Is your NATS hacked ? - Page 3 - GoFuckYourself.com

DamageX · 12-22-2007, 04:49 PM

Quote:

Originally Posted by notoldschool

and could you please explain the the world what exactly i am gullible about?

See which post of yours I originally quoted and you might understand.

spacedog · 12-22-2007, 04:54 PM

Quote:

Originally Posted by pornopete

Lets not forget the thread last year that revealed the fact that NATs has a built in feature that allows program owners to approve/disapprove an affiliates sale.

Any chance you got link to that thread?
What was the justification for having this feature and what were programs responses in regards to it? Sounds like just an anti-fraud kind of thing, but first I heard of it and now I want more info.

TheDoc · 12-22-2007, 04:54 PM

Quote:

Originally Posted by spacedog

Any chance you got link to that thread?
What was the justification for having this feature and what were programs responses in regards to it? Sounds like just an anti-fraud kind of thing, but first I heard of it and now I want more info.

NATS Does NOT have a feature like this and never has. His information is incorrect.

Zester · 12-22-2007, 04:54 PM

holy fuck !!!!

spacedog · 12-22-2007, 04:55 PM

Quote:

Originally Posted by TheDoc

NATS Does NOT have a feature like this and never has. His information is incorrect.

That's what I thought. Thanks for clearing that up.

quantum-x · 12-22-2007, 05:22 PM

Quote:

Originally Posted by pornopete

If I remember correctly it was placed in for a specific client of theirs.... I'll look for the thread tomorrow as I'm about to go to bed.

I believe that was for Fleshlight? The anti fraud delayed payout thingo.

TheDoc · 12-22-2007, 05:26 PM

It was flash cash with free signups doing a pay it forward program that webmasters didn't like. Just a bad payout idea is all it was.

TheDoc · 12-22-2007, 05:29 PM

Quote:

Originally Posted by pornopete

Your first point is somewhat arguable, but that is not my point. My point is that nobody took issue with an outside company, in this case the software vendor, having full access to their system; with my password being reversable; and with people outside the vendors company having access to the source.

Secondly, I could be wrong, but Im not. They go under the guile of 'verified signup' and you can read about them here : http://www.gofuckyourself.com/showthread.php?t=683448/ . On a side note I personally like boyalleys post in that thread, he might be a fag but he's pretty smart.

No the first point isn't arguable. All software online is hackable or can be exploited. Due to the way software works with other software, it happens every day across 1000's of servers. And all passwords are reversible, If I have your encrypted pw it's only a matter of time before I can crack it.

Verified Sales isn't new, CE did it years ago and so have many others. Old ideas don't always work in the new markets.

quantum-x · 12-22-2007, 05:35 PM

Quote:

Originally Posted by quantum-x

I believe that was for Fleshlight? The anti fraud delayed payout thingo.

flashcash. there we go. Half the letters were right

TheDoc · 12-22-2007, 05:48 PM

Quote:

Originally Posted by pornopete

1) Yes my first point is arguable, but that is not the issue. Stick to the issue. You have no argument to my points as they are all valid and you are trying to waver away the argument.

2) I didn't say it was new, I said it existed, and its obvious you where aware of this yet you tried to debunk my statement, why?

Let's go over your points again..

1) Every NATS program has master accounts, it's the owners job to turn them on and off.

2) Not only 1 affiliate program, 6 total now have posted and I'm sure 100's of others used the IP security features.

3) NATS passwords are reversable? Yeah and?

4) They acually do and did change admin passwords.. Just not enough with a strong enough policy. Like the Program owners they thought the security was strong.

5) NATS has left old source code on the servers, which has changed several times. It's nothing big, it's encrypted and able to be reversed to some degree.

6) inpentrable fortress as you stated, and again everything online can be hacked or exploited, so "assuming" this is your mistake.

7) SQL injects, NATS has had this problem before and it was corrected. So has other affiliate packages, hosted galleries, software all over the net is open to SQL injects. It's a continual battle to stay on top of these top of exploits and nats has acually done a pretty good job with this.

And I did debunk your statement because it's wrong, you stated "NATs has a built in feature that allows program owners to approve/disapprove an affiliates sale" That is flat wrong.

Any other points that need to be covered?

shuki · 12-22-2007, 06:36 PM

Quote:

Originally Posted by SmokeyTheBear

p.s. i should also mention at this point that one of the only sponsors i have heard from that WASN'T hacked was mayors money, and this is because THEY went thru extra security measures above and beyond.

big props to mayors money, your info is secure

Smokey,

Just curious but what steps did Mayors take to secure the data? I bet this would be of great interest to all the other programs so they could duplicate the security measures...that is of coarse if you can share that info.

milan · 12-22-2007, 06:41 PM

Quote:

Originally Posted by shuki

Smokey,

Just curious but what steps did Mayors take to secure the data? I bet this would be of great interest to all the other programs so they could duplicate the security measures...that is of coarse if you can share that info.

Wonder myself what they did...

TheDoc · 12-22-2007, 06:45 PM

Quote:

Originally Posted by pornopete

1) Not good enough. There is no need for that Master Account to be there in the first place, and if you go back and reread that thread I posted you will it stats that the master account is there as a condition of use.

2) 6 wow, that's impressive out of the 100's that use nats that's pretty good.

3) There is no reason for them to be reversable, that is a security flaw in itself.

4) You have a reading disorder.

5) The person who posted claims to have access to NATs source, not a reverse enginered copy. You are not really answering my question.

6) I said supposed to be, not is, but I was not arguing this point.

7) So then why are you disagreeing with me?

And finally again you are wavering, you where aware of the issue I raised and tried to debunk it, not clarify (based on how you percieve it anyways). And once again my statement is not wrong : http://www.gofuckyourself.com/showthread.php?t=683448/

Are you really that slow?

6, but really it's 100's that are protected and only a few programs overall have even posted in this thread, it's a weekend.

Ok, how do we read the passwords if we can't reverse them? Someone posted something and you just hang on it.

I have access to NATS source too, I did answer this. They have left old source code from previous nats versions. Nothing new, nothing wrong with that either.

Yes your statement is wrong.. NATS users COULD NEVER add or remove sales, EVER.. Understand that word? EVER .. A pay it forward system based on member logins for FREE TRIALS is not a add/remove sales system. Do YOU understand that? Your statement is wrong, pure wrong.

Just like you repeating that NATS "might" store Credit Card Data. Since you clearly do not know anything about NATS, why don't you sstop posting and spreading more false bullshit.

TheDoc · 12-22-2007, 06:47 PM

Quote:

Originally Posted by milan

Wonder myself what they did...

They used the built in NATS IP security and locking features for the NATS admin and don't allow TMM to have accounts until the directly request it.

Honestly, several, if not 100's of NATS programs run this way.

milan · 12-22-2007, 07:21 PM

Quote:

Originally Posted by TheDoc

They used the built in NATS IP security and locking features for the NATS admin and don't allow TMM to have accounts until the directly request it.

Honestly, several, if not 100's of NATS programs run this way.

LOL not reading between the lines... this really went over you head

TheDoc · 12-22-2007, 07:27 PM

Quote:

Originally Posted by milan

LOL not reading between the lines... this really went over you head

Oh yeah they host with you guys, forgot that...

TheDoc · 12-22-2007, 07:29 PM

Quote:

Originally Posted by pornopete

What do you base that on? Nothing, you are speculating.

Actually, I'm a NATS consultant, for great deal of NATS clients, I do not work for NATS or with NATS on anything. The reason I am not able to login and check many clients is because my IP isn't added and my Password changed months ago from standard security sweeps that "hundreds" of programs acually do make.

I know for a fact Mayors (I'm the one that looked) doesn't have admin accounts for TMM. I know others don't as well, and I know many use the IP lock system and you have to ask them each time you want access to add you back.

You do not have to have Admin Accounts for TMM, they don't force this. You can also create/give TMM any admin user/pass when you wish. You can add/remove their IP (like many do) each time they need access. You have 100% total control over everything as the program owner.

I didn't think of this simple wonder either, Score-cash told me to do it like 3 years ago.

Quote:

Originally Posted by pornopete

Obviously you are proving my point, any idiot has access to their source. And you not seeing anything wrong with just goes to further prove how much of douche you really are.

See you missed "understanding" this, let me explain it again. Having the "old source" means nothing when I can crack/decode the encoded source code. It's encoded to keep clients from screwing with it and to secure it so it can be stolen/duplicated across servers/sites.

Nothing is secure online, tired of saying that.

Quote:

Originally Posted by pornopete

No I am not spreading lies. Once again : http://www.gofuckyourself.com/showthread.php?t=683448/ . Can you read or did john not wipe his ass before you stuck your nose up there and now you have brown stuff on your eyes?

I'm giving up on this. I can only assume you don't understand what this is and what it means. It's not a tool that can add/remove signups controlled by the admin, it's nothing like to or even related to that at all. So I'm done with this one unless you need me to explain what that is.

Quote:

Originally Posted by pornopete

Did john buy you a jack and coke at a show at some point? Are you going to tell us he is a top notch stand up guy?

No, I think I have only met John once, on the show floor, at his booth. I have met a few others of his staff but I don't recall any drinks. I have had drinks with the MPA guys.. By your logic I should attacking nats, eh?

12-22-2007, 04:54 PM	#104
Zester Confirmed User Industry Role: Join Date: Jul 2003 Posts: 5,344	holy fuck !!!! __________________ * Mainstream ? $65 per sale * new male contraception

12-22-2007, 05:26 PM	#107
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	It was flash cash with free signups doing a pay it forward program that webmasters didn't like. Just a bad payout idea is all it was. __________________ ~TheDoc - ICQ7765825 It's all disambiguation