GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   Is your NATS hacked ? (https://gfy.com/showthread.php?t=794078)

Rico 12-22-2007 01:38 PM

As mentioned in this thread previously by Uno, our 'version' of nats, has been 'customized' to such extent, we no longer recieve updates from NATS(TMM). This also means we have been taking measures to prevent issues such as this one, via additional security measures that were taken almost 2 years ago.

In a nutshell: Our information is safe.

This is a constant struggle for all of us and we're doing our best to make sure our systems and sites are as safe as they can be, on a continuous basis.

I am sorry to see others have problems, but it is definately not the case for us.

AlienQ - BANNED FOR LIFE 12-22-2007 01:41 PM

Quote:

Originally Posted by WarChild (Post 13551646)
You're just an idiot that nobody takes serious. You didn't warn anybody of anything. You don't have nor have you ever had any insider information about nats or anything else. Again, you're just a broke tool.

Search in the history dumb bitch.
I have long stood against NATS/Porngraph for quite some time.

Nysus 12-22-2007 01:51 PM

Quote:

Originally Posted by rico-panchodog (Post 13551739)
As mentioned in this thread previously by Uno, our 'version' of nats, has been 'customized' to such extent, we no longer recieve updates from NATS(TMM). This also means we have been taking measures to prevent issues such as this one, via additional security measures that were taken almost 2 years ago.

In a nutshell: Our information is safe.

This is a constant struggle for all of us and we're doing our best to make sure our systems and sites are as safe as they can be, on a continuous basis.

I am sorry to see others have problems, but it is definately not the case for us.

So technically you're not really "with NATS" then ...

Quickdraw 12-22-2007 01:52 PM

Quote:

Originally Posted by SwordFish (Post 13551355)
QuickBuck has not been compromised in any way.

maybe so, but they certainly don't fail when it comes to compromising users PC's, or allowing 'rogue' affiliates to steal content from other programs and promote Quickbuck join pages, or using other malware to pop your join pages over other programs join pages.

jcsike 12-22-2007 02:32 PM

smokey, let me ask you this, wouldnt there inherently be another backdoor that nats uses to get into the server to report back to nats what plan level the account is at for billing purposes?

Rico 12-22-2007 02:32 PM

Quote:

Originally Posted by Nysus (Post 13551761)
So technically you're not really "with NATS" then ...

That is correct. But it 'still' is their software, so i prefered to clarify. :)

Trixxxia 12-22-2007 03:04 PM

Quote:

Originally Posted by rico-panchodog (Post 13551892)
That is correct. But it 'still' is their software, so i prefered to clarify. :)

Rico - if you have a moment, could you hit me up please?

Thanks

dial 12-22-2007 03:21 PM

Quote:

Originally Posted by SmokeyTheBear (Post 13550926)


like nastydollars and bangbros , industry leaders ?

more like industry cheaters

aren't these the same guys that only show 1 out of every 100 hits that end up in their system?

yeah, you may have 1:100 ratios, but they are only counting 10% of your traffic, hahaha

dial 12-22-2007 03:24 PM

Quote:

Originally Posted by AlienQ (Post 13551639)
Raises hand.

when I was a drug dealer my sister in law kept telling me for 3 years that I would eventually get busted

sure enough, after drug dealing for 3 years I got busted

does that make her right? lol

DamageX 12-22-2007 03:33 PM

Quote:

Originally Posted by notoldschool (Post 13550899)
NATS haters unite..lol. TMM is awesome and unliKe most other companies in the industry are on the problems before or as they happen. Its funny you see the shady programs come in here to bash nats when they are the most suspect. Your stats scare the shit out of me....0/10ooo+.

DO NOT TRUST PROGRAMS THAT HAVE CUSTOM BACKENDS. THEY ARE THE ONES TO WATCH FOR.

Kind sir, would you be interested in some swampland and a couple of bridges I have for sale?

notoldschool 12-22-2007 03:36 PM

Quote:

Originally Posted by DamageX (Post 13552056)
Kind sir, would you be interested in some swampland and a couple of bridges I have for sale?

Sure at the same time I grab some of that traffic adept traffic.:1orglaugh

DamageX 12-22-2007 03:41 PM

Quote:

Originally Posted by notoldschool (Post 13552064)
Sure at the same time I grab some of that traffic adept traffic.:1orglaugh

Given how gullible you are, you probably wouldn't know what to do with it anyway. :)

notoldschool 12-22-2007 03:50 PM

Quote:

Originally Posted by DamageX (Post 13552074)
Given how gullible you are, you probably wouldn't know what to do with it anyway. :)

and could you please explain the the world what exactly i am gullible about?
If you got some dirty secret about how Ron Paul voted a certain way, did cocaine in college, cheated on two wives, voted for the war, voted for bigger goverment, voted for preemptive invasions of nations that have no chance of hurting us, PLEASE FILL ME IN.

ps. please provide facts with your assumptions.

iMind 12-22-2007 03:56 PM

Quote:

Originally Posted by dial (Post 13552043)
when I was a drug dealer my sister in law kept telling me for 3 years that I would eventually get busted

sure enough, after drug dealing for 3 years I got busted

does that make her right? lol

:1orglaugh yes it does.
You should also stop dippin' into your supply :1orglaugh

Aliens a moron, but even a broken clocks right 2 times a day.

SmokeyTheBear 12-22-2007 03:59 PM

Quote:

Originally Posted by dial (Post 13552035)
more like industry cheaters

aren't these the same guys that only show 1 out of every 100 hits that end up in their system?

yeah, you may have 1:100 ratios, but they are only counting 10% of your traffic, hahaha

no you have the wrong sponsor, nastydollars and bangbros have pretty close stats , your thinking of sponsors like realitycash .

KrisKross 12-22-2007 04:09 PM

Quote:

Originally Posted by dial (Post 13552035)
more like industry cheaters

aren't these the same guys that only show 1 out of every 100 hits that end up in their system?

yeah, you may have 1:100 ratios, but they are only counting 10% of your traffic, hahaha

Math obviously isn't your forte.

dial 12-22-2007 04:42 PM

Quote:

Originally Posted by SmokeyTheBear (Post 13552130)
no you have the wrong sponsor, nastydollars and bangbros have pretty close stats , your thinking of sponsors like realitycash .

at least realitycash says they count "qualified hits" or whatever

bangbros just doesn't count hits...AT ALL

I sent them at least 10,000 hits a while back and saw maybe 100-200 in their admin

i believe there were a few more affiliates that posted on gfy about the same problem....they sent a bunch of hits and maybe saw 10-20% showed up in the admin

the fact is, the adult industry STINKS to high heaven these days, cheaters and scammers have run wild for years now, and that seems to be all that is left

hell, even a few of the largest program owners have been publicly OUTED for scamming or cheating affiliates, and they still get high fives!!!!

dial 12-22-2007 04:43 PM

Quote:

Originally Posted by KrisKross (Post 13552158)
Math obviously isn't your forte.

you got that right, I suck at math, completely

but if you missed the point then intelligence isn't your forte

TheDoc 12-22-2007 04:46 PM

Quote:

Originally Posted by pornopete (Post 13552134)
I thought NATS was supposed to be an inpentrable fortress enabling affiliates to feel confident that the program owners aren't cheating them.

Lets not forget the thread last year that revealed the fact that NATs has a built in feature that allows program owners to approve/disapprove an affiliates sale.

Everything is hackable, every program, every server, every host, at some point, some software, something can have an sql, apache, unix, nats, email from - ect related.. Very common.

NATS has never had a way to approve/disapprove an affiliates sale, ever. Please get your facts straight before posting such slander.

SmokeyTheBear 12-22-2007 04:48 PM

Quote:

Originally Posted by dial (Post 13552278)
at least realitycash says they count "qualified hits" or whatever

so does bangbros
Quote:

Originally Posted by dial (Post 13552278)
bangbros just doesn't count hits...AT ALL

I sent them at least 10,000 hits a while back and saw maybe 100-200 in their admin

i believe there were a few more affiliates that posted on gfy about the same problem....they sent a bunch of hits and maybe saw 10-20% showed up in the admin

i don't disagree there , i have noticed similar things with bangbros but there are lots of other factors such as a qualified hit may be a "unique" ip not a "unique" hit for your ref code

nastydollars counts hits perfect

but hey you are arguing a moot point , i think most webmasters have noticed nats sponsors don't convert as well whatever the stats say. , all my top sponsors use custom backends.

Quote:

Originally Posted by dial (Post 13552278)

the fact is, the adult industry STINKS to high heaven these days, cheaters and scammers have run wild for years now, and that seems to be all that is left

hell, even a few of the largest program owners have been publicly OUTED for scamming or cheating affiliates, and they still get high fives!!!!

can't argue with that for the most part :1orglaugh

DamageX 12-22-2007 04:49 PM

Quote:

Originally Posted by notoldschool (Post 13552092)
and could you please explain the the world what exactly i am gullible about?

See which post of yours I originally quoted and you might understand.

spacedog 12-22-2007 04:54 PM

Quote:

Originally Posted by pornopete (Post 13552134)
Lets not forget the thread last year that revealed the fact that NATs has a built in feature that allows program owners to approve/disapprove an affiliates sale.

Any chance you got link to that thread?
What was the justification for having this feature and what were programs responses in regards to it? Sounds like just an anti-fraud kind of thing, but first I heard of it and now I want more info.

TheDoc 12-22-2007 04:54 PM

Quote:

Originally Posted by spacedog (Post 13552317)
Any chance you got link to that thread?
What was the justification for having this feature and what were programs responses in regards to it? Sounds like just an anti-fraud kind of thing, but first I heard of it and now I want more info.

NATS Does NOT have a feature like this and never has. His information is incorrect.

Zester 12-22-2007 04:54 PM

holy fuck !!!!

spacedog 12-22-2007 04:55 PM

Quote:

Originally Posted by TheDoc (Post 13552322)
NATS Does NOT have a feature like this and never has. His information is incorrect.

That's what I thought. Thanks for clearing that up.

quantum-x 12-22-2007 05:22 PM

Quote:

Originally Posted by pornopete (Post 13552364)
If I remember correctly it was placed in for a specific client of theirs.... I'll look for the thread tomorrow as I'm about to go to bed.

I believe that was for Fleshlight? The anti fraud delayed payout thingo.

TheDoc 12-22-2007 05:26 PM

It was flash cash with free signups doing a pay it forward program that webmasters didn't like. Just a bad payout idea is all it was.

TheDoc 12-22-2007 05:29 PM

Quote:

Originally Posted by pornopete (Post 13552414)
Your first point is somewhat arguable, but that is not my point. My point is that nobody took issue with an outside company, in this case the software vendor, having full access to their system; with my password being reversable; and with people outside the vendors company having access to the source.

Secondly, I could be wrong, but Im not. They go under the guile of 'verified signup' and you can read about them here : http://www.gofuckyourself.com/showthread.php?t=683448/ . On a side note I personally like boyalleys post in that thread, he might be a fag but he's pretty smart.

No the first point isn't arguable. All software online is hackable or can be exploited. Due to the way software works with other software, it happens every day across 1000's of servers. And all passwords are reversible, If I have your encrypted pw it's only a matter of time before I can crack it.

Verified Sales isn't new, CE did it years ago and so have many others. Old ideas don't always work in the new markets.

quantum-x 12-22-2007 05:35 PM

Quote:

Originally Posted by quantum-x (Post 13552407)
I believe that was for Fleshlight? The anti fraud delayed payout thingo.

flashcash. there we go. Half the letters were right :)

TheDoc 12-22-2007 05:48 PM

Quote:

Originally Posted by pornopete (Post 13552479)
1) Yes my first point is arguable, but that is not the issue. Stick to the issue. You have no argument to my points as they are all valid and you are trying to waver away the argument.

2) I didn't say it was new, I said it existed, and its obvious you where aware of this yet you tried to debunk my statement, why?

Let's go over your points again..

1) Every NATS program has master accounts, it's the owners job to turn them on and off.

2) Not only 1 affiliate program, 6 total now have posted and I'm sure 100's of others used the IP security features.

3) NATS passwords are reversable? Yeah and?

4) They acually do and did change admin passwords.. Just not enough with a strong enough policy. Like the Program owners they thought the security was strong.

5) NATS has left old source code on the servers, which has changed several times. It's nothing big, it's encrypted and able to be reversed to some degree.

6) inpentrable fortress as you stated, and again everything online can be hacked or exploited, so "assuming" this is your mistake.

7) SQL injects, NATS has had this problem before and it was corrected. So has other affiliate packages, hosted galleries, software all over the net is open to SQL injects. It's a continual battle to stay on top of these top of exploits and nats has acually done a pretty good job with this.

And I did debunk your statement because it's wrong, you stated "NATs has a built in feature that allows program owners to approve/disapprove an affiliates sale" That is flat wrong.

Any other points that need to be covered?

shuki 12-22-2007 06:36 PM

Quote:

Originally Posted by SmokeyTheBear (Post 13550952)
p.s. i should also mention at this point that one of the only sponsors i have heard from that WASN'T hacked was mayors money, and this is because THEY went thru extra security measures above and beyond.

big props to mayors money, your info is secure

Smokey,

Just curious but what steps did Mayors take to secure the data? I bet this would be of great interest to all the other programs so they could duplicate the security measures...that is of coarse if you can share that info.

milan 12-22-2007 06:41 PM

Quote:

Originally Posted by shuki (Post 13552663)
Smokey,

Just curious but what steps did Mayors take to secure the data? I bet this would be of great interest to all the other programs so they could duplicate the security measures...that is of coarse if you can share that info.

Wonder myself what they did... :thumbsup

TheDoc 12-22-2007 06:45 PM

Quote:

Originally Posted by pornopete (Post 13552588)
1) Not good enough. There is no need for that Master Account to be there in the first place, and if you go back and reread that thread I posted you will it stats that the master account is there as a condition of use.

2) 6 wow, that's impressive out of the 100's that use nats that's pretty good.

3) There is no reason for them to be reversable, that is a security flaw in itself.

4) You have a reading disorder.

5) The person who posted claims to have access to NATs source, not a reverse enginered copy. You are not really answering my question.

6) I said supposed to be, not is, but I was not arguing this point.

7) So then why are you disagreeing with me?

And finally again you are wavering, you where aware of the issue I raised and tried to debunk it, not clarify (based on how you percieve it anyways). And once again my statement is not wrong : http://www.gofuckyourself.com/showthread.php?t=683448/

Are you really that slow?

6, but really it's 100's that are protected and only a few programs overall have even posted in this thread, it's a weekend.

Ok, how do we read the passwords if we can't reverse them? Someone posted something and you just hang on it.

I have access to NATS source too, I did answer this. They have left old source code from previous nats versions. Nothing new, nothing wrong with that either.

Yes your statement is wrong.. NATS users COULD NEVER add or remove sales, EVER.. Understand that word? EVER .. A pay it forward system based on member logins for FREE TRIALS is not a add/remove sales system. Do YOU understand that? Your statement is wrong, pure wrong.

Just like you repeating that NATS "might" store Credit Card Data. Since you clearly do not know anything about NATS, why don't you sstop posting and spreading more false bullshit.

TheDoc 12-22-2007 06:47 PM

Quote:

Originally Posted by milan (Post 13552677)
Wonder myself what they did... :thumbsup

They used the built in NATS IP security and locking features for the NATS admin and don't allow TMM to have accounts until the directly request it.

Honestly, several, if not 100's of NATS programs run this way.

milan 12-22-2007 07:21 PM

Quote:

Originally Posted by TheDoc (Post 13552692)
They used the built in NATS IP security and locking features for the NATS admin and don't allow TMM to have accounts until the directly request it.

Honestly, several, if not 100's of NATS programs run this way.

LOL not reading between the lines... this really went over you head :winkwink:

TheDoc 12-22-2007 07:27 PM

Quote:

Originally Posted by milan (Post 13552786)
LOL not reading between the lines... this really went over you head :winkwink:

Oh yeah they host with you guys, forgot that...

TheDoc 12-22-2007 07:29 PM

Quote:

Originally Posted by pornopete (Post 13552742)
What do you base that on? Nothing, you are speculating.

Actually, I'm a NATS consultant, for great deal of NATS clients, I do not work for NATS or with NATS on anything. The reason I am not able to login and check many clients is because my IP isn't added and my Password changed months ago from standard security sweeps that "hundreds" of programs acually do make.

I know for a fact Mayors (I'm the one that looked) doesn't have admin accounts for TMM. I know others don't as well, and I know many use the IP lock system and you have to ask them each time you want access to add you back.

You do not have to have Admin Accounts for TMM, they don't force this. You can also create/give TMM any admin user/pass when you wish. You can add/remove their IP (like many do) each time they need access. You have 100% total control over everything as the program owner.

I didn't think of this simple wonder either, Score-cash told me to do it like 3 years ago.

Quote:

Originally Posted by pornopete (Post 13552742)
Obviously you are proving my point, any idiot has access to their source. And you not seeing anything wrong with just goes to further prove how much of douche you really are.

See you missed "understanding" this, let me explain it again. Having the "old source" means nothing when I can crack/decode the encoded source code. It's encoded to keep clients from screwing with it and to secure it so it can be stolen/duplicated across servers/sites.

Nothing is secure online, tired of saying that.

Quote:

Originally Posted by pornopete (Post 13552742)
No I am not spreading lies. Once again : http://www.gofuckyourself.com/showthread.php?t=683448/ . Can you read or did john not wipe his ass before you stuck your nose up there and now you have brown stuff on your eyes?

I'm giving up on this. I can only assume you don't understand what this is and what it means. It's not a tool that can add/remove signups controlled by the admin, it's nothing like to or even related to that at all. So I'm done with this one unless you need me to explain what that is.

Quote:

Originally Posted by pornopete (Post 13552742)
Did john buy you a jack and coke at a show at some point? Are you going to tell us he is a top notch stand up guy?

No, I think I have only met John once, on the show floor, at his booth. I have met a few others of his staff but I don't recall any drinks. I have had drinks with the MPA guys.. By your logic I should attacking nats, eh?


All times are GMT -7. The time now is 04:14 AM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123