Only about 4 out of 30 of my NATs email addresses were compromized... - GoFuckYourself.com

Tempest · 12-26-2007, 11:01 PM

I know everyone is freaking out etc. and I honestly thought I had more compromised emails than that... But I went thru everything and that's actually all there was. 1 of which is a defunct program... 2 I believe have already stepped up their security etc. before this all came out..

I get plenty of non NATs compromised email spam as well, one of which recently surprised me... nscash which I think is using MPA.

I've been tracking this stuff using unique emails for quite some time now and have noticed that it's actually decreased compared to say a year ago.

Just thought I'd throw out some info.

CC · 12-26-2007, 11:16 PM

Good to know; thanks.

TMM_John · 12-26-2007, 11:22 PM

Thanks Tempest.

We have really done a lot in the past year to make our security as strong as possible. I understand it doesn't look at that way at the moment and one wrongly accessed client is too many but we do take it very seriously and do all we can.

We have dedicated a lot the past 6 months to a year on making sure the code was very very secure from exploits, injections, etc. It seems we may have left the back window open a tad in the process (by having someone access our server with our accounts on it). And I really feel horrible about that and regret it.

Many of our clients had our available security precautions in place and this provided protection for them.

Needless to say we have learned a lot from this, and we will only continue to try to enhance ours and our clients' security. Nothing can ever be perfect but we're going to try to get as close to there as we can.

crockett · 12-26-2007, 11:49 PM

Interesting to hear. I've never tracked my e-mail but am planning on starting. My webmaster e-mail account is pretty much useless anymore.

I don't get as much spam as most but I get around 500 to 600 e-mails a day to my webmaster account. Out of those maybe 5 a day are legit. I can't blame anyone because that's like my catch all e-mail address.

However I'm about to switch over to a gmail account and I'll track my mails from here on out.

The really fucking funnny thing is my ISP e-mail account which I've had for something like 7 or 8 years only gets about 100 a day.

They really just need to trash the entire e-mail system and start fresh with something more secure.

12-26-2007, 11:01 PM	#1
Tempest Too lazy to set a custom title Industry Role: Join Date: May 2004 Location: West Coast, Canada. Posts: 10,217	Only about 4 out of 30 of my NATs email addresses were compromized... I know everyone is freaking out etc. and I honestly thought I had more compromised emails than that... But I went thru everything and that's actually all there was. 1 of which is a defunct program... 2 I believe have already stepped up their security etc. before this all came out.. I get plenty of non NATs compromised email spam as well, one of which recently surprised me... nscash which I think is using MPA. I've been tracking this stuff using unique emails for quite some time now and have noticed that it's actually decreased compared to say a year ago. Just thought I'd throw out some info.

12-26-2007, 11:22 PM	#3
TMM_John Confirmed User Industry Role: Join Date: May 2004 Posts: 6,660	Thanks Tempest. We have really done a lot in the past year to make our security as strong as possible. I understand it doesn't look at that way at the moment and one wrongly accessed client is too many but we do take it very seriously and do all we can. We have dedicated a lot the past 6 months to a year on making sure the code was very very secure from exploits, injections, etc. It seems we may have left the back window open a tad in the process (by having someone access our server with our accounts on it). And I really feel horrible about that and regret it. Many of our clients had our available security precautions in place and this provided protection for them. Needless to say we have learned a lot from this, and we will only continue to try to enhance ours and our clients' security. Nothing can ever be perfect but we're going to try to get as close to there as we can. __________________ Skype: JohnA1078 Too Much Media - Makers of the Industry's Leading Payite Management Platform, NATS!

12-26-2007, 11:16 PM	#2
CC Confirmed User Join Date: Feb 2001 Posts: 1,690	Good to know; thanks.

12-26-2007, 11:49 PM	#4
crockett in a van by the river Industry Role: Join Date: May 2003 Posts: 76,806	Interesting to hear. I've never tracked my e-mail but am planning on starting. My webmaster e-mail account is pretty much useless anymore. I don't get as much spam as most but I get around 500 to 600 e-mails a day to my webmaster account. Out of those maybe 5 a day are legit. I can't blame anyone because that's like my catch all e-mail address. However I'm about to switch over to a gmail account and I'll track my mails from here on out. The really fucking funnny thing is my ISP e-mail account which I've had for something like 7 or 8 years only gets about 100 a day. They really just need to trash the entire e-mail system and start fresh with something more secure.