CCBill Password Management Crush!!! - GoFuckYourself.com

ATX_Soldier · 07-10-2002, 11:55 PM

Do you guys still think that CCBill is one of the most trusted names in our Industry?
You are tricked, what's not true.
Their PASSWORD MANAGEMENT IS CRUSHED!!!!!!!!!!!!
They suck a lot of bandwidth and you loose real money while you sleep. Wake
up!
Don't believe me? Follow these Instructions and be surprised:

1. Check these sites for example:
http://www.keeganskky.com
http://www.teencoreclub.com
http://www.cumonherface.com

2. Find 'Join us' page and click 'Instant credit card with CCBill' button
there.
3. Type anything what do you like in subscription fields and click 'submit
order' button.
4. You'll get confirmSignup page. Don't hit 'Process Transaction' button
(!), simply copy username:password and go to Member zone and enjoy with
exclusive superb content for free! After 60-90 min CCBill will close your
account but you can repeat the procedure and watch their sites as many times
as you'd like!

I suppose all webmasters who work with CCBill need to check their sites too
because this information can be used by password traders and other dark men.

Lensman · 07-11-2002, 12:02 AM

Interesting if true.

drunkmonkey · 07-11-2002, 12:06 AM

I just tested it on some of my sites and it does work.

FATPad · 07-11-2002, 12:11 AM

Shit...maybe I was wrong...

Nina · 07-11-2002, 12:12 AM

This is very scary.

Luckily it didn't work on my own site but when I went to cumonherface.com it did work. Someone at ccbill should look into this.

ace0r · 07-11-2002, 12:12 AM

it works

FATPad · 07-11-2002, 12:16 AM

Yep. Sure does.

Babaganoosh · 07-11-2002, 12:25 AM

Shit, that's just a simple programming mistake, but what a mistake to make!!

Note to CCBill: Might want to wait to add the authentication info to the .htpasswd file AFTER the transaction has been successfully processed ;)

Theo · 07-11-2002, 12:36 AM

sweetcuties · 07-11-2002, 12:45 AM

I can't get the shit to work, I must be an idiot

Gutterboy · 07-11-2002, 12:50 AM

Damn, good catch ATX!

Mr.Fiction · 07-11-2002, 12:55 AM

My signup form won't let me test it. When I enter fake info it tells me I have the wrong address, or the wrong credit card number or something else. Too much hassle.

On edit: It works on the sites he listed. I guess it should work on our site too if I could figure it out.

buddyII · 07-11-2002, 01:11 AM

L O fucking L

HAHAH, CCBILL sucks ass!

#1 processor my ass, what a fucking joke. Those dipshits at ccbill couldnt make a good script if thier lives depended on it. I feel bad for alot of you people that use them. I might just spam 3 million people and give them the instructions on how to get into the members areas on all ccbill processed sites.

www.ccbill.com 'members area? whats that?'
lol

funkmaster · 07-11-2002, 01:12 AM

no, doesn´t work on our sites, something stinks in here.

funkmaster · 07-11-2002, 01:14 AM

"I might just spam 3 million people and give them the instructions"

... now it stinks even more.

[Labret] · 07-11-2002, 01:23 AM

ahahaah found a few that work, found a few that dont.

Bizarre!

funkmaster · 07-11-2002, 01:28 AM

... could it be that the 3 sites above are running in ccbill´s test mode ??

jimmy3way · 07-11-2002, 01:40 AM

SHOCKING!!!!!

Well actually the shocking thing is how bad their member's area is!

Jak · 07-11-2002, 01:59 AM

Can't get it to work on our sites but I was under the impression that CCBill switched to a new scheme anyway which is what we're using. Maybe some sites haven't switched yet..

Jak

Juge · 07-11-2002, 05:03 AM

Oh my god, it works!!

This is insane!

Trax · 07-11-2002, 05:19 AM

unbelieveable
it really works
HOW STONED MUST A PROGRAMMER BE TO WRITE THIS KIND OF SHIT CODE.
damn ccbill.... you better shutdown your system or hire some REAL programmers... damn

Trax · 07-11-2002, 05:23 AM

anyone tried this with ibill??

Juge · 07-11-2002, 05:24 AM

I just tried it on a few more sites, and they ALL WORK!

I hope I can't get in shit for this - after all, I DIDN'T press 'confirm', right? They've recorded my IP, though, but that shouldn't matter.

What do you guys think?

2891_Bot · 07-11-2002, 05:31 AM

to buddyII:
How about 3 million surfers?

Right now!
to all: iBill is ok, but ...

playa · 07-11-2002, 05:40 AM

i found that this only works with CCBill's new Custom forms pages

Juge · 07-11-2002, 06:08 AM

The password does fail after 30 minutes or so, and it doesn't allow me to do it again, which is good, I guess... must be cuz I'm on the same IP.

Turf · 07-11-2002, 06:15 AM

damn will post this one on pornpassforum or whats it called... thats should really bring some surfers in :D

but ouch.. what a fuck up to make... bet your sweet ass some programmer has mighty red ears and a job he is missing once they hear about this one...

Mr.Fiction · 07-11-2002, 06:35 AM

Quote:

Originally posted by Juge
I just tried it on a few more sites, and they ALL WORK!

I hope I can't get in shit for this - after all, I DIDN'T press 'confirm', right? They've recorded my IP, though, but that shouldn't matter.

What do you guys think?

Kimmy Kim is on her way to your house right now. Her last job for CC Bill will be to permanently "terminate your account". Get out while you still can.

Cement Head · 07-11-2002, 06:45 AM

CCBILL = LAME

AbeFroman · 07-11-2002, 07:22 AM

See! There ARE still some 3rd party processors that allow free trials.

My members area sucks too. Can I have your fake passwords? I could trade them to my cable guy for a free chip.

nocostporn · 07-11-2002, 07:31 AM

damn... business crusher

tha_timinator · 07-11-2002, 07:47 AM

WHOEHAHAHAHAAHAA!!! J_E_Z_U_S C_H_R_I_S_T !!!

this is insane! i wouldn't even have made such a mistake 8 years ago when i first started programming BASIC :D :D

gothweb · 07-11-2002, 07:53 AM

Tried this on one of the sites, got a username and password. Tried this on one of my sites, which uses the new CCBill forms, and it said "Invalid Card". So I appear to be safe... Still: Spooky shit.

Trax · 07-11-2002, 07:59 AM

i donno if i am the only one here.. but i would finally like to here a sentence or two from ccbill......

eroswebmaster · 07-11-2002, 08:13 AM

I believe KimmyKim is busy on other more IMPORTANT issues like message board flame wars.

2891_Bot · 07-11-2002, 08:38 AM

Quote:

Originally posted by Trax
Our original content is now available for your websites

with CCBILL off sure!!!

alias · 07-11-2002, 08:40 AM

l33t password d00dz have known this for a while im guessing

Trax · 07-11-2002, 08:56 AM

Quote:

Originally posted by 2891_Bot

with CCBILL off sure!!!

i did not say that

Rip · 07-11-2002, 08:57 AM

Maybe it only works on some sites, it does not work on any of my sites

Boy those are lame ass paysites inside, holy crap

who would want a free password to those?

Goonx · 07-11-2002, 09:00 AM

Something stincks here, and its not CCBILL (or me). All those sites have the new custom signup forms which are generated from the admin area. Seconed they are setup all on unix/linux server. This thing doesnt work on sites that are on NT systems.

you might wanna blame unix/linux/apache or the actual asshole that setup the signup forms before you jump on ccbill.

My seconed option is: for "some reason" somebody wants you to go those sites and signup for them.

Thats all for now.

Sly_RJ · 07-11-2002, 09:19 AM

Quote:

Originally posted by Goonx
Something stincks here, and its not CCBILL (or me). All those sites have the new custom signup forms which are generated from the admin area. Seconed they are setup all on unix/linux server. This thing doesnt work on sites that are on NT systems.

you might wanna blame unix/linux/apache or the actual asshole that setup the signup forms before you jump on ccbill.

My seconed option is: for "some reason" somebody wants you to go those sites and signup for them.

Thats all for now.

Yes, let's blame the operating system because the programmer was too stupid to work around any security holes.

SeanE · 07-11-2002, 09:29 AM

I guess I am going to have to stop lurking so I can post on this issue. ;-)

In trying to account for all possible sign-up scenarios, CCBill determined
that is was important to "reserve" a username once it was entered, but prior
to confirmation. This was done to prevent multiple sign-ups with the same
user name occurring simultaneously. This feature was "added" to the new
custom forms only. This did not affect any client using our older sign-up
systems.

Unfortunately, as we were upgrading another portion of our systems last
night, this feature began to insert the customer supplied username and
password into the database. As a fail safe, we have always had a cron
running every 30 - 60 minutes to eliminate or update username and password
data, and therefore, consumers who discovered this error were only able to
gain access for a limited period of time. This error is currently being
fixed.

Again, we would like to stress that only clients utilizing our new custom
form system may have been affected and, even in that case, it should only be
those who utilize confirmation pages. If any client affected by this issue
needs to speak to me directly, please contact me here at CCBill

Sean Eggert
CCBill Account Rep.
888-906-0666 ext. 158
84769138 icq

BJ · 07-11-2002, 09:37 AM

Quote:

As a fail safe, we have always had a cron
running every 30 - 60 minutes to eliminate or update username and password
data, and therefore, consumers who discovered this error were only able to
gain access for a limited period of time

It only takes me 30-60 seconds to whack off;)

2891_Bot · 07-11-2002, 09:49 AM

look this...
http://ccbillcrash.clickmyporn.com/

don't kill me it's not spam

Juge · 07-11-2002, 10:05 AM

Quote:

Originally posted by Mr.Fiction
Kimmy Kim is on her way to your house right now. Her last job for CC Bill will be to permanently "terminate your account". Get out while you still can.

Uh, oh!

SeanE · 07-11-2002, 10:07 AM

The system has been updated, and the problem is now fixed.

Again, anyone that would like to contact me directly please feel free to call or icq.

888 906 0666 ext. 158

84769138 icq

Thanks!

SexySira · 07-11-2002, 10:29 AM

Confirmed.... I have CCBill custom forms, and it does not work on mine. However, I did get an email a few days ago from a guy who tried to sign up and said his password only worked for 45 min or so. He never did actually sign up until yesterday, so it must have been the case until they now fixed it. Thanks CCBill!, and thanks to ATX_Soldier for posting this.

TaDoW · 07-11-2002, 10:53 AM

It don't be do workin on mine

Sleepy · 07-11-2002, 11:07 AM

If you want to do yourself a favor remove the confirmation screen regardless and use the ccbill user/pass generator. They dont get the user/pass until they have been charged and they cant pick stupid usernames like "qwerty" or "asdfg".

I know some other webmasters probably wonder if the random user/pass generator bothers members - the answer for me has been "no" they do not. In fact, nobody has ever complained once and password theft is mostly a dead issue for us now.

Brad Mitchell · 07-11-2002, 11:16 AM

Sean's a Pimp....

...congrats on making the cover of Klixxx! Looking forward to partying in August

07-11-2002, 12:11 AM	#4
FATPad Confirmed User Join Date: Oct 2001 Posts: 6,693	Shit...maybe I was wrong... __________________ <a href="http://www.adultcontent.co.uk">Adult Content UK - Great British Content</a> Last edited by FATPad; 07-11-2002 at 12:13 AM..

07-11-2002, 12:16 AM	#7
FATPad Confirmed User Join Date: Oct 2001 Posts: 6,693	Yep. Sure does. __________________ <a href="http://www.adultcontent.co.uk">Adult Content UK - Great British Content</a>

07-11-2002, 12:25 AM	#8
Babaganoosh ♥♥♥ Likes Hugs ♥♥♥ Industry Role: Join Date: Nov 2001 Location: /home Posts: 15,841	Shit, that's just a simple programming mistake, but what a mistake to make!! Note to CCBill: Might want to wait to add the authentication info to the .htpasswd file AFTER the transaction has been successfully processed ;) Last edited by Armed & Hammered; 07-11-2002 at 12:26 AM..

07-11-2002, 12:36 AM	#9
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	. Last edited by Theo; 07-11-2002 at 12:43 AM..

07-11-2002, 12:45 AM	#10
sweetcuties Confirmed User Join Date: Feb 2002 Location: Somewhere Posts: 5,859	I can't get the shit to work, I must be an idiot __________________

07-10-2002, 11:55 PM	#1
ATX_Soldier Registered User Join Date: Jul 2002 Posts: 2	CCBill Password Management Crush!!! Do you guys still think that CCBill is one of the most trusted names in our Industry? You are tricked, what's not true. Their PASSWORD MANAGEMENT IS CRUSHED!!!!!!!!!!!! They suck a lot of bandwidth and you loose real money while you sleep. Wake up! Don't believe me? Follow these Instructions and be surprised: 1. Check these sites for example: http://www.keeganskky.com http://www.teencoreclub.com http://www.cumonherface.com 2. Find 'Join us' page and click 'Instant credit card with CCBill' button there. 3. Type anything what do you like in subscription fields and click 'submit order' button. 4. You'll get confirmSignup page. Don't hit 'Process Transaction' button (!), simply copy username:password and go to Member zone and enjoy with exclusive superb content for free! After 60-90 min CCBill will close your account but you can repeat the procedure and watch their sites as many times as you'd like! I suppose all webmasters who work with CCBill need to check their sites too because this information can be used by password traders and other dark men.

07-11-2002, 12:02 AM	#2
Lensman GFY Chaperone Join Date: Jan 2001 Location: Adult.com Posts: 9,846	Interesting if true.

07-11-2002, 12:06 AM	#3
drunkmonkey Confirmed User Join Date: Feb 2002 Location: behind you Posts:1,075,324 Posts: 799	I just tested it on some of my sites and it does work.

07-11-2002, 12:12 AM	#5
Nina Confirmed User Join Date: Mar 2002 Location: NYC Posts: 2,687	This is very scary. Luckily it didn't work on my own site but when I went to cumonherface.com it did work. Someone at ccbill should look into this.

07-11-2002, 12:12 AM	#6
ace0r Confirmed User Industry Role: Join Date: Feb 2001 Location: Calabasa, CA & Chicago, IL Posts: 1,410	it works

07-11-2002, 12:50 AM	#11
Gutterboy So Fucking Banned Join Date: Jul 2002 Location: Dis Posts: 4,751	Damn, good catch ATX!

07-11-2002, 12:55 AM	#12
Mr.Fiction Confirmed User Join Date: Feb 2002 Location: Free Speech Land Posts: 9,484	My signup form won't let me test it. When I enter fake info it tells me I have the wrong address, or the wrong credit card number or something else. Too much hassle. On edit: It works on the sites he listed. I guess it should work on our site too if I could figure it out. Last edited by Mr.Fiction; 07-11-2002 at 01:01 AM..

07-11-2002, 01:11 AM	#13
buddyII So Fucking Banned Join Date: Jul 2002 Posts: 2	L O fucking L HAHAH, CCBILL sucks ass! #1 processor my ass, what a fucking joke. Those dipshits at ccbill couldnt make a good script if thier lives depended on it. I feel bad for alot of you people that use them. I might just spam 3 million people and give them the instructions on how to get into the members areas on all ccbill processed sites. www.ccbill.com 'members area? whats that?' lol

07-11-2002, 01:12 AM	#14
funkmaster So Fucking Banned Join Date: Sep 2001 Location: shell beach Posts: 7,938	no, doesn´t work on our sites, something stinks in here.

07-11-2002, 01:14 AM	#15
funkmaster So Fucking Banned Join Date: Sep 2001 Location: shell beach Posts: 7,938	"I might just spam 3 million people and give them the instructions" ... now it stinks even more.

07-11-2002, 01:23 AM	#16
[Labret] Registered User Industry Role: Join Date: May 2001 Location: Са́нкт-Петербу́рг Posts: 10,945	ahahaah found a few that work, found a few that dont. Bizarre! Last edited by [Labret]; 07-11-2002 at 01:29 AM..

07-11-2002, 01:28 AM	#17
funkmaster So Fucking Banned Join Date: Sep 2001 Location: shell beach Posts: 7,938	... could it be that the 3 sites above are running in ccbill´s test mode ??

07-11-2002, 01:40 AM	#18
jimmy3way Confirmed User Join Date: Sep 2001 Location: Top Secret Hideout Posts: 2,508	SHOCKING!!!!! Well actually the shocking thing is how bad their member's area is! __________________ One thing, I forgot this last detail: the Biz Markie will always prevail.

07-11-2002, 01:59 AM	#19
Jak So Fucking Banned Join Date: Apr 2002 Location: ripenedpeach.com Posts: 1,143	Can't get it to work on our sites but I was under the impression that CCBill switched to a new scheme anyway which is what we're using. Maybe some sites haven't switched yet.. Jak

07-11-2002, 05:03 AM	#20
Juge Confirmed User Join Date: Feb 2001 Posts: 1,917	Oh my god, it works!! This is insane!

07-11-2002, 05:19 AM	#21
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	unbelieveable it really works HOW STONED MUST A PROGRAMMER BE TO WRITE THIS KIND OF SHIT CODE. damn ccbill.... you better shutdown your system or hire some REAL programmers... damn

07-11-2002, 05:23 AM	#22
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	anyone tried this with ibill??

07-11-2002, 05:24 AM	#23
Juge Confirmed User Join Date: Feb 2001 Posts: 1,917	I just tried it on a few more sites, and they ALL WORK! I hope I can't get in shit for this - after all, I DIDN'T press 'confirm', right? They've recorded my IP, though, but that shouldn't matter. What do you guys think?

07-11-2002, 05:31 AM	#24
2891_Bot Registered User Join Date: Jul 2002 Posts: 17	to buddyII: How about 3 million surfers? Right now! to all: iBill is ok, but ...

07-11-2002, 05:40 AM	#25
playa Confirmed User Join Date: Feb 2001 Location: atlanta, GA Posts: 6,432	i found that this only works with CCBill's new Custom forms pages

07-11-2002, 06:08 AM	#26
Juge Confirmed User Join Date: Feb 2001 Posts: 1,917	The password does fail after 30 minutes or so, and it doesn't allow me to do it again, which is good, I guess... must be cuz I'm on the same IP.

07-11-2002, 06:15 AM	#27
Turf Confirmed User Industry Role: Join Date: Jul 2001 Location: ICQ: 64644691 Posts: 1,865	damn will post this one on pornpassforum or whats it called... thats should really bring some surfers in :D but ouch.. what a fuck up to make... bet your sweet ass some programmer has mighty red ears and a job he is missing once they hear about this one...

07-11-2002, 06:45 AM	#29
Cement Head Confirmed User Join Date: Jul 2002 Location: Concrete Hills, California Posts: 112	CCBILL = LAME

07-11-2002, 07:22 AM	#30
AbeFroman Confirmed User Join Date: Jan 2002 Posts: 220	See! There ARE still some 3rd party processors that allow free trials. My members area sucks too. Can I have your fake passwords? I could trade them to my cable guy for a free chip.

07-11-2002, 07:31 AM	#31
nocostporn Confirmed User Join Date: Mar 2002 Location: Maryland Posts: 5,228	damn... business crusher __________________ CashTheChecks.com -coming soon- "Exclusive sites for Exclusive Webmasters" ICQ-119966868,add me first don't message

07-11-2002, 07:47 AM	#32
tha_timinator Confirmed User Join Date: Jan 2001 Location: Amsterdam, the Netherlands Posts: 590	WHOEHAHAHAHAAHAA!!! J_E_Z_U_S C_H_R_I_S_T !!! this is insane! i wouldn't even have made such a mistake 8 years ago when i first started programming BASIC :D :D __________________ CELEBRITYSTART.COM

07-11-2002, 07:53 AM	#33
gothweb Confirmed User Join Date: Jun 2002 Location: Back in the USSA Posts: 8,849	Tried this on one of the sites, got a username and password. Tried this on one of my sites, which uses the new CCBill forms, and it said "Invalid Card". So I appear to be safe... Still: Spooky shit. __________________ Photos by Ian X.: Distinctive photos of goth babes. Blood Money:Your traffic, my sites, our money. MojoHost: Still the best.

07-11-2002, 07:59 AM	#34
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	i donno if i am the only one here.. but i would finally like to here a sentence or two from ccbill......

07-11-2002, 08:13 AM	#35
eroswebmaster March 1st, 2003 Join Date: Jul 2001 Location: Seat 4 @ Venetian Poker Room Posts: 20,295	I believe KimmyKim is busy on other more IMPORTANT issues like message board flame wars. __________________ For rent - ICQ 127-027-910 Click here for more details

07-11-2002, 08:40 AM	#37
alias aliasx Join Date: Apr 2001 Posts: 19,010	l33t password d00dz have known this for a while im guessing __________________ https://porncorporation.com