executive stats article in avn

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • fris
    Too lazy to set a custom title
    • Aug 2002
    • 55689

    #1

    executive stats article in avn

    http://www.avnonline.com/index.php?P...tent_ID=231409

    good article

    except this part

    We know who this Fris character is. He came to us with holes in our system and wanted money to fix them. So in other words, he hacked us, then wanted us to pay him not to make the hacks public,? Shaw says.

    i never came to you with es holes.

    i have never wanted money from any company in the adult industry, i have never worked for any company, or asked too, i have always been solo. people have offered to hire me.

    show me the definition of a hack.

    you obviously dont know it

    brute force, running an exploit, do you know anything about computers brad?

    and i wanted you to pay me not to make it public?, when did this happen?

    i have never made any communictation with any of your staff other than greg at the montreal show. and it was for a merely 10 mins.

    i really do think greg is professional, you could learn a lot from him.

    anyways that is my take on the situation.

    flame away all you want.

    ss is out of canadas reach you should know that.

    good luck in your future plans.
    Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.
  • adonthenet
    Too lazy to set a custom title
    • Feb 2005
    • 16753

    #2
    hackers... go figure :P

    Comment

    • Fletch XXX
      GFY HALL OF FAME DAMMIT!!!
      • Jan 2002
      • 60840

      #3
      how much are you getting paid?

      Want an Android App for your tube, membership, or free site?

      Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

      Comment

      • Manowar
        jellyfish  
        • Dec 2003
        • 71528

        #4
        Sig spot

        Comment

        • Headless
          Registered User
          • Jan 2001
          • 26727

          #5
          Originally posted by adonthenet
          hackers... go figure :P

          shut the fuck up you worthless piece of shit sigwhore...

          Comment

          • Jace
            FBOP Class Of 2013
            • Jan 2004
            • 35562

            #6
            i stand by you...you did not hack shit...you publicly exposed security flaws

            while I am not sure I would have posted it on gfy first before contacting them, i think with all the shit brad shaw starts, this gave a little back to him...i probably would have done the same thing

            Comment

            • s9ann0
              Confirmed User
              • Sep 2001
              • 4873

              #7
              hack the planet dude!

              Comment

              • baddog
                So Fucking Banned
                • Apr 2001
                • 107089

                #8
                This is probably worthy of a first page sig spot . . . I already blew it on the original thread

                Comment

                • Alky
                  Confirmed User
                  • Apr 2002
                  • 5651

                  #9
                  actually the definition of hacking is very broad, not limited to "brute force, running an exploit"

                  Comment

                  • AlienQ - BANNED FOR LIFE
                    best designer on GFY
                    • Mar 2003
                    • 30307

                    #10
                    So...

                    Ya talked to Greg about some work.
                    After realising they were not going to give you work you hit there company with a security issue and exposed it on a public board.

                    Nice guy...

                    Your a real fucken sweet heart...

                    Comment

                    • fris
                      Too lazy to set a custom title
                      • Aug 2002
                      • 55689

                      #11
                      Originally posted by JaceXXX
                      i stand by you...you did not hack shit...you publicly exposed security flaws

                      while I am not sure I would have posted it on gfy first before contacting them, i think with all the shit brad shaw starts, this gave a little back to him...i probably would have done the same thing

                      i am not stupid, i would not do something on a public board if i knew it was breaking the law.

                      if it prompted me for a login box and i kept trying to get in, then he could complain about it.

                      but until brad learns a bit about the tech aspect of things he needs to know what the difference is.

                      but again like i said, no contact was made by shawinternet other than the 10 min conversation at the montreal show. and no money was discussed. i am not money hungry, like a lot of people

                      i would rather see someones system secure. if he cant accept that, thats his problem. hes gonna have to live with it.
                      Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.

                      Comment

                      • bringer
                        i have man boobies
                        • Jul 2003
                        • 13082

                        #12
                        Originally posted by AlienQ
                        So...

                        Ya talked to Greg about some work.
                        After realising they were not going to give you work you hit there company with a security issue and exposed it on a public board.

                        Nice guy...

                        Your a real fucken sweet heart...
                        i think he's already said repeatedly that he talked to greg about the security flaws in hopes they'd be fixed and werent.
                        333-765-551

                        Comment

                        • DamageX
                          Marketing & Strategy
                          • Jun 2001
                          • 14293

                          #13
                          I think he should thank you for pointing to the flaws in the program, so they could patch it.
                          Whitehat is for chumps

                          If you don't do it, somebody else will - true story!

                          Comment

                          • Fletch XXX
                            GFY HALL OF FAME DAMMIT!!!
                            • Jan 2002
                            • 60840

                            #14
                            ive seen a lot of board drama in my days.

                            but fris posting this, day before regs go into effect, making avn etc... well,... this is some prime grade top of the line drama here.

                            bookmarked and added to the classics.

                            Want an Android App for your tube, membership, or free site?

                            Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

                            Comment

                            • wjxxx
                              So Fucking Banned
                              • Feb 2005
                              • 4448

                              #15
                              Premium sig spot

                              Comment

                              • newbreed
                                Confirmed User
                                • Nov 2003
                                • 9898

                                #16
                                Fris, can you hack my shit so I can get some ink in AVN?

                                Thanks,
                                newbreed

                                edit - I'll give you kudos in the article for your effort instead of bullshit placing blame on you.
                                Last edited by newbreed; 06-22-2005, 02:54 PM.

                                Loryn ‎(3:16 PM):
                                I love it, just as long as we keep the bedroom door closed from all ears then we can have throw down hard core sex that makes us money haha
                                fuck it we can have sex on money never did that before

                                Comment

                                • fris
                                  Too lazy to set a custom title
                                  • Aug 2002
                                  • 55689

                                  #17
                                  Originally posted by AlienQ
                                  So...

                                  Ya talked to Greg about some work.
                                  After realising they were not going to give you work you hit there company with a security issue and exposed it on a public board.

                                  Nice guy...

                                  Your a real fucken sweet heart...
                                  you can stop the ass kissing, he never said anyting about hiring me. do you even get it through your thick skull? i didnt know if they were going to give me work or not. i didnt expect anything. when i goto shows i meet people. i have so much on my plate. 1 company means nothing to me.

                                  then again. you can keep kissing ass so can get your sig space next month.
                                  Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.

                                  Comment

                                  • KMR Stitch
                                    I am cool
                                    • Jul 2003
                                    • 14494

                                    #18
                                    Wow thats bullshit

                                    =-x

                                    Comment

                                    • will76
                                      Making $$$$ w/ ClickCash
                                      • May 2003
                                      • 18037

                                      #19
                                      Originally posted by DamageX
                                      I think he should thank you for pointing to the flaws in the program, so they could patch it.
                                      Yeah it kinda sucks someone points out holes in your program and you accuse him of being a hacker. Just because he found the hole doesn't mean he put it there.
                                      ICQ: 86364801 Email: will [at] innovativeassets [dot] com

                                      PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread)
                                      FNCash | Media Revenue

                                      Comment

                                      • Donny
                                        As you wish...
                                        • May 2002
                                        • 13754

                                        #20
                                        Think happy thoughts.

                                        Comment

                                        • AlienQ - BANNED FOR LIFE
                                          best designer on GFY
                                          • Mar 2003
                                          • 30307

                                          #21
                                          OK Fris...
                                          So Ya speak to Greg a very decent guy and decide to expose a cheap server side security flaw of a web application?

                                          Ya knew about the security issue before hand and the professional thing to do is post the info on a public board?

                                          Your definatly a guy that can not be trusted.
                                          No questions asked.
                                          Last edited by AlienQ - BANNED FOR LIFE; 06-22-2005, 02:57 PM.

                                          Comment

                                          • will76
                                            Making $$$$ w/ ClickCash
                                            • May 2003
                                            • 18037

                                            #22
                                            Originally posted by fris
                                            i am not stupid, i would not do something on a public board if i knew it was breaking the law.

                                            if it prompted me for a login box and i kept trying to get in, then he could complain about it.

                                            but until brad learns a bit about the tech aspect of things he needs to know what the difference is.

                                            but again like i said, no contact was made by shawinternet other than the 10 min conversation at the montreal show. and no money was discussed. i am not money hungry, like a lot of people

                                            i would rather see someones system secure. if he cant accept that, thats his problem. hes gonna have to live with it.

                                            Accusing you of "hacking him" on a public board is slandering you. Unless he can prove you did it, which even if you did I doubt he could do it. Sounds like you have a better case against him then he does you. I think accusing someone of hacking your system is damaging to their reputation and you could be compensaited for those damages.
                                            ICQ: 86364801 Email: will [at] innovativeassets [dot] com

                                            PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread)
                                            FNCash | Media Revenue

                                            Comment

                                            • DamageX
                                              Marketing & Strategy
                                              • Jun 2001
                                              • 14293

                                              #23
                                              Originally posted by will76
                                              Accusing you of "hacking him" on a public board is slandering you. Unless he can prove you did it, which even if you did I doubt he could do it. Sounds like you have a better case against him then he does you. I think accusing someone of hacking your system is damaging to their reputation and you could be compensaited for those damages.
                                              Good point.
                                              Whitehat is for chumps

                                              If you don't do it, somebody else will - true story!

                                              Comment

                                              • bringer
                                                i have man boobies
                                                • Jul 2003
                                                • 13082

                                                #24
                                                Originally posted by AlienQ
                                                OK Fris...
                                                So Ya speak to Greg a very decent guy and decide to expose a cheap server side security flaw of a web application?

                                                Ya knew about the security issue before hand and the professional thing to do is post the info on a public board?

                                                Your definatly a guy that can not be trusted.
                                                No questions asked.
                                                from what ive read it was pointed out and nothing was done or it wasnt fixed completely. theres more to this then brad losing his fucking elite code. im sure all his members arent going to enjoy the email bombs they get for farmsex because this flaw wasnt addressed as it should of been aswell as their private info such as phone and home address. how long did it take to get fixed once it hit the boards? record time, as usual.
                                                Last edited by bringer; 06-22-2005, 03:00 PM.
                                                333-765-551

                                                Comment

                                                • BradShaw
                                                  Confirmed User
                                                  • Oct 2001
                                                  • 7840

                                                  #25
                                                  Once again, AVN gets it wrong. Irresponsible journalism. The info available was to our own sites, not to clients of executive stats. Fris once again put his foot in his mouth. This was an siccash.com issue, a server issue, has nothing to do with ES itself.
                                                  Sig too big

                                                  http://www.gofuckyourself.com/gfy_faqs.html

                                                  Want to use a large banner in your sig??? Contact Eric about getting on as an advertiser - eric AT adult.com

                                                  Comment

                                                  • nico-t
                                                    emperor of my world
                                                    • Aug 2004
                                                    • 29903

                                                    #26
                                                    dramaaa!

                                                    i love gfy

                                                    Comment

                                                    • BradShaw
                                                      Confirmed User
                                                      • Oct 2001
                                                      • 7840

                                                      #27
                                                      Bringer, you make it sound like we were told of specfic problems and did not fix them. That is flat out incorrect. We were told there were "holes" and if we secured his services, he would tell us where and they would be fixed. IMHO this was extortion. He was on our server without our permission, we never hired him.
                                                      Last edited by BradShaw; 06-22-2005, 03:02 PM.
                                                      Sig too big

                                                      http://www.gofuckyourself.com/gfy_faqs.html

                                                      Want to use a large banner in your sig??? Contact Eric about getting on as an advertiser - eric AT adult.com

                                                      Comment

                                                      • DamageX
                                                        Marketing & Strategy
                                                        • Jun 2001
                                                        • 14293

                                                        #28
                                                        Originally posted by bringer
                                                        from what ive read it was pointed out and nothing was done or it wasnt fixed completely. theres more to this then brad losing his fucking elite code. im sure all his members arent going to enjoy the email bombs they get for farmsex because this flaw wasnt addressed as it should of been aswell as their private info such as phone and home address. how long did it take to get fixed once it hit the boards? record time, as usual.
                                                        Really surprising that many people choose to ignore holes until they're made known to the public...
                                                        Whitehat is for chumps

                                                        If you don't do it, somebody else will - true story!

                                                        Comment

                                                        • AlienQ - BANNED FOR LIFE
                                                          best designer on GFY
                                                          • Mar 2003
                                                          • 30307

                                                          #29
                                                          Bringer Follow the story man...

                                                          "theres more to this then brad losing his fucking elite code."
                                                          No code was lost.

                                                          This was just a cheap shot server security issue, not a script compromise.
                                                          I got instructions in my own email a couple fixes is all it took and I am sure all ES clients have been notified and have been updating since late last night.

                                                          The shit does not even require a server reboot.

                                                          Get the story right.
                                                          Or try to.

                                                          Comment

                                                          • will76
                                                            Making $$$$ w/ ClickCash
                                                            • May 2003
                                                            • 18037

                                                            #30
                                                            Fris if all you did was find the stuff and you didnt hack them and he said this about me:


                                                            ?This was not an ES issue. It was a server security issue that a hacker uncovered. The issue was with our server setup and has nothing to do with our clients,? he says.


                                                            We know who this Fris character is. He came to us with holes in our system and wanted money to fix them. So in other words, he hacked us, then wanted us to pay him not to make the hacks public,? Shaw says.


                                                            I would own him if he said that shit about me just for pointing out flaws with his software. not owned! but own $$$$
                                                            ICQ: 86364801 Email: will [at] innovativeassets [dot] com

                                                            PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread)
                                                            FNCash | Media Revenue

                                                            Comment

                                                            • wdsguy
                                                              Ryde or Die
                                                              • Dec 2002
                                                              • 19568

                                                              #31
                                                              LOL I love how fris is characterized as a hacker. Although if i was in the same situation, I wouldn't have posted it on gfy - but Fris did nothing wrong. He didn't breach the system nor did he run any exploits to exploit a flaw. Any surfer could have stumbled upon those folders that were open to all.

                                                              Comment

                                                              • bringer
                                                                i have man boobies
                                                                • Jul 2003
                                                                • 13082

                                                                #32
                                                                Originally posted by BradShaw
                                                                Bringer, you make it sound like we were told of specfic problems and did not fix them. That is flat out incorrect. We were told there were "holes" and we we secured his services, he would tell us where and they would be fixed. In other words, he was on our server without our permission, we never hired him.
                                                                thats not what im concerned about. im concerned the problem that was exploited (and i use that term very loosely) was something that should of been corrected by a security audit. id assume a company taking peoples private information would hire a private firm to do security audits to ensure privacy. i wouldnt be happy if all my private info i submitted to you in a secure session was available to anyone with a browser. you werent hacked, your server wasnt configured properly.
                                                                333-765-551

                                                                Comment

                                                                • bringer
                                                                  i have man boobies
                                                                  • Jul 2003
                                                                  • 13082

                                                                  #33
                                                                  Originally posted by AlienQ
                                                                  Bringer Follow the story man...

                                                                  "theres more to this then brad losing his fucking elite code."
                                                                  No code was lost.

                                                                  This was just a cheap shot server security issue, not a script compromise.
                                                                  I got instructions in my own email a couple fixes is all it took and I am sure all ES clients have been notified and have been updating since late last night.

                                                                  The shit does not even require a server reboot.

                                                                  Get the story right.
                                                                  Or try to.
                                                                  this wasnt an ES problem, it was a server misconfiguration. all those folders should of been password protected and why they werent is beyond me. i dont run ES and i have protected folders, its not rocket science.
                                                                  333-765-551

                                                                  Comment

                                                                  • Veterans Day
                                                                    Confirmed User
                                                                    • Jul 2003
                                                                    • 8403

                                                                    #34
                                                                    sig, blog traffic, profitable, juicy, thank you!
                                                                    Build a Massive Traffic Network, Hands FREE, Totally Automated

                                                                    Comment

                                                                    • will76
                                                                      Making $$$$ w/ ClickCash
                                                                      • May 2003
                                                                      • 18037

                                                                      #35
                                                                      So which is it ???

                                                                      THIS:
                                                                      Originally posted by BradShaw
                                                                      The info available was to our own sites, not to clients of executive stats. This was an siccash.com issue, a server issue, has nothing to do with ES itself.
                                                                      OR THIS:
                                                                      Originally posted by AlienQ
                                                                      I got instructions in my own email a couple fixes is all it took and I am sure all ES clients have been notified and have been updating since late last night.

                                                                      ICQ: 86364801 Email: will [at] innovativeassets [dot] com

                                                                      PROGRAM SHIT LIST - DO NOT PROMOTE (click link for gfy thread)
                                                                      FNCash | Media Revenue

                                                                      Comment

                                                                      • BradShaw
                                                                        Confirmed User
                                                                        • Oct 2001
                                                                        • 7840

                                                                        #36
                                                                        this wasnt an ES problem, it was a server misconfiguration


                                                                        Correct. And the way AVN presented it is irresponsible journalism and I expect a retraction.
                                                                        Sig too big

                                                                        http://www.gofuckyourself.com/gfy_faqs.html

                                                                        Want to use a large banner in your sig??? Contact Eric about getting on as an advertiser - eric AT adult.com

                                                                        Comment

                                                                        • AlienQ - BANNED FOR LIFE
                                                                          best designer on GFY
                                                                          • Mar 2003
                                                                          • 30307

                                                                          #37
                                                                          Perhaps some installations were done securely while some might not have been.
                                                                          Wouldnt hurt to run the steps at any rate just in case.

                                                                          Comment

                                                                          • FilthyRob
                                                                            Confirmed User
                                                                            • Feb 2004
                                                                            • 6741

                                                                            #38
                                                                            Originally posted by spanno
                                                                            hack the planet dude!

                                                                            One of the best hacker movies ever!

                                                                            "HACKERS"
                                                                            AKA - Clubsexy

                                                                            Comment

                                                                            • jimmyf
                                                                              OU812
                                                                              • Feb 2001
                                                                              • 12651

                                                                              #39
                                                                              Originally posted by BradShaw
                                                                              Correct. And the way AVN presented it is irresponsible journalism and I expect a retraction.
                                                                              you have pointed this out 2 them ? right..
                                                                              Epic CashEpic Cash works for me
                                                                              Solar Cash Paysite Plugin
                                                                              Gallery of the day freesites,POTD,Gallery generator with free hosting

                                                                              Comment

                                                                              • detoxed
                                                                                vip member
                                                                                • Jan 2003
                                                                                • 17798

                                                                                #40
                                                                                Well then sue him for lying about you in the article....

                                                                                Comment

                                                                                • NetRodent
                                                                                  Confirmed User
                                                                                  • Jan 2002
                                                                                  • 3985

                                                                                  #41
                                                                                  Originally posted by AlienQ
                                                                                  OK Fris...
                                                                                  So Ya speak to Greg a very decent guy and decide to expose a cheap server side security flaw of a web application?

                                                                                  Ya knew about the security issue before hand and the professional thing to do is post the info on a public board?

                                                                                  Your definatly a guy that can not be trusted.
                                                                                  No questions asked.
                                                                                  Actually that's the estabished and accepted method of bug reporting. Notify the company privately and if they don't fix it in a reasonable amount of time make the bug public so they have to fix it. Its far better to embarrass the company into fixing the bug than to have someone less reputable discover the bug and be free exploit it indefinitely.
                                                                                  "Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats."
                                                                                  --H.L. Mencken

                                                                                  Comment

                                                                                  • mrkris
                                                                                    Confirmed User
                                                                                    • May 2005
                                                                                    • 2737

                                                                                    #42
                                                                                    Originally posted by NetRodent
                                                                                    Actually that's the estabished and accepted method of bug reporting. Notify the company privately and if they don't fix it in a reasonable amount of time make the bug public so they have to fix it. Its far better to embarrass the company into fixing the bug than to have someone less reputable discover the bug and be free exploit it indefinitely.
                                                                                    I agree, this goes for all exploits found. They were given a decent amount of time to fix the bug, but they chose not to. This time, they have to or all hell will fall onto their laps. Personally, if Fris got into my server, I would be like, "Dude wtf ... sweet, how did you get in?"

                                                                                    PHP-MySQL-Rails | ICQ: 342500546

                                                                                    Comment

                                                                                    • Machete_
                                                                                      WINNING!
                                                                                      • Oct 2002
                                                                                      • 14579

                                                                                      #43
                                                                                      Fris - you are one of the few guys I would trust on this board. If anything goes wrong, and you need something to do somewhere else - hit me up:
                                                                                      [email protected]

                                                                                      Comment

                                                                                      • Machete_
                                                                                        WINNING!
                                                                                        • Oct 2002
                                                                                        • 14579

                                                                                        #44
                                                                                        Originally posted by BradShaw
                                                                                        He was on our server without our permission, we never hired him.
                                                                                        may I please visit your website?


                                                                                        idiot...

                                                                                        Comment

                                                                                        • AlienQ - BANNED FOR LIFE
                                                                                          best designer on GFY
                                                                                          • Mar 2003
                                                                                          • 30307

                                                                                          #45
                                                                                          Originally posted by NetRodent
                                                                                          Actually that's the estabished and accepted method of bug reporting. Notify the company privately and if they don't fix it in a reasonable amount of time make the bug public so they have to fix it. Its far better to embarrass the company into fixing the bug than to have someone less reputable discover the bug and be free exploit it indefinitely.
                                                                                          Really?

                                                                                          Let me know when it becomes LAW so I can open a business cracking and freaking doing Elite Hacks for profit.

                                                                                          I would call it H/3x Inc.

                                                                                          Comment

                                                                                          • Shok
                                                                                            Confirmed User
                                                                                            • Apr 2001
                                                                                            • 5611

                                                                                            #46
                                                                                            Hey Fris where was this "publicly available" place you found the urls at?

                                                                                            Comment

                                                                                            • NetRodent
                                                                                              Confirmed User
                                                                                              • Jan 2002
                                                                                              • 3985

                                                                                              #47
                                                                                              Originally posted by AlienQ
                                                                                              Really?

                                                                                              Let me know when it becomes LAW so I can open a business cracking and freaking doing Elite Hacks for profit.

                                                                                              I would call it H/3x Inc.
                                                                                              Anything that's not explicitly illegal is legal. Otherwise we'd better all start holding our breath until breathing becomes law.

                                                                                              It would make far more sense for you tell me when it becomes ILLEGAL.
                                                                                              "Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats."
                                                                                              --H.L. Mencken

                                                                                              Comment

                                                                                              • TDF
                                                                                                Triple OG nigga on GFY
                                                                                                • Mar 2002
                                                                                                • 27296

                                                                                                #48
                                                                                                Originally posted by ebus_dk
                                                                                                may I please visit your website?


                                                                                                idiot...


                                                                                                Sig heil

                                                                                                Comment

                                                                                                • Alex
                                                                                                  So Fucking Banned (YEA!!)
                                                                                                  • Jun 2004
                                                                                                  • 10963

                                                                                                  #49
                                                                                                  Originally posted by will76
                                                                                                  Accusing you of "hacking him" on a public board is slandering you. Unless he can prove you did it, which even if you did I doubt he could do it. Sounds like you have a better case against him then he does you. I think accusing someone of hacking your system is damaging to their reputation and you could be compensaited for those damages.
                                                                                                  What slander.

                                                                                                  I think even more higly of fris now. Nothing changed. In fact bradshaw is owning himself even more.
                                                                                                  Care about me?
                                                                                                  Who?
                                                                                                  Me!
                                                                                                  Who?

                                                                                                  Comment

                                                                                                  • Alex
                                                                                                    So Fucking Banned (YEA!!)
                                                                                                    • Jun 2004
                                                                                                    • 10963

                                                                                                    #50
                                                                                                    Oh and 50 _____
                                                                                                    Care about me?
                                                                                                    Who?
                                                                                                    Me!
                                                                                                    Who?

                                                                                                    Comment

                                                                                                    Working...