NATS AFFILIATES: In here now please... - GoFuckYourself.com

Iron Fist · 12-22-2007, 07:12 PM

So as a result of this whole mess, I've begun the process of changing my passwords with all the various programs I promote for on the NATs platform...

One thing that's driving me nuts, is SOME SPONSORS are giving me this message:

IMPORTANT
Your edit-request was accepted. We have e-mailed you with the details of the change so that you can verify it again. Your changes will NOT take effect until you have oked them.

You will find a link to do this in the e-mail we have sent you.

Now this is cool... on the majority of the sponsors i'm changing passwords on, all i'm getting is just this:

Your information has been updated!

No e-mail, no notification that someone changed anything in my affiliate account - NOTHING.

I can not believe sponsors have their affiliate modules set up like that!

CC · 12-22-2007, 07:35 PM

The other thing that is annoying me is some sponsors (well ok, just 1 sponsor so far) appear to not have their email set up properly, so I'm unable to get the email to verify the password change. Annoying. What a fun night I'm having. Thanks, NATS.

papill0n · 12-22-2007, 08:14 PM

Also

Have people noticed that the 'members' link on alot of nats tours is a huge traffic leak?? I just hit up 5 programs and all of them swap out my id for an inhouse id on the 'members' login page.

k0nr4d · 12-22-2007, 10:44 PM

Quote:

Originally Posted by RageCash-Ben

Also

Have people noticed that the 'members' link on alot of nats tours is a huge traffic leak?? I just hit up 5 programs and all of them swap out my id for an inhouse id on the 'members' login page.

NATS codes are plain-text but encoded in base64. Decode it to see what's going on. They may be simple swapping out a siteid, while your affiliate id remains the same.

HouseHead · 12-22-2007, 10:44 PM

this is serious

crockett · 12-22-2007, 11:26 PM

Quote:

Originally Posted by sharphead

So as a result of this whole mess, I've begun the process of changing my passwords with all the various programs I promote for on the NATs platform...

One thing that's driving me nuts, is SOME SPONSORS are giving me this message:

IMPORTANT
Your edit-request was accepted. We have e-mailed you with the details of the change so that you can verify it again. Your changes will NOT take effect until you have oked them.

You will find a link to do this in the e-mail we have sent you.

Now this is cool... on the majority of the sponsors i'm changing passwords on, all i'm getting is just this:

Your information has been updated!

No e-mail, no notification that someone changed anything in my affiliate account - NOTHING.

I can not believe sponsors have their affiliate modules set up like that!

It's pretty much useless to change your NATS passwords now as an affiliate until you "know" that that program has fixed their NATS install. Otherwise the hacker will just get your new info.

Snake Doctor · 12-22-2007, 11:51 PM

I like that the changes have to be approved by someone with access to the email address you used when you signed up.
I think whenever any payment information is changed there should be another additional step too.

Lucky for me, even if sponsors I do use were hacked, all they're going to find is a business tax id # and a post office box address.
Yet another good reason to set yourself up as a proper business.

TMM_John · 12-22-2007, 11:53 PM

Quote:

Originally Posted by Snake Doctor

I like that the changes have to be approved by someone with access to the email address you used when you signed up.
I think whenever any payment information is changed there should be another additional step too.

Lucky for me, even if sponsors I do use were hacked, all they're going to find is a business tax id # and a post office box address.
Yet another good reason to set yourself up as a proper business.

If you have any additional feedback on the changing of info as to what additional steps you would like to see please shoot me an email to albright[]toomuchmedia.com We are adding to these features in NATS v4 and any input is appreciated.

V_RocKs · 12-23-2007, 04:34 AM

Better than the ones that send the Email but you never get it... Why?

Because your ISP banned them for spamming... haha... uhhh

Zester · 12-23-2007, 04:35 AM

John, what about what crockett said ? will it be useless in your opinion taking note you know the most about this issue ?

Naja-ram · 12-23-2007, 05:15 AM

Quote:

Originally Posted by sharphead

So as a result of this whole mess, I've begun the process of changing my passwords with all the various programs I promote for on the NATs platform...

One thing that's driving me nuts, is SOME SPONSORS are giving me this message:

IMPORTANT
Your edit-request was accepted. We have e-mailed you with the details of the change so that you can verify it again. Your changes will NOT take effect until you have oked them.

You will find a link to do this in the e-mail we have sent you.

Now this is cool... on the majority of the sponsors i'm changing passwords on, all i'm getting is just this:

Your information has been updated!

No e-mail, no notification that someone changed anything in my affiliate account - NOTHING.

I can not believe sponsors have their affiliate modules set up like that!

you don't get it, do you ?
someone, lets say an hacker has access to NATS systems and is downloading the entire database of both affiliates and members.

the hacker can take your *new* password an hour or a day after you change it when he again runs the script the steals the database.
get it now ?
until the access is blocked - you;'re fucked.

Ross · 12-23-2007, 05:26 AM

Quote:

Originally Posted by Naja-ram

you don't get it, do you ?
someone, lets say an hacker has access to NATS systems and is downloading the entire database of both affiliates and members.

the hacker can take your *new* password an hour or a day after you change it when he again runs the script the steals the database.
get it now ?
until the access is blocked - you;'re fucked.

This will unfortunately go over a lot of peoples head. There is absolutely no point changing your passwords until you know for sure that the problem is fixed.

Like Naja says, they can just come right back in and get your new password. Thing I would do is change all your important passwords if they are remotely similair to your sponsors password. Epass, digital banking etc etc...

slavdogg · 12-23-2007, 06:09 AM

Quote:

Originally Posted by RageCash-Ben

Also

Have people noticed that the 'members' link on alot of nats tours is a huge traffic leak?? I just hit up 5 programs and all of them swap out my id for an inhouse id on the 'members' login page.

this has little to do with nats IMO
this is how most programs steal your traffic.
this is the oldest traffic leak around.

it accounts for as much as 5% of initial sales.
the 5% # is solely based on one program where we're able to track these sales.

webjoker · 12-23-2007, 06:10 AM

Quote:

Originally Posted by Ross

This will unfortunately go over a lot of peoples head. There is absolutely no point changing your passwords until you know for sure that the problem is fixed.

Like Naja says, they can just come right back in and get your new password. Thing I would do is change all your important passwords if they are remotely similair to your sponsors password. Epass, digital banking etc etc...

never the less, I think every affiliate should make sure their payment details were not changed.
most chances the intention of this "hacker" is only the email addresses for spam use but he can also (for example) change the epass id of the affiliate to one of his own and the money can get transfered like nothing.
this can be a matter of days or even hours depending on the revenue of the affiliate.
and because no matter what the affiliate changes about the payment details - the hacker can change it back:
even if it sounds a little harsh I think all NATS system using sponsors should hold all affiliate credit fund transfers until the whole issue is closed and re- secured.

cykoe6 · 12-23-2007, 06:16 AM

Quote:

Originally Posted by crockett

It's pretty much useless to change your NATS passwords now as an affiliate until you "know" that that program has fixed their NATS install. Otherwise the hacker will just get your new info.

That is why I am waiting to make the changes. No need for someone to get another set of my passwords.

Zorgman · 12-23-2007, 07:03 AM

Having the same password for all or even 2 of your accounts is just silly. Get a black book and make every site a different password. Yes, its a pain in the ass but is safer then having them all the same.

My 2c worth.

jscott · 12-23-2007, 07:29 AM

this password updating is going to take me hours

Barefootsies · 12-23-2007, 08:22 AM

Beyond changing your passwords, you need to set up different e-mail addresses so you can track the people who sell your info. For example

[email protected]
[email protected]

or more importantly

[email protected]
[email protected]
[email protected]

etc..

Then when you start getting hit with all kinds of spam shit. You can track down who is selling your shit off, and eliminate them, then post on GFY about it.

Zester · 12-23-2007, 08:25 AM

EDIT: later...

jscott · 12-23-2007, 08:40 AM

lol, barefuootsies, good idea (using darkjedi) haha

Barefootsies · 12-23-2007, 08:54 AM

Quote:

Originally Posted by jscott

lol, barefuootsies, good idea (using darkjedi) haha

Zester · 12-23-2007, 09:12 AM

Quote:

Originally Posted by Ross

This will unfortunately go over a lot of peoples head. There is absolutely no point changing your passwords until you know for sure that the problem is fixed.

but how will we know the problem is fixed ? i'm not sure if it's the sponsors that need to fix this security hole or NATS. I hope the sponsors notify their affiliates about when it's fixed...

Naja-ram · 12-25-2007, 07:16 AM

looks like the affiliate are the least important in this whole issue...no one cares about them and their privacy

12-22-2007, 07:12 PM	#1
Iron Fist Too lazy to set a custom title Join Date: Dec 2006 Posts: 23,400	NATS AFFILIATES: In here now please... So as a result of this whole mess, I've begun the process of changing my passwords with all the various programs I promote for on the NATs platform... One thing that's driving me nuts, is SOME SPONSORS are giving me this message: IMPORTANT Your edit-request was accepted. We have e-mailed you with the details of the change so that you can verify it again. Your changes will NOT take effect until you have oked them. You will find a link to do this in the e-mail we have sent you. Now this is cool... on the majority of the sponsors i'm changing passwords on, all i'm getting is just this: Your information has been updated! No e-mail, no notification that someone changed anything in my affiliate account - NOTHING. I can not believe sponsors have their affiliate modules set up like that! __________________ i like waffles

12-22-2007, 10:44 PM	#5
HouseHead Confirmed User Join Date: Aug 2003 Location: Aim - Hydromorphone Posts: 5,539	this is serious __________________ The Sexiest place to Buy & Sell Adult Ads - JuicyAds is where YOUR profits matter! ---> SPOTS AVAILABLE :\|: SIGN UP RIGHT NOW <---

12-22-2007, 11:51 PM	#7
Snake Doctor I'm Lenny2 Bitch Join Date: Mar 2001 Location: On top of my soapbox Posts: 13,449	I like that the changes have to be approved by someone with access to the email address you used when you signed up. I think whenever any payment information is changed there should be another additional step too. Lucky for me, even if sponsors I do use were hacked, all they're going to find is a business tax id # and a post office box address. Yet another good reason to set yourself up as a proper business. __________________ sig too big

12-23-2007, 04:35 AM	#10
Zester Confirmed User Industry Role: Join Date: Jul 2003 Posts: 5,344	John, what about what crockett said ? will it be useless in your opinion taking note you know the most about this issue ? __________________ * Mainstream ? $65 per sale * new male contraception

12-23-2007, 07:03 AM	#16
Zorgman Confirmed User Join Date: Aug 2002 Location: Sydney, Australia Posts: 6,103	Having the same password for all or even 2 of your accounts is just silly. Get a black book and make every site a different password. Yes, its a pain in the ass but is safer then having them all the same. My 2c worth. __________________ ---

12-22-2007, 07:35 PM	#2
CC Confirmed User Join Date: Feb 2001 Posts: 1,690	The other thing that is annoying me is some sponsors (well ok, just 1 sponsor so far) appear to not have their email set up properly, so I'm unable to get the email to verify the password change. Annoying. What a fun night I'm having. Thanks, NATS.

12-22-2007, 08:14 PM	#3
papill0n Unregistered Abuser Industry Role: Join Date: Oct 2007 Posts: 15,547	Also Have people noticed that the 'members' link on alot of nats tours is a huge traffic leak?? I just hit up 5 programs and all of them swap out my id for an inhouse id on the 'members' login page.

12-23-2007, 04:34 AM	#9
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	Better than the ones that send the Email but you never get it... Why? Because your ISP banned them for spamming... haha... uhhh

12-23-2007, 07:29 AM	#17
jscott So Fucking Banned Industry Role: Join Date: Feb 2001 Location: Taipei Posts: 25,198	this password updating is going to take me hours

12-23-2007, 08:22 AM	#18
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	Beyond changing your passwords, you need to set up different e-mail addresses so you can track the people who sell your info. For example [email protected] [email protected] or more importantly [email protected] [email protected] [email protected] etc.. Then when you start getting hit with all kinds of spam shit. You can track down who is selling your shit off, and eliminate them, then post on GFY about it. __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

12-23-2007, 08:25 AM	#19
Zester Confirmed User Industry Role: Join Date: Jul 2003 Posts: 5,344	EDIT: later... __________________ * Mainstream ? $65 per sale * new male contraception Last edited by Zester; 12-23-2007 at 08:28 AM..

12-23-2007, 08:40 AM	#20
jscott So Fucking Banned Industry Role: Join Date: Feb 2001 Location: Taipei Posts: 25,198	lol, barefuootsies, good idea (using darkjedi) haha

12-25-2007, 07:16 AM	#23
Naja-ram Confirmed User Join Date: Aug 2006 Location: Iran Posts: 639	looks like the affiliate are the least important in this whole issue...no one cares about them and their privacy __________________ http://www.muslimmatrimonial.com/