BetPhoenix and password security

michael777 · 02-10-10, 10:37 AM

been several posts about this around the forums for quite some time now and betphoenix has done nothing about it

Thremp · 02-10-10, 10:38 AM

TomCowley has mentioned this ad nauseum. Its ridiculous BP is managed/designed by such epic morons that somehow think this is a good idea.

smitch124 · 02-10-10, 10:42 AM

What if you instruct the site not to "remember" you?, does the password still exist in the URL history? I will try this myself, but was just wondering if anyone knows offhand.

skrtelfan · 02-10-10, 11:19 AM

I have the site not instructed to remember me and the password is still in my URL.

WileOut · 02-10-10, 11:31 AM

Simply go to tools and clear history every time you close Firefox. I did this anyway without even knowing about this little matter. Guys the same stuff is brought up about this book over and over. Its nit picking, if something arises out of it, it is solved that same day by BP's wonderful staff, and the book gives the best bonuses in the industry. Let it go. BetPhoenix is here to stay.

Thremp · 02-10-10, 11:48 AM

Originally posted by wileout

simply go to tools and clear history every time you close firefox. I did this anyway without even knowing about this little matter. Guys the same stuff is brought up about this book over and over. Its nit picking, if something arises out of it, it is solved that same day by bp's wonderful staff, and the book gives the best bonuses in the industry. Let it go. Betphoenix is here to stay.

mai roflcopter goes soi soi soi soisoisosisoisosiosisosisoisoisois

WileOut · 02-10-10, 01:27 PM

lol thremp I'm trying to boost moral here.

BigdaddyQH · 02-10-10, 01:34 PM

Problems like these are going to get worse, not better. Hackers are getting more and more sophisticated every day, and it is impossible for gaming sites to keep up. You will have to be very diligent.

Jaug · 02-10-10, 02:24 PM

My password is certainly not in the url.

smitch124 · 02-10-10, 02:31 PM

Originally posted by Jaug

My password is certainly not in the url.

Did you view the URL in your browser history?

BigDaddy · 02-10-10, 02:33 PM

yes it is and that is just another red flag about this book

WTF!

that is unreal i just noticed it and never noticed it before

thank you for this thread sktrelfan

bluefish · 02-10-10, 02:54 PM

not good

Dark Horse · 02-10-10, 03:00 PM

I don't see the password in my URL.

Thremp · 02-10-10, 03:08 PM

Originally posted by Jaug

My password is certainly not in the url.

Originally posted by Dark Horse

I don't see the password in my URL.

lol

skrtelfan · 02-10-10, 03:53 PM

Look carefully--log into your BetPhoenix account and watch the URL window. As you log in, your password will appear at the end of the URL, on the right hand side, then disappear. Depending on how fast your internet connection is, the password may only be on the screen for 1/4th of a second. But the password is still being transmitted via a URL, which is not very secure, and will also be saved in your browsing history.

jogumon · 02-10-10, 04:55 PM

It seems that if you log in to the old version, it does this. If you log in to the new site, it doesn't.

xxxvince · 02-10-10, 11:31 PM

so old version ppl can hack? wtf

Doug · 02-11-10, 12:15 AM

good to know

Dark Horse · 02-11-10, 03:24 AM

Originally posted by skrtelfan

Look carefully--log into your BetPhoenix account and watch the URL window. As you log in, your password will appear at the end of the URL, on the right hand side, then disappear. Depending on how fast your internet connection is, the password may only be on the screen for 1/4th of a second. But the password is still being transmitted via a URL, which is not very secure, and will also be saved in your browsing history.

No. Nothing at all.

Old version.

THEGREAT30 · 02-11-10, 03:30 AM

Originally posted by WileOut

Simply go to tools and clear history every time you close Firefox. I did this anyway without even knowing about this little matter. Guys the same stuff is brought up about this book over and over. Its nit picking, if something arises out of it, it is solved that same day by BP's wonderful staff, and the book gives the best bonuses in the industry. Let it go. BetPhoenix is here to stay.

Nit picking does not need to take place when there is something new everyday

skrtelfan · 02-11-10, 04:38 AM

Well, if you're using the old version and not seeing your password in the URL for a very brief period of time, either it's flashing by too fast for you to see it or they somehow have different accounts configured different ways. When I log in to the old version a URL of:

URL: http://bettor1.betphoenix.com/custom/LoginVerify.asp?method=loginPost&langCod e=en&customerID=XXXXX&password=XXXXXXXXX

flashes by, with my user ID and password in place of the Xs. Then very shortly after (probably 1/4th of a second at most, probably depends on the speed of your computer) the URL switches to:

http://bettor1.betphoenix.com/WagerMenu.asp

I suppose the easy solution is "switch to the new version" but I find the new version significantly more difficult to navigate, particularly when there are a lot of games on the screen.

Thremp · 02-11-10, 04:54 AM

Claiming you can't see it in this case is akin to just closing your eyes and saying, "I don't believe in ghosts" three times. A cursory amount of effort would yield boundless results.

20Four7 · 02-11-10, 05:34 AM

Originally posted by Dark Horse

I don't see the password in my URL.

Neither do I dark, but I did a log in and watched the URL I very briefly got a password= xxxxxxx n the URL but it didn't show in my history. I use chrome by the way.

Just did the old version and it clearly shows in the url for maybe 1/2 a second.

URL: bettor1.betphoenix.com/custom/LoginVerify.asp?method=loginPost&langCod e=en&customerID=Pxxxxxxx&password=xxxxxx xxxx

old version saved in my history.

Jaug · 02-11-10, 07:59 AM

Yes that is really sick. Why the hell would my password be in browser url?

Going to change password at phoenix, or better yet might just dump the site overall. They already took away reduced juice.

SpreadSniper · 02-11-10, 12:49 PM

the whole ****ing place seems like a joke.... slapped together by some Costa Rican with a commodore 64.... have you got one of their calls regarding their awsome "reload bonuses"?? Get the rep to explain the ENTIRE reload bonus process to you... If he/she can tell you the entire thing without messing up, or confusing themselves then they should be a politician.

Dark Horse · 02-11-10, 08:47 PM

Originally posted by Thremp

Claiming you can't see it in this case is akin to just closing your eyes and saying, "I don't believe in ghosts" three times. A cursory amount of effort would yield boundless results.

Why would you presume to know what I see? I told you I didn't see it and I didn't. The reason for that, after experimenting a little, is that I either log out or let the site log me out. On the old version. I never go back to the main menu, but log back in through the window where you log back in. The password never shows there. Guaranteed. That's also the window saved on my computer, so I never had the problem.

Apparently, the new version doesn't show the password either.

So the problem, while certainly undesirable, is very easily circumvented. But instead of focusing on the solution, the wave of newbie crybabies here is so stuck in their one-dimensional complaining that they fail to realize they're free to move on.

durito · 02-11-10, 09:29 PM

Dark Horse is correct.

If you log in here: http://bettor1.betphoenix.com/login.asp

It does not happen and takes you to the old site.

If you log in at betphoenix.com to the old site, it most certainly happens.

So the problem, while certainly undesirable, is very easily circumvented. But instead of focusing on the solution, the wave of newbie crybabies here is so stuck in their one-dimensional complaining that they fail to realize they're free to move on.

That's not really the point though. It is beyond horrid on their part and it was brought to their attention months ago. It never should have happened in the first place let alone not been fixed.

Boscoe · 02-11-10, 09:33 PM

it's amazing how poorly designed the websites for even the most reputable sportsbooks can be. it's as if they were done for some junior high computer class. password in the url? unreal.....

Dark Horse · 02-12-10, 02:43 AM

Originally posted by durito

It is beyond horrid on their part and it was brought to their attention months ago. It never should have happened in the first place let alone not been fixed.

Yes, they should solve this asap. In the meantime, I prefer not to squeal like some victim, when the solution is so easily available.

durito · 02-12-10, 11:21 AM

Originally posted by Dark Horse

Yes, they should solve this asap. In the meantime, I prefer not to squeal like some victim, when the solution is so easily available.

For those of us that are aware of the problem and understand it. What is it that, maybe 1% of their players.

How many more log in somewhere unsecured everyday with the possibility of having their account information stolen. And now all these reports of money disappearing from accounts.

They allegedly have lots of money, how about spending $12 an hour on someone competent.

Thremp · 02-12-10, 02:10 PM

SBR too busy hugging their nuts to curr.

Dark Horse · 02-12-10, 06:03 PM

Originally posted by durito

For those of us that are aware of the problem and understand it. What is it that, maybe 1% of their players.

How many more log in somewhere unsecured everyday with the possibility of having their account information stolen. And now all these reports of money disappearing from accounts.

They allegedly have lots of money, how about spending $12 an hour on someone competent.

Agreed. It's a pity that we don't have a better understanding of what is going on at BP at the management level. In the old days SBR would keep us more or less updated, but nowadays they say nothing, either because they don't know or don't care.

Meanwhile, without SBR directing traffic, but with a dramatic increase in, mostly uninformed, traffic, this forum has changed into its own variety of the sorcerer's apprentice. I used to come here for information on the industry. Now it's mostly nonsense by a bunch of sheep, bleating because the others are bleating.

What they don't seem to understand is that it becomes much more challenging to hold books accountable, through legitimate complaints here, when an avalanche of unfounded complaints, that are not recognized as such by the readers here, makes it all but pointless to reply and react to valid complaints.

skrtelfan · 02-12-10, 11:40 PM

Originally posted by Dark Horse

Why would you presume to know what I see? I told you I didn't see it and I didn't. The reason for that, after experimenting a little, is that I either log out or let the site log me out. On the old version. I never go back to the main menu, but log back in through the window where you log back in. The password never shows there. Guaranteed. That's also the window saved on my computer, so I never had the problem.

Apparently, the new version doesn't show the password either.

So the problem, while certainly undesirable, is very easily circumvented. But instead of focusing on the solution, the wave of newbie crybabies here is so stuck in their one-dimensional complaining that they fail to realize they're free to move on.

Wow, you're a real idiot. First of all, an act as simple as logging into a sportsbook shouldn't need to be "easily circumvented," and the fact that BP can't figure out how to keep the password out of a URL is a legitimate problem. The onus shouldn't be on me to have to figure out how to keep my password out of the URL without "a little experimenting," and how do you "log back in" without logging in initially and having it display your password in the URL? I see that Durito posted a link to a log-in screen where you can log in without having the password displayed--how was I supposed to know to log-in to that page directly? I think I used BP for a couple months before I even noticed my password was in the URL, since it flashes by so quickly.

I've been betting online since 1996 so it's foolishly presumptuous on your part to assume I'm a "crybaby newbie." Just today one moron on this board said it was inappropriate that I complained that BP call me as early as 715am, and now you're claiming the onus should be on me to figure out how to correct BP's account security. I guess you guys are right, I shouldn't mind getting woken up by them early in the morning and shouldn't be concerned about the security of my account.

soxwin1917 · 02-12-10, 11:42 PM

Originally posted by durito

For those of us that are aware of the problem and understand it. What is it that, maybe 1% of their players.

How many more log in somewhere unsecured everyday with the possibility of having their account information stolen. And now all these reports of money disappearing from accounts.

They allegedly have lots of money, how about spending $12 an hour on someone competent.

Well said.