Quote:
Originally posted by Kacy@Dec 30 2003, 09:57 AM
I have found their support to be not that great unfortunately and many issues with passwords being added through unsecure scripts.
|
I got a friend of mine the other day to show me how he hacks websites... He went on my site, found the holes but it wasn't through my password security he found it... He told me that more often than we think, hackers have control on a server and it's pretty easy to be done, just have to find the right hole. Most of the times too, the owners of the server have no ideas...
Even thought he wasn't able to get into my password file and add a script to generate passwords, he showed me in about 5 minutes how he added that script to a CCBill password file as well to the IBill one... Pretty scary stuff. That thing keeps generating passwords, as soon as one is deleted, it generates another one. He told me it was really easy once you knew where the file is, what name they use for the file and supposely it's pretty much always the same thing from site to site.