Powersellersunite.com (PSU) - New Posting Policies a Selective Police State?

[knappschiles]

Oh crud, Erin.

I know pretty much what you are going thru. While men act so strong and Macho when nothing is "wrong", when they are hurt or sick they can be the worst "babies" around. I know my hubby is a very poor patient.

On the money end, I have the same problems. The last company Ray worked for supposedly had much better insurance coverage than the smaller company he worked for before. But when we had to use it it seemed like we were paying for a lot more stuff than ever before. I still have a couple of bills from my surgery last year.

And now we don't have anything at all. At least Ray will have something when he turns 65 in a few months (Medicare).

Try to keep your sanity til they get back healthy.

Take care girlfriend,
Carol

[The Bar Keep]

Not to worry, see thread.


http://powersellersunite....m/post-135462.html#135462

[bbhc]

Not to worry, see thread.


http://powersellersunite....m/post-135462.html#135462

Clueless idiots like Elidioto are why you probably should worry when you buy from many small sites.

Not to worry. Mine was hacked last year and psunite fixed it in just a short time.

Overlooking  the fact that Virtuemart is a buggy piece of crap and Joomla/Mambo is a security nightmare that even a 2-year-old could hack...

If your site is hacked you should worry and you also need to be aware of your state's data breach notification laws unless you want to be hit with heavy fines (more here: http://www.intelligentent...jhtml?articleID=198800638 )

Afterwords, I'd have someone check your PC for bugs, spyware and viruses and then change all passwords while upgrading your anti-virus system.

WTF does your home PC have to do with your site/server being hacked??? :

If your site is hacked you need to run a complete security scan on your web server to determine the extent of the hack and you need to fix the security holes that allowed your site to be hacked.

is now back to normal. The index.php file was replaced in the template.

...back to normal and still full of the same security holes that allowed the site to be hacked.    Friggin' idiots.  Remind me to never buy from any PSU store. 

[knappschiles]

Read that thread and I thought much the same as you, BBHC, what does your personal PC have to do with your site. Other than possible if you have your passwords stored ON your PC somewhere and you maybe have a keylogger.

While I don't know a whole lot about either type of "store", when I was looking at info about Zen Cart sites, there is a very good Tut all about specific things you NEED to do after installing a Zen Cart to be sure it's secure. While some of it may sound "basic" to those that have used these before, if I installed a cart I probably wouldn't know to do that if not told what to do.

My guess is there may be some procedure like that for the Virtuemart carts too, it's just that it's not being done.

Something as simple as re-naming folders like the "admin"  and deleting several other can go a long way to preventing problems. See this tut for more info http://tutorials.zen-cart.com/index.php?article=73

[The Bar Keep]

If your site is hacked you need to run a complete security scan on your web server to determine the extent of the hack and you need to fix the security holes that allowed your site to be hacked.

I asked a while back in the PSU forum if the PSU stores were on the same server as PSU itself. The answer I received was no but I have since found that out to be a lie.

Last night shortly after I posted here I noticed PSU went down for a bit. Had the same php error that was common about once a week back in September. Is it a coincidence that this downtime yesterday occured when PSUnite went to do his little fix? I don't think so but here is more proof to my case.

do a ping test on the following sites

powersellersunite.com
psunite.com
elgatosden.com


Not that the same favacon doesn't give it away but you will see what i mean with the ping tests.

Clueless idiots like Elidioto are why you probably should worry when you buy from many small sites.

bolding mine.


 

I prefer Elghetto but they both get the point accross 


 

[The Bar Keep]

Not to worry Elghetto is here. 


http://powersellersunite....m/post-135502.html#135502

What's going on with the virturemart website? the site has strange security stuff on the front page and I can't access my administration page?

Help!

Do you think strange is the correct word in this case? 

Edited to add Elghetto's response time was 8 days for this post. Do you think he is just posting to drive the numbers up at this point?

[The Tavern Wench]

Not to worry Elghetto is here. 


http://powersellersunite....m/post-135502.html#135502

What's going on with the virturemart website? the site has strange security stuff on the front page and I can't access my administration page?

Help!

Do you think strange is the correct word in this case? 

Edited to add Elghetto's response time was 8 days for this post. Do you think he is just posting to drive the numbers up at this point?

That or he is so on top of things going on at PSU...he just now saw it. 


Then again...maybe he was just too darn busy bumping Erin's Rubbish Bin thread AGAIN and bragging about how PSU has made this big miraculous turnaround now that the riffraff is gone and are hanging out "Elsewhere"...

sunray Posted: Sat Dec 22, 2007 8:23 pm   

  Hi Elgato!

Hopefully you found the thread to be a fair summary of events based on 'reasonable' opinion rather than the so called "vicious attack" it has been portrayed as elsewhere?

Note the time lapse between posts...what 8 days?  I'm sure it was just an oversight he was so busy copy/pasting the PSU news articles to PheeBay and simply missed Sunray's reply way back on the 22nd.

elgato Posted: Sun Dec 30, 2007 10:26 pm   (at PB)

  LOL @ SR!
Elsewhere, meaning PSU? 

Rest assured amigos, all has been nice and calm over there for the past couple of weeks, just like the old days when browsers and registered members clicked onto PSU to read about alternatives to Ebay and related news.

There's a lot happening out in the online world of Interent sales and not just ranting and bashing by a few. Overall online sales are up by approx 19% over this same time last year and that type of information is what I ATTEMPT to present our prowlers at the PSU forums.
The rest is just window dressing IMHO 

He is quickly reassured "Elsewhere" is NOT PSU but some other forum and congratulated on the PSU turnaround by the usual PB cronies, including Miss Molly PVH Malone who promises to return to PSU soon.  Wonder what trolling ID she'll use this time?

Passion Vine House Posted: Mon Dec 31, 2007 12:33 pm   

  Happy New Year elgato and everyone at PSU. I love that site and look forward to getting back there shortly. With any luck those stuck in the past have finally found a way of moving on.

elgato Posted: Thu Jan 03, 2008 2:43 am   

  Well hey there PVH and it's good to see ya again! 

elsewhere? Heard of it but never bothered. Thought it was one of those TV shows I don't watch.

Yessir Jim, someone has found a new home (which you PMed me about that forum  ) and it's not PSU for now. I'm receiving quite a few PM's over there (PSU) from our older members (not age, just sign up dates) wondering what we did to rid PSU of them and I just do the ole Cat shrug, but don't take the credit 

New members and old members both are returning due to the reason PSU was orginally born. Go figure!

always prowling here & there~~~~~~~

Don't ya love it when people try to play dumb?  Always makes me wonder if they're really playing.    

Funny he's heard of 'Elsewhere', but never bothered with it.  I could have sworn he was a member here there.  Others seem to have noticed this blatant lie little discrepancy too...  ElGatos Den Review My Site      

After reading his last post all I could think was...Better get out of the litter box EG, the you know what is getting deep and starting to stick to your fur.

[2boysandtoys]

     

I think this pretty much sums it up.....

If you go to PSU, click on the member list, and click on:

Joined date ---- I don't think the 'old members' are back - 

Posts ---- those who used to post a ton are 'gone' - with exception to those who are now working hard to take advantage of PSU's popularity - 

Bless his heart - I wish him well in the land of 'oz'... 

[The Bar Keep]

Talking to PVH in another forum and acting the way Elghetto did knowing that PVH broke the PSU posting rules is despicable in and of itself.

The following is how that dustbin thread finished out with the other PSU Mod (Dep-T-Dummy) joining in:


Dep-T-Dawg-n-LANA Posted: Sun Jan 06, 2008 1:01 pm

elgato wrote:
Well hey there PVH and it's good to see ya again! 

elsewhere? Heard of it but never bothered. Thought it was one of those TV shows I don't watch.

Yessir Jim, someone has found a new home (which you PMed me about that forum  ) and it's not PSU for now. I'm receiving quite a few PM's over there (PSU) from our older members (not age, just sign up dates) wondering what we did to rid PSU of them and I just do the ole Cat shrug, but don't take the credit 

New members and old members both are returning due to the reason PSU was orginally born. Go figure!

always prowling here & there~~~~~~~

lol, We are here as well, and HAPPY NEW YEAR, good folks!! 
Maybe a joyful and peaceful even (lucrative??) year for all??
Wish you ALL good health and much happiness!! 
Lana & JB 

_________________
JB & Lana


Dep-T-Dawg-n-LANA Posted: Sun Jan 06, 2008 1:04 pm

elgato wrote:
wondering what 'we' did to rid PSU of them and I just do the ole Cat shrug, but don't take the credit 

{laughing smiley was inserted here}

DTD


---------------------------------------------------------------------------------------------------


What more can I say other than bragging about violating the first amendment rights of posters like Erin only proves intent of defamation. IMO anybody who associates themselves with the PSU mods, by posting in response to them or ignoring the facts presented in this thread about them, is putting their character and morals on the line. You are, in todays OAI, who you associate yourself with as much as who you disassociate yourself from.


 

Joe - The Bar Keep

[bbhc]

PSUnite earns himself a : award with this quote:

The hackers used a CSRF is a vulnerability which is relatively new

The Joomla vulnerability was first reported on 12/4 (http://www.securityfocus....ve/1/485676/30/0/threaded).  In the land of Internet security vulnerabilities 30 days isn't "relatively new"--its ancient history.  Minutes after a vulnerability is discovered hackers are using Google to search for vulnerable sites. 

Joomla still hasn't issued a patch for the 1.0x version that PSU Stores uses (a patch was issued on 12/10 for the 1.5 RC3 version) and so all PSU stores are still vulnerable and most importantly all customer (buyer) data stored in the database is also at risk if a site is hacked.

Details of the hole:

The attack allows everyone (no privileges needed) to add a new Super Admin by just having a Super Admin visiting a url

-Extension installation

The attack allow everyone (no privileges needed) to upload an extension from a remote location, thus having malicious PHP scripts on server.

Read PHP shell.

-Global configuration

The attack allows everyone (no privileges needed) to change all the aspects of the site main configuration, including database configuration.

Defacement or complete portal compromise is possible including having access to the database.

Store owners who have been hacked should think about letting their customers know that their data might have been compromised...and they should switch to a more secure cart due to Joomla/Mambo's long history of serious security problems.  The security problems aren't going to end with the next patch.

==============

There's a lot happening out in the online world of Interent sales and not just ranting and bashing by a few.

Unfortunately for Elgato and the Peebayers there isn't a lot happening in the world of alt-auction sales. Saying that sellers are wasting their time by listing on alt-auction sites whose sitewide 1-month GMV is barely equal to the minimum amount needed for one seller to qualify for Silver Power Seller status isn't bashing...its common sense. Most alt sites don't have enough sales to support even one seller, let alone 1-2,000 sellers.  People like elgato who lead sellers down a path with few sales (i.e. HiBidder and the other sites he cheerleads for) are doing sellers a disservice.

[Cherry Pits]

Problem with folks there...some are non-geeks posing as geeks and they have no clue as to what is actually going on!

[2boysandtoys]

Well.....the wonders of the world just never cease to amaze me!  Dorothy - are we still in Kansas?   

So - let me be direct, as I am so short on time - not even funny.

First, both PSU mods are now active members in the Pheebay trashbin?  I guess they have forgotten how many times, over and over again, JYJ trashed PSU, PSU members and PSU moderation?   

Second, both are willing to associate with PassionvineHouse - a/k/a - MollyMalone (Porn Perv.) and Susie DeVitt (Artist) --- knowing that this person violated the forum rules of where they moderate and cursed in their forum and attempted to stir the pot?

Third, since I don't go to peebay, are they suggesting they've 'cleaned house' at PSU?  Perhaps suggesting they have 'rid PSU' of 'unwanteds'?

 

The insanity of what I 'think I'm reading' is enough to make me laugh so hard - I spit my coffee all over.  Why is it that rational folks can 'see' that peebay has one huge agenda, and many smaller ones - the huge agenda being the demise of PSU?   I guess the slick-talking car salesman has been training JYJ - otherwise how could he influence Elgato and DTD to be members of a place like that, let alone be active?

This is like a really, really bad sitcom - the drama and saga of which never ends.  I certainly hope, unlike most soap sitcoms - we don't revisit again in 20 years, and they are all still 'stuck' in the mentality of 'others are the issue'.

 

[The Bar Keep]

Last night shortly after I posted here I noticed PSU went down for a bit. Had the same php error that was common about once a week back in September. Is it a coincidence that this downtime yesterday occured when PSUnite went to do his little fix?

Posted by PSUnite: Mon Jan 07, 2008 5:30 pm   Post subject:  Re: Ms. Molly's Quilts has been hacked

I also beefed up the firewall on our servers last night and banned the ip from AZERBAIJAN. Unfortunately the PSU website went down for 15-20 mins during the upgrade because the firewall prevent the site from talking to the separate database server. The PSU Stores did not go down since they use a separate server.

Tell me lies, tell me sweet little lies.

 

[The Bar Keep]

I give it 3 months and all the alternatives will lose 99% of the eBay knee jerk boycotters as well as the momentum that a certain few have been showing.

PSU has become a misguided source of misinformation where spam is the norm. Adding sites to the listing tote was a big mistake. It took months before to add a site. All of a sudden wham, ask and you shall receive. For starters PSU should be removing sites from the listing tote.

First site to remove - Wagglapop. It's no secret, the history of this site speaks for itself. Closed once, owner claimed all info was deleted but managed to spam all the old members when the site relaunched in 06'. One poster at PSU has made it a point to disrupt every thread to spam for WP. Wagglepop is a gated community that will never prove the claims of sales. The site has stated that over 3,000 store were terminated for nonpayment, yet we all know that not to be the case. How can PSU allow a site like this to be promoted to it's members????? Very poor business practices IMO on the part of PSUnite!!!!

Second site to remove - Hibidder. With the addition of new information posted in PSU and this forum today it is quite clear that any promotion HB runs is nothing more than a scam. Why does PSU allow the members to be subjected to continued scams from this site???? Very poor business practices IMO on the part of PSUnite!!!!

Third sites to be removed -

Zolanta (defunct)
 
Yahoo (Retired) 
 
StuffPals (defunct)
 
If they are gone what is the point??? It's like hitting a dead link through Google organic search. Clean the site up PSUnite, kick the trash to the curb!!!!


I could go on about the newer posters and how rude and disrespectful they are to long time members of PSU but heck they are the knee jerkers who are throwing away their businesses based on poor and unproven information. Besides I am sure there will be differing opinions in this thread so lets hear them!

Joe - The Bar Keep

[The Tavern Wench]

I give it 3 months and all the alternatives will lose 99% of the eBay knee jerk boycotters as well as the momentum that a certain few have been showing.

Yep.  Three months from now...the Alternatives and the Boycotters will look and feel like this: 

Joe you are absolutely correct about the tote board and certain sites needing to be removed over at Spam Central.

I could go on about the newer posters and how rude and disrespectful they are to long time members of PSU but heck they are the knee jerkers who are throwing away their businesses based on poor and unproven information. Besides I am sure there will be differing opinions in this thread so lets hear them!

All I can say is...