Who here uses ccbill's option for random passes?
 

Im thinking of going with that since too many members get cancelled by my password protection script so that automatically also means i lose an potential rebill.

I guess a random pass every time they login will prevent that right?

Anybodyyyyyy?

:)

Do you?

hi

hello

I use Password Sentry and have never had any problems like you mentioned....so no, it would be a HEADACHE to do it the other way...be easier to use a script that works with ccbills ( like Password Sentry) and avoid the problem.

:2 cents:


Ivy

another vote for PW Sentry... very solid script, been using it for years now. Dan (the writer) is very helpful and always close by if you need help getting it going, and the price is really great compared to some other options (Pennywise, ugh)..

Ok,

as the thread got serious.

A large part of the problem is the fact that there are lists with literally tens of thousands (if not more) of user/pwd combinations that will be hurled at your site.

Some of the hurlers learn as they go along.

The average surfer uses a username and password that is easy to remember and perhaps personal to them . They also tend to use the same login for site after site.

All it needs is for that user id/pwd to be compromised and it will get added to the numerous lists/hurler proggies.

If you use CCBill's random usernames and passwords that will prevent the above and the customer support impact is minimal.

If you use the random passes AND use the additional characters these will conflict with Password Sentry when it tries to update the records for each login.

Use the random passes without the additional characters and you'll be fine for use with Password Sentry.

we use ccbill random generated usernames and passwords - not a single problem yet and no pass was ever hacked.

We switched to random a while back - the customers don't like it but they don't seem to care after a while. But the brute forcers HATE it so we're sticking with it.

Random user/pass for me.

We've used the randomly generated user/passes before and had no problems with it. It doesn't change each time they log in though, seems like you might think it does. It just gives them a generated combination instead of them choosing thier own. Does alot to cut back on hacked passwords.

Doesn?t Password Sentry cause problems with the CCBill dialer though?

Cool, now i will use it for sure. Seems a way better option.

PrivateIvy, what does password sentry do when a password gets abused? After lets say 10 different ips login it cancels the pass right? Maybe im understanding it wrong.