Posts: 1,391
				 | I understand Vendzilla's point of view.  However, I do not agree that people who  used and/or paid for the software shouldn't know this. I have no experience with Comus, have very limited experience in the adult webmaster world, but have been around the Internet since 9600bps modems. Based on the little information I know, it is unlikely that the people using Comus would have gotten an email from the scripters saying that this information has been exposed. The downside of exposing a hole like this is that you also let people who are going to use the information for bad purposes know about it too. If that's the price people have to pay for getting to know that they've been exposed, then so be it; but by no means should this issue have gone unoticed by the customers of Comus. I do see a clear intention of Raven Core to give Comus a bad name, but he's not lying about the main issue: Comus has a hole. That's a fact. Furthermore, readers should not be distracted by the whole "Comus sucks"-themed posts and they should look and focus on the real problem. Call me Master of the Obvious, but that's the way I see it. The fact that I got to see the links that were posted in the first post confirmed the seriousness of the issue. If I hadn't seen them, I'd be calling bullshit or at least have my doubts of how bad the problem is.  | 
|   |           | 
|  09-22-2006, 11:59 AM | #35 | 
| Do Fun Shit. Industry Role:  Join Date: Dec 2004 Location: OC 
					Posts: 13,393
				 | How far away is the fix? Bad juju... 
				__________________  “I have the simplest tastes. I am always satisfied with the best.” -Oscar Wilde | 
|   |           | 
|  09-22-2006, 12:02 PM | #36 | 
| Ryde or Die Industry Role:  Join Date: Dec 2002 Location: California-Shanghai 
					Posts: 19,568
				 | this always happens with full security disclosures, if the makers of the software were warned and hadn't done anything in a timely manner to fix the hole .... then I think you can't blame the guy for making this public. | 
|   |           | 
|  09-22-2006, 12:17 PM | #37 | |
| Biker Gnome Industry Role:  Join Date: Mar 2004 Location: cell#324 
					Posts: 23,200
				 | Quote: 
 
				__________________ Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that | |
|   |           | 
|  09-22-2006, 12:23 PM | #38 | 
| FBOP Class Of 2013 Industry Role:  Join Date: Jan 2004 Location: bumfuck, ky 
					Posts: 35,562
				 | this hole has been there for a LONG fucking time, and sixzeros has talked about fixing it for the same amount of time....um...hello? when is enough enough? just fix the damn hole already, LOL, stop talking abut how you know it is there, and DO something about it! | 
|   |           | 
|  09-22-2006, 12:47 PM | #39 | 
| Pounding Googlebot Industry Role:  Join Date: Aug 2002 Location: Canada 
					Posts: 34,486
				 | Vendzilla, if you want to edit his post, you should maybe edit his site reference as the exploit is given there in full. WG 
				__________________ I play with Google. | 
|   |           | 
|  09-22-2006, 12:47 PM | #40 | |
| Damn Right I Kiss Ass! Industry Role:  Join Date: Dec 2003 Location: Cowtown, USA 
					Posts: 32,422
				 | Quote: 
 | |
|   |           | 
|  09-22-2006, 12:49 PM | #41 | 
| Confirmed User Join Date: May 2003 Location: USA 
					Posts: 6,195
				 | Sig spot secured. | 
|   |           | 
|  09-22-2006, 12:50 PM | #42 | |
| Confirmed User Join Date: Aug 2006 Location: Montevideo 
					Posts: 1,391
				 | Quote: 
 Furthermore, based on the posts here, this has been around for quite some time and the spectacularization that Raven Core did about the entire thing make me think few people know about it. Again, I don't want to stir the waters more, I completely understand your point of view, but I do not agree that this should go unnoticed. I know that I if were a custmer, I'd like to know about it. | |
|   |           | 
|  09-22-2006, 12:52 PM | #43 | |
| Confirmed User Join Date: Aug 2006 Location: Montevideo 
					Posts: 1,391
				 | Quote: 
 Furthermore, based on the posts here, this has been around for quite some time and the spectacularization that Raven Core did about the entire thing make me think few people know about it. Again, I don't want to stir the waters more, I completely understand your point of view, but I do not agree that this should go unnoticed. I know that I if were a custmer, I'd like to know about it. | |
|   |           | 
|  09-22-2006, 01:49 PM | #44 | 
| Too lazy to set a custom title Join Date: Jun 2004 Location: Brasil 
					Posts: 15,778
				 | this is really serious!!! 
				__________________ Do you need cheap, fast and reliable porn website hosting? Host Head is the way to go!! Asian Gay Special | Live on MSN - Live Webcam Chat | Live Adult Webcam Performances | MY SWEET BLACKS LIVE ON CAM Pukka Tranny | Tattooed Shemales | She's A He | Menu Porno | Porn Performances | All Chubby MY ICQ# 169833797 | 
|   |           | 
|  09-22-2006, 02:17 PM | #46 | 
| Confirmed User Industry Role:  Join Date: Sep 2002 
					Posts: 5,391
				 | o u t c h | 
|   |           | 
|  09-22-2006, 02:19 PM | #47 | 
| So Fucking Banned Join Date: Feb 2005 
					Posts: 4,448
				 | sig spot   | 
|   |           | 
|  09-22-2006, 02:20 PM | #48 | 
| ICQ: 197-556-237 Join Date: Jun 2003 Location: BRASIL !!! 
					Posts: 57,559
				 | Nice thread... 
				__________________ I'm just a newbie. | 
|   |           | 
|  09-22-2006, 02:23 PM | #49 | 
| Too lazy to set a custom title Industry Role:  Join Date: May 2006 Location: NY 
					Posts: 14,800
				 | 1234567890876543212345790 
				__________________ $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$ | 
|   |           | 
|  09-22-2006, 02:23 PM | #50 | 
| Too lazy to set a custom title Industry Role:  Join Date: Feb 2003 Location: NJ 
					Posts: 13,337
				 | That shit is old.   I thought he should have fixed this years ago. 
				__________________ ISeekGirls.com since 2005 | 
|   |           |