Password traders & Proxies

Jicky Jack · 2005-04-05, 03:02 PM

Hello all, I noticed a new user has placed a bot on my site and downloaded all 2 gigis of my exclusive images. -ok he paid for that so I'm fine with it. But on 3 more days the same UN/PW download all 2 gigs of the same content again!!???? I checked the IP and it is the same IP from Czec Republic on all occasions...

My Question to the techies: Are pasword traders now using a proxie or something to share passwords to avoid mulitple IP blocks?? Is that possible??? or is this guy just a fool that dosent know how to turn his bot off or find the saved folder location?

a side note: on all occasions it seems the DL speed was quite different...

J

neticule · 2005-04-05, 03:45 PM

Yes, that is very common with the 'smart' password traders, you have to use a proxy to get in so it appears its the same user.

Cleo · 2005-04-05, 03:50 PM

Strongbox will put an end to this.

Head Boy · 2005-04-05, 03:52 PM

Would honest members be resistant to a password change every time they log in?

Jicky Jack · 2005-04-05, 03:53 PM

Quote:

Originally Posted by Cleo

Strongbox will put an end to this.

Or maybe get a mod for this and redirect that IP... http://www.homestarrunner.com/systemisdown.html I need strongbox to kick some ass!

Rocco · 2005-04-06, 03:40 AM

wow, these password traders got always better tricks

chilihost · 2005-04-07, 02:44 AM

yup its true, a lot of them are setting up special proggies too that login to your site via a set proxy and download away...one thing you can check is your raw log files to see if they are all using the same browser and identifiying themselves as the same computer (ie, their operating system, versions, etc). At least that will give you an answer to your question. Then run to Ray to get strongbox installed ;

cheers,
Luke

SinSational · 2005-04-13, 01:01 PM

Quote:

Originally Posted by Cleo

Strongbox will put an end to this.

i second that. we just had strongbox installed for a client a few weeks ago and it has been amazing.

Bruce Miller · 2005-04-14, 10:47 PM

Where can I find out more info on Strong Box?

SinSational · 2005-04-14, 10:51 PM

http://www.bettercgi.com/strongbox

lasho · 2005-10-08, 04:12 AM

strongbox makes members pissed...It causes damn many problems for every user. I bought a membership from a site uses strongbox and see what happens...

-OCR image was wrong
-I had to re-login everytime open a picture in new window( dont tell me cookie shit lamers I knew what to do)
-When I try downloading a movie which is i.e 100mb. Downdload process stops at 20-30 mb
-my password is blocked because my isp changes my ip every 24 hours...

Damn strongbox i hate ya

SirMoby · 2005-10-08, 10:03 AM

Quote:

Originally Posted by Head Boy

Would honest members be resistant to a password change every time they log in?

WOuld you like to change one of your passwords every 24 hours? I thnk members would hate it.

I haven't had any complaints from members since I installed Strongbox. Iw as getting complaints when I used PennyWize

nekrom · 2005-10-09, 08:32 PM

Yupers, most crackers nowdays post what proxie goes with what combo, to a cracked site. Also most common proxies used to access members areas, are from those free anon surfing site thingos.

-N

Hellpuppy · 2005-10-10, 10:43 PM

Strongbox will do the job, but it's a sledgehammer solution and is NOT seamless to the users.

I also like Pennywize, have used it for years on most of our paysites with great success. It also lets you limit the number of bytes that a user can get per day. This can contain the spiders.

funsmut · 2005-10-11, 06:09 AM

Hi Jicky Jack,

Check these solutions below for securing Apache server against brute-force password cracking attacks and password-sharing:

http://www.proxypass.com/ <= I recommend this one
http://www.pennywize.com/

good luck

SirMoby · 2005-10-11, 09:42 AM

Quote:

Originally Posted by Hellpuppy

Strongbox will do the job, but it's a sledgehammer solution and is NOT seamless to the users.

That's an interesting statement. It's true that a standard form now collects the username a password instead of the web browsers authentication popup but that's it. It acutally looks more integrated into my site.

When I was running Pennywizw I got complaint emails almost daily. Now I think I've had 1 surfer have issues in over 6 months.

I have heard good things about ProxyPass.

romeoboi · 2005-10-11, 10:57 AM

does strongbox stop those programs that download the whole members area or is it just stop password trading?

i dont run a paysite, just curious

Hellpuppy · 2005-10-11, 10:10 PM

Quote:

Originally Posted by SirMoby

That's an interesting statement. It's true that a standard form now collects the username a password instead of the web browsers authentication popup but that's it. It acutally looks more integrated into my site.

When I was running Pennywizw I got complaint emails almost daily. Now I think I've had 1 surfer have issues in over 6 months.

I have heard good things about ProxyPass.

I've ran pennywize since 1998 or so even back when it was a CGI you ran locally. And this has included some very busy sites, and the only complaints I've heard are from people who are trying to cheat. Since it works by scanning the logs and doesn't redirect the user until thresholds are exceeded, this is as I would expect.

I'll admit that I tend to stick with things that work until such time as they cease to work for me. So, I may have a bit of bias just due to longevity. Heck, I still use mkstats.

However, there are tons of good solutions out there to choose from, strongbox certainly among them. Your mileage may vary.

2005-04-05, 03:02 PM	#1
Jicky Jack WHO IS FONZY!?! Don't they teach you anything at school? Join Date: Jan 2005 Location: Vegas Posts: 47	Password traders & Proxies Hello all, I noticed a new user has placed a bot on my site and downloaded all 2 gigis of my exclusive images. -ok he paid for that so I'm fine with it. But on 3 more days the same UN/PW download all 2 gigs of the same content again!!???? I checked the IP and it is the same IP from Czec Republic on all occasions... My Question to the techies: Are pasword traders now using a proxie or something to share passwords to avoid mulitple IP blocks?? Is that possible??? or is this guy just a fool that dosent know how to turn his bot off or find the saved folder location? a side note: on all occasions it seems the DL speed was quite different... J

2005-04-05, 03:45 PM	#2
neticule A boy without mischief is like a bowling ball without a liquid center Join Date: Jan 2004 Posts: 437	Yes, that is very common with the 'smart' password traders, you have to use a proxy to get in so it appears its the same user. __________________ Mom, I'm done! Come wipe!

2005-04-05, 03:50 PM	#3
Cleo Subversive filth of the hedonistic decadent West Join Date: Mar 2003 Location: Southeast Florida Posts: 27,936	Strongbox will put an end to this. __________________ Free Rides on Uber and Lyft Uber Car: uberTzTerri Lyft Car: TZ896289

2005-04-05, 03:52 PM	#4
Head Boy Hello, is this President Clinton? Good! I figured if anyone knew where to get some tang it would be you Join Date: Feb 2005 Location: England Posts: 442	Would honest members be resistant to a password change every time they log in? __________________ Adult domain names for sale at Baronets Splinkies have arrived

2005-04-06, 03:40 AM	#6
Rocco www . * * . com Join Date: May 2004 Posts: 1,546	wow, these password traders got always better tricks __________________ Sex and Porn Submit your FreeSites here

2005-04-07, 02:44 AM	#7
chilihost Look at 'em. Watchin' my TV. Sittin on my couch. You better not be in my ass groove! Join Date: Aug 2003 Posts: 465	yup its true, a lot of them are setting up special proggies too that login to your site via a set proxy and download away...one thing you can check is your raw log files to see if they are all using the same browser and identifiying themselves as the same computer (ie, their operating system, versions, etc). At least that will give you an answer to your question. Then run to Ray to get strongbox installed ; cheers, Luke __________________ HunkMoney+BritishBucks+LatinoBucks=50+ gay sites!

2005-04-14, 10:47 PM	#9
Bruce Miller Aw, Dad, you've done a lot of great things, but you're a very old man, and old people are useless Join Date: Apr 2005 Location: 4realcash.com Posts: 22	Where can I find out more info on Strong Box? __________________ www.4realcash.com

2005-04-14, 10:51 PM	#10
SinSational Shut up brain, or I'll stab you with a Q-tip! Join Date: Jan 2005 Location: Boston, MA Posts: 119	http://www.bettercgi.com/strongbox __________________ ICQ# 273099174 - Free Month on All Plans

2005-10-08, 04:12 AM	#11
lasho Internet! Is that thing still around? Join Date: Oct 2005 Posts: 1	strongbox makes members pissed...It causes damn many problems for every user. I bought a membership from a site uses strongbox and see what happens... -OCR image was wrong -I had to re-login everytime open a picture in new window( dont tell me cookie shit lamers I knew what to do) -When I try downloading a movie which is i.e 100mb. Downdload process stops at 20-30 mb -my password is blocked because my isp changes my ip every 24 hours... Damn strongbox i hate ya

2005-10-09, 08:32 PM	#13
nekrom Are you sure this is the Sci-Fi Convention? It's full of nerds! Join Date: Jul 2004 Location: Australia Posts: 263	Yupers, most crackers nowdays post what proxie goes with what combo, to a cracked site. Also most common proxies used to access members areas, are from those free anon surfing site thingos. -N __________________ The afp ownz all your base.

2005-10-10, 10:43 PM	#14
Hellpuppy Rock stars ... is there anything they don't know? Join Date: Oct 2005 Posts: 16	Strongbox will do the job, but it's a sledgehammer solution and is NOT seamless to the users. I also like Pennywize, have used it for years on most of our paysites with great success. It also lets you limit the number of bytes that a user can get per day. This can contain the spiders.

2005-10-11, 06:09 AM	#15
funsmut Rock stars ... is there anything they don't know? Join Date: Sep 2005 Posts: 19	Hi Jicky Jack, Check these solutions below for securing Apache server against brute-force password cracking attacks and password-sharing: http://www.proxypass.com/ <= I recommend this one http://www.pennywize.com/ good luck __________________ Add Your Links Here Fun Smut Link List

2005-10-11, 10:57 AM	#17
romeoboi Lord help me, I'm just not that bright Join Date: Jan 2004 Posts: 103	does strongbox stop those programs that download the whole members area or is it just stop password trading? i dont run a paysite, just curious __________________ Promote DESPERATELY HORNY HOUSEWIVES Part of Adult Players Club!