Hello all,

Following the incident last night, the FTP is now back online. However a lot has now changed so I invite you to read carefully.

Unique accounts per user:
Every user now has a unique account. It uses your forum username so it will be 100% linked to you if any details are leaked.

IP Lock:
The account is now locked to the IP you use on the site. If you use a proxy, your FTP will not work.
If your IP changes, you will need to generate a new password. If your IP changes randomly but you are still connected, you may be able to stay connected for the current download.

Automation:
The account creation and updating is automated, but it takes around 60 seconds for the effects to take place. Once you generate your password, be patient and wait for it to update. If you don't you'll get banned for wrong login attempts.


That's about all. Eventually we will update the page to include more information, make it look nicer and make things clearer, but for now we just wanted to get it online. If anyone spots any issues, please let myself or mrpijey know. As always suggestions are also welcome but remember it's not 100% finished and updates will be made.

Andy (Admin)

Awesome Andy!

You have done a great job! This system looks great, now there will not only be no details leaking but also no account sharing (privately with persons not registered / registered not advanced members).

Nice work

Finally, and this system is awesome, finally the leaks are now harder I like the IP check idea. Great job!!

The new system is great for us, sad for the leaker! BTW, thanks Andy and mrpijey for the hard work!

Just wondering, how does this work if you're like me and have both a home and mobile internet connection with different IPs?

I like the new system, excellent work andy!

Each time you go home or to work to download, you'll need to renew. You can't download from two places at once, that's one thing this system was designed to prevent. I may be able to add a feature another time which allows a second IP to be added but we'll see. Nothing is definite there so don't get your hopes up.

Just tried with the new configuration, and I'm impressed. Not too much of a major change from the old system, but the implementation of individual usernames (based, conveniently, on those used on the Forums) plus unique passwords and the tying in of IP address makes for a very secure system, and it should make it far easier to catch those who misuse it.

One point that I'd like to raise is the idea of periodic password changing. From what I've read above, you will need to change your password if your IP changes. That is fair enough. However, what about requiring users to change their passwords on a regular basis, say every 28 days (counting from the day first generated), a bit similar to the Microsoft Password Policy that many organisations implement? Just a suggestion, keep up the good work!

Very nice system!

Perhaps, but I don't see how it would help. It's locked to an IP so it's not like some random person could use it even if they did get a hold of it

Good job, thanks for the effort - much appreciated.

My suggestion - let things settle in, then after a period of time focus on known issues rather than worrying about what might, or might not arise.

I bet there's forum like BA now. Awesome Andy and mrpijey.

In my opinion, now more leaks, more secured and advanced servers.

Remember people that we will continue to develop this function, so expect that there might be some inconveniences at first before we iron out all the rough edges. This was a quick response development just to make these annoying (and completely pointless) account leaks to stop. Sure they may continue, but when we spot them we ban the member.

At least we have a working foundation now to build on, and it will benefit all members in the long run. For those of you with forced short-lease DHCP changes will unfortunately have to live with this, but as long as you got your router/whatever connected it should be fine.

Wouldn't this defeat the whole idea of being tied to an IP?

Partially which is why I wasn't guaranteeing anything.

Damn, now i have to renew the password every time, oh modem. My IP changes every day. It's very slow too, lol im really out of luck with internet.

being tied to an ip is about as good as it can get in terms of scurity... now i know there are some isp that force user to use a proxie... so
this may be an issue for them but thats about it.

If this is the case, the script should take care of it. It will look for transparent proxies and allow the IP of the proxy which is the one that will be shown to the server. If anyone has issues though we can look into it.

Just tryed it... it worked! - Taylorover9000

Awesome Andy

Back online in less than 24 hours! brilliant!

Since my IP did not changed in the last 2 years this is perfect. (my IP lease stays active as long as I keep on my modem/router on)

Very nice fix, thanks guys.

Andy, just to confirm, wouldn't it be better, if the person had to be logged into the forums in the first place?

I assume that's what it's doing.