What are you doing to stop bruteforcing - GoFuckYourself.com

rabbit · 08-01-2003, 04:16 PM

for all the talk of how many sales are lost due to free content on tgps, i find this issue ignored. in the biggest 10 password trading boards, litterally thousands upon thousands of logins are posted every single day.

seriously, i have only seen 3 successful attempts at blocking bruteforce attacks: what hawg is doing:
http://www.shemalemistresses.com/enter_members.php?r=1

so simple, but speaking from experience, it's impossible to crack using the conventional tools (which 85% of all crackers will use)

the other site is overdevelopedamateurs.com- the IP is blocked after 1 unsuccessful attempt for 1 hour. mind you, most attacks are done using an anonymous proxy, but i have never seen this site's passwords traded, even after repeated requests. so it must work

another way is to use a secure login page (https)

those of you using Pennywise must remember you're still leaking bandwidth like crazy. besides, you're not attacking the problem at the root: your passwords still get compromised.

so let me ask: what's stopping all the other guys from implementing something that hawg has done. i'm sure you will save shitload in bandwidth costs, while the sales for those sites will go up as no one will be able to get in for free. i realize smaller sites may not be able to afford something more elaborate, but what's stopping the big guys?

carbon

posh rat in hell · 08-01-2003, 04:19 PM

Having anti-bruteforce as strong as you do, you will prevent legit customers from getting in sometimes, which will result in chargebacks.

That's why some places chose that it's not worth running that type of protection at all.

Sigurd · 08-01-2003, 11:18 PM

I think Pennywize and other programs of this type, like our Protector Pro is the best way now.

TheJimmy · 08-01-2003, 11:21 PM

using lube ;)

ahoy · 08-02-2003, 12:51 AM

how much is it worth to you?

08-01-2003, 04:16 PM	#1
rabbit Confirmed User Join Date: Jul 2003 Location: Montreal Posts: 2,124	What are you doing to stop bruteforcing for all the talk of how many sales are lost due to free content on tgps, i find this issue ignored. in the biggest 10 password trading boards, litterally thousands upon thousands of logins are posted every single day. seriously, i have only seen 3 successful attempts at blocking bruteforce attacks: what hawg is doing: http://www.shemalemistresses.com/enter_members.php?r=1 so simple, but speaking from experience, it's impossible to crack using the conventional tools (which 85% of all crackers will use) the other site is overdevelopedamateurs.com- the IP is blocked after 1 unsuccessful attempt for 1 hour. mind you, most attacks are done using an anonymous proxy, but i have never seen this site's passwords traded, even after repeated requests. so it must work another way is to use a secure login page (https) those of you using Pennywise must remember you're still leaking bandwidth like crazy. besides, you're not attacking the problem at the root: your passwords still get compromised. so let me ask: what's stopping all the other guys from implementing something that hawg has done. i'm sure you will save shitload in bandwidth costs, while the sales for those sites will go up as no one will be able to get in for free. i realize smaller sites may not be able to afford something more elaborate, but what's stopping the big guys? carbon __________________ Got a paysite? Get it reviewed by RabbitsReviews and TheBestPorn

08-01-2003, 11:18 PM	#3
Sigurd Confirmed User Industry Role: Join Date: Apr 2003 Location: Russia, Saint-Petersburg Posts: 2,020	I think Pennywize and other programs of this type, like our Protector Pro is the best way now. __________________ Multiplayer online 3D sex-game with real dating! Earn from each transaction inside the game. $80/1K uniques.

08-01-2003, 11:21 PM	#4
TheJimmy ICQ- five seven 0 2 5 5 0 Join Date: Jan 2001 Posts: 10,747	using lube ;) __________________ Investor with 5m - 15m USD to invest. Do you have a site or network of sites earning 50k - 200k a month income? Email your contact and preliminary data to: domain.cashventures (at) gmail.com....Please...no tire kickers...serious offers and inquiries only.

08-01-2003, 04:19 PM	#2
posh rat in hell Confirmed User Join Date: May 2002 Location: New York City Posts: 403	Having anti-bruteforce as strong as you do, you will prevent legit customers from getting in sometimes, which will result in chargebacks. That's why some places chose that it's not worth running that type of protection at all.

08-02-2003, 12:51 AM	#5
ahoy Confirmed User Industry Role: Join Date: Mar 2003 Location: Gilbert, AZ Posts: 512	how much is it worth to you?