Hotmovies - Moviedollars admin site security - GoFuckYourself.com

al eingang · 04-28-2008, 10:59 AM

The fine people at Hotmovies/Moviedollars have told me that they won't do business with me as an affiliate or as a studio if I won't fill in the field in their admin area that asks for my tax ID/social-security number. The problem? Their admin interface isn't secured - it's an http rather than an https site. I told them that I have no problem with giving them my tax ID if they want to keep it in their internal records but I'm not interested in having it on an unprotected server.
Doesn't it seem pretty fuckin' pathetic that a big, successful company that is obviously doing business with a large number of affiliates and studios won't take a simple step to protect their business partners from identity theft? They could at least do what AEBN does and have an obfuscated number (like xxx-xx-1111) on a non-secure server, right? I know that a significant number of people in adult are individuals using their SS number instead of an EIN and Hotmovies/Moviedollars must know it too because the form asks for "Social Security / Tax ID".
Has anybody else had any experience/problems with this - with Hotmovies/Moviedollars or other programs?

WiredGuy · 04-28-2008, 11:10 AM

Doesn't seem unreasonable to ask for some security on their forms.
WG

CurrentlySober · 04-28-2008, 11:12 AM

i like poo

cameradude007 · 04-28-2008, 12:11 PM

ya, it is dangerous if they get hacked, but as long as your keep checking your credit regularly you should be fine.

cameradude007 · 04-28-2008, 12:12 PM

i am sure you can talk to them and give them your info on the phone.

al eingang · 04-28-2008, 06:02 PM

Nope - they told me I can't do business with them if I don't put the number in their non-secured form. Sucks.
And it's not just me that they're endangering - should everyone who has an account with them have to waste time and energy watching out for signs of identity theft because they won't do the right thing? It's ridiculous.

James_Hotmovies · 04-29-2008, 04:35 AM

Why don't you simply use the https site?

https://www.moviedollars.com

al eingang · 04-29-2008, 07:18 AM

Hey James,
Thanks for the info. If Stan at Hotmovies had told me that an https site exists I would have tried it, but he didn't. Now that I know about it I have given it a try and as far as I can tell it isn't an https site - it's an https login page that leads to the http site and doesn't even use SSL for the login - I get a warning from my browser when I hit the "log in" button telling me that the information I have entered is to be sent over an unencrypted connection.
I'm not trying to bust your balls here - I'm sure you guys are overwhelmed with work and I've talked with you on the phone before and know that you're good guy - but this seems like a pretty basic thing that Hotmovies should be doing to protect it's own interests and those of the studios and affiliates.
AL

04-28-2008, 10:59 AM	#1
al eingang Registered User Join Date: Dec 2003 Posts: 17	Hotmovies - Moviedollars admin site security The fine people at Hotmovies/Moviedollars have told me that they won't do business with me as an affiliate or as a studio if I won't fill in the field in their admin area that asks for my tax ID/social-security number. The problem? Their admin interface isn't secured - it's an http rather than an https site. I told them that I have no problem with giving them my tax ID if they want to keep it in their internal records but I'm not interested in having it on an unprotected server. Doesn't it seem pretty fuckin' pathetic that a big, successful company that is obviously doing business with a large number of affiliates and studios won't take a simple step to protect their business partners from identity theft? They could at least do what AEBN does and have an obfuscated number (like xxx-xx-1111) on a non-secure server, right? I know that a significant number of people in adult are individuals using their SS number instead of an EIN and Hotmovies/Moviedollars must know it too because the form asks for "Social Security / Tax ID". Has anybody else had any experience/problems with this - with Hotmovies/Moviedollars or other programs?

04-28-2008, 11:10 AM	#2
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,482	Doesn't seem unreasonable to ask for some security on their forms. WG __________________ I play with Google.

04-28-2008, 11:12 AM	#3
CurrentlySober Too lazy to wipe my ass Industry Role: Join Date: Aug 2002 Location: A Public Bathroom Posts: 38,646	i like poo __________________ My AI Handywork... My Dream Gal... XXX 👁️ 👍️ 💩

04-29-2008, 04:35 AM	#7
James_Hotmovies Confirmed User Industry Role: Join Date: Dec 2002 Location: Philadelphia Posts: 399	Why don't you simply use the https site? https://www.moviedollars.com __________________ https://www.facebook.com/jamescybert www.adultrental.com

04-28-2008, 12:11 PM	#4
cameradude007 Registered User Join Date: Jul 2007 Posts: 45	ya, it is dangerous if they get hacked, but as long as your keep checking your credit regularly you should be fine.

04-28-2008, 12:12 PM	#5
cameradude007 Registered User Join Date: Jul 2007 Posts: 45	i am sure you can talk to them and give them your info on the phone.

04-28-2008, 06:02 PM	#6
al eingang Registered User Join Date: Dec 2003 Posts: 17	Nope - they told me I can't do business with them if I don't put the number in their non-secured form. Sucks. And it's not just me that they're endangering - should everyone who has an account with them have to waste time and energy watching out for signs of identity theft because they won't do the right thing? It's ridiculous.

04-29-2008, 07:18 AM	#8
al eingang Registered User Join Date: Dec 2003 Posts: 17	Hey James, Thanks for the info. If Stan at Hotmovies had told me that an https site exists I would have tried it, but he didn't. Now that I know about it I have given it a try and as far as I can tell it isn't an https site - it's an https login page that leads to the http site and doesn't even use SSL for the login - I get a warning from my browser when I hit the "log in" button telling me that the information I have entered is to be sent over an unencrypted connection. I'm not trying to bust your balls here - I'm sure you guys are overwhelmed with work and I've talked with you on the phone before and know that you're good guy - but this seems like a pretty basic thing that Hotmovies should be doing to protect it's own interests and those of the studios and affiliates. AL