Password list (check your sites) - GoFuckYourself.com

Mikel · 09-24-2002, 07:27 AM

I just found this password site this morning and saw that alot of member's area are accessible, maybe you should all take a look, see if your sites are listed here, the list is huge!!!

http://tmd.df.ru/private.html

Have a good day everyone

bd2gk2 · 09-24-2002, 07:32 AM

Damn, I found my site on that list. Looks like I got few passes to kill. Thanks for the heads up!

XXXPaysiteDesign · 09-24-2002, 07:34 AM

Thats a big list.. mine isn't on there, yay

blakkfrogg · 09-24-2002, 07:44 AM

Someone needs to beat that password trader into a coma and post pics as a warning to other traders that, "Yes. It CAN Happen to YOU."

"Assholic Wanna' Jerk Off But Don't Wanna' Pay Cretins" -- That is what I think about password traders.

Easy · 09-24-2002, 07:50 AM

hmm.. I'm on the list too. And I see that pennywize is working

boldy · 09-24-2002, 07:51 AM

just fucking iframe that list... he'll be out of business in no time

That list is is 1.4 meg!

Pipecrew · 09-24-2002, 08:18 AM

ouch, ninaknowsbest took a hard hit

Jizar II · 09-24-2002, 08:30 AM

the password kiddies needs to die in hell

pipp · 09-24-2002, 08:32 AM

WOW! thats one bad ass password list

gothweb · 09-24-2002, 08:43 AM

Three passwords to my main site, one to my newer site. Sheesh. How are they getting these passwords? At least seem to be hacked, since they aren't in the CCBill database.

I also checked some sites of friends of mine. That's a lot of passwords for some sites... Scary.

pr0 · 09-24-2002, 08:46 AM

I found a new homepage

w0000000t

danevans · 09-24-2002, 08:49 AM

df.com seems to be a russian isp, and that password list is probably on some users personal webspace.. Try contacting DataForce support, to remove the list..

pr0 · 09-24-2002, 08:51 AM

Quote:

Originally posted by danevans
df.com seems to be a russian isp, and that password list is probably on some users personal webspace.. Try contacting DataForce support, to remove the list..

How am i supposed to get free porn without this list? Ohhh..right, tgp's...nevermind, go ahead & kill it.

09-24-2002, 08:56 AM

damn ...

Dugmor · 09-24-2002, 08:58 AM

Yeah it looks like they got me. So if anyone wants to check out my members area's before I kill the passwords enjoy !

deleteduser · 09-24-2002, 09:08 AM

didnt we have a list like that some month ago? =)
looks nearly the same

Mutt · 09-24-2002, 10:04 AM

damn he's back.

that guy back in April had the biggest fucking password list of the best sites i'd ever seen. The fucking thing took like 5 minutes to load it was so big.

Gator · 09-24-2002, 10:21 AM

Here's another for ya boys...

http://pass.nejcpass.com/

jojojo · 09-24-2002, 10:53 AM

it is 404'd now

Kimmykim · 09-24-2002, 10:53 AM

Quote:

Originally posted by gothweb
Three passwords to my main site, one to my newer site. Sheesh. How are they getting these passwords? At least seem to be hacked, since they aren't in the CCBill database.

I also checked some sites of friends of mine. That's a lot of passwords for some sites... Scary.

They arent processor lists, I checked ours and some of them were manually added passes, the rest crossed all processors.

magnatique · 09-24-2002, 10:58 AM

they might not be processor ones, but these guys knew what they were doing..

we had like 15 passwords in there..

and I checked with epoch, and most of all the logins that were used were logins of Long lasting members... all like 2-5 months, recuring members...

Cogitator · 09-24-2002, 10:59 AM

Some people just run scripts that run dictionary entries until one of them works. That's a real common way of hacking. What you need to do to prevent this is to limit the velocity of logins from a particular IP address, i.e. no more than 5 login attempts per minute, etc. This way, your regular user can retry his login if he fatfingered something, but the scripts trying to hack you will be slowed down to the point of being impractical.

Mutt · 09-24-2002, 12:59 PM

99% of these guys are only capable of doing brute force dictionary attacks.

Small number who can actually hack and start adding usernames/passwords.

There really is nothing you can do to completely get rid of the problem. They will hammer away no matter what. Pennywize does a great job of keeping them out of your members area fast. What i don't understand about Pennywize users is that most just leave the freeloaders at a deadend Pennywize page.
You might as well get some use from the traffic, it's no worse than TGP, i actually think it's better. So I don't understand why the Pennywize page doesn't redirect to a banner farm or toplists or just console hell.

salsbury · 09-24-2002, 01:03 PM

some of them might be using the wide open security holes in Epoch's script, if you use Epoch on your site. (i'm told they've "updated" it, but i have yet to see this on any servers.)

09-24-2002, 07:27 AM	#1
Mikel Confirmed User Join Date: Oct 2001 Location: Between Zeina Heart and Lanny Barby Posts: 386	Password list (check your sites) I just found this password site this morning and saw that alot of member's area are accessible, maybe you should all take a look, see if your sites are listed here, the list is huge!!! http://tmd.df.ru/private.html Have a good day everyone

09-24-2002, 07:32 AM	#2
bd2gk2 Registered User Join Date: Jan 2002 Location: Dallas - Bitch! Posts: 11	Damn, I found my site on that list. Looks like I got few passes to kill. Thanks for the heads up! __________________ If it doesn't make dollars, then it doesn't make sense!

09-24-2002, 07:34 AM	#3
XXXPaysiteDesign Confirmed User Join Date: Mar 2002 Location: Everett, WA Posts: 2,201	Thats a big list.. mine isn't on there, yay __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

09-24-2002, 07:44 AM	#4
blakkfrogg Confirmed User Join Date: Jan 2001 Location: South of sobriety Posts: 582	Someone needs to beat that password trader into a coma and post pics as a warning to other traders that, "Yes. It CAN Happen to YOU." "Assholic Wanna' Jerk Off But Don't Wanna' Pay Cretins" -- That is what I think about password traders. __________________ - Blakk Frogg * Blakk Frogg Sex Blog * * Wyldsites Sex Blogs * * * Blakk Frogg Joke Blog So anyways, this Frogg is looking for smaller traffic trades. Trying to get back into the swing of things, ya' know?

09-24-2002, 07:51 AM	#6
boldy Macdaddy coder Industry Role: Join Date: Feb 2002 Location: MacDaddy pimp coder Posts: 2,806	just fucking iframe that list... he'll be out of business in no time That list is is 1.4 meg! __________________ MacDaddy Coder.

09-24-2002, 07:50 AM	#5
Easy Registered User Join Date: Feb 2002 Location: Backyard Posts: 79	hmm.. I'm on the list too. And I see that pennywize is working

09-24-2002, 08:18 AM	#7
Pipecrew Master of Gfy.com Industry Role: Join Date: Feb 2002 Posts: 14,887	ouch, ninaknowsbest took a hard hit

09-24-2002, 08:30 AM	#8
Jizar II Confirmed User Industry Role: Join Date: May 2001 Location: LLL© Posts: 1,425	the password kiddies needs to die in hell

09-24-2002, 08:32 AM	#9
pipp Confirmed User Join Date: Oct 2001 Location: Where the sun don't shine Posts: 1,185	WOW! thats one bad ass password list

09-24-2002, 08:43 AM	#10
gothweb Confirmed User Join Date: Jun 2002 Location: Back in the USSA Posts: 8,849	Three passwords to my main site, one to my newer site. Sheesh. How are they getting these passwords? At least seem to be hacked, since they aren't in the CCBill database. I also checked some sites of friends of mine. That's a lot of passwords for some sites... Scary. __________________ Photos by Ian X.: Distinctive photos of goth babes. Blood Money:Your traffic, my sites, our money. MojoHost: Still the best.

09-24-2002, 08:46 AM	#11
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	I found a new homepage w0000000t __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

09-24-2002, 08:49 AM	#12
danevans Confirmed User Join Date: Jun 2001 Location: Europe Posts: 1,295	df.com seems to be a russian isp, and that password list is probably on some users personal webspace.. Try contacting DataForce support, to remove the list.. __________________ Custom adult games / apps for your paysites. webmaster at multimoodia.net icq35291012

09-24-2002, 08:58 AM	#15
Dugmor The Traffic Cowboy Industry Role: Join Date: Jan 2002 Location: BP4L - Vice Prez Posts: 7,596	Yeah it looks like they got me. So if anyone wants to check out my members area's before I kill the passwords enjoy ! __________________ JesusEmpire - The Most Trusted Mobile Marketing Service SMS Verification codes for 345 websites including: Tinder - Bumble - Twitter - TikTok - Instagram - Facebook

09-24-2002, 09:08 AM	#16
deleteduser Confirmed User Join Date: Sep 2001 Location: Europe Posts: 2,218	didnt we have a list like that some month ago? =) looks nearly the same

09-24-2002, 10:04 AM	#17
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	damn he's back. that guy back in April had the biggest fucking password list of the best sites i'd ever seen. The fucking thing took like 5 minutes to load it was so big. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

09-24-2002, 08:56 AM	#14
X37375787 Guest Posts: n/a	damn ...

09-24-2002, 10:21 AM	#18
Gator Confirmed User Industry Role: Join Date: Feb 2002 Location: Don't live on GFY Posts: 1,119	Here's another for ya boys... http://pass.nejcpass.com/

09-24-2002, 10:53 AM	#19
jojojo Too lazy to set a custom title Join Date: Mar 2002 Location: Vancouver, BC Posts: 2,318	it is 404'd now __________________ Learn SEO - make $$ residually - icq me 333485092

09-24-2002, 10:58 AM	#21
magnatique Confirmed User Join Date: Jan 2001 Location: Montreal Posts: 1,830	they might not be processor ones, but these guys knew what they were doing.. we had like 15 passwords in there.. and I checked with epoch, and most of all the logins that were used were logins of Long lasting members... all like 2-5 months, recuring members... __________________ Stunner Media Programs: StandAhead \| IndieBucks \| BoyCrushCash \| Phoenixxx \| EmoProfits \| BritishBucks \| HunkMoney \| LatinoBucks Make $$$ with Gay! Lowest Minimum Payouts in the Business, Perfect Track Record, Amazing Sites

09-24-2002, 10:59 AM	#22
Cogitator Confirmed User Join Date: Feb 2002 Location: Florida Posts: 672	Some people just run scripts that run dictionary entries until one of them works. That's a real common way of hacking. What you need to do to prevent this is to limit the velocity of logins from a particular IP address, i.e. no more than 5 login attempts per minute, etc. This way, your regular user can retry his login if he fatfingered something, but the scripts trying to hack you will be slowed down to the point of being impractical. __________________ - this space intentionally left blank -

09-24-2002, 12:59 PM	#23
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	99% of these guys are only capable of doing brute force dictionary attacks. Small number who can actually hack and start adding usernames/passwords. There really is nothing you can do to completely get rid of the problem. They will hammer away no matter what. Pennywize does a great job of keeping them out of your members area fast. What i don't understand about Pennywize users is that most just leave the freeloaders at a deadend Pennywize page. You might as well get some use from the traffic, it's no worse than TGP, i actually think it's better. So I don't understand why the Pennywize page doesn't redirect to a banner farm or toplists or just console hell. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

09-24-2002, 01:03 PM	#24
salsbury Confirmed User Join Date: Feb 2002 Location: Seattle Posts: 1,070	some of them might be using the wide open security holes in Epoch's script, if you use Epoch on your site. (i'm told they've "updated" it, but i have yet to see this on any servers.) __________________