Members Area Security Software...?
 

What software do you guys use for members area security?

As in protection against password trading and brute force attacks.

I'm looking for something that will do that but that can also manage multiple members sections and for instance open up 5 members areas to a user when he logs in to one so he doesn't need to enter his user / pass each time when bouncing in between them.

Any recommendations would be appreciated.

most sites use either Strongbox or ProxyPass. there's also Password Sentry, Pennywize and probably others.

pennywize is useless, strongbox or proxypass is the best

I know about ProxyPass but it's merely a security software it doesn't offer functions for members management.

I'll be checking out the others thanks.

Basicly what I need is, if someone logs in to site one ... site two, three and four needs to be opened up also so that when I send him from one site to another he won't have to enter his user / pass again.

If someone can custom code this feel free to drop me an email with some info and a quote natkejs [at] hotmail.com

strongbox

I use strongbox and love it. I catch 2-3 password traders per day. The offender's password is changed, then the member is sent an email regarding the password change. If it happens again, then I cancel the account. :thumbsup

StrongBox seems to do what I want ... "Secure Cross-Site Links" ... good shit thanks guys!

I like the sound of that!

ProxyPass is also a great software, very robust but it lacks a lot of functionality that Strongbox seems to be offering.

strongbox .. easily..

We call that Strongbox feature "handoff" because the user can be handed off from
one sitwe to another without having to log in again. You can even hand off to a site
on a different server that may not even have a password list of it's own.

Strongbox treated us well for our first 2 years.

And Ray's second-to-none in customer service, in my humble opinion.... always there, personally, when we needed him.

ProxyPass is what we use. Gets them every time. :thumbsup

Massive :thumbsup to Ray. Great product, great service and extremely user friendly script (which is essential for my simple mind :) ).

proxypass

great support great program

whatever you do DONT go with pennyshit

Thanks for your support Fris, vvq, ER!C L!VE, rewn, D and sexus.

We're working on some new technology right now to help you guys out some more.
Now that Ali is rockin on the installs and some of the support I have more time for
development. Today I just talked to someone how did log in security for the FBI because
it seems they already worked with the exact same biometrics that we're using in the new
version of Strongbox to identify a _person_ instead of a computer. I was excited to
hear that the direction we were taking after our initial testing is exactly the direction
the FBI security people found was best after years of research.

We're also launching new tools to make Strongbox easier to use, especially the more
advanced "side features". The new online wiki owner's manual is continuously updated
and expanded and the new web forum let's Strongbox users not only see how we're
helping other webmasters do some cool stuff, but also to discuss things with other
Strongbox users.

Soon to come is the affiliate program and the intelligent bandwidth limiter.
I was planning
to launch the intelligent bandwidth limiter perhaps Monday, but I just realized that along
with the advanced "intelligent" features some webmasters may prefer simple old fashioned
rules like "no more than X GB per day", so we're re-doing the complicated math to also
allow for simpler rules to be applied at the same time. Time to head back down to
the math department at Texas A&M tommorrow for more calculus help ... :)
Strongbox 4.0 shouldn't be too far behind once we get your comments on the
bandwidth limiter and get it tuned for your needs. Along with the biometrics in SB4 we'll be
applying the lessons learned from the intelligent bandwidth limiter to put the same
kind of complex mathematics to work keeping the password traders and crackers
away.

Keep letting me know what you guys need and want in these areas and I'll find the
experts and design the systems to take care of you.

Give the folks at ProxyPass a call. You will be pleasantly surprised. They have software to meet your requirements.

proxypass and password sentry

I've used Password Sentry and it's always been good to me :)

I have been using Strong Box for a long time, never a problem.

strongbox here, love it and will never leave it

just intalled and trying out sparta .. we'll see

are you serious? jesus christ man

when will all this be done? and will the upgrade cost much?

The intelligent bandwidth limiter should be out in a month or so, with a preview or test
version in about two weeks. That actually depends largely on how long it takes
to make the admin area pretty. I'm not too good at doing "pretty", but webmasters
want pretty software and sometimes buy neater looking systems over more
effective systems that don't look as nice, so from now on we'll try to put a pretty
interface on top of the intelligence. It's funny , the technicl part has gone through
several iterations of "good" systems, each getting better, over the last few years,
but we still can't come up with a decent name. I hope after years of R&D off and
on released isn't delayed just because we don't have a better name than "intelligent
bandwidth limiter". :)

A technology test version of Strongbox is available now that previews the biometric system.
The biometric information is logged and shown in the reports for the webmaster to see,
but not actually used by Strongbox to decide whether or not to allow access.
Running on some very large sites, this version is providing the data for us to run the
statistical analysis on so we can see how to score the biometrics. It's amazing
when you graph different parameters how clear the "knee" in the graph sometimes
is and it shows exactly what certain settings should be, often very different from
what your intuition tells you. For example that's why the default settings like max ISPs
are higher than you might expect in Strongbox - the graphs show that with many different
parameters being considered setting each one a little higher than you'd expect reduces
false positives to almost zero while the combination of parameters catches most of the
traders. Anyway that's the current state of SB4 - we're adding more and more of the new
ideas to live sets running the test version so that we can analyze real data from real sites.
The official launch is probably still a few months away, depending on how much tuning
is needed on the bandwith limiter once it's out in the real world.

Although it hasn't been decided for sure, the upgrade cost will probably just be the
difference between what you paid for your Strongbox 2.x system and the price of
the new SB4. SB4 will go for somewhere between $150-$250, probably closer to
$150, including 30 days free email and telephone support. An optional support
contract will run between $39 and $59 per year for those who don't want to rely on
the forum and online self-support tools like the troubleshooter wizard we're building
into the wiki.

Webmasters have been telling me for years that the price of Strongbox is too low,
and it is, for most webmasters. I want to keep it affordable for newbies too though,
and give all webmasters a great value, so pricing is always troublesome for me.
I always love to hear what you guys think about these things. Right now I'm thinking
that good resources on the site like a good owner's manual and the forum will allow
webmasters with lower budgets to afford good protection while an optional support
contract will bring in some funds so we can keep working on new ways to help the
webmasters who might save a hundred dollars a day in bandwidth.

works with nats?

Yes, in either of two different modes. If your currently using mod_auth with NATS,
where you have a password file along with NATS, Strongbox can just read that
password file. Alternatively, Strongbox can use the NATS database directory, as you
may be doing if you're using mod_auth_mysql with NATS currently.
In fact the Strongbox defaults for the MySQL settings are the same as those used by NATS,
which makes it easy.

Strongbox for life!!!!!!!!!!




















Hey Ray can I have a discount now on my next install? :winkwink: