password troubles

"kimmy" <no_kikiol.RemoveThis@gsmbox.it> wrote in message
news:bo812l$rl6$1@newsread.albacom.net...
 > Hi everybody!
 > I need a piece of advice.
 > I would like to edit an on line magazine on my website. I asked many
people
 > and many would be very interested in such a magazine! This magazine will
not
 > be released on paper.
 > I would like people to pay for a 48 issues/year subscription (maybe also a
6
 > months subscription -24 issues-), but I would give also the chance to pay
 > just a very small sum to read only this week issue, if they prefer.
 > I will ask each reader to fill a form with password and userid, but what
if
 > they share their password?
 > Does anyone know what else can I do?
 >
 > Kimmy

You can install iProtect
<a style='text-decoration: underline;' href="http://www.digital-concepts.net/cgi-iprotect.html" target="_blank">http://www.digital-concepts.net/cgi-iprotect.html</a>
There is also PennyWise and several others. When it see the same username be
accessed by too many different ips with in a certain amount of time, it will
disable that username.

Ice Demon
<a style='text-decoration: underline;' href="http://adult-xxx-newsgroups.com" target="_blank">http://adult-xxx-newsgroups.com</a>
<a style='text-decoration: underline;' href="http://adult-cybergames.com" target="_blank">http://adult-cybergames.com</a>
<a style='text-decoration: underline;' href="http://gracegrimes.com" target="_blank">http://gracegrimes.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"oeb -=- Musa sapientum fixa est in aure" <oeb.RemoveThis@cotse.com> ha scritto nel
messaggio news:bo824k$hs7$1@kermit.esat.net...

  > > Some suggestions,
 > Log the IP of each user, if you see alot of different subnets popping up
for
 > one account you can look into it.

and what if they access from different IP?

 > You will also notice multiple logins to read the same issue over and over.
 > If it is only a small fee, why not just live with it?

And then?After noticing the same issued read over and over?

My problem is not to discover if, how, when or where my users share their
passwords (because it's taken for granted they'll do it), the problem is:
HOW CAN I PREVENT THEM TO DO IT???

Any more suggestions?
Kimmy<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

kimmy wrote:
 > ...
 > My problem is not to discover if, how, when or where my users share
 > their passwords (because it's taken for granted they'll do it), the
 > problem is: HOW CAN I PREVENT THEM TO DO IT???
 >
fingerprint scanning
retina scanning
dna sampling
stand over them with a large hammer

if the above fails, try a little social engineering: Collect as much
back-ground data as feasable about your subscribers and place a link (in a
prominent position) to a restatement of those details on all password
protected pages.

--
William Tasso - <a style='text-decoration: underline;' href="http://WilliamTasso.com" target="_blank">http://WilliamTasso.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"kimmy" <no_kikiol DeleteThis @gsmbox.it> wrote in message
news:bo8347$sij$1@newsread.albacom.net...
 >
 > My problem is not to discover if, how, when or where my users share their
 > passwords (because it's taken for granted they'll do it), the problem is:
 > HOW CAN I PREVENT THEM TO DO IT???

Show their (partial) credit card details on their logged in page

--
Mike Redrobe<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"Mike Redrobe" wrote:
 > Show their (partial) credit card details on their logged in page
 >

and

"William Tasso" wrote:
 > fingerprint scanning
 > retina scanning
 > dna sampling
 > stand over them with a large hammer
 >
 > if the above fails, try a little social engineering: Collect as much
 > back-ground data as feasable about your subscribers and place a link (in a
 > prominent position) to a restatement of those details on all password
 > protected pages.
 >

BUT, if I knew that you're going to show partial details of my credit card
and you're going to set dogs on the track of all my secrets, I'll set myself
on fire, rather than subscribe your magazine!!!
I don't need Asimov's authentication (retina scanning, and so on...)!
But some days ago, I don't remember where, someone told me something about
using a cellphone to enter a website!
Am I collecting two different memories?
Or do you hear something like that too?
If such a service existed, where would I be able to find something about it
?
Kimmy<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"kimmy" <no_kikiol DeleteThis @gsmbox.it> wrote in message
news:bo8921$2mi$1@newsread.albacom.net...
 > BUT, if I knew that you're going to show partial details of my credit card
 > and you're going to set dogs on the track of all my secrets, I'll set
myself
 > on fire, rather than subscribe your magazine!!!

You could also make passwords expire, and let people reset them via
their registered email address.

If you want security, you have to accept some inconvenience.
--
Mike Redrobe<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"Mike Redrobe" wrote:
 >
 > You could also make passwords expire, and let people reset them via
 > their registered email address.

And I should let their password expire everytime they exit my website and
ask them a new one next time they enter?
And if, every time it takes them half an hour to choose a userid and a
password, how can I expect them not to be upset? Besides, I'm not taking
them to the moon, we're talking about an on line magazine!

 >
 > If you want security, you have to accept some inconvenience.

if we're talking about inconvenience for me, no problem! But enter and exit
my website should not become a nightmare for my users!

Kimmy<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"Ice Demon" wrote:
 > You can install iProtect
<font color=purple> > <a style='text-decoration: underline;' href="http://www.digital-concepts.net/cgi-iprotect.html</font" target="_blank">http://www.digital-concepts.net/cgi-iprotect.html</font</a>>
 > There is also PennyWise and several others. When it see the same username
be
 > accessed by too many different ips with in a certain amount of time, it
will
 > disable that username.

And what if my clients works for big organizations which have only one
external IP address?

kimmy<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"kimmy" <no_kikiol.RemoveThis@gsmbox.it> wrote in message
news:bo8ivo$7j3$1@newsread.albacom.net...
 >
 > "Ice Demon" wrote:
  > > You can install iProtect
<font color=green>  > > <a style='text-decoration: underline;' href="http://www.digital-concepts.net/cgi-iprotect.html</font" target="_blank">http://www.digital-concepts.net/cgi-iprotect.html</font</a>>
  > > There is also PennyWise and several others. When it see the same
username
 > be
  > > accessed by too many different ips with in a certain amount of time, it
 > will
  > > disable that username.
 >
 > And what if my clients works for big organizations which have only one
 > external IP address?
 >
 > kimmy

That same company can also just let the people view the content from his/her
computer. Are you going to try and solve that to. There is still not a 100%
fool proof thing to stop shop lifters in stores. There isn't something 100%
fool proof for what you want either.

I don't think your going to find a "solve all solution". If you can't find
what you need out there, your going to have to make something yourself to
solve the problem. I don't know of anyway that you can stop people using the
same ip and same username from coming in unless you do what Mike suggested.
Try doing what both of said.

Ice Demon
<a style='text-decoration: underline;' href="http://adult-xxx-newsgroups.com" target="_blank">http://adult-xxx-newsgroups.com</a>
<a style='text-decoration: underline;' href="http://adult-cybergames.com" target="_blank">http://adult-cybergames.com</a>
<a style='text-decoration: underline;' href="http://gracegrimes.com" target="_blank">http://gracegrimes.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

 > "Ice Demon" wrote:
  > > You can install iProtect
<font color=green>  > > <a style='text-decoration: underline;' href="http://www.digital-concepts.net/cgi-iprotect.html</font" target="_blank">http://www.digital-concepts.net/cgi-iprotect.html</font</a>>
  > > There is also PennyWise and several others. When it see the same
username
 > be
  > > accessed by too many different ips with in a certain amount of time, it
 > will
  > > disable that username.
 >
 > And what if my clients works for big organizations which have only one
 > external IP address?

You can try also SAINTlogin <a style='text-decoration: underline;' href="http://www.saintlogin.com" target="_blank">www.saintlogin.com</a>
it's new and it based on the use of the cellphone as a password, and most
important, it's free..and it solves the problem of the IP!

daz<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"daz" <no_spam.fuffy RemoveThis @hotmail.com> ha scritto nel messaggio
news:boakcg$b4a$1@newsread.albacom.net...
  > > "Ice Demon" wrote:
   > > > You can install iProtect
<font color=brown>   > > > <a style='text-decoration: underline;' href="http://www.digital-concepts.net/cgi-iprotect.html</font" target="_blank">http://www.digital-concepts.net/cgi-iprotect.html</font</a>>
   > > > There is also PennyWise and several others. When it see the same
 > username
  > > be
   > > > accessed by too many different ips with in a certain amount of time,
it
  > > will
   > > > disable that username.
  > >
  > > And what if my clients works for big organizations which have only one
  > > external IP address?
 >
<font color=purple> > You can try also SAINTlogin <a style='text-decoration: underline;' href="http://www.saintlogin.com</font" target="_blank">www.saintlogin.com</font</a>>
 > it's new and it based on the use of the cellphone as a password, and most
 > important, it's free..and it solves the problem of the IP!
 >
 > daz

Thank you Daz, I'm going to take a look!But have already you tried it?

kimmy<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

"kimmy" <no_kikiol.RemoveThis@gsmbox.it> wrote in message
news:bo812l$rl6$1@newsread.albacom.net...
 > Hi everybody!
 > I need a piece of advice.
 > I would like to edit an on line magazine on my website. I asked many
people
 > and many would be very interested in such a magazine! This magazine will
not
 > be released on paper.
 > I would like people to pay for a 48 issues/year subscription (maybe also a
6
 > months subscription -24 issues-), but I would give also the chance to pay
 > just a very small sum to read only this week issue, if they prefer.
 > I will ask each reader to fill a form with password and userid, but what
if
 > they share their password?
 > Does anyone know what else can I do?
 >
Place a limit on the number of times / duration a password can access each
issue.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles 

 >Place a limit on the number of times / duration a password can access each
 >issue.

This is a better solution than relying on IP addresses, because your
subscribers will presumably want to read your pages from wherever. It could
also be a problem for users whose ISPs give them dynamic IPs.

You could look out for simulataneous attempts to access using one login, as
well as counting the number of pagereads per user. If you sell it as "up to 200
pageviews per month" (I wouldn't make it too restrictive), then users will be
less inclined to share.

--
Alice Woolley
<a style='text-decoration: underline;' href="http://www.insidethebubble.co.uk/" target="_blank">http://www.insidethebubble.co.uk/</a>
Inside the Bubble - autism information<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: password troubles