COMPLAINT & WARNING against Magic Touch Productions

[jpm]

I have recently exchanged e-mails with MTP's pay website.
I had asked them why my account was being blocked. Their response
was that too many ISP logins had occured...their explanation
for this was that I had been sharing my passwords...in fact..they
were quite insistant about it to the point of telling me that I
needed to "stop sharing" my password.

I told them that I did not share my password and that it was obviously stolen. They responded by telling me that another user made the same complaint about the same account...claiming they were the rightful user. MTP reinstated my account...solely on the fact that my e-mail address was the one attached to the subscription. However, they refused to look into the fact that another user had not only gained my passcode...but was complaining about interruption of service...even when his e-mail was not the one
on the subscription. Obviously...this was a problem.

If my password has been compromised..then what about other information such as credit card # and private info. I'm by no means paranoid and use the net to purchase all the time. However, I'm well aware of the fact that web sites can be and have been compromised and it is the responsability of the webmaster to deal with his or her own security..even if their payments are recieved through an outside venue such as CCBill which MTJ uses.

MTP's response was to offer me a free month of service. Very generous..however..it does not deal with the problem..one MTJ obviously does not believe exists or merely wishes to ignore.
Their final response for my request that they contact CCBill
and find out how two members are using the same account.
*******************
"If you desire further action from ccbill, you are certainly free to contact them yourself, or take whatever action you think is appropriate.
However, it should reassure you to know that your credit information is not stored on my server where password are, it is maintained by ccbill. I don't even have access to it myself."
********************

This is hardly acceptible...particularly since MTP has all the pertinant information...such as both my and the other users name
and e-mail address..which for privacy reasons..MTP cannot disclose to me(and I completly understand that). However, they should be the ones
that contact CCBill and request the investigation. A user with a subscription on their site was the one which was compromised and they have the pertinant information CCBill will need to conduct an investigation. They are refusing to do so and are merely offering me some token to shut me up and send me on my way. This is not acceptble and I urge you to avoid subscribing to MTP's site until they clean house and get their affairs in order. Not acknowledging a problem will not make it go away.
reguards

 

[TMF Jeff]

This is a true event that did happen. I recently installed security software on Tickling.ws to prevent multiple users from logging onto the same account. JPM's account was disabled by that software, and two people both contacted me, both pissed off about it and demanding a resolution. I looked up the account, and one of the people who had contacted me was the official email address of record for that account, so that was the one that was reinstated.

I assumed it was password trading because I cannot imagine a hacker writing to me and asking to have his hacked account re-activated. Also hackers are usually doing it for multiple accounts, and post the password to a public trading site. Since this did not happen in this instance, I assumed, and I think reasonably, that this was a case of friends sharing passwords. Maybe it was and maybe it wasn't, but in any case the account was re-activated within hours, and I did, as he mentioned above, offer an entire free month as compensation. (Which I would not do again to prevent abuse by people who think by getting their account locked they can get a freebie 🙂 )

The rest is true as well: I would not reveal the identity of the other person, nor would I launch an internet-wide search for the reason. In fact, I discovered after-the-fact that JPM's password on his TMF account (both of them) are the same as the one he had on my paysite, so it's probably a case of someone not updating their password often enough and failing to utilize other standard internet-security practices.

 

[jpm]

All you did was openly admit that you believed and still believe I shared my passcode...which explains your ambivalence..on top of telling whoever hacked my site that my forum passcode is the same..great job mr. security...your really
on top of things.

 

[TMF Jeff]

You should change your forum passcode anyway, because that person already knew what it was if he bothered to try.

 

[jpm]

no kidding...are you in the armed services? you should be recommended for officers training

 

[TickleSlaveinTn]

Changing the passcode seems pretty reasonable to me. Just an observation, but the request makes sense.

 

[jpm]

I'm not arguing that.....I'm arguing MTPs lazy
response to a problem and then compounding
that by stating in open forum that my passcode
to the TMF was the same as my passcode to
his site. The man is lax and his actions show it.
He didn't want to investigate the matter....he
was and is insistant that this is my fault.
Well...I'll contact CCBill and request my own investigation.
If he gets inconvenienced over it...its his own
fault for not being responsible enough to
investigate a matter and try to blame his customers.

 

[polip090]

Big problem

Whatever the original transgression may have been, Jeff you violated everything the second you said his password was the same on this site as on yours. You can't then foist the blame on the victim here by saying he should have done something in the past. You had no right to say ANYTHING about his password on this site. That is a serious, serious transgression.

Frankly, it makes me more nervous about sharing anything on this site. And if guarantees that I won't join your paysite.

 

[TMF Jeff]

Re: Big problem

Whatever the original transgression may have been, Jeff you violated everything the second you said his password was the same on this site as on yours. You can't then foist the blame on the victim here by saying he should have done something in the past. You had no right to say ANYTHING about his password on this site. That is a serious, serious transgression.

Frankly, it makes me more nervous about sharing anything on this site. And if guarantees that I won't join your paysite.

I think it's pretty clear that A) I did it only to point out that the most likely culprit for this problem was the user himself, and B) I did it and immediately suggested he change it, and C) I didn't say the password, so only the hacker would know what it was, and as I said, he already knew that.

I'm sorry you feel so strongly, but I feel very comfortable with the choices I've made in this case.

 

[polip090]

But Jeff,

Who cares if you are right or not about whether or not the first guy was password sharing or not? Your original post laid out the fact that it sure looked odd that a hacker would e-mail demanding access (pretty dumb even for a password-sharing incident frankly). Nuff said. The original complaint was fear that you had more information that someone could have hacked from your site. You said this couldn't happen- and we believe you.

But you went a step further. You introduced information that was completely extraneous. The fact that his password is the same here as on your site is irrelevant. That fact that his password might be his last name is just as irrelevant. You were already in the right with your post- but then you stepped over the line. You shared, even if to one other person in the universe, this guy's password to this site. That's a no-no. Especially for an administrator of this site, and super especially for someone running a commercial site that expects people to trust him with credit card info to make a sale. Your credibility took a major blow. Time for some damage control rather than standing on your position.

 

[TickleTheater]

The only thing I find weird is the fact that now 2 people with under 10 posts are lashing out at Jeff.

Also, do you realize that information on someone's forum account is very minimal? The most the hacker would ever have to gain from using this persons forum account would be the ability to post on these forums with their username. Which would be a pretty dumb move considering vbulletin logs all the IPs automatically whenever someone makes a post.

I'm not going to get involved with pay site issue because that's really something Jeff and the client should work out, not everyone on this forum. I was just posting that it's really not a major deal Jeff mentioned the fact the guys password is the same as the pay site. The guy should change all of his passwords anyways, because that's the smartest thing to do at this point.

 

[jpm]

Tickle Theatre..what does the # of past posts I hor anyone ellse has made to this forum have ANYTHING to do with the matter at hand?
I have a legitimate grievance I wished to bring to the attention of others. If MTP has hundreds of posts to this forum...wonderful..that does not make them any better than anyone else or add any greater
validity to their statements.

MTP screwed up three times with me..first on their site..second
by making note that my passcodes were the same...(and exactly how does MTP know how many people have my passcodes? They claim..in their
e-mails to me that they cannot do any tracking of users. So we really don't know how many people had access to my passcodes...and as for it being no big deal...we all know how reputations have been hurt in forums by users stealing other users accounts and posting malicious
comments.)The third transgression is unknown to most...I posted my grievance..in all four categories of the TMF forums...MTP removed them all...calling them "Spam"...that may very well be...but I have issues with moderators removing "spam" that is about them. My posts...if determined to be spam...should have been removed by a non biased party...that is...another moderator..not MTP themselves. I had
to keep posting under other names before MTP agreed to lift the block
on my account..and only after i agreed to post to just one forum. Once again...this should not be his descicion to make...but a third
party moderator.
reguards.

 

[Prime]

JPM we have heard your greivances. I can only speak for myself but i think you won't be happy until you piss everyone off. Be glad i'm not a forum moderator because i would had banned you into next century. Its one thing to post a grievance. Its another to harp on it. Might i suggest you install a firewall on your computer to protect your passwords in case the mishap came from your end. Might i also suggest that you periodically change your passwords and check your system for a trojan virus that may let others have access to your passwords. I personally think you gave the pass to a friend or traded it. Thats my opinion, but if i'm wrong try the stuff i suggested.

 

[polip090]

'Tis true I ceased to be a lurker.

'Tis true I ceased to be a lurker. Though I have been one here, and on Psycho's old site, for way too long. I break my silence for one simple reason - No one with the ability to see our passwords or other information should ever indicate to anyone else this information. You are trusted with this information. It is this trust that allows sites like this to exist and flourish. Frankly, it is this trust that is the very underpinning of our society, but I may be taking it a bit far.

The simple fact is Jeff didn't need to comment about the password being the same. It did nothing to bolster his defending his actions. I think his actions (up until that point) were right on target! If he wanted to send a personal note to JPM saying, "Look- your password is the same on the TF, and I'd suspect that it might be the same in other places, so you could have been hacked at any number of junctures. So be a nice responsible fellow and periodically change your passwords (as we all should do)." that would have been great!

Instead, he posted that note on the forum. The public forum. Do we all now know what JPM's password was/is? No. But at least one person does. And that is one person too many.

Prime- If you want to ban me, or feel this is a flame, then you are mistaking the passion that I feel for this matter (respect of privacy) for anger. I wasn't affected. It wasn't my account. But I am troubled by Jeff's actions, and more troubled that he, and apparently others, think the victim is to blame! For all I know JPM was password sharing, and that would be not only wrong, but a criminal action. But two wrongs do not make a right. No reference to another's password by a moderator/manager/owner of a website should ever ever occur.

Finally- I am pleased to see that Jeff (and presumably the other moderators of TF) are allowing this discussion to continue. They don't have to do that! They could remove any reference at any time, and probably ban me and JPM at the same time (please don't). But at least they are permitting the discussion. Not something many others would permit.🙂

 

[polip090]

After this I'll shut up.

I've looked over more of JPM's posts. He does have an axe to grind with Jeff, and that's clouding the potential legitimacy of his complaint. Jeff is extra-super kind by allowing the debate to continue, not only in this thread, but others. In some (many) ways, I don't really want to be associated with JPM, because I think he's wrong, and a little whiny for my taste. But the password reference, even in passing, is still wrong.

Ok, I'll go back to lurking now.

 

[jpm]

Prime...if you didn't respond..I would have nothing to say
in reply. I voiced my grievance...I'm merely responding to the retorts. Once you stop...I'll stop.

 

[jpm]

polip090...personally...Jeff's little password thing is the least
of the problem. I find his lazy additude towards website customers and his even greater dictatorial additude as a moderator to be far worse. Compounding that...is the large majority of the posters to this thread who keep referring to TMF as Jeff's house and how lucky we all are Jeff is "allowing" this post...and how quickly they
would kick me or others they didn't agree with...hmm..can anyone
remember the crumbling shambles that was IRC. Give me a break people..unless I'm posting url's to big titty sites and off topic
subjects..I should have as much right to place a negative post
as a posotive one. Just remember..if everyone wants to be a little tin god on their little slice of internet..then no one can say anything anywhere. This is has gone beyond the passcode thing..beyond the website thing..which MTP is not going to deal with. This revolves around moderators..and MTP in particular..thinking they should be able to censor a post that involves them and not attract the ire of TMF members. As for me not quitting...I'll stop posting when you people stop adding your two cents in. If your better than me..you'll shut up first. I promise..I won't have a thing to say.
reguards

 

[Prime]

As for me not quitting...I'll stop posting when you people stop adding your two cents in. If your better than me..you'll shut up first. I promise..I won't have a thing to say.
reguards

Well then Jpm i'm thinking you may want to put on a pot of coffee. Becuase you think you should have last say on things, many people will probably not agree. I totally expect you to post after this making me the better person in your own words, because i will not reply. In all this i have noticed a few things. You say Jeff has a lazy attitude. Thats kind of funny because i think that maybe you are the one thats being lazy. Have you checked with the billing company yet? Have you checked your own computer for security risks? What have you done my friend? Posting here is easy, really does'nt take much effort at all. You say you have a right to post a complaint here, maybe so (in the correct part of the forum would be nice though). What you forget is that the everyone has every right to respond to your post as much as you think you have the right to post it. So you may say to yourself, what does this have to do with you, why did you even have to respond in the first place. You may say this does'nt even pertain to you Prime, so you should have said nothing, maybe that i should just shut up. Well once agian you put it in a forum of people that will read it and made it folly for everyone. You brought it here..not me, not the next guy that responds...you did. Telling people they can't respond or they should be content to hear more whining is just a childish act. However it does serve a purpose. Everytime you whine and complain about the same old things and keep making remarks like the one i have quoted above of you saying, you toss your credibilty out the window. Then it won't matter what you post even if you had originally made a valid point, because it will be a joke to everyone then.

polip090 i never said i wanted to ban you. No password was ever revieled here. He just said that it was the same password and it might be a good idea to change it. Still i don't make light of your concern. I look at it this way though i have a hard time believing that jpm did'nt trade his pass or share it. The only other explaination would be if someone hacked the ccbill database, which is'nt likey because he would'nt have been the only one,passwords would be poping up everywhere, or his computer is lacking in security. If it is his computer he does'nt seem to be that concerned about it or at least he has'nt mentioned that here. So i have no pity for him. Either way polip, fear not i don't think they will be tossing your forum password around anytime soon.. 🙂

 

[jpm]

Prime..i didn't even make it down half your post...you have your opinion..I have mine. You think I'm wrong..fine...leave it at that.
Beyond that...you enter into mindless drivel..like your last post.

 

[Prime]

I'll make this short for you jpm. So you don't have to read thru the drivel as you call it. I think you made it thru both my posts and just did'nt like them becuase they hit to close to home.


So i was wrong about me not replying again. I guess you can be the better person today. 😀

 

[jpm]

how very freudian of you

 

[alpha1701e]

Stop Complaining

When you informed MTP of the problem, not only did they swiftly resolve your issue in the most logical manner possible (by identifying you as the rightful owner of the account), but also offered a free month in compensation for your troubles. On top of that, they went through the extra mile of publicly admitting their mistake and being completely honest about their situation, which was voluntary on their part. In my books, they were completely professional and conducted business with a great deal of honor. Face it, they could have easily dragged the issue out for a month until you wear down and give up, which by the way PayPal and Ebay have been known to do in the past when customers make claims.

Another hint for you JPM is to create stronger passwords. Never use words that are easily guessed or appear in the dictionary. Even a hacker in training can break that in seconds. Use numbers and strange characters. Make sure your passwords are at least six characters long.

-----------------
QUOTE FROM JPM:
"I'm arguing MTPs lazy
response to a problem and then compounding
that by stating in open forum that my passcode
to the TMF was the same as my passcode to
his site."
-----------------

My Response: First, if you suspected that your password has been compromised, you should have changed it immediately. By making the above complaint, you are implying that you have not changed your passwords at all. Your own lazyness JPM. Second, which account is more important to you, the Paysite or this message board?? If someone compromised your pay account, this message board is the least of your problems! Third, lazy response?? Didn't MTP say your account was reactivated within hours?

Although I do not claim to know what type of security MTP employs in keeping customer information safe, I can offer give you a general idea of how many systems work. When a password is stored in a modern system, it is usually stored in hashed form (a mathematical function that irreversibly and uniquely encrypts text for more information, see http://www.dictionary.com/search?q=hash coding ). When you enter your password to authenticate, the information you entered is then hashed and compared to the stored version of your original password. If the two hashes match, you're in. If MTP uses this method, the administrator would see that both of your accounts' passwords match, yet they cannot determine what the original password was. Again, I have no way of knowing if this is what really goes on with MTP's systems, since I don't work for them, but it's one of the most common ways to provide internet security.

I apologize to everyone for this long winded response. I frequent this site, but I rarely participate in these forums. However, I just couldn't tolerate the irrational behavior of some people. Personally JPM just sounds petty and ungrateful. Come on.. one free month without the run-around, what else do you want??

"No good deed goes unpunished..."

 

[amk714]

jpm, to borrow a quote from Martin Lawrence...

YOU SO CRAZY! 😛

 

[thequestion]

I really hate to make this my first post, however I have been visiting this forum since it first opened up...JPM you forced me out of hiding so to speak...QUIT YOUR BITCHING! Oh my God do you think you are pulling the issue a little to much?...Now I know why someone targeted you, if I was not so ethical I would flame your ass as well. Why the hell did you pick the videos section to put your complaint in? Just shutup....ok I understand you had some issues, but must you constantly continue to post your incessent messages that as it shows no one gives a flying fuck for anymore. I think what Jeff did was the right thing...you got a free month of service and what not...just give it up, let it go...