If You Are Running Any Canned Tube Script.... Beware - GoFuckYourself.com

pussyserver - BANNED FOR LIFE · 11-19-2007, 11:15 PM

I swear your shit is most likely hacked

the script kiddies on IRC are looking for ways to profit after rooting your box

MAJOR holes major major major holes

there is an app now that just about just ask the kiddy to put in URL and click go after he clicks go the script auto hacks the entire server ( even jailed accounts ) and sets ups a bot on a hidden IRC channel

from here it is realy bad biz since not only the kiddy has access but whoever it it whom wrote the script

you are especialy vuln if you run any type of host manager software like cpanel , ensim, plesk, etc etc

just an FYI

good night

TheSenator · 11-19-2007, 11:18 PM

You must be kidding me... http://www.cpanel.net

That shit is written by a phenom.

mryellow · 11-19-2007, 11:20 PM

Some very poor code out there in this market.

I'll be releasing a free script sometime soon that will be robust and work how it should.

edit: and yeah why would you install cPannel and open up admin functions to
HTTP. Just get a better host that fixes things fast. i.e. Cyberwurx.

-Ben

Shaze · 11-19-2007, 11:28 PM

what do you mean by "canned tube script"?

rapmaster · 11-19-2007, 11:28 PM

lol I just posted another thread about cpanel... is it really that vulnerable?

pussyserver - BANNED FOR LIFE · 11-19-2007, 11:37 PM

Quote:

Originally Posted by Shaze

what do you mean by "canned tube script"?

go to google type in youtube script or clone script

if rthe solution you use is in the top 20 results os rybe etc etc then yeah most likely you you have a backdoor

from I am being told this is connected to ffmpeg so if your site dosent use ffmpeg for conversion you shouild be ok

TonyB · 11-19-2007, 11:46 PM

This guy has no idea what he's talking about.

GrouchyAdmin · 11-19-2007, 11:50 PM

Quote:

Originally Posted by TonyB

This guy has no idea what he's talking about.

This is GFY, after all.

pussyserver - BANNED FOR LIFE · 11-20-2007, 12:00 AM

Quote:

Originally Posted by TonyB

This guy has no idea what he's talking about.

o rly?

and you know this because....?

dozey · 11-20-2007, 12:20 AM

Quote:

Originally Posted by TonyB

This guy has no idea what he's talking about.

You must be confused, FFmpeg vulnerability sounds plausible. Infact, google says so too;

http://www.google.com/search?hl=en&client=opera&rls=en&hs=syh&q=ffmpeg+v ulnerability&btnG=Search

And off the shelf scripts? no brainer, most are likely to be full of security holes.

TheSenator · 11-20-2007, 12:22 AM

Quote:

Originally Posted by dozey

You must be confused, FFmpeg vulnerability sounds plausible. Infact, google says so too;

http://www.google.com/search?hl=en&client=opera&rls=en&hs=syh&q=ffmpeg+v ulnerability&btnG=Search

And off the shelf scripts? no brainer, most are likely to be full of security holes.

That is so 2005

ztik · 11-20-2007, 12:23 AM

Quote:

Originally Posted by TonyB

This guy has no idea what he's talking about.

lol.. ok.

Watch it all go down. Because 99% of webmasters are 100% absolutely retarded and understand anything about the web

dozey · 11-20-2007, 12:24 AM

Quote:

Originally Posted by TheSenator

That is so 2005

Which makes it how much less plausible?

2012 · 11-20-2007, 12:26 AM

the script that has been floating around for months ... good luck with that. It's not hard to secure your .flv's or a process that produces them with ffmpeg. Just know what you're getting into when you decide to make a "tube" site and hire a "flash guy" that knows his shit ... better yet just read a little ... otherwise stick to thumbnail image galleries

pussyserver - BANNED FOR LIFE · 11-20-2007, 12:27 AM

Quote:

Originally Posted by dozey

You must be confused, FFmpeg vulnerability sounds plausible. Infact, google says so too;

http://www.google.com/search?hl=en&client=opera&rls=en&hs=syh&q=ffmpeg+v ulnerability&btnG=Search

And off the shelf scripts? no brainer, most are likely to be full of security holes.

that TonyB guy some clueless surfer

in any case

from my understanding there is a way to execute
arbitrary code just like the above sploit except this one uses a high level priv account ( you know like apache and anything else use ) I do know that is has something to do with a buffer overflow and stack vuln in a key piece of code associated with FFMPEG

I would not have any reason at all to make this shit up

no way for me to profit

get that crap off your box and run a rootkit checker

pussyserver - BANNED FOR LIFE · 11-20-2007, 12:28 AM

Quote:

Originally Posted by TheSenator

That is so 2005

major corporations and gov agencies are still runing exploited boxes from 2001...

age means nothing here

dozey · 11-20-2007, 12:29 AM

Quote:

Originally Posted by TheSenator

That is so 2005

You're absolutely right, there are already vulnerabilities on record.

marketsmart · 11-20-2007, 02:02 AM

fucking LOL... anyone who is dumb enough to install a "free anything" script without having a security consultant or hacker as a "trusted" friend look a the script, deserves anything they get...

i would venture to guess that 50% or more of all the worlds servers and pc's are compromised with some type of backdoor...

rootkits are even worse because they allow for full takeover and monitoring of a pc or server....

Evil E · 11-20-2007, 02:10 AM

Quote:

Originally Posted by fartfly

the script that has been floating around for months ... good luck with that. It's not hard to secure your .flv's or a process that produces them with ffmpeg. Just know what you're getting into when you decide to make a "tube" site and hire a "flash guy" that knows his shit ... better yet just read a little ... otherwise stick to thumbnail image galleries

My guess is that it's only problematic for tubes sites that have the option of user submitted videos if the bug is with ffmpeg. I guess the script's will be publicly disclosed pretty soon since a lot of people seem to be aware. I will ask around.

ClickBuster · 11-20-2007, 03:29 AM

Quote:

Originally Posted by TonyB

This guy has no idea what he's talking about.

quoted for truth

2012 · 11-20-2007, 03:49 AM

Quote:

Originally Posted by knew

I guess the script's will be publicly disclosed pretty soon

okay then ...

It would be great not to worry about flash. I love it. So many great things you can do. On the other hand... their(there) is an extremely large potential for just about anything you can think of with an .swf. When ffmpeg is converting a file it's making an .flv. An .flv can't execute any code as far as I know.The malicious code being executed in the process on these fucked scripts is php. Know the code in your player(swf).

thank you and fuck you very much

pussyserver - BANNED FOR LIFE · 11-20-2007, 04:01 AM

I am not here to prove anything

..... if you are running one of those backdoored ass scripts just know that more then likely your system has already been hacked they cann acces your emails, passwords and even take over your domain

word of advice...uninstall that crap...imediately

and by the way... this thread is absolute fact

there are other ways to make money and or better scripts but common sense should tell you all that anytime something is availible for free on such a large scale... there has to be a reason... think about it

2012 · 11-20-2007, 04:05 AM

Quote:

Originally Posted by fartfly

okay then ...

It would be great not to worry about flash. I love it. So many great things you can do. On the other hand... their(there) is an extremely large potential for just about anything you can think of with an .swf. When ffmpeg is converting a file it's making an .flv. An .flv can't execute any code as far as I know.The malicious code being executed in the process on these fucked scripts is php. Know the code in your player(swf).

thank you and fuck you very much

also if you have a flash player make sure the code is in a seperate .as file with the correct permissions ... otherwise you're shootin craps homie :D

fris · 11-20-2007, 05:17 AM

this is why you should go custom, because most of the scripts out there you can get one way or another, and then people can examine the code, and a lot of them arent even encoded, easier for them to find bugs

halfpint · 11-20-2007, 05:24 AM

Any badly written script that has holes or backdoors in it is vunrable. As I found out with a badley scripted Top Site. The hackers got into my cpanel through a hole in the script and deleted my website.

dozey · 11-20-2007, 05:49 AM

Quote:

Originally Posted by fartfly

okay then ...

It would be great not to worry about flash. I love it. So many great things you can do. On the other hand... their(there) is an extremely large potential for just about anything you can think of with an .swf. When ffmpeg is converting a file it's making an .flv. An .flv can't execute any code as far as I know.The malicious code being executed in the process on these fucked scripts is php. Know the code in your player(swf).

thank you and fuck you very much

I was kinda looking forward to contradicting your useless uneducated ramblings. Well, now I can.

http://www.kb.cert.org/vuls/id/544656

No doubt tube sites utilising FFmpeg compiled with libFLAC / FLAC support are now at risk of malicious user uploads.

quantum-x · 11-20-2007, 06:10 AM

Quote:

Originally Posted by pussyserver

that TonyB guy some clueless surfer

in any case

from my understanding there is a way to execute
arbitrary code just like the above sploit except this one uses a high level priv account ( you know like apache and anything else use ) I do know that is has something to do with a buffer overflow and stack vuln in a key piece of code associated with FFMPEG

I would not have any reason at all to make this shit up

no way for me to profit

get that crap off your box and run a rootkit checker

if you run apache any higher than nobody you're asking for trouble

Kevsh · 11-20-2007, 06:20 AM

Bah, it doesn't matter much anyway. Most of those sites are stocked with the same videos that have been saturated on p2p apps for years now. It's a fad and still most I doubt are making any profit.

Remember a few years back they had those canned PPC sites - run your own search engine for $20? Where are they all now.

BerdoR · 11-20-2007, 06:52 AM

[QUOTE=Kevsh;13396043]Bah, it doesn't matter much anyway. Most of those sites are stocked with the same videos that have been saturated on p2p apps for years now. It's a fad and still most I doubt are making any profit.
QUOTE]

yahoo-xxx-girls.com · 11-20-2007, 06:56 AM

Well... if you are worried about hackers then switch over to a Linux or Unix box and you will have much less troubles... providing you are a full time geek that is!

Later,

erots · 11-20-2007, 09:29 AM

Quote:

Originally Posted by pussyserver

that TonyB guy some clueless surfer

in any case

from my understanding there is a way to execute
arbitrary code just like the above sploit except this one uses a high level priv account ( you know like apache and anything else use ) I do know that is has something to do with a buffer overflow and stack vuln in a key piece of code associated with FFMPEG

I would not have any reason at all to make this shit up

no way for me to profit

get that crap off your box and run a rootkit checker

This means people who are affected use FFMPEG. There are many other encoders/decoders available so people who use these others are not affected. Also people who don't accept public submissions are not affected. Also like somebody already said if anyone is running apache with user that has way too many permissions he is asking for trouble anyway.

erots · 11-20-2007, 09:31 AM

Quote:

Originally Posted by Balalsubturfyooj

Well... if you are worried about hackers then switch over to a Linux or Unix box and you will have much less troubles... providing you are a full time geek that is!

Later,

I don't remember FFMPEG running on Windows anyway... or many people running Windows servers or tube scripts in Windows. So what you are saying here basically is total nonsense

pr0 · 11-20-2007, 10:55 AM

ahahahahahahahahaha

drjones · 11-20-2007, 12:00 PM

If you're running your video encoding routines on the same server the videos get served from, you arent getting shit for traffic anyways. Wont lose much:P

mryellow · 11-21-2007, 08:09 PM

Quote:

Originally Posted by Balalsubturfyooj

Well... if you are worried about hackers then switch over to a Linux or Unix box and you will have much less troubles... providing you are a full time geek that is!

Later,

LOL.... Sorry to jump on the pulling down of others that seems to be the
trend on this thread.... but that's just silly mate. The exploits we're talking
about are designed for *nix servers.

No one in their right mind runs a windows box for anything except windows
media streaming. It's just not done that way in adult.

-Ben

Phil · 11-21-2007, 08:20 PM

people that use canned scripts are racists!

The Captain · 11-21-2007, 09:56 PM

heh, I thought I'd tinker with a tube site a bit. Bought ClipShare, put it up oin my server. no real traffic. with in a month we were hacked. I had it staged out on a dev server, so it was no big deal, but thats just an example to support the thread.

2012 · 11-22-2007, 01:24 AM

Quote:

Originally Posted by dozey

I was kinda looking forward to contradicting your useless uneducated ramblings. Well, now I can.

congrats

blogman9 · 11-22-2007, 01:54 AM

This thread submited to: http://www.thereisnomoneyinporn.com

blogman9 · 11-22-2007, 02:22 AM

sorry not this thread :/

pussyserver - BANNED FOR LIFE · 02-07-2008, 03:25 AM

Redtube.com just got hacked

told you fuckers

11-19-2007, 11:15 PM	#1
pussyserver - BANNED FOR LIFE So Fucking Banned Join Date: Oct 2005 Location: I convert perverts like catholic church! Posts: 5,133	If You Are Running Any Canned Tube Script.... Beware I swear your shit is most likely hacked the script kiddies on IRC are looking for ways to profit after rooting your box MAJOR holes major major major holes there is an app now that just about just ask the kiddy to put in URL and click go after he clicks go the script auto hacks the entire server ( even jailed accounts ) and sets ups a bot on a hidden IRC channel from here it is realy bad biz since not only the kiddy has access but whoever it it whom wrote the script you are especialy vuln if you run any type of host manager software like cpanel , ensim, plesk, etc etc just an FYI good night

11-19-2007, 11:18 PM	#2
TheSenator Too lazy to set a custom title Industry Role: Join Date: Feb 2003 Location: NJ Posts: 13,336	You must be kidding me... http://www.cpanel.net That shit is written by a phenom. __________________ ISeekGirls.com since 2005

11-19-2007, 11:20 PM	#3
mryellow Confirmed User Industry Role: Join Date: May 2001 Location: Australia Posts: 934	Some very poor code out there in this market. I'll be releasing a free script sometime soon that will be robust and work how it should. edit: and yeah why would you install cPannel and open up admin functions to HTTP. Just get a better host that fixes things fast. i.e. Cyberwurx. -Ben __________________ Cyberwurx Hosting After trying 5 different hosts, I found the best. Since 1997 I've had 2 hours of downtime. Fast support, great techs, no hype, no gimmicks. <- I in no way endorse whatever just got stuck on the left of my post. Last edited by mryellow; 11-19-2007 at 11:21 PM..

11-19-2007, 11:28 PM	#4
Shaze Confirmed User Join Date: Oct 2003 Location: Cyberspace Posts: 2,662	what do you mean by "canned tube script"? __________________ Adult Search Engine Japanese Porn Thai Porn

11-19-2007, 11:28 PM	#5
rapmaster Confirmed User Join Date: Jan 2007 Posts: 1,576	lol I just posted another thread about cpanel... is it really that vulnerable? __________________ http://en.wikipedia.org/wiki/SIG_Sauer_P226

11-19-2007, 11:46 PM	#7
TonyB So Fucking Banned Join Date: Oct 2005 Posts: 32	This guy has no idea what he's talking about.

11-20-2007, 12:26 AM	#14
2012 So Fucking What Industry Role: Join Date: Jul 2006 Posts: 17,189	the script that has been floating around for months ... good luck with that. It's not hard to secure your .flv's or a process that produces them with ffmpeg. Just know what you're getting into when you decide to make a "tube" site and hire a "flash guy" that knows his shit ... better yet just read a little ... otherwise stick to thumbnail image galleries __________________ best host: Webair \| best sponsor: Kink \| best coder: 688218966 \| Go Fuck Yourself Last edited by 2012; 11-20-2007 at 12:27 AM..

11-20-2007, 02:02 AM	#18
marketsmart HOMICIDAL TROLL KILLER Industry Role: Join Date: Dec 2004 Location: Sunnybrook Institution for the Criminally Insane Posts: 20,419	fucking LOL... anyone who is dumb enough to install a "free anything" script without having a security consultant or hacker as a "trusted" friend look a the script, deserves anything they get... i would venture to guess that 50% or more of all the worlds servers and pc's are compromised with some type of backdoor... rootkits are even worse because they allow for full takeover and monitoring of a pc or server....

11-20-2007, 04:01 AM	#22
pussyserver - BANNED FOR LIFE So Fucking Banned Join Date: Oct 2005 Location: I convert perverts like catholic church! Posts: 5,133	I am not here to prove anything ..... if you are running one of those backdoored ass scripts just know that more then likely your system has already been hacked they cann acces your emails, passwords and even take over your domain word of advice...uninstall that crap...imediately and by the way... this thread is absolute fact there are other ways to make money and or better scripts but common sense should tell you all that anytime something is availible for free on such a large scale... there has to be a reason... think about it

11-20-2007, 05:17 AM	#24
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	this is why you should go custom, because most of the scripts out there you can get one way or another, and then people can examine the code, and a lot of them arent even encoded, easier for them to find bugs __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

11-20-2007, 05:24 AM	#25
halfpint GFY's Halfpint Industry Role: Join Date: Jun 2007 Location: UK Posts: 15,223	Any badly written script that has holes or backdoors in it is vunrable. As I found out with a badley scripted Top Site. The hackers got into my cpanel through a hole in the script and deleted my website. __________________ Get FREE website listings on Cryptocoinshops.net

11-20-2007, 06:20 AM	#28
Kevsh Confirmed User Join Date: Dec 2004 Location: TO Posts: 8,619	Bah, it doesn't matter much anyway. Most of those sites are stocked with the same videos that have been saturated on p2p apps for years now. It's a fad and still most I doubt are making any profit. Remember a few years back they had those canned PPC sites - run your own search engine for $20? Where are they all now.

11-20-2007, 06:52 AM	#29
BerdoR Registered User Join Date: Sep 2007 Posts: 352	[QUOTE=Kevsh;13396043]Bah, it doesn't matter much anyway. Most of those sites are stocked with the same videos that have been saturated on p2p apps for years now. It's a fad and still most I doubt are making any profit. QUOTE]

11-20-2007, 06:56 AM	#30
yahoo-xxx-girls.com Confirmed User Join Date: Jul 2006 Location: Canada Posts: 3,143	Well... if you are worried about hackers then switch over to a Linux or Unix box and you will have much less troubles... providing you are a full time geek that is! Later, __________________ sig too big

11-20-2007, 10:55 AM	#33
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	ahahahahahahahahaha __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

11-20-2007, 12:00 PM	#34
drjones Confirmed User Join Date: Oct 2005 Location: Charlotte, NC Posts: 908	If you're running your video encoding routines on the same server the videos get served from, you arent getting shit for traffic anyways. Wont lose much:P __________________ ICQ: 284903372

11-21-2007, 08:20 PM	#36
Phil Confirmed User Join Date: Jan 2004 Posts: 7,659	people that use canned scripts are racists! __________________ Ask Phil

11-21-2007, 09:56 PM	#37
The Captain Confirmed User Join Date: Sep 2005 Posts: 1,558	heh, I thought I'd tinker with a tube site a bit. Bought ClipShare, put it up oin my server. no real traffic. with in a month we were hacked. I had it staged out on a dev server, so it was no big deal, but thats just an example to support the thread. __________________ ←Make Your Money Go \| Make Your Traffic Go→

11-22-2007, 01:54 AM	#39
blogman9 Confirmed User Join Date: Dec 2005 Posts: 1,261	This thread submited to: http://www.thereisnomoneyinporn.com

11-22-2007, 02:22 AM	#40
blogman9 Confirmed User Join Date: Dec 2005 Posts: 1,261	sorry not this thread :/

02-07-2008, 03:25 AM	#41
pussyserver - BANNED FOR LIFE So Fucking Banned Join Date: Oct 2005 Location: I convert perverts like catholic church! Posts: 5,133	Redtube.com just got hacked told you fuckers