|
|
|
||||
|
Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. |
![]() |
|
|||||||
| Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. |
|
|
Thread Tools |
|
|
#1 |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
ADULTBLACKHAT: Comus gives away 13k webmaster emails
This post is related to http://www.gofuckyourself.com/showthread.php?t=636295 and is dedicated to sixzero?s friends from:
Russia, China, Australia, New Zealand, Italy, USA, Germany, Amsterdam, Turkey, Korea, Europe, Asia, North America, South America, the Pacific and AfricaLol. Now, if this guy wasn?t so cocky maybe I would?ve just keept my mouth shut. But since he has no clear intention of taking care of this heres how you can get 13k submitter email addresses from Comus. If you read the gfy thread you will see that Comus has problems protecting some files which have no reason to be available to public, and according to sixzero they have no usefull information. Well, you guess, I tend to disagree. EDITED BY VENDZILLA You only need a line to get the emails from the file: awk -F?:? ?print $2′ submitlog.txt|sort -u Wait theres more, see: http://xxxonfire.com/comussites.html thats the list of all sites using Comus which you can easily fetch and download all submitlog.txt files. At the end of it you?ll have 13k unique webmaster emails. If you ever wondered where all your emails are fetched from that could be one source. If you are a webmaster running comus place an .htaccess file in the ct/includes directory with the line: deny from all, till sixzero fixes his shit, if ever. Stay tuned for more tips and tricks Tune into http://www.adultblackhat.com for more things from the dark side. |
|
|
|
|
|
#2 |
|
Butterfly Bucks
Industry Role:
Join Date: Sep 2005
Location: Bangkok
Posts: 1,422
|
Ooooooh I mean whoa!
__________________
100% Real Thai Girls - Tiniest Pornstar in the world Thainee.com & Dream Teen Tussinee.com Asian Teens, Asian EMO, Asian G/Fs THAI GIRLS WILD
|
|
|
|
|
|
#4 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
__________________
You suck at the interweb |
|
|
|
|
|
|
#5 |
|
Now choke yourself!
Industry Role:
Join Date: Apr 2006
Posts: 12,085
|
Well, that log format is pretty retarded, as is storing the md5 hash.
I've seen worse, though. It's not like you're allowed to directly input the computed MD5, and trying to find a key that matches for a hash collission would still take forever. Interesting post, regardless!
__________________
|
|
|
|
|
|
#6 |
|
Confirmed User
Join Date: Feb 2005
Location: Illinois
Posts: 577
|
Damn good thing I don't use it.
Gary |
|
|
|
|
|
#7 |
|
Too lazy to set a custom title
Industry Role:
Join Date: Sep 2003
Posts: 22,651
|
well......fuck......
|
|
|
|
|
|
#8 |
|
Confirmed User
Join Date: Feb 2002
Posts: 5,042
|
Drama
|
|
|
|
|
|
#9 |
|
CRAZY MOFUKKA
Industry Role:
Join Date: Jun 2006
Posts: 3,296
|
wow, craziness
|
|
|
|
|
|
#10 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
but you've just got 13k emails you can spam.
__________________
You suck at the interweb |
|
|
|
|
|
|
#11 |
|
So Fucking Banned
Join Date: Oct 2003
Location: icq: 121189
Posts: 18,889
|
I'd hit that.
In fact I think I will right now. LOL j/k |
|
|
|
|
|
#12 |
|
Biker Gnome
Industry Role:
Join Date: Mar 2004
Location: cell#324
Posts: 23,200
|
Raven, Tony has been notified of the problem, He didn't give away those email address's, you did! Tony is working on a patch for that with the new release. It's not very professional to put up a thread with emails like that, you should have contacted Tony with that, or me!
__________________
Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that |
|
|
|
|
|
#13 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
__________________
You suck at the interweb |
|
|
|
|
|
|
#14 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
Read the original thread. Tony was notified a shitload of time ago. He just needs to drop an .htaccess there no rocket sience. And you think I'm the only one that knows this shit ? You ever wondered were all the spam is comming from ?
__________________
You suck at the interweb |
|
|
|
|
|
|
#15 |
|
Ryde or Die
Industry Role:
Join Date: Dec 2002
Location: California-Shanghai
Posts: 19,568
|
Thanks For The Email List!!! Awesome!@
|
|
|
|
|
|
#16 |
|
Too lazy to set a custom title
Industry Role:
Join Date: Dec 2004
Location: Happy in the dark.
Posts: 93,648
|
Dammmmmmmmmmmmmmmmmmmmmmmm!!
__________________
Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted Windows VPS now available Great for TSS, Nifty Stats, remote work, virtual assistants, etc. |
|
|
|
|
|
#17 | |
|
Biker Gnome
Industry Role:
Join Date: Mar 2004
Location: cell#324
Posts: 23,200
|
Quote:
__________________
Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that |
|
|
|
|
|
|
#18 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Lets put his retarted reply here so people know how much he cares.
Quote:
__________________
You suck at the interweb |
|
|
|
|
|
|
#19 |
|
So Fucking What
Industry Role:
Join Date: Jan 2004
Location: Whore Island
Posts: 14,445
|
The email list can be found by signing up for www.weconvert.com
|
|
|
|
|
|
#20 | |
|
So Fucking Banned
Join Date: Oct 2003
Location: icq: 121189
Posts: 18,889
|
Quote:
![]() |
|
|
|
|
|
|
#21 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
But the vulnerability is there for long time and Tony full of himself said its nothing.
__________________
You suck at the interweb |
|
|
|
|
|
|
#22 | |
|
Now choke yourself!
Industry Role:
Join Date: Apr 2006
Posts: 12,085
|
Quote:
__________________
|
|
|
|
|
|
|
#23 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
Actually I've been quite nice because I offered the webmasters and Tony the quick solution, wasn't I ? Just drop an .htaccess in there.
__________________
You suck at the interweb |
|
|
|
|
|
|
#24 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
__________________
You suck at the interweb |
|
|
|
|
|
|
#25 | |
|
Biker Gnome
Industry Role:
Join Date: Mar 2004
Location: cell#324
Posts: 23,200
|
Quote:
__________________
Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that |
|
|
|
|
|
|
#26 | |
|
Biker Gnome
Industry Role:
Join Date: Mar 2004
Location: cell#324
Posts: 23,200
|
Quote:
__________________
Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that |
|
|
|
|
|
|
#27 |
|
Confirmed User
Industry Role:
Join Date: Dec 2002
Location: in your head
Posts: 3,625
|
Raven Core whats your personal problem with comus and or tony?
im sure if you would have mailed us i would have caught that email too as i do read the support emails... So whats the problem, and whats your real nick? im sure the raven core is a nick you use to stir up shit...as it has 39 posts and is regged in sept 2006 :S
__________________
icq:148573096 skype:dabone2 email:boneless(a)mgpteam(.)com |
|
|
|
|
|
#28 |
|
Biker Gnome
Industry Role:
Join Date: Mar 2004
Location: cell#324
Posts: 23,200
|
he registered today, first post he said he was going to start some shit
__________________
Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that |
|
|
|
|
|
#29 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
I call it full disclosure.
__________________
You suck at the interweb |
|
|
|
|
|
|
#30 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
Second Tony's answer to the original thread looked like he doesn't diserve to be announced. Afterall he has all his friends from Russia, China, Australia, New Zealand, Italy, USA, Germany, Amsterdam, Turkey, Korea, Europe, Asia, North America, South America, the Pacific and Africa watching his back.
__________________
You suck at the interweb |
|
|
|
|
|
|
#31 | |
|
Confirmed User
Industry Role:
Join Date: Dec 2002
Location: in your head
Posts: 3,625
|
Quote:
__________________
icq:148573096 skype:dabone2 email:boneless(a)mgpteam(.)com |
|
|
|
|
|
|
#32 | |
|
Registered User
Join Date: Sep 2006
Posts: 45
|
Quote:
Now fix that thing.
__________________
You suck at the interweb |
|
|
|
|
|
|
#33 |
|
PostMaster General
Join Date: Aug 2006
Posts: 10,781
|
holy shit, is this forreal?
__________________
|
|
|
|
|
|
#34 |
|
Confirmed User
Join Date: Aug 2006
Location: Montevideo
Posts: 1,391
|
I understand Vendzilla's point of view. However, I do not agree that people who used and/or paid for the software shouldn't know this.
I have no experience with Comus, have very limited experience in the adult webmaster world, but have been around the Internet since 9600bps modems. Based on the little information I know, it is unlikely that the people using Comus would have gotten an email from the scripters saying that this information has been exposed. The downside of exposing a hole like this is that you also let people who are going to use the information for bad purposes know about it too. If that's the price people have to pay for getting to know that they've been exposed, then so be it; but by no means should this issue have gone unoticed by the customers of Comus. I do see a clear intention of Raven Core to give Comus a bad name, but he's not lying about the main issue: Comus has a hole. That's a fact. Furthermore, readers should not be distracted by the whole "Comus sucks"-themed posts and they should look and focus on the real problem. Call me Master of the Obvious, but that's the way I see it. The fact that I got to see the links that were posted in the first post confirmed the seriousness of the issue. If I hadn't seen them, I'd be calling bullshit or at least have my doubts of how bad the problem is. ![]() |
|
|
|
|
|
#35 |
|
Do Fun Shit.
Industry Role:
Join Date: Dec 2004
Location: OC
Posts: 13,393
|
How far away is the fix?
Bad juju...
__________________
![]() “I have the simplest tastes. I am always satisfied with the best.” -Oscar Wilde |
|
|
|
|
|
#36 |
|
Ryde or Die
Industry Role:
Join Date: Dec 2002
Location: California-Shanghai
Posts: 19,568
|
this always happens with full security disclosures, if the makers of the software were warned and hadn't done anything in a timely manner to fix the hole .... then I think you can't blame the guy for making this public.
|
|
|
|
|
|
#37 | |
|
Biker Gnome
Industry Role:
Join Date: Mar 2004
Location: cell#324
Posts: 23,200
|
Quote:
__________________
Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that |
|
|
|
|
|
|
#38 |
|
FBOP Class Of 2013
Industry Role:
Join Date: Jan 2004
Location: bumfuck, ky
Posts: 35,562
|
this hole has been there for a LONG fucking time, and sixzeros has talked about fixing it for the same amount of time....um...hello? when is enough enough? just fix the damn hole already, LOL, stop talking abut how you know it is there, and DO something about it!
|
|
|
|
|
|
#39 |
|
Pounding Googlebot
Industry Role:
Join Date: Aug 2002
Location: Canada
Posts: 34,486
|
Vendzilla, if you want to edit his post, you should maybe edit his site reference as the exploit is given there in full.
WG
__________________
I play with Google. |
|
|
|
|
|
#40 | |
|
Damn Right I Kiss Ass!
Industry Role:
Join Date: Dec 2003
Location: Cowtown, USA
Posts: 32,421
|
Quote:
|
|
|
|
|
|
|
#41 |
|
Confirmed User
Join Date: May 2003
Location: USA
Posts: 6,195
|
Sig spot secured.
|
|
|
|
|
|
#42 | |
|
Confirmed User
Join Date: Aug 2006
Location: Montevideo
Posts: 1,391
|
Quote:
Furthermore, based on the posts here, this has been around for quite some time and the spectacularization that Raven Core did about the entire thing make me think few people know about it. Again, I don't want to stir the waters more, I completely understand your point of view, but I do not agree that this should go unnoticed. I know that I if were a custmer, I'd like to know about it. |
|
|
|
|
|
|
#43 | |
|
Confirmed User
Join Date: Aug 2006
Location: Montevideo
Posts: 1,391
|
Quote:
Furthermore, based on the posts here, this has been around for quite some time and the spectacularization that Raven Core did about the entire thing make me think few people know about it. Again, I don't want to stir the waters more, I completely understand your point of view, but I do not agree that this should go unnoticed. I know that I if were a custmer, I'd like to know about it. |
|
|
|
|
|
|
#44 |
|
Too lazy to set a custom title
Join Date: Jun 2004
Location: Brasil
Posts: 15,778
|
this is really serious!!!
__________________
Do you need cheap, fast and reliable porn website hosting? Host Head is the way to go!! Asian Gay Special | Live on MSN - Live Webcam Chat | Live Adult Webcam Performances | MY SWEET BLACKS LIVE ON CAM Pukka Tranny | Tattooed Shemales | She's A He | Menu Porno | Porn Performances | All Chubby MY ICQ# 169833797 |
|
|
|
|
|
#46 |
|
Confirmed User
Industry Role:
Join Date: Sep 2002
Posts: 5,391
|
o u t c h
|
|
|
|
|
|
#47 |
|
So Fucking Banned
Join Date: Feb 2005
Posts: 4,448
|
sig spot
|
|
|
|
|
|
#48 |
|
ICQ: 197-556-237
Join Date: Jun 2003
Location: BRASIL !!!
Posts: 57,559
|
Nice thread...
__________________
I'm just a newbie. |
|
|
|
|
|
#49 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2006
Location: NY
Posts: 14,800
|
1234567890876543212345790
__________________
$$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$ |
|
|
|
|
|
#50 |
|
Too lazy to set a custom title
Industry Role:
Join Date: Feb 2003
Location: NJ
Posts: 13,337
|
That shit is old. I thought he should have fixed this years ago.
__________________
ISeekGirls.com since 2005 |
|
|
|