I found a users username and password on a share list...
 

Throttlebox does not seem to be working correctly and we have a user that is downloading all videos and we have found his username and password on a share list.

What would you do?

Disable the username?

OH believe me, I already cancelled him. I just just wanted to see if there were other options.

Does anyone have a list of known username/password combinations of known password traders?

a suspention should be better... suspend the account and contact the "legal owner" of the account.
most passwords are not shared by the owner but either hacked from the person (they get their email hacked or phished for the info)
or it gets brute forced ... if u dont have u should get security for your site , so that it cant be brute forced

contact the user with a new PW and give him the benefit in case someone stole it from him.
if you see his user name being used like crazy still afterwards disable the mother fucker.

Yup that is what I do also.

there are so many out there. where would you even start?

Contact Ray?

call their house, talk to his wife/gf. Drive over to his place of work and tell everyone that he likes to surf skat and piss porn.

Good thinking!



... we're looking into what's going on to resolve any issues. -- Thanks.

Go to a password forum
download the actual wordlist
test them
ban half of your members
your done
:)

If that happends quite often to you, you should also check your server for shells or rename the .htaccess file and place it to another /dir/.