AVN: NATS/TMM Breached for More Than a Year

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • MicDoohan
    Confirmed User
    • Apr 2003
    • 791

    #46
    Originally posted by Chimera1
    To be honest I do not know this person. I really don't care to know him.

    I am curious why you are arguing with a person you deem mentally incompetent? That is not logical, nor is it productive.

    Again, I say are you guys arguing for the sake of hearing your jaws work or your fingers type or is there some pathology involved?

    I would certainly hope people could separate news from the bearer. AVN has my vote of confidence in this matter at least in so far as being legally and factually correct in quoting the statements they did.

    I don't feel that arguing with a person you deem unstable is going to change that person's mind or their actions.
    There is personal and there is business. So which is it?
    you won't find me arguing with him. if you want to believe anything that minusonebit says that is up to you. have fun ya moose knuckle

    Comment

    • MicDoohan
      Confirmed User
      • Apr 2003
      • 791

      #47
      Originally posted by minusonebit


      Spot on. Its wise to keep notes on that as well.

      But I think as affiliates we also should be concerned about the breach of our personal data. No one knows just how much information was lost from the customers side of things, but we do know that NATS stores all of our affiliate data to include bank routing and SSNs/TPIDs and we do know that the perps would have had access to that. Did they get it? Again, no one knows.

      TMM is not being cooperative, they are not addressing their customers saying thats on the advice of counsel, but they are giving statements to the media. Most lawyers I know would not give advice to avoid your customers but talk to the media, they'd say take care of your customers but be careful, or they'd say don't talk to anyone at all. So the "on the advice of our counsel" line is simply another way of saying "no comment", and no comment as we all know is used to avoid questions we don't want to answer because an honest answer would make us look bad somehow.
      there is not the slightest shred of evidence to suggest affiliate data was leaked. non.nada.NOTHING but heh don't let that stop you when you are getting 'mad views'

      you are just a frustrated little faggot keith

      Comment

      • TheDoc
        Too lazy to set a custom title
        • Jul 2001
        • 13827

        #48
        Originally posted by jcsike
        http://kb.getnats.com/idx/15/148/Bil...r_gateway.html

        NATS supports this feature with CC and ACH gateways. This article explains how to use this feature.

        Specific variables for Credit Card sales:

        enddate_month - CC expiration date, month
        enddate_year - CC expiration date, year (XXXX format)
        cc - CC Card Number, no dashes
        cvv - CC CVV2 code

        This doesn't store the credit card information. It's on a secure join form which posts the data to say netbilling for approval. Netbilling then sends back a postback like a 3rd party processor, without the cc info.
        ~TheDoc - ICQ7765825
        It's all disambiguation

        Comment

        • jcsike
          Confirmed User
          • Jan 2006
          • 689

          #49
          Originally posted by TheDoc
          This doesn't store the credit card information. It's on a secure join form which posts the data to say netbilling for approval. Netbilling then sends back a postback like a 3rd party processor, without the cc info.
          if you set the nats up as your credit card gateway, you should be able to search in the nats by using the credit card number. correct me if im wrong
          Last edited by jcsike; 01-02-2008, 06:25 PM.

          Comment

          • TheDoc
            Too lazy to set a custom title
            • Jul 2001
            • 13827

            #50
            Originally posted by jcsike
            if you set the nats up as your credit card gateway, you should be able to search in the nats by using the credit card number. correct me if im wrong
            I just checked 2 programs using Netbilling, both Member Admins. Neither have credit card search forms. I checked phpmyadmin on one, and no field in the database for cv2, exp date or cc#.

            Even the KB says it posts to the processor and you get a reply back if it is approved or declined. That's what it's for.
            ~TheDoc - ICQ7765825
            It's all disambiguation

            Comment

            • jcsike
              Confirmed User
              • Jan 2006
              • 689

              #51
              if nats doesnt come near cc info and that is the case, then thanks for pointing it out and i apoligize to nats for my suspicions

              Comment

              • ninavain
                So Fucking Banned
                • Jan 2004
                • 6268

                #52
                50..avn articles about nats

                Comment

                • TheDoc
                  Too lazy to set a custom title
                  • Jul 2001
                  • 13827

                  #53
                  Originally posted by jcsike
                  if nats doesnt come near cc info and that is the case, then thanks for pointing it out and i apoligize to nats for my suspicions
                  No worries, it's okay to be suspicious when it comes to cc info


                  Overall this article is lame, not news, and anyone that thinks they will exit nats and find the golden path of perfection isn't getting on cloud9, they rolled up and smoked cloud9.

                  Any program that drops nats to open a new program/backend will be exploited/hacked within 6 months. Anyone that doesn't agree with that shouldn't open a program.
                  ~TheDoc - ICQ7765825
                  It's all disambiguation

                  Comment

                  • BoyAlley
                    So Fucking Gay
                    • Nov 2004
                    • 19714

                    #54
                    Originally posted by TheDoc
                    and anyone that thinks they will exit nats and find the golden path of perfection isn't getting on cloud9, they rolled up and smoked cloud9.

                    Any program that drops nats to open a new program/backend will be exploited/hacked within 6 months. Anyone that doesn't agree with that shouldn't open a program.
                    That's just absolutely fucking retarded.

                    Your non stop defense has gone above and beyond the level of dick sucking at this point.

                    I hope John's at least giving you some ass for posting retarded statements like that....

                    Comment

                    • Robbie
                      Leaner, Meaner, Faster
                      • Aug 2002
                      • 20960

                      #55
                      Originally posted by TheDoc
                      NAny program that drops nats to open a new program/backend will be exploited/hacked within 6 months. Anyone that doesn't agree with that shouldn't open a program.
                      I agree there. It's better to keep moving forward and deal with each problem as it rolls out. I have only seen people who don't actually run programs coming up with all the scenarios that they think are how it works.
                      Guys...if NATS was really the horror story that you portray we would all drop them and either build our own or go back to single processing. Who knows? Maybe we'll all jump to CC Bill's new backend anyway.
                      Bottom line is...you just keep going forward. It seems like there is a lot of negativity here but no real productivity. I've been posting on this thread in between adding galleries to my tgps. I hope everybody else (except minusonebit of course since he isn't really in this business) is just posting here to take small breaks from what we all really do: Make money and kick ass.
                      -Robbie
                      ClaudiaMarie.Com

                      Comment

                      • notoldschool
                        Confirmed User
                        • Aug 2007
                        • 5687

                        #56
                        no way programs are going to drop nats. Atleast with nats the cats out of the bag and we have locked shit down. It is not as easy as you think for an older program to just up and change back ends. It would be biz suicide. How many affiliates would they lose? Much more than you know. I prefer promoting nats programs because they always convert and are much less likely to waste your traffic then some guy who has his finger on the shave button of his homemade back end.
                        No doubt one may quote history to support any cause, as the devil quotes scripture.
                        -- Learned Hand

                        http://www.bjpenn.com

                        Comment

                        • BoyAlley
                          So Fucking Gay
                          • Nov 2004
                          • 19714

                          #57
                          Originally posted by notoldschool
                          How many affiliates would they lose?

                          I would say at this point it might very well be a question of "how many affiliates would they gain".

                          Comment

                          • will76
                            Making $$$$ w/ ClickCash
                            • May 2003
                            • 18037

                            #58
                            Originally posted by SmokeyTheBear
                            they did notice it ages ago , they neglected to investigate further when they obviously should have.

                            did they understand this was a system wide breach ? perhaps not .

                            should they have ? yes.
                            See thats the thing that doesn't make sense to me.

                            Fact: we know it was a password list that was obtained from TMM some kind of way, either a server hack, someone leaked the info, etc... some kind of way their admin account info for every client was released.

                            They say they noticed "this" problem months ago but thought it was isolated and they thought they fixed it.

                            Question: If you noticed that a few clients were having someone accessing their servers using your NATS admin account info, why the hell didn't you check all of your client's servers that you have access to.

                            Most likely answer: John probably blammed each of the people affected months ago and passed it off as their servers were hacked. I would bet he didn't think the problem was on his end so he didn't bother to take a couple mins to randomly start logging into clients servers to see if NATS admin accounts were accessing those servers 10x a day. He said this much in the first couple threads posted here a couple weeks ago. he siad the most likely answer was that the clients server was hacked.

                            If i am wrong please explain to me what I am missing here.
                            Last edited by will76; 01-02-2008, 07:07 PM.
                            ICQ: 86364801 Email: will [at] innovativeassets [dot] com

                            PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread)
                            FNCash | Media Revenue

                            Comment

                            • TheDoc
                              Too lazy to set a custom title
                              • Jul 2001
                              • 13827

                              #59
                              Originally posted by BoyAlley
                              That's just absolutely fucking retarded.

                              Your non stop defense has gone above and beyond the level of dick sucking at this point.

                              I hope John's at least giving you some ass for posting retarded statements like that....
                              Do you understand what goes on in this business at all? Really understand I mean? Not this fake nats hack drama shit.. clearly not.

                              If you think opening your own software provides a golden path, then you are mistaken due to a lack of experience. If you think it will make you more secure, you again would be incorrect. Software does not make you secure.

                              The only problem around here is people like you putting your trust into software. Your security is YOUR responsibility, period! Every backend has been hit in some way, if you don't get that then I'm sorry.

                              I'm defending logic, not NATS.
                              Last edited by TheDoc; 01-02-2008, 07:10 PM.
                              ~TheDoc - ICQ7765825
                              It's all disambiguation

                              Comment

                              • will76
                                Making $$$$ w/ ClickCash
                                • May 2003
                                • 18037

                                #60
                                Originally posted by BoyAlley
                                That's just absolutely fucking retarded.

                                Your non stop defense has gone above and beyond the level of dick sucking at this point.

                                I hope John's at least giving you some ass for posting retarded statements like that....
                                TheDoc is as biased as they come. He does work for Nats, do you think he is going to do anything less than defend them. He has been biased from day one and has posted in just about every thread thrying to down play things, say only emails were taken, he said all people using nats was fine now (all clear) even microsoft has problems, everyone gets hacked, your info is already out there so why worry about it, etc etc etc etc.
                                ICQ: 86364801 Email: will [at] innovativeassets [dot] com

                                PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread)
                                FNCash | Media Revenue

                                Comment

                                Working...