Paysite owners, google is not your friend.
 

We all know that password sites are a big enough problem, but now we have google indexing these password sites and making it that much easier for surfers to gain free entry.

I'm going to use BradShaw as an example here since he likes being the center of attention.

Do a google search for the member's area URL to 24 inches of pain.
"24inchesofpain.com/members"

http://www.google.com/search?num=100...22&btnG=Search

This should give you a pretty good idea of what is going on... the first password I tried gave me access.

I personally went through all of our sites and deleted or changed a LARGE number of working passwords. I would also recommend ProxyPass to take advantage of this traffic source :)

Welcome to 1997 dude :glugglug

You're my hero

Hah.. think thats bad?
_http://www.google.com/search?q=*%3A*%40www.24inchesofpain.com%2Fmembers

And you can replace your site with any other. Works the same.

First password worked for me too, didnt even had to visit a site for it.

that's great

Seriously it boils down to having something like strongbox so the passwords will locked out. Then there will be no problem. You can actually redirect the traffic and make money on them. So yes google is your friend.

damn...between this and the checks thread... sounds grim.

if password sites "were a problem" paysite owners wouldnt be working deals out with them.

:)

:1orglaugh :1orglaugh :1orglaugh

quiet you

If you read my post, I recommended ProxyPass for this

You see this as a bad thing where I see this as a great thing. This is a great way to see exactly which password sites are indexing your sites so you can prevent them in future. Google isn't the problem here, its the password sites. Google is telling you exactly which sites is contributing to the problem. To me, this is a good thing. Just grab a list of all the password sites that google returns and setup a mod rewrite for all referrals to a landing page. I do of course think a password protection script is also needed on top of this.

WG

Blocking the password sites themselves does nothing to resolve this problem. That is the whole point of this thread. Google makes it so you never have to touch a password site.

Besides, this thing is indexing pages that are not password related, just random people uploading level 10 password lists from IRC.

worked for me.

http://www.whereisit.org/Forums/viewtopic/t=7588.html

we have used proxypass for years.. appearantly it had not killed those user/passes... as it takes 5 simultaneous users to disable... by the time I checked none seemed to work..

I'm guessing due to this thread it was tried enough times for ProxyPass to catch them. That is why I did not use our own sites as an example, because none of the passwords will work :)

this ain't big news
its not shame on google lol
its about programs that don't make use of such info
searching the web for stolen passes is not that hard lol

Think about what I said though. By using Google, you have a list of password sites. By disabling referrers from these password sites, your sites won't get listed on the password sites anymore since they're all being redirected. So if they're not on the password sites, they won't get indexed in Google in future.

WG

Most password sites do not even link to your site, especially since a patch is required to use the username:[email protected] syntax. Copy & pasting the URL will bypass your theory.

I do see what you are saying and this being in google is not necessarily a bad thing. Like I said originally, this post was intended for paysite owners to disable the passwords and take advantage of the traffic coming from google. This traffic is more valuable than most people know.