What's the best system for securing a paysite from crackers, etc? - GoFuckYourself.com

Socks · 07-02-2008, 06:04 PM

Protecting content from getting to illegal sites starts with your websites, so why aren't most programs using a better system than a simple htaccess?

It's way better than it used to be, but still it's very common to have very little barrier to getting into a paysite. Very often webmasters submit sites to us with passwords like "review/review" so even the most basic of attacks is going to be successful.

Strongbox? That frog one? What's the best solution?

Has anyone noticed a difference after installing one of these?

The form based ones are much harder to attack vs pop-up style, and stop most programs and automated processes from grabbing your stuff - unless they custom write something basically, made for your sites specifically.

Treat them like car thieves.. Even the most basic protection will de-energize them into moving onto an easier target.

Now: Insert cracker jokes here. ;)

Shap · 07-02-2008, 06:05 PM

Quote:

Originally Posted by Socks

Protecting content from getting to illegal sites starts with your websites, so why aren't most programs using a better system than a simple htaccess?

It's way better than it used to be, but still it's very common to have very little barrier to getting into a paysite. Very often webmasters submit sites to us with passwords like "review/review" so even the most basic of attacks is going to be successful.

Strongbox? That frog one? What's the best solution?

Has anyone noticed a difference after installing one of these?

The form based ones are much harder to attack vs pop-up style, and stop most programs and automated processes from grabbing your stuff - unless they custom write something basically, made for your sites specifically.

Treat them like car thieves.. Even the most basic protection will de-energize them into moving onto an easier target.

Now: Insert cracker jokes here. ;)

The thieves are joining the site and paying for it and then stealing. Tough to stop that

You get my email about tomorrow night?

fris · 07-02-2008, 06:46 PM

using htaccess is a big mistake

Kard63 · 07-02-2008, 06:51 PM

Who the fuck are you calling cracker, hahahahahaha !!!

j/k

Hunter_ST · 07-02-2008, 07:00 PM

Quote:

Originally Posted by Shap

The thieves are joining the site and paying for it and then stealing. Tough to stop that

True dat!

jact · 07-02-2008, 07:05 PM

We use Proxy Pass, and we generally have 10-20 users blocked at all times for password violations. Not the same people mind you, the quantity just seems to stay constant even after we resolve their sharing violation. I would prefer if it would do a password reset and send it to the customer's email but I guess blocking to an upsell page is good too.

directfiesta · 07-02-2008, 07:06 PM

Those guys are lethal ... damn crackers ....

BV · 07-02-2008, 07:11 PM

Quote:

Originally Posted by jact

We use Proxy Pass, and we generally have 10-20 users blocked at all times for password violations. Not the same people mind you, the quantity just seems to stay constant even after we resolve their sharing violation. I would prefer if it would do a password reset and send it to the customer's email but I guess blocking to an upsell page is good too.

I have a custom written addon for my proxypass that does that, user gets a new password once he trys to log in, gets one of those forms to enter characters to prove he is a real person, then bam he gets a new password.

jact · 07-02-2008, 07:12 PM

Quote:

Originally Posted by BV

I have a custom written addon for my proxypass that does that, user gets a new password once he trys to log in, gets one of those forms to enter characters to prove he is a real person, then bam he gets a new password.

That sounds slick, great idea.

Socks · 07-02-2008, 08:46 PM

Quote:

Originally Posted by Shap

The thieves are joining the site and paying for it and then stealing. Tough to stop that

You get my email about tomorrow night?

Yeap! My russian mail order bride is pressing my tuxedo as I type this. Immediately after she will be preparing my special cologne from scratch - secret recipe.

07-02-2008, 06:04 PM	#1
Socks Confirmed User Industry Role: Join Date: May 2002 Location: Toronto Posts: 8,475	What's the best system for securing a paysite from crackers, etc? Protecting content from getting to illegal sites starts with your websites, so why aren't most programs using a better system than a simple htaccess? It's way better than it used to be, but still it's very common to have very little barrier to getting into a paysite. Very often webmasters submit sites to us with passwords like "review/review" so even the most basic of attacks is going to be successful. Strongbox? That frog one? What's the best solution? Has anyone noticed a difference after installing one of these? The form based ones are much harder to attack vs pop-up style, and stop most programs and automated processes from grabbing your stuff - unless they custom write something basically, made for your sites specifically. Treat them like car thieves.. Even the most basic protection will de-energize them into moving onto an easier target. Now: Insert cracker jokes here. ;)

07-02-2008, 06:46 PM	#3
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,363	using htaccess is a big mistake __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

07-02-2008, 06:51 PM	#4
Kard63 Confirmed User Join Date: Nov 2003 Location: 237 619 975 Posts: 8,944	Who the fuck are you calling cracker, hahahahahaha !!! j/k __________________

07-02-2008, 07:05 PM	#6
jact Confirmed User Join Date: Sep 2002 Location: Oakville, Canada Posts: 9,134	We use Proxy Pass, and we generally have 10-20 users blocked at all times for password violations. Not the same people mind you, the quantity just seems to stay constant even after we resolve their sharing violation. I would prefer if it would do a password reset and send it to the customer's email but I guess blocking to an upsell page is good too. __________________ Free agent

07-02-2008, 07:06 PM	#7
directfiesta Too lazy to set a custom title Industry Role: Join Date: Oct 2002 Location: Punta Cana, DR Posts: 29,605	Those guys are lethal ... damn crackers .... __________________ I know that Asspimple is stoopid ... As he says, it is a FACT ! But I can't figure out how he can breathe or type , at the same time ....