AVN: NATS/TMM Breached for More Than a Year
Collapse
X
-
there is not the slightest shred of evidence to suggest affiliate data was leaked. non.nada.NOTHING but heh don't let that stop you when you are getting 'mad views'
Spot on. Its wise to keep notes on that as well.
But I think as affiliates we also should be concerned about the breach of our personal data. No one knows just how much information was lost from the customers side of things, but we do know that NATS stores all of our affiliate data to include bank routing and SSNs/TPIDs and we do know that the perps would have had access to that. Did they get it? Again, no one knows.
TMM is not being cooperative, they are not addressing their customers saying thats on the advice of counsel, but they are giving statements to the media. Most lawyers I know would not give advice to avoid your customers but talk to the media, they'd say take care of your customers but be careful, or they'd say don't talk to anyone at all. So the "on the advice of our counsel" line is simply another way of saying "no comment", and no comment as we all know is used to avoid questions we don't want to answer because an honest answer would make us look bad somehow.
you are just a frustrated little faggot keith
Comment
-
http://kb.getnats.com/idx/15/148/Bil...r_gateway.html
NATS supports this feature with CC and ACH gateways. This article explains how to use this feature.
Specific variables for Credit Card sales:
enddate_month - CC expiration date, month
enddate_year - CC expiration date, year (XXXX format)
cc - CC Card Number, no dashes
cvv - CC CVV2 code
This doesn't store the credit card information. It's on a secure join form which posts the data to say netbilling for approval. Netbilling then sends back a postback like a 3rd party processor, without the cc info.
~TheDoc - ICQ7765825
It's all disambiguation
Comment
-
if you set the nats up as your credit card gateway, you should be able to search in the nats by using the credit card number. correct me if im wrongLast edited by jcsike; 01-02-2008, 06:25 PM.Comment
-
I just checked 2 programs using Netbilling, both Member Admins. Neither have credit card search forms. I checked phpmyadmin on one, and no field in the database for cv2, exp date or cc#.
Even the KB says it posts to the processor and you get a reply back if it is approved or declined. That's what it's for.
~TheDoc - ICQ7765825
It's all disambiguation
Comment
-
No worries, it's okay to be suspicious when it comes to cc info
Overall this article is lame, not news, and anyone that thinks they will exit nats and find the golden path of perfection isn't getting on cloud9, they rolled up and smoked cloud9.
Any program that drops nats to open a new program/backend will be exploited/hacked within 6 months. Anyone that doesn't agree with that shouldn't open a program.
~TheDoc - ICQ7765825
It's all disambiguation
Comment
-
That's just absolutely fucking retarded.and anyone that thinks they will exit nats and find the golden path of perfection isn't getting on cloud9, they rolled up and smoked cloud9.
Any program that drops nats to open a new program/backend will be exploited/hacked within 6 months. Anyone that doesn't agree with that shouldn't open a program.
Your non stop defense has gone above and beyond the level of dick sucking at this point.
I hope John's at least giving you some ass for posting retarded statements like that....Comment
-
I agree there. It's better to keep moving forward and deal with each problem as it rolls out. I have only seen people who don't actually run programs coming up with all the scenarios that they think are how it works.
Guys...if NATS was really the horror story that you portray we would all drop them and either build our own or go back to single processing. Who knows? Maybe we'll all jump to CC Bill's new backend anyway.
Bottom line is...you just keep going forward. It seems like there is a lot of negativity here but no real productivity. I've been posting on this thread in between adding galleries to my tgps. I hope everybody else (except minusonebit of course since he isn't really in this business) is just posting here to take small breaks from what we all really do: Make money and kick ass.
-Robbie
ClaudiaMarie.ComComment
-
no way programs are going to drop nats. Atleast with nats the cats out of the bag and we have locked shit down. It is not as easy as you think for an older program to just up and change back ends. It would be biz suicide. How many affiliates would they lose? Much more than you know. I prefer promoting nats programs because they always convert and are much less likely to waste your traffic then some guy who has his finger on the shave button of his homemade back end.No doubt one may quote history to support any cause, as the devil quotes scripture.
-- Learned Hand
http://www.bjpenn.comComment
-
See thats the thing that doesn't make sense to me.
Fact: we know it was a password list that was obtained from TMM some kind of way, either a server hack, someone leaked the info, etc... some kind of way their admin account info for every client was released.
They say they noticed "this" problem months ago but thought it was isolated and they thought they fixed it.
Question: If you noticed that a few clients were having someone accessing their servers using your NATS admin account info, why the hell didn't you check all of your client's servers that you have access to.
Most likely answer: John probably blammed each of the people affected months ago and passed it off as their servers were hacked. I would bet he didn't think the problem was on his end so he didn't bother to take a couple mins to randomly start logging into clients servers to see if NATS admin accounts were accessing those servers 10x a day. He said this much in the first couple threads posted here a couple weeks ago. he siad the most likely answer was that the clients server was hacked.
If i am wrong please explain to me what I am missing here.Last edited by will76; 01-02-2008, 07:07 PM.ICQ: 86364801 Email: will [at] innovativeassets [dot] com
Comment
-
Do you understand what goes on in this business at all? Really understand I mean? Not this fake nats hack drama shit.. clearly not.
If you think opening your own software provides a golden path, then you are mistaken due to a lack of experience. If you think it will make you more secure, you again would be incorrect. Software does not make you secure.
The only problem around here is people like you putting your trust into software. Your security is YOUR responsibility, period! Every backend has been hit in some way, if you don't get that then I'm sorry.
I'm defending logic, not NATS.Last edited by TheDoc; 01-02-2008, 07:10 PM.
~TheDoc - ICQ7765825
It's all disambiguation
Comment
-
TheDoc is as biased as they come. He does work for Nats, do you think he is going to do anything less than defend them. He has been biased from day one and has posted in just about every thread thrying to down play things, say only emails were taken, he said all people using nats was fine now (all clear) even microsoft has problems, everyone gets hacked, your info is already out there so why worry about it, etc etc etc etc.ICQ: 86364801 Email: will [at] innovativeassets [dot] com
Comment


Comment