another nats security issue - GoFuckYourself.com

rabbit · 12-24-2007, 10:07 AM

so i'm going about changing all my nats passwords, and i'm amazed at how many programs don't require email verification for this change!!!! this is insane, i dont feel safe that such a major change can happen without my knowledge.

John- this should be hardcoded for all programs, whats the point of giving this as an option?

WarChild · 12-24-2007, 10:14 AM

Quote:

Originally Posted by rabbit

so i'm going about changing all my nats passwords, and i'm amazed at how many programs don't require email verification for this change!!!! this is insane, i dont feel safe that such a major change can happen without my knowledge.

John- this should be hardcoded for all programs, whats the point of giving this as an option?

While I agree with you that everyone should probably be using it, it's not really the place of NATs, or anyone else, to force options on people.

Jet - BANNED FOR LIFE · 12-24-2007, 10:22 AM

NATS need to hire better programmers

rabbit · 12-24-2007, 10:32 AM

Quote:

Originally Posted by WarChild

While I agree with you that everyone should probably be using it, it's not really the place of NATs, or anyone else, to force options on people.

r u serious when u say this? you'd rather have your security as an option out of your control?

quantum-x · 12-24-2007, 10:35 AM

Quote:

Originally Posted by rabbit

so i'm going about changing all my nats passwords, and i'm amazed at how many programs don't require email verification for this change!!!! this is insane, i dont feel safe that such a major change can happen without my knowledge.

John- this should be hardcoded for all programs, whats the point of giving this as an option?

NATs *does* have changes requiring email verification. I'm 99% sure it's built in by default on newer releases, but that's besides the point: sponsors have been putting it in for ages [IE, I programmed it into Jaymancash 12 months ago]

RP Fade · 12-24-2007, 10:35 AM

I've been waiting for some programs email verification as well but it never got here. Not sure it's it because the program's mail server/db is getting slammed or something else.

Iron Fist · 12-24-2007, 10:35 AM

I mentioned this earlier in another thread so I agree... I don't thinkits NATs but program owners setting up the affiliate admin and not turning on the option to have changes be e-mailed to confirm - either they are:

1. Too lazy.
2. Don't care.
or
3. Trying to save bandwidth...

I think it should be turned on by default....

notoldschool · 12-24-2007, 10:45 AM

This is set up in all new installs as it was when they updated my proggie the last 5 times.

Satan · 12-24-2007, 02:30 PM

Its activated in the SatanCash backend, you must verify ANY changes made to your nats account

Miguel · 12-24-2007, 03:02 PM

all changes to Serious Cash accounts also demand email verifying!

ninavain · 12-24-2007, 03:18 PM

All security clearances have been made..Oh wait I'm 100% ccbill..nevermind, carry on folks

minusonebit · 12-24-2007, 03:20 PM

Quote:

Originally Posted by Jet

NATS need to hire better programmers

Quoted for truth.

Bro Media - BANNED FOR LIFE · 12-24-2007, 04:00 PM

Quote:

Originally Posted by minusonebit

Quoted for truth.

I'm sure you and Jet have coded better huh?

Oh wait....

jimbona · 12-24-2007, 05:42 PM

my issue is that you should have to enter your old password first being giving the allowance to change the password.

Shaze · 12-24-2007, 07:15 PM

Not sure if NATS has this, but the backend should show a "Last Logged In Date". It would help to see if someone else other than us is logging in to our account.

notoldschool · 12-24-2007, 07:19 PM

Quote:

Originally Posted by ninavain

All security clearances have been made..Oh wait I'm 100% ccbill..nevermind, carry on folks

Wow we are impressed. you have one paysite and are too stupid to get cascading billing and have to deal with half your customers not able to use your join page because they are behind a lynksys router. Congrats.

madfuck · 12-24-2007, 09:04 PM

bump tht...

amateurcanada · 12-24-2007, 11:18 PM

Quote:

Originally Posted by notoldschool

Wow we are impressed. you have one paysite and are too stupid to get cascading billing and have to deal with half your customers not able to use your join page because they are behind a lynksys router. Congrats.

lol ouch.

Shoehorn! · 12-24-2007, 11:24 PM

In the newer versions it is required by default.

12-24-2007, 10:07 AM	#1
rabbit Confirmed User Join Date: Jul 2003 Location: Montreal Posts: 2,124	another nats security issue so i'm going about changing all my nats passwords, and i'm amazed at how many programs don't require email verification for this change!!!! this is insane, i dont feel safe that such a major change can happen without my knowledge. John- this should be hardcoded for all programs, whats the point of giving this as an option? __________________ Got a paysite? Get it reviewed by RabbitsReviews and TheBestPorn

12-24-2007, 10:35 AM	#6
RP Fade Confirmed User Join Date: Sep 2003 Location: Los Angeles Posts: 3,343	I've been waiting for some programs email verification as well but it never got here. Not sure it's it because the program's mail server/db is getting slammed or something else. __________________ HomemadeCash.com - Homemade & GF sites powered by NScash.com HomemadeVideoPass.com - The only all homemade mega site OurHomemadePorno.com - Real couples fucking on camera Contact ICQ: 400-786-531 Email: fade AT nscash.com

12-24-2007, 10:35 AM	#7
Iron Fist Too lazy to set a custom title Join Date: Dec 2006 Posts: 23,400	I mentioned this earlier in another thread so I agree... I don't thinkits NATs but program owners setting up the affiliate admin and not turning on the option to have changes be e-mailed to confirm - either they are: 1. Too lazy. 2. Don't care. or 3. Trying to save bandwidth... I think it should be turned on by default.... __________________ i like waffles

12-24-2007, 10:45 AM	#8
notoldschool Confirmed User Join Date: Aug 2007 Posts: 5,687	This is set up in all new installs as it was when they updated my proggie the last 5 times. __________________ No doubt one may quote history to support any cause, as the devil quotes scripture. -- Learned Hand http://www.bjpenn.com

12-24-2007, 02:30 PM	#9
Satan Confirmed User Industry Role: Join Date: Jun 2005 Location: Hell Posts: 1,626	Its activated in the SatanCash backend, you must verify ANY changes made to your nats account __________________ WHO THE FUCK ARE YOU?

12-24-2007, 10:22 AM	#3
Jet - BANNED FOR LIFE So Fucking Banned Join Date: Sep 2002 Posts: 7,515	NATS need to hire better programmers

12-24-2007, 03:02 PM	#10
Miguel Confirmed User Join Date: Apr 2004 Location: Serious-Cash.com Posts: 2,978	all changes to Serious Cash accounts also demand email verifying! __________________ Serious Cash: 27 niche sites - step fantasy, teen, amateur, anal, hardcore, reality [Kinky Family] [Brutal X] [Fucking Glasses] [18 Videoz] [Teeny Lovers] [Sell Your Gf] [Dirty Flix] and others great sites...

12-24-2007, 03:18 PM	#11
ninavain So Fucking Banned Industry Role: Join Date: Jan 2004 Location: Las Vegas Posts: 6,268	All security clearances have been made..Oh wait I'm 100% ccbill..nevermind, carry on folks

12-24-2007, 05:42 PM	#14
jimbona Confirmed User Join Date: Jan 2007 Posts: 190	my issue is that you should have to enter your old password first being giving the allowance to change the password. __________________ Thanks Paul Thunder-Ball.net - Member

12-24-2007, 07:15 PM	#15
Shaze Confirmed User Join Date: Oct 2003 Location: Cyberspace Posts: 2,662	Not sure if NATS has this, but the backend should show a "Last Logged In Date". It would help to see if someone else other than us is logging in to our account. __________________ Adult Search Engine Japanese Porn Thai Porn

12-24-2007, 09:04 PM	#17
madfuck Registered User Join Date: Oct 2004 Posts: 2,032	bump tht...

12-24-2007, 11:24 PM	#19
Shoehorn! Die With Your Boots On Join Date: Oct 2003 Location: Hawaii Posts: 22,872	In the newer versions it is required by default. __________________