Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Shashib (Score 2, Interesting) 70

Nah - those that did it were eventually caught (after about a 6mo to a year) and they were terminated. Besides, even if I could do it, I wouldn't know what to do with the info afterward.

My main point is that the security holes at NetSol is akin to a block of Swiss Cheese. And in most cases the security breaches and Malware placed on their system go unnoticed for long periods of time.

Comment Re:Shashib (Score 5, Informative) 70

Shashi B,

Give me a break! - I too worked for Network Solutions as Level II support - I know all about the bullshit story lines in order to save face. iframe exploits throughout the customers sites, issues not followed through on, the denial of New Ventures having -any- affiliation with NetSol. The ease of gaining access.

In fact while I worked there, several Tech's uploaded basic http shell emulators onto their sites and all had root level access within minutes.

Your infrastructure was and still is seriously flawed and appears that it always will be - I know first hand!

I'll file this under TasteButDontSwallow

Comment Re:Not true - I call Bullshit (Score 4, Informative) 70

I call Bullshit, and with due reason. I worked for Network Solutions as Level II support - handling anything from programming to server issues.

I know for a fact that they do store credit cards - regardless of what they may or may not claim.

One billing application that allow you to search ALL historical purchases, what, when, card #, address, services etc...

The second for more recent purchases.

Primarily we used a single application - and that application gave you access to the entire database which included minor and major information, such as Name, Address, phone#, email, Your Challenge Question, the HINT tot eh challenge question, CC number, billing cycle and history, DNS, smtp, database passwords (if you host with NetSol), all email users and their passwords under that domain, ftp passwords, website passwords for the GUI designer and much much more!

If you have a domain with them that has other email address setup through the NetSol site, simply login and look at those accounts. Each of those users can change the oringial password you set for them once they log into their online mail. But you will always see the passwords as ****, but don't fret if you forgot one (or they changed it) and want to log into the email account of that user, pull up the source code - they are all in plain text (as of 1 year ago anyway).

They have certain "servers" that handle routing and other processes that are no more than a laptop - that's right, not a server - a laptop.

Oh and your cost of thousands of dollars to buy back your domain name - here is a little bit of info. Many users were irate about New Ventures grabbing doamins faster than anyone else when they expired, sometimes before it was to be released (grace period for renewal after it expired). All employees were told to let the customers know that we were not, nor were we affiliated with New Ventures. A month later at a financial meeting, it was announced that we've been making leaps and bounds in revenues and recently sold a domain name for nearly a million dollars!. A few of us started looking into this as NetSol is a registar supposedly with a set fee for domains. As it turns out New Ventures is in fact a part of NetSol - They're scamming everyone.

When I began working for NetSol, I was happy as a lark - until I got settled in and started digging into the processes, support and resolution chain and blatant lies were were telling people, I was so disappointed. I left not being able to stand the lies anymore. We'd tell people that their issue would have a resolution in 3 days, but they'd never hear from anyone. And in fact when someone would ask for someone higher up the chain of command, (ie: supervisor, etc) the supervisors would tell us to tell them they can't be transferred, get the number and the supervisor will call them in 5-10 minutes... would they be home? Issue is that they would never get a call back... only to call in again and be transferred to level II support once more and talk to yourself again, or a fellow Level II support person near you. We would all talk and discuss the deflection process. At that time their website were also riddled with iframe exploits, constantly being hacked and defaced for over a year and a half.

Unless anyone here actually works for NetSol - no one really knows what I know for a fact that goes on there. Given there history with customers and such, They've probably know about this for a long time.

Comment Contacting him (Score 1) 130

Personally I'd like to know how to contact someone like this in regards to presenting an idea. Business plans are not somethign that is easily done, and I've always been better at a verbal pitch, but gettign the opportunity to talk or coorespond via email with someone that has the power to make a decision is neearly impossible. I've emailed every address on the planet that I could find for News Corp, initially wanting to pitch the idea to them. But you don't even get a reponse back of any kind. wtf - I mean I know there are crack-pots out there, but not evryone that has an idea is going to pitch you something absurd.

Comment Let the media host it (Score 1) 471

Post the story to a few high traffic forum site, let the viewers copy and paste it into other forums and email forwards. Next drop a few anon emails to cnn, fox etc - pointing them to these articles. Once the media grabs a hold of the story, all the website could dry up over night, but News Reports will be on it like leeches.
It's funny.  Laugh.

Apple Introduces "MacBook Wheel" 268

CommonCents noted an Apple announcement a few hours before the anticipated keynote. He says "Apples' latest must have gadget does away with the keyboard. With the new MacBook Wheel, Apple has replaced the traditional keyboard with a giant wheel."
Digital

Submission + - Polaroid another casualty?

rockwood writes: With the economy in such a fallen state, has the recession taken yet another 'old school' company and chipped away at its foundation. CNN reports that Polaroid has filed for Chapter 11. Or is the recession causing the recent surge in corruption? Since at the same time Polaroid says "The group's founder and other employees are under investigation for fraud." So is the lack of sales hitting the pocketbook of the business that hard that it requires cut backs and Chapter 11's? Or is it the bigwigs that are folding under pressure and bringing the company down with it?
Security

Huge iPhone Cut-and-Paste Tool Security Flaw 85

Harry writes "I'm using Pastebud, the new third-party copy-and-paste solution for the iPhone. It's extremely clever, using a Web-based clipboard to get around the fact that Apple doesn't provide one on the phone. Unfortunately, it seems to be giving users access to e-mails that other Pastebud users send to their clipboards. This has happened to me repeatedly and is being reported by other users in Pastebud's Get Satisfaction support forum. Pastebud is operational and still doing this as I write, even though a message at Get Satisfaction says they're working on the problem."
The Media

Reuters Pulls Out of Second Life, Army Heads In 77

A little over two years ago, Reuters made headlines by setting up a reporter as a go-between for Second Life and the real world. Now, they've evidently decided that the buzz is no longer there, so they've ended the virtual-reporting experiment. The reporter, Eric Krangel, offered his own take on the situation, and what he thinks Linden Labs could do to make Second Life a better place. Whether or not the advice is taken, the US Army has decided to carve out its own presence in the virtual world by setting up a pair of islands that will function as recruiting tools. An article at Massively suggests that interest in Second Life is still high among a variety of organizations, saying, "at present it appears that more businesses are coming in than going out."
GNU is Not Unix

Submission + - Richard Stallman, missing in Peru

rockwood writes: WikiNews is reporting that according to e-mails and forum posts obtained by Wikinews, Stallman was traveling from Lima to Chimbote with a man named Mario Ramos on August 15, when the quake struck and was expected to arrive in Chimbote on Monday August 20, but he has not been heard from since the disaster.
Enlightenment

Submission + - How to: Meteorites and $1 Million Bathtubs? (vintagetub.com)

rockwood writes: After reading the recent article about the 3 Ton Meteorite Stolen I remembered a similar story that intrigued me quite a bit in regards to a $1 Million Dollar Bathtub Stolen!.
I thought about both of these heists and while the Meteorite may potentially have less security due to the sheer size and assumption that its weight made it safe from theft, a bathtub is rather different.
"An excerpt from the article states A $987,000, 18-karat gold tub was stolen from the Kominato Hotel Mikazuki in Kamagawa, south of Tokyo. The 176 pound fantasy tub was cut from its security chains and taken from its 10th floor location by person or persons unknown." — I find these rather interesting scenarios and would like to see what methods the slashdot community believes could have been deployed here in order to accomplish such a feat?

The Internet

Submission + - Where to go with big ideas 2

rockwood writes: "Looking for hope, I've decided to come to Slashdot; as the client base seem to be diverse enough to provide pro and cons in regards to "selling and idea/concept".
I have been researching and working on a concept that for all purposes the business model I put together for it not only compliments the current internet trends, but also fills a huge gap. A gap so large that I cannot understand why it has not been implemented before (something similar to what the first person who made the phonebook most likely felt like) "This idea is so obvious that everyone would use it, but why hasn't anyone done it before"
My dilemma is that with literally no additional funds to put toward a lawyer, patent/copyrights etc.. I'm fearful of mentioning it to anyone.
I've been sending correspondence to both Google and to News Corp; though proceeding cautiously as I'm afraid of someone stealing the idea; which would produce revenue on a global scale, internet users, mobile and pda, everyone would use it.

So my question — what resources are readily available to help someone in my situation protect themselves and also profit from this? I'd love to implement the idea and watch it grow, though my estimate bandwidth for usage would run 25k to 50k monthly (remember I can't even afford the lawyer at this point). But I'm also open to selling the idea outright — though I'd only be open to an offer that was of a substantial amount.
I've considered contacting my local S.C.O.R.E, though previous dealings with them didn't seem to provide the information and guidance I was hoping for — and again, I'm fearful that if they here something they like they could do it themselves. I know most of you might say "NDA", but I feel that isn't worth the paper it is on, a mere call and a tipoff to a friend 2000 miles away would be something I'd never be able to prove.

Just to bring things into light, I'm estimating initial investment of 4 to 10 million dollars with a return of approximately 5 to 15 million a month! — With that type of return investment you can see why I am leery of mentioning anything to anyone.

Suggestions?"

Slashdot Top Deals

It is easier to write an incorrect program than understand a correct one.

Working...