PASSWORD SHARING ALERT TO ALL PAYSITE OWNERS!!!

Tvduijn · 2006-06-10, 05:15 AM

Guys, Htacces passwords are "quite" easily gathered with Accessdiver(.com). With a good wordlist and weak passwords is easy to find some passes.
I would advise every paysite owner to use accessdiver yourself to see for yourself. Best defence would be a (custom) php/cgi/whatever login instead of htacces imo. Or atleast make sure you block IP's that do over 5 attemps in 24 hours or so.

Just my 2 cents.

2006-06-10, 05:15 AM	#16
Tvduijn You tried your best and you failed miserably. The lesson is 'never try' Join Date: Jan 2006 Posts: 160	Guys, Htacces passwords are "quite" easily gathered with Accessdiver(.com). With a good wordlist and weak passwords is easy to find some passes. I would advise every paysite owner to use accessdiver yourself to see for yourself. Best defence would be a (custom) php/cgi/whatever login instead of htacces imo. Or atleast make sure you block IP's that do over 5 attemps in 24 hours or so. Just my 2 cents.