| 
		
			
			
				
			
			
				 
			
			
				
			
		 | 
		
			
			
				 
			
				
			
		 | 
	||||
| 
				Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.  You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us.  | 
		
		 
		![]()  | 
	
		
			
  | 	
	
	
		
		|||||||
| Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. | 
| 
		 | 
	Thread Tools | 
| 
			
			 | 
		#1 | 
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
			
			 are there any nats sponsors who havent been compromised ? 
		
	
		
		
		
		
			seems like every sponsor who has commented has been compromised, just curious as to if anyone who runs nats that didn't get compromised by a nats employee's user/pass 
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#2 | 
| 
			
			
			
			 Retired 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Jan 2004 
				Location: Sac 
				
				
					Posts: 18,453
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 I find it odd that NATs insists on having admin access... 
		
	
		
		
		
		
			Doesn't NATs also own a pay site program (Teen Dolls)? Would seem to me that having a free list of verified emails of people who are willing to pull out their CC to join a site would be of great value to them. Not accusing them of anything, just some food for thought 
				__________________ 
		
		
		
		
	
	![]() ![]()  
			 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#3 | 
| 
			
			
			
			 So Fucking Banned 
			
		
			
			
			Join Date: Jan 2005 
				Location: At My Desk 
				
				
					Posts: 2,904
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 hrmph, im hungry 
		
	
		
		
		
		
		
	
	 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#4 | |
| 
			
			
			
			 Confirmed User 
			
		
			
			
			Join Date: Nov 2007 
				
				
				
					Posts: 937
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#5 | 
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 i find it odd they would allow an employee one user/pass to get into every nats sponsor. 
		
	
		
		
		
		
			i find it doubly odd that nobody from nats noticed this account had been compromised before it was posted on gfy. I find it even more strange that there are not any security measures in place that would have spotted this ( i.e. hourly logins from the same employee on almost every nats sponsor so far ) in laymans terms how an employye could log into several nats sponsors at the same time using the same account. shouldn't any of these things raised more than 1 red flag ? as far as affiliates are concerned , should we be worried we will now become targets of identity theft ? what plans does nats have on informing affiliates who's information might have been disclosed. what information can any sponsors provide that might shed some light on what information is available to the nats employee's account that was used to login ? ( i.e. ss#'s ? passwords ? ) 
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#6 | 
| 
			
			
			
			 Retired 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Jan 2004 
				Location: Sac 
				
				
					Posts: 18,453
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 sue for what.. pointing out the obvious conflicts of interest. 
		
	
		
		
		
		
			hope you didnt pay much for your law degree 
				__________________ 
		
		
		
		
	
	![]() ![]()  
			 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#7 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Sep 2003 
				Location: Los Begas 
				
				
					Posts: 9,162
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 shit waddeye miss? ... time to search 
		
	
		
		
		
		
		
	
	 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#8 | 
| 
			
			
			
			 Registered User 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Jan 2001 
				Location: Your moms box 
				
				
					Posts: 26,727
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		![]()  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#9 | 
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 a nats employee's username was used to login and most likely steal information from quite a few nats sponsors. infact theres only one sponsor i have heard of using nats that hasn't been compromised , and only because they manually disabled nats employees from logging onto their server 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#10 | 
| 
			
			
			
			 So Fucking Banned 
			
		
			
			
			Join Date: May 2006 
				Location: Seems To Be Here Now 
				
				
					Posts: 646
				 
				
				
				
				 | 
	
	|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#11 | |
| 
			
			
			
			 Yes that IS me. Bitch. 
			
		
			
			
			Industry Role:  
				Join Date: Nov 2001 
				
				
				
					Posts: 14,149
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 A nats employee who last posted on the Nats board in August but then started posting elsewhere looking for freelance jobs in September?????  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#12 | 
| 
			
			
			
			 So Fucking Banned 
			
		
			
			
			Join Date: May 2006 
				Location: Seems To Be Here Now 
				
				
					Posts: 646
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 why anyone uses nats is beyond me 
		
	
		
		
		
		
		
	
	![]()  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#13 | 
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 i wonder how many affiliates who used nats sponsors had their epassporte accounts stolen thru info obtained from this compromise ? it would explain the rash of epassporte thefts. 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#14 | |
| 
			
			
			
			 Yes that IS me. Bitch. 
			
		
			
			
			Industry Role:  
				Join Date: Nov 2001 
				
				
				
					Posts: 14,149
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 Gotta be a real fucking idiot to be using same password everywhere in first place.  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#15 | |
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Nov 2003 
				Location: San Diego, Cali. baby!!! 
				
				
					Posts: 3,790
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 
				__________________ 
		
		
		
		
	
	ThisWillShockYou.com DVD Store - TWSY UNCENSORED ICQ# 194020367 E-mail: shockingbucks(AT)gmail.com Promote something different!! Shocking Bucks  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#16 | |
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 also take into account that many sponsors created the epassporte accounts for their affiliates ( perhaps with the affiliates current password ) now obviously using shared passwords is a big no-no but thats beside the point. ideally everyone should have a deadbolt on their door , but i would think if your locksmith's key was used to get in you first look at the locksmith 
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#17 | 
| 
			
			
			
			 best designer on GFY 
			
		
			
				
			
			
			Join Date: Mar 2003 
				Location: IALIEN.COM - High Definition Video and Photographic Productions -ICQ 78943384 
				
				
					Posts: 30,307
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Stats and client information are the most coveted of things a program owner can have. Why people that use NATS chose NATS is pure stupidity. 
		
	
		
		
		
		
			I said it 3 years ago and I am still saying it. People called me an idiot then, and will probably call me an idiot now for saying so... And to this day I still say I told ya so. No sympathy from me. Dumb is dumb. 
				__________________ 
		
		
		
		
	
	![]() ![]() NAKED HOSTING FTW!11 I'm On The INSANE PLAN $9.95/mo! | The Alien Blog Adult News Worth Reading Updated Daily | Content For Sale! 641 PICS 216 MINUTES OF VIDEO $350.00 |ICQ: 78943384 |  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#18 | 
| 
			
			
			
			 Confirmed User 
			
		
			
			
			Join Date: Nov 2007 
				
				
				
					Posts: 937
				 
				
				
				
				 | 
	
	|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#19 | 
| 
			
			
			
			 So Fucking Banned 
			
		
			
			
			Join Date: May 2006 
				Location: Seems To Be Here Now 
				
				
					Posts: 646
				 
				
				
				
				 | 
	
	|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#20 | |
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 i think many sponsors use nats because A) its pretty easy B) alot of other sponsors use it so for affiliates its easy to navigate. those arent of course very good reasons , but understandable anyways. having a standard sponsor software will always lead to troubles when you have a compromise like this . 
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#21 | |
| 
			
			
			
			 Confirmed User 
			
		
			
			
			Join Date: Nov 2007 
				
				
				
					Posts: 937
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#22 | |
| 
			
			
			
			 Facit Omnia Voluntas 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Apr 2003 
				Location: Offshore 
				
				
					Posts: 2,105
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 ![]() Remember the TrafficHangar incident and how many have been affected? Didnt see this thread at first, sorry... Posted something similiar here as well: http://www.gofuckyourself.com/showpo...&postcount=184 
				__________________ 
		
		
		
		
	
	Facilitation - BizDev - Traffic - Consulting - Marketing Skype: jokerempire | Silent Circle: joker  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#23 | 
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 seems like a few sponsors would be glad to pipe in that their nats wasnt hacked unless everyone was hacked except those that banned nats employees access. 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#24 | 
| 
			
			
			
			 Damn Right I Kiss Ass! 
			
		
			
			
			Industry Role:  
				Join Date: Dec 2003 
				Location: Cowtown, USA 
				
				
					Posts: 32,422
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Epassporte hacks are usually someone using their Epassporte account password as their affiliate account password. The affiliate Db gets hacked and the hacker just has to trial and error his way through the DB... 
		
	
		
		
		
		
		
	
	Instant cash. Then see where you bank if you are one of the wires types and use your password there too. Again.. easy money. Especially if the hacker can gain access to an account as the same bank... Transfer all your money with a few clicks... Of course, every time this happens the guy who got fucked in the ass says he didn't use the same password. Yeah... Way to save face pall.. We all know you did. No use lying about it!  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#25 | |
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Nov 2001 
				Location: Southfield, MI 
				
				
					Posts: 9,812
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 Brad 
				__________________ 
		
		
		
		
	
	President at MojoHost | brad at mojohost dot com | Skype MojoHostBrad 71 industry awards for hosting and professional excellence since 1999  
			 | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#26 | |
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 gotta wonder how the "head programmer" of nats lost his password you would think that would be a pretty important password to lose when it means you can backdoor every nats sponsor and walk away with a kings ransom in data. you would also think it would be a pretty hard thing to miss for so long , the head programmers master backdoor is compromised and nobody notices a thing . 
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#27 | |
| 
			
			
			
			 Too lazy to set a custom title 
			
		
			
			
			Join Date: Mar 2002 
				Location: Australia 
				
				
					Posts: 17,393
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#28 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Jan 2006 
				Location: The Valley 
				
				
					Posts: 7,412
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 So, what I'm hearing is anyone using NATS who didn't disable TMM's access to their servers has the personal information of their entire user-base and affiliate-base compromised? 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
		
			
		
		
	
	-D. ICQ: 202-96-31  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#29 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: May 2005 
				Location: Dee Dee Dee LAND! 
				
				
					Posts: 800
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Exactly! 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	QuadraNET - ICQ:2222 15312 - milan [nosp@m] QuadraNET.com 24/7 "REALLY ON-SITE" Support - Completely Premium Network Public & Private Network, Remote Reboot, Private VLANs 99.99% Guaranteed Network Uptime / BGP4 Multihomed 24/7 LIVE CHAT, Phone and Ticket Support 1-888-5-QUADRA  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#30 | 
| 
			
			
			
			 Confirmed User 
			
		
			
			
			Join Date: Jun 2007 
				
				
				
					Posts: 262
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Sounds like someone should be sueing Nats right about now. 
		
	
		
		
		
		
		
	
	 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#31 | |
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Jan 2006 
				Location: The Valley 
				
				
					Posts: 7,412
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 As of the last time we used NATS (a year ago), and as I can recall, all affiliate and user passwords, usernames, addresses, epass account names, etc. were stored in plain text. Someone please correct me if that's not the status quo. 
				__________________ 
		
		
		
		
	
	-D. ICQ: 202-96-31  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#32 | |
| 
			
			
			
			 Confirmed User 
			
		
			
			
			Join Date: Jan 2005 
				Location: Chicago, IL 
				
				
					Posts: 8,452
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 Also, what about stuff like SSN? My company uses a FEIN but I'm guessing some still use their SSN.  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#33 | |
| 
			
			
			
			 Too lazy to set a custom title 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Jan 2001 
				
				
				
					Posts: 51,692
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 But having access to emailing 50 % + of the surfers paying for porn will bring a lot more money then $10 000. It's totally targetted surfers, the perfect list. I'm sure lots of people could be willing to spend a tons of cash developping a technology to hack into that kind of data. The webmaster epass stolen could also be explained.  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#34 | |
| 
			
			
			
			 ►SouthOfHeaven 
			
		
			
				
			
			
			Join Date: Jun 2004 
				Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer 
				
				
					Posts: 28,609
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 besides if the password is there the hacker can just login with your account and see the banking info if its available in your settings. 
				__________________ 
		
		
		
		
	
	hatisblack at yahoo.com  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#35 | 
| 
			
			
			
			 aka K-Man 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Oct 2001 
				Location: The Gutter 
				
				
					Posts: 29,292
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 doh!!!!!!! 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	Crypto HODLr Crypto mining Angel investor  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#36 | 
| 
			
			
			
			 So Fucking Banned 
			
		
			
			
			Join Date: Jul 2003 
				
				
				
					Posts: 1,623
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 NATS is fucked 
		
	
		
		
		
		
		
	
	it has so many flaws why sponsors use it is beyond me.  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#37 | 
| 
			
			
			
			 Totally Borked 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Feb 2005 
				
				
				
					Posts: 6,284
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 No, members passes are cleartext by default. Affiliate passwords are two-way encrypted. What I don't understand is why the need for two-way encryption? To reset an affiliates pass if they forgot it in the backend is nothing, so 1-way encryption would have been far better. John posted in another thread that this is to be included in NATS4. Shame it wasn't sooner IMPO. 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	![]() For coding work - hit me up on andy // borkedcoder // com (consider figuring out the email as test #1) All models are wrong, but some are useful. George E.P. Box. p202  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#38 | 
| 
			
			
			
			 So Fucking Banned 
			
		
			
			
			Join Date: Feb 2004 
				Location: UK 
				
				
					Posts: 195
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 All I can say is SQL Injection. 
		
	
		
		
		
		
		
	
	 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#39 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Feb 2002 
				Location: ICQ: 251425 Fr/Au/Ca 
				
				
					Posts: 6,863
				 
				
				
				
				 | 
	
	|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#40 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Feb 2002 
				Location: ICQ: 251425 Fr/Au/Ca 
				
				
					Posts: 6,863
				 
				
				
				
				 | 
	
	|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#41 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Aug 2006 
				Location: Poland 
				
				
					Posts: 9,229
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 I've seen code by the tmm guys, i seriously doubt there are any sql injection issues in nats... 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	Mechanical Bunny Media Mechbunny Tube Script | Mechbunny Webcam Aggregator Script | Custom Web Development  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#42 | 
| 
			
			
			
			 RIP Dodger. BEST.CAT.EVER 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Dec 2002 
				Location: NYC Area 
				
				
					Posts: 18,450
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Panchodog has had the admin locked down via specific full IPs for a very long time now. 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	-uno icq: 111-914 CrazyBabe.com - porn art MojoHost - For all your hosting needs, present and future. Tell them I sent ya!  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#43 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Feb 2002 
				Location: ICQ: 251425 Fr/Au/Ca 
				
				
					Posts: 6,863
				 
				
				
				
				 | 
	
	|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#44 | 
| 
			
			
			
			 jscizzle 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Feb 2001 
				Location: Taipei 
				
				
					Posts: 25,198
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Any input from NATS on this matter? I find this very disturbing, need a little reassurance please John 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	—Jordan B. Peterson Listen to Pomp tell why is Bitcoin important 
			 | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#45 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Aug 2006 
				Location: Poland 
				
				
					Posts: 9,229
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 preventing sql injection is not rocket science, buddy. 
		
	
		
		
		
		
			
				__________________ 
		
		
		
		
	
	Mechanical Bunny Media Mechbunny Tube Script | Mechbunny Webcam Aggregator Script | Custom Web Development  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#46 | 
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Feb 2002 
				Location: ICQ: 251425 Fr/Au/Ca 
				
				
					Posts: 6,863
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Please don't patronize me. I've worked very closely w/ NATS and CARMA since they were in beta. 
		
	
		
		
		
		
		
	
	I have personally tested and proved SQL injections against NATS and CARMA [and dutifully reported them]. I have looked at the source of both, and literally just took a scroll through it again. There are exploitable areas. I haven't seen a mysql_real_escape_string anywhere in the code I saw, and 6 months ago, there were definite issues. HTML_special_chars / [and god forbid] addslashes and the ilk are not sql protection. Check out - http://www.gofuckyourself.com/showpo...&postcount=218 I know programmers love to piss on each other, but the fact of the matter is that basically ANY script online is susceptible to attack, whether it be by the script itself, or the frameworks that support it.  | 
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#47 | |
| 
			
			
			
			 Totally Borked 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Feb 2005 
				
				
				
					Posts: 6,284
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 
				__________________ 
		
		
		
		
	
	![]() For coding work - hit me up on andy // borkedcoder // com (consider figuring out the email as test #1) All models are wrong, but some are useful. George E.P. Box. p202  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#48 | |
| 
			
			
			
			 Totally Borked 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Feb 2005 
				
				
				
					Posts: 6,284
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 How many people have access to the open source of NATS? Surely the only way to know where these exploits are, if what you say is correct, is to have access to the source. How come you have access to the source? 
				__________________ 
		
		
		
		
	
	![]() For coding work - hit me up on andy // borkedcoder // com (consider figuring out the email as test #1) All models are wrong, but some are useful. George E.P. Box. p202  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#49 | |
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Industry Role:  
				Join Date: Aug 2006 
				Location: Poland 
				
				
					Posts: 9,229
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 
				__________________ 
		
		
		
		
	
	Mechanical Bunny Media Mechbunny Tube Script | Mechbunny Webcam Aggregator Script | Custom Web Development  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 | 
| 
			
			 | 
		#50 | |
| 
			
			
			
			 Confirmed User 
			
		
			
				
			
			
			Join Date: Feb 2002 
				Location: ICQ: 251425 Fr/Au/Ca 
				
				
					Posts: 6,863
				 
				
				
				
				 | 
	
	
	
	
		
		
		
		 Quote: 
	
 I don't have the full source, I just have it for a few key files that were left on my server after a tech did an upgrade. TMM knows I have seen them, and I promised them to pass on any info I saw in there that might cause problems, and I have  | 
|
| 
		 | 
	
	
	
		
                 
		
		
		
		
		
		
		
			
			
		
	 |