Pass sharing sites - To all site owners - GoFuckYourself.com

martinsc · 07-08-2006, 09:39 AM

just stumpled upon this...
http://www.villainess.com/
isn't there anything that can be done about these pass sharing sites?

AFF, cams.com seem to be the main sponsors ....

bobby666 · 07-08-2006, 10:40 AM

see the same sites hacked as 3 years ago, when i still was far away of becomming a webmaster

i think the webmasters of the sites recognice what has happened when they view their daily bandwith stats

so i ask for the reason why staceys dungeon for instance is an open site for three years?

SiMpLe · 07-08-2006, 10:47 AM

Quote:

Originally Posted by martinsc

AFF, cams.com seem to be the main sponsors ....

SURPRISE!!!

martinsc · 07-08-2006, 11:35 AM

Quote:

Originally Posted by SiMpLe

SURPRISE!!!

Anar_j · 07-08-2006, 01:16 PM

Roald · 07-08-2006, 01:26 PM

same old shit

Sinstar · 07-08-2006, 02:14 PM

Pass sharing sucks.

scottybuzz · 07-08-2006, 02:34 PM

yeh truley sucks

martinsc · 07-08-2006, 08:40 PM

Quote:

Originally Posted by Anar_j

what are you happy about?

tony286 · 07-08-2006, 08:45 PM

Can we sue the sponsors for supporting people who steal?

martinsc · 07-08-2006, 11:46 PM

Quote:

Originally Posted by tony404

Can we sue the sponsors for supporting people who steal?

interesting question..

themanager · 07-09-2006, 12:56 AM

I don't think that is right we should think of a way to stop it.

martinsc · 07-09-2006, 08:49 AM

Quote:

Originally Posted by themanager

I don't think that is right we should think of a way to stop it.

any ideas?

Matt 26z · 07-09-2006, 09:06 AM

Quote:

Originally Posted by themanager

I don't think that is right we should think of a way to stop it.

You are about 10 years too late on that one.

Dirty Dane · 07-09-2006, 09:14 AM

Quote:

Originally Posted by martinsc

any ideas?

Organize it.
If the porn industry had something like the music industry. But I don't think it will happen

shack · 07-09-2006, 09:17 AM

It's how some paysites drive traffic, they leak a password, or give the webmaster one, get the site listed, get a few people in, then kill the password.

Gets impression on your members area, and further traffic to the front end once you kill the password.

It's only bandwidth

rotterdammer · 07-09-2006, 10:00 AM

Thats pretty bullshit what you say, there are shit loads of wordlist in different niches that contain 10.000 passwords for bangbros. Sites like BB and Nastydollars dont even seem to care about their passes being cracked.

The only way paysite owners can stop this is to get as many wordlists as possible and ban all the words for people who want to signup.

Especially the following user:pass

december:januari
abcde:fghijk
username:password

Maybe bangbros doesnt care because of the promotion but i know that site you mention is only the top of the iceberg.

There are several password forums like passwordparadise.net that have 100.000 passes to paysites.

fris · 07-09-2006, 10:02 AM

or make the passwords harder, people that pick their own are too simple

rotterdammer · 07-09-2006, 10:15 AM

Yeah thats also very true fris!

Pimpin_J · 07-09-2006, 10:22 AM

The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers".
The weakest point is the "human" webmaster!
They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user")
Bruteforcing was 1990...
So better keep your stuff updated and check for suspect files on your server.

martinsc · 07-09-2006, 10:47 PM

Quote:

Originally Posted by Pimpin_J

The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers".
The weakest point is the "human" webmaster!
They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user")
Bruteforcing was 1990...
So better keep your stuff updated and check for suspect files on your server.

couldn't agree more...

Beejeebers · 07-09-2006, 10:54 PM

How are generated user/pass combos harder to encrypt?

If you have a user/pass/id number combo, you would screw over 95% of the scripts that script kiddies use to hack the sites in the first place.

frakyou · 07-09-2006, 10:57 PM

Seems like it would be easy to prevent this. Different people logging in under the same account would have different ip adresses.

CaptainHowdy · 07-09-2006, 11:05 PM

Quote:

Originally Posted by Anar_j

Uh ??

Pimpin_J · 07-10-2006, 08:16 AM

Quote:

Originally Posted by Beejeebers

How are generated user/pass combos harder to encrypt?

If you have a user/pass/id number combo, you would screw over 95% of the scripts that script kiddies use to hack the sites in the first place.

Its definatly harder to decrypt if its generated! Most sites use DES decryption and to decrypt it you need a good wordlist. Generated means more salts = takes much longer to decrypt. Now its getting to the math part where i have to pass course i always was stoned in math..

But i hope you get my point now, why its more usefull to use generated passwords to prevent hackers.

Easy example -> check the web for suze passes or for bangbros..youll find a shitload of passes. But try to get a pass for partyhardcore and/or perfect gonzo sites...
Youll see what i mean..

martinsc · 07-10-2006, 09:59 PM

Quote:

Originally Posted by Pimpin_J

Its definatly harder to decrypt if its generated! Most sites use DES decryption and to decrypt it you need a good wordlist. Generated means more salts = takes much longer to decrypt. Now its getting to the math part where i have to pass course i always was stoned in math..

But i hope you get my point now, why its more usefull to use generated passwords to prevent hackers.

Easy example -> check the web for suze passes or for bangbros..youll find a shitload of passes. But try to get a pass for partyhardcore and/or perfect gonzo sites...
Youll see what i mean..

czarina · 07-10-2006, 10:41 PM

Just do passwords away and invent something else, yeah, like what?

nofx · 07-10-2006, 10:44 PM

everone should img src it to death or packet it offline

BIGTYMER · 07-10-2006, 11:01 PM

Those passwords suck.

BV · 07-10-2006, 11:10 PM

it's free traffic guys
it's free traffic guys

there i said it twice

germ · 07-10-2006, 11:19 PM

i say we stop promoting the sponsors that pay the password sharing sites.

its always aff and cams.com. they know wtf is going on, but they dont do anything about it. if other people stopped promoting them because of it, it may make them sit up and take notice that keeping one affiliate is making them lose a hell of a lot more.

UtahSaints · 07-10-2006, 11:25 PM

hmmm. fucked up...

aico · 07-10-2006, 11:28 PM

Stop it? No!!!!!! I get mad hits from "leaked" passwords.

Bro Media - BANNED FOR LIFE · 07-10-2006, 11:35 PM

Quote:

Originally Posted by martinsc

martinsc · 07-12-2006, 03:26 AM

Quote:

Originally Posted by LOL :D

fr0gman · 07-12-2006, 03:41 AM

Quote:

Originally Posted by martinsc

any ideas?

Unplug the Internet.

martinsc · 07-20-2006, 05:15 AM

just another bump.
someone has to do something about this...

bizarredollars · 07-20-2006, 05:23 AM

How often does this shit keep coming up?? Invest in a script, and profit from the traffic.. easy as... I tested this a few years back, I posted a password to one of my own sites, left it working for a couple of days, blocked it and made a shit load of sales thanks to a well designed 401 page.

Good scripts don't cost much.. the investment is well worth it.

Fuck, I wrote my own.. I might start selling it at $25 per pop, lol.

bizarredollars · 07-20-2006, 05:30 AM

Quote:

Originally Posted by Pimpin_J

The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers".
The weakest point is the "human" webmaster!
They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user")
Bruteforcing was 1990...
So better keep your stuff updated and check for suspect files on your server.

Very good points.. another good tip - alter your apache config to use a file other than .htaccess for access rights.. something more random. It is very easily done, and adds another lair of security.

The best thing to do is have a seperate server just for your members only section, random names for your htaccess file, and for your scripts.. only let your billing agent know where the real files are located.

Even then, there are scripts that can email/page you when bandwidth goes way beyond normal levels, so you are alerted when your bandwidth suddenly jumps to an unusually high level.

Keep your software up to date, use a tracker to monitor for advisories that are relevent to your setup. If in doubt, hire someone who knows what they are doing - they are worth their weight in gold.

bizarredollars · 07-20-2006, 05:32 AM

Quote:

Originally Posted by germ

i say we stop promoting the sponsors that pay the password sharing sites.

its always aff and cams.com. they know wtf is going on, but they dont do anything about it. if other people stopped promoting them because of it, it may make them sit up and take notice that keeping one affiliate is making them lose a hell of a lot more.

Be careful with this tho.. I for one plan to setup some 'password sites', that feature only links to 'hacked' sites that I have made and host myself.. I will be exploiting the password site traffic.. and I don't want the people I am sending traffic to getting pissed off, when I am not doing anything to hurt anyone.

I will of course inform my sponsors of my plans before putting their links up.. and will mostly be sending traffic to my own sites.

jayeff · 07-20-2006, 06:03 AM

Quote:

Originally Posted by tony404

Can we sue the sponsors for supporting people who steal?

Good question.

On content-stealing sites, "conspiracy to defraud" would apply, because breach of copyright is an established crime and the sponsors on those sites are (knowingly) profiting from the sites' activities. The practical problem in the UK (and therefore possibly in the US and elsewhere) is that this is a criminal offense and an interested party would have to convince the public prosecutor to pursue the case. Software companies have successfully gone this route, but porn operators...?

The additional issue with password sites is whether what they are doing is a criminal or a civil matter. AFAIK that hasn't been tested and given the state of this industry, I wouldn't hold your breath.

Quote:

Originally Posted by germ

i say we stop promoting the sponsors that pay the password sharing sites.

I'm in the middle of removing links to the sponsors who give TBP special discounts, but after seeing Lens' responses to the content-theft sites issue a couple of days ago, yes, when that is done I'm taking down my links to AFF and its associated sites. I have been promoting them since 1998 and I'm not under any illusion that my action, by itself, will make the slightest difference to AFF's policies. However, by promoting sponsors who support those who undermine this industry, we are also failing to back those who do work in an ethical manner. So in effect, that's score 2 for the bad guys each time we fail to act.

Brujah · 08-11-2006, 09:29 AM

Ohh noooess...

07-08-2006, 09:39 AM	#1
martinsc Too lazy to set a custom title Industry Role: Join Date: Jun 2005 Location: 127.0.0.1 Posts: 27,047	Pass sharing sites - To all site owners just stumpled upon this... http://www.villainess.com/ isn't there anything that can be done about these pass sharing sites? AFF, cams.com seem to be the main sponsors .... __________________ Make Money

07-08-2006, 10:40 AM	#2
bobby666 boots are my religion Join Date: Nov 2005 Location: Heart of europe Posts: 21,765	see the same sites hacked as 3 years ago, when i still was far away of becomming a webmaster i think the webmasters of the sites recognice what has happened when they view their daily bandwith stats so i ask for the reason why staceys dungeon for instance is an open site for three years? __________________

07-08-2006, 01:16 PM	#5
Anar_j Confirmed User Industry Role: Join Date: Sep 2005 Location: World Posts: 430	__________________ Teencash.com - Top converting teen cash program, where 1000s of pic, movie, tube ready FHGs... Top Sites: Babysitter MoviesTeen Lesbian LandGirls Left AloneTeen Sleep OverTeen Emery ICQ:176-922-400

07-08-2006, 01:26 PM	#6
Roald SecretFriends.com Industry Role: Join Date: May 2001 Location: IMC Headquarters Posts: 27,885	same old shit __________________ WE ARE BUYING PAY SITES! CONTACT ME ClubSweethearts \| ManUpFilms \| SinfulXXX \| HOT * AdultPrime * HOT Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com \| telegram: roaldr

07-08-2006, 02:34 PM	#8
scottybuzz Too lazy to set a custom title Industry Role: Join Date: May 2006 Location: NY Posts: 14,800	yeh truley sucks __________________ $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

07-08-2006, 02:14 PM	#7
Sinstar Confirmed User Join Date: Mar 2006 Posts: 1,206	Pass sharing sucks.

07-08-2006, 08:45 PM	#10
tony286 lurker Industry Role: Join Date: Aug 2002 Location: atlanta Posts: 57,021	Can we sue the sponsors for supporting people who steal?

07-09-2006, 12:56 AM	#12
themanager Confirmed User Join Date: Apr 2006 Location: usa Posts: 508	I don't think that is right we should think of a way to stop it.

07-09-2006, 09:17 AM	#16
shack Confirmed User Join Date: Oct 2004 Location: Oz Posts: 539	It's how some paysites drive traffic, they leak a password, or give the webmaster one, get the site listed, get a few people in, then kill the password. Gets impression on your members area, and further traffic to the front end once you kill the password. It's only bandwidth Last edited by shack; 07-09-2006 at 09:18 AM..

07-09-2006, 10:00 AM	#17
rotterdammer Confirmed User Join Date: Feb 2006 Posts: 1,523	Thats pretty bullshit what you say, there are shit loads of wordlist in different niches that contain 10.000 passwords for bangbros. Sites like BB and Nastydollars dont even seem to care about their passes being cracked. The only way paysite owners can stop this is to get as many wordlists as possible and ban all the words for people who want to signup. Especially the following user:pass december:januari abcde:fghijk username:password Maybe bangbros doesnt care because of the promotion but i know that site you mention is only the top of the iceberg. There are several password forums like passwordparadise.net that have 100.000 passes to paysites. __________________ My Best Sponsors: 1 2 3 4 5 6 7 8 9 10 Im Making Over $1000 / Month With OrgyCash! Get Inside Now! - Big List Of Domains For Sale!

07-09-2006, 10:02 AM	#18
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	or make the passwords harder, people that pick their own are too simple __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

07-09-2006, 10:15 AM	#19
rotterdammer Confirmed User Join Date: Feb 2006 Posts: 1,523	Yeah thats also very true fris! __________________ My Best Sponsors: 1 2 3 4 5 6 7 8 9 10 Im Making Over $1000 / Month With OrgyCash! Get Inside Now! - Big List Of Domains For Sale!

07-09-2006, 10:22 AM	#20
Pimpin_J Confirmed User Join Date: Jul 2006 Location: SplitInfinity.com Posts: 3,637	The passwords arent the most weak point on an adultsite. Generated user/pass combinations are a good start but that doesnt protect you from so called "pass sharers". The weakest point is the "human" webmaster! They hack your site through any well known bug (adultcms/phpBB,whatever), place a shell (mostly .php / .gif / .jpg ) and search for your .htpass file or your sql details. Once your .htpass is stolen its easily decrypted with the right tools. (Generated user/pass combinations are also more hard to decrypt then normal combos like "user123 : 321user") Bruteforcing was 1990... So better keep your stuff updated and check for suspect files on your server. __________________

07-09-2006, 10:54 PM	#22
Beejeebers Confirmed User Join Date: Oct 2004 Posts: 290	How are generated user/pass combos harder to encrypt? If you have a user/pass/id number combo, you would screw over 95% of the scripts that script kiddies use to hack the sites in the first place. __________________

07-09-2006, 10:57 PM	#23
frakyou Registered User Join Date: Jun 2006 Posts: 2	Seems like it would be easy to prevent this. Different people logging in under the same account would have different ip adresses.

07-10-2006, 10:41 PM	#27
czarina Webmaster Extraordinaire Industry Role: Join Date: Jul 2002 Location: A beautiful beach... Posts: 10,748	Just do passwords away and invent something else, yeah, like what?

07-10-2006, 10:44 PM	#28
nofx Too lazy to set a custom title Join Date: Nov 2002 Location: Virgin Mary's womb Posts: 16,826	everone should img src it to death or packet it offline __________________ Often times I wonder why There's love and hate, theres live or die. When sickness comes I must decide: When feelings go, theres suicide.

07-10-2006, 11:01 PM	#29
BIGTYMER Junior Achiever Industry Role: Join Date: Nov 2004 Location: Walled Garden Posts: 17,066	Those passwords suck.

07-10-2006, 11:10 PM	#30
BV wtf Industry Role: Join Date: Sep 2001 Location: Bikini State, FL USA Posts: 10,914	it's free traffic guys it's free traffic guys there i said it twice

07-10-2006, 11:19 PM	#31
germ ( o Y o ) Industry Role: Join Date: Oct 2002 Posts: 3,108	i say we stop promoting the sponsors that pay the password sharing sites. its always aff and cams.com. they know wtf is going on, but they dont do anything about it. if other people stopped promoting them because of it, it may make them sit up and take notice that keeping one affiliate is making them lose a hell of a lot more.

07-10-2006, 11:25 PM	#32
UtahSaints Confirmed User Industry Role: Join Date: Jan 2005 Posts: 1,538	hmmm. fucked up... __________________ Enjoy Bucks - Enjoy Bucks

07-10-2006, 11:28 PM	#33
aico Moo Moo Cow Join Date: Mar 2004 Location: Washington State Posts: 14,748	Stop it? No!!!!!! I get mad hits from "leaked" passwords.

07-20-2006, 05:15 AM	#37
martinsc Too lazy to set a custom title Industry Role: Join Date: Jun 2005 Location: 127.0.0.1 Posts: 27,047	just another bump. someone has to do something about this... __________________ Make Money

07-20-2006, 05:23 AM	#38
bizarredollars Confirmed User Join Date: Mar 2006 Location: bizarredollars.com Posts: 1,582	How often does this shit keep coming up?? Invest in a script, and profit from the traffic.. easy as... I tested this a few years back, I posted a password to one of my own sites, left it working for a couple of days, blocked it and made a shit load of sales thanks to a well designed 401 page. Good scripts don't cost much.. the investment is well worth it. Fuck, I wrote my own.. I might start selling it at $25 per pop, lol. __________________ [email protected] icq: 205-252-550

08-11-2006, 09:29 AM	#42
Brujah Beer Money Baron Industry Role: Join Date: Jan 2001 Location: brujah / gmail Posts: 22,157	Ohh noooess... __________________ Free Premium Domain Lists and Tools at Clickmojo.com For Sale: Obscenity.com