JDownloader Community - Appwork GmbH
 

Notices

Reply
 
Thread Tools Display Modes
  #121  
Old 24.06.2015, 02:14
alfredp
Guest
 
Posts: n/a
Default

At first: Since days JD2 works very well.

I saw just a little thing. 'Traffic Limit' starts allways a countdown to 04:00 AM.
The 'reset time' should be for every user individually.
How you can see at the attachment, for my account would be 00:04 AM correct. May + some minutes to get sure.
Just to tell it, because thats not a big problem.
Attached Thumbnails
jd02.jpg  
Reply With Quote
  #122  
Old 24.06.2015, 04:13
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

expire time isn't related to traffic left/traffic limit. Its only a reference to how long your account is in premium mode for.

Thanks for feedback.
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #123  
Old 26.06.2015, 01:51
alfredp
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by raztoki View Post
expire time isn't related to traffic left/traffic limit. Its only a reference to how long your account is in premium mode for.
e.g. you buy an account for 24 hours:
Time ticks down from the first minute you bought it for the next 24 hours.

For longer contracts it works also.
The time where the account was bought or will expired is also every day the time where the daily traffic for this account gets the reset.
Reply With Quote
  #124  
Old 26.06.2015, 02:41
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

@alfredp
that would make sense. I made the time displayed representative of server time. A lot of websites do not offset this value back into user time, which then leads to accounts expiring too early when users are in a timezone forward of the site time.
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #125  
Old 02.08.2015, 03:50
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Hey guys for the last 24-48 hours JD2 has been advising that the PREMIUMAX plug-in is broken - please contact JD support.

I can't find any open tickets about this.

Anyone got an update on this?
Reply With Quote
  #126  
Old 02.08.2015, 04:12
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

@mattyd
not aware of any issue for couple months now

If you could provide debug logs it would be helpful

settings > advanced settings > log debug mode (enable)
reproduce issue
upload log
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #127  
Old 02.08.2015, 10:12
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

No problem - is there anything you can see in this log:

02.08.15 17.10.09to02.08.15 17.11.30 jdlog://5544562095341/
Reply With Quote
  #128  
Old 02.08.2015, 10:18
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Tried restarting PC and JD2, also removed the account and the error (attached) is what I get when trying to re-add PreMax account.

If I re-download JD2 can I save all my link history? Not sure if that's included when you 'backup all settings' from the file menu.
Attached Thumbnails
JD2 Error.JPG  
Reply With Quote
  #129  
Old 02.08.2015, 10:55
tony2long's Avatar
tony2long tony2long is offline
English Supporter
 
Join Date: Jun 2009
Posts: 6,507
Default

No need to re-install JD, this is the error message:
Access denied | **External links are only visible to Support Staff**www.premiumax.net used CloudFlare to restrict access
The owner of this website (**External links are only visible to Support Staff**www.premiumax.net) has banned your IP address
__________________
FAQ: How to upload a Log
Reply With Quote
  #130  
Old 02.08.2015, 18:44
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

@mattyd

fixed minor issue in my cloudflare support, it should now pick up the banned IP..

If its for all of your ISP IP addresses (try reconnecting modem if you have dynamic IP), I would ask why they banned your region/IP range. If you can't get resolution I would ask for money back.

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #131  
Old 02.08.2015, 18:54
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,289
Default

<p>The owner of this website (**External links are only visible to Support Staff**www.premiumax.net) has banned your IP address (58.x.x.x).</p>
__________________
JD-Dev & Server-Admin
Reply With Quote
  #132  
Old 03.08.2015, 06:30
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Well those cheeky buggers at PremiuMax hey? Just who the hell do they think they are banning here? I've been loyal to them for several 3 monthly subscriptions, and now they go and do this.....!!

I've reset the modem last night and forced an IP update. Initial testing proves that I can now access their website again

I will try to re-ad the JD account when I get home from work.

Nice work and thanks again for your help team - you guys are awesome
Reply With Quote
  #133  
Old 03.08.2015, 06:54
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

since its done at cloudflare level you don't know if its specially targeting you, or your ISP, or your country. Very hard to tell, with a generic message that cloudflare presents.

communication with them would could probably tell the story, though they might play dumb ;-p

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #134  
Old 03.08.2015, 06:58
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Interestingly, although I could get to the website at home since the IP change, I just did a test at work and tried logging into the PreMax website...guess what?

"You are blocked and cannot log in!"

I've contacted PreMax using their webform and demanded a 'please explain'!!

They would want to have a good reason, otherwise I can see complimentary free subscription in the works!

Thank Raz,

Matt
Reply With Quote
  #135  
Old 03.08.2015, 14:17
pspzockerscene's Avatar
pspzockerscene pspzockerscene is offline
Community Manager
 
Join Date: Mar 2009
Location: Deutschland
Posts: 70,922
Default

As said it is a shame that their support is so closed considering JDownloader support.

Without JD they would have a lot less customers I guess.

GreeZ psp
__________________
JD Supporter, Plugin Dev. & Community Manager

Erste Schritte & Tutorials || JDownloader 2 Setup Download
Spoiler:

A users' JD crashes and the first thing to ask is:
Quote:
Originally Posted by Jiaz View Post
Do you have Nero installed?
Reply With Quote
  #136  
Old 03.08.2015, 15:04
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Exclamation

Well I've now written two emails to their support team and will have to wait to see if these guys are worth their premium $$$.

Not happy as I've just signed up for another 3 months premium a few weeks back:mad:

All I can think of is that I had to reset my modem after a storm, and now they think I'm logging in from a different IP (albeit within the same dynamic DHCP range issued from my ISP).

I've threatened to contact the bank to get the funds reversed unless they re-instate the account ASAP.

For the moment, JD2 signs me into PreMax with a 'Free Account'.....not god for anything really.

I'm just glad I didn't give them a whole years worth in advance....potential customers be warned....
Reply With Quote
  #137  
Old 03.08.2015, 15:24
pspzockerscene's Avatar
pspzockerscene pspzockerscene is offline
Community Manager
 
Join Date: Mar 2009
Location: Deutschland
Posts: 70,922
Default

So you have a premium account but JD recognizes it as free?
Please PM me your logindata - this might be a plugin issue / issue caused by serverside premiumax changes (again and again...).

GreeZ psp
__________________
JD Supporter, Plugin Dev. & Community Manager

Erste Schritte & Tutorials || JDownloader 2 Setup Download
Spoiler:

A users' JD crashes and the first thing to ask is:
Quote:
Originally Posted by Jiaz View Post
Do you have Nero installed?
Reply With Quote
  #138  
Old 03.08.2015, 15:39
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Nah thanks anyway GreeZ. Their tech support have just now emailed me and they say my account has been accessed in Nederlands and India - I live in Australia!

I never share my account with anyone. I'm really not sure how this has happened.

I did give my details on one occasion to Raz, but that was to get a support issue with the plugin resolved (which he kindly resolved for us all).

I'm now pleading my innocence with tech support in the hope that I haven't lost my money..... My password was 6 char, non-complex, so it was a bit stupid of me to not make a more complex password.

I really hope they can see that I'm not sharing my account with anyone.

Fingers crossed.
Reply With Quote
  #139  
Old 03.08.2015, 15:45
pspzockerscene's Avatar
pspzockerscene pspzockerscene is offline
Community Manager
 
Join Date: Mar 2009
Location: Deutschland
Posts: 70,922
Default

Check your computer for Trojans/Virusses.
__________________
JD Supporter, Plugin Dev. & Community Manager

Erste Schritte & Tutorials || JDownloader 2 Setup Download
Spoiler:

A users' JD crashes and the first thing to ask is:
Quote:
Originally Posted by Jiaz View Post
Do you have Nero installed?
Reply With Quote
  #140  
Old 03.08.2015, 16:17
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

Lets hope common sense prevails.

Just for your information, I wouldn't have connected since I fixed it last. But I would have either come from Australian subnets, probably 203.* or from socks5 connection that would been on 78.46.64.0 - 78.46.95.255 subnet which belongs to hetzner.

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #141  
Old 03.08.2015, 16:28
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Thanks Raz, it looks like I have been given a final reprieve

Tech support say they will give me one last chance, and if it happens again there's no coming back.

I have now made a complex password and have assured them I have never given my credentials to anyone.

Their Tech guys did get me out of a pickle in this instance, so I'm not going to flame them in a public forum, but in saying that he did not have nice words to say about JD2 and it's security for premium accounts.

I'll PM you if you like.

But watch out if you're using VPN's or if a support person lives in another country, the PreMax guys are watching very closely! They've promised they will monitor my every move (and download link!) for the next 7 days to make sure I'm telling the truth.

Cheers guys, good result in the end (very relieved I don't have to hunt for another multihoster that's as premium as these guys).

Matt
Reply With Quote
  #142  
Old 03.08.2015, 16:39
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

Once again I've called out PremiumMax on there so call claims, yet to provide any proof.

There is nothing wrong with JDownloader or our security, what happens is there is virus/worms/malware (whatever you want to call it) that installs/runs on peoples computers they send account databases. This is the same for say for your windows passwords, ftp programs, download programs, even gaming platforms like steam, its can also be done listening to socket connections (intercepting). But the biggest and easiest and most abused way to loose access to your account is actually via COOKIES!, this is the most common form of attack!, since they are stored and mined easily, typically they are not even crypted! In fact we refuse to support cookies as a method to add accounts, as we feel that this is the most common way people share/sell access to stolen accounts.

It's next to impossible to stop this happening, it will happen just the same for IDM, FDM, Pyload as for JDownloader. This is nothing new, it's even been found and source code published that those nasty programs do this.

for instance (quick google result)

_**External links are only visible to Support Staff** _**External links are only visible to Support Staff**
Your weakest link isn't our program its the userbase and what they do on there system (lapse security/what they download/install could be suspect).

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]

Last edited by raztoki; 03.08.2015 at 16:43.
Reply With Quote
  #143  
Old 04.08.2015, 05:18
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

That's a good explanation thanks Raz.

Yes I did try to negotiate a support deal with PreMax and advise the tech that they should dedicate more time and resources to develop an API for use with JD2.

I told them a lot of their customers use JD2 and would be better off with more support from Premax instead of writing it off a security risk.

You're capture work around is doing just fine for the time being. Such an improvement on the old complex capture method.

Matt
Reply With Quote
  #144  
Old 04.08.2015, 10:19
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Can you believe this crap....my PreMax account has been banned for the second time in a row as it is being accessed from several IP addresses in bloody Italy...?!?! That was after resetting the password to a complex password.

I'm both pissed off that some prick is stealing my login details and getting me banned, as well as worried that malware or worse has infected my home pc. Time do perform a thorough scan in case they are getting it from my pc.

It's either that or they have my username now and they are using a brute force attack to get the premium account password details.

I am now working closely with the PreMax techs to find out the source of the leak. I get the feeling that least they believe me now that I am NOT sharing my PreMax details with anyone else.

Something more sinister is at play I feel.....they've chosen the wrong person to mess with!

Any other JD2 users suffering the same treatment?

Matt
Reply With Quote
  #145  
Old 04.08.2015, 10:59
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

not that I'm aware of.

either you have something nasty installed like I mentioned above, or do you use general password manager? maybe its sending your passwords home ?

either that or premiumax has been hacked itself.

would be nice to see SSL(https) on there website, its sending in RAW which means any socket sniffing can pick up your password.

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]

Last edited by raztoki; 04.08.2015 at 11:02.
Reply With Quote
  #146  
Old 04.08.2015, 11:10
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

Good call, thanks Raz.

I'm now at home running a full scan (Antimalware), ....just finished scan and nothing found

Also checked system logs, nothing out of the usual there.

Thankfully the PreMax team have issued me a whole new account (different username / password). Once the scan is complete I'll try re-adding the preMax account into JD2 and see what happens with a few links.

It's absurd that someone accessed my PreMax within hours of resetting the password.

Maybe your theory about PreMax themselves getting hacked might carry some weight...?

Let's see how my new account goes.

Cheers,

Matt
Reply With Quote
  #147  
Old 04.08.2015, 11:46
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

I doubt that them been hacked would result in your account been shared. I would have thought it be easier for said hacker to just add there own accounts and blend into the background vs using your account.

Most hosters have the wrong approach when it comes to security and locking down accounts. The best thing todo in my opinion, is keep track of users normal login subnets (which they seem todo), but you don't ban account or ISP subnet when user logs in from usual subnet without confirmation, you do 2factor auth (email + confirmation code) prior to letting the new subnet connecting. If they don't answer the 2factor you don't let them login. Banning IP subnets without notification to account owner (via email) is really poor way of managing shared accounts/stolen accounts/hacked accounts. They should at least be notified at the time that this has been identified.

My recommendations to premiumax would be to:
- Prevent brute force logins attempts (General issue, login usually will drive up CPU cycles do to salt/hash/sql lookups to confirm login.) They might already do this, as they already have captcha on login.
- implement proper 2factor auth, on successful login from unexpected subnets/regions.
- Track IP of logins when 2factor auth trigged, but never confirmed via email + code confirmation. IF they login again with other account clearly they are accessing stolen/shared/hacked account details. Ban these subnets permanently.
- logging in from multiple IP address at teh same time isn't nesscarily indication of account sharing. I personally have access to multiple WAN either via fixed line or wireless. I can also access via VPN or proxies which would allow for multiple connections from multiple IPs all at the same time. You should allow/permit/trust these once 2factor confirmation has been completed. As long as the account isn't been abused (tos = terms of service, aup = acceptable user policy) their shouldn't be a problem!
- Never let the email account be changed in account profile either, without confirmation via old email account. This prevents someone getting the user:password (via what ever means) and then locking the real owner out by changing the password and email account (so that they can not do password recovery).

my 2 cents.
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #148  
Old 04.08.2015, 12:18
mattyd mattyd is offline
Wind Gust
 
Join Date: Nov 2010
Location: Australia
Posts: 44
Default

That is a great insight into website security thanks Raz. Your valid input writing this detailed response highlights a passion and a demonstrated understanding for finding a balance between security and customer care that I only wish carried over to other online merchants!

I completely agree with each and every suggestion you have for PreMax. These measures are by no means OTT and would make the customer experience so much more consistent, rather than simply blacklisting accounts and IP's.

We use multi-factor authentication at work for remote access and management purposes and some of these ideas could easily flow over into online service providers.

Thanks again for your valuable input.

Matt

(ps no I don't use a password manager, nor do I even note anywhere what the password is that I've changed it to. After all it's pretty much set & forget in JD2 unless you have to login to PreMax site itself.)

Last edited by mattyd; 04.08.2015 at 12:24.
Reply With Quote
  #149  
Old 04.08.2015, 12:25
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

2factor works well assuming linked email account hasn't also been compromised!.

Some hosters already use 2Factor (One of the main ones is RealDebrid.) this, but very few do and then wonder why they have so many 'issues'. As explained most security issues are of there users/customers own creation (downloading/installing suss software), or from lapse computer security.

If they would like to talk to me they can. I would like Premiumax work with us vs throwing wild accusations which they seem to still do (without proof).

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #150  
Old 01.03.2016, 08:18
Premiumax
Guest
 
Posts: n/a
Default

pspzockerscene, please add on JD2 premiumax plugin association with File.al host.
We help download files via File.al links.
But JD2 don't understand when link File.al is added.

And Add Bigfile.to links too.
Reply With Quote
  #151  
Old 01.03.2016, 09:00
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,289
Default

file.al will be listed with next update. bigfile already should be supported
__________________
JD-Dev & Server-Admin
Reply With Quote
  #152  
Old 02.03.2016, 17:04
Premiumax
Guest
 
Posts: n/a
Default

So, we support many another hosts, please add on association too.
faststore.org
fayloobmennik.net
filespace.com
littlebyte.net
**External links are only visible to Support Staff****External links are only visible to Support Staff**
vimeo.com
Reply With Quote
  #153  
Old 02.03.2016, 19:12
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,289
Default

JDownloader does not yet support
fayloobmennik.net, filespace.com, littlebyte.net
vimeo.com will not use other plugins because they do not support special resolution handling
added .org support
__________________
JD-Dev & Server-Admin
Reply With Quote
  #154  
Old 03.03.2016, 01:18
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

@Premiumax
currently we have to reconstruct a list,
Code:
        getPage("/hosts.html");
        final String[] possible_domains = { "al", "to", "de", "com", "net", "co.nz", "in", "co", "me", "biz", "ch", "pl", "us", "cc" };
and its not very friendly and could lead to false positives.

create a proper list/array of supported domains on your website (in text), delimited by non domain character (eg. new line or ; or ,) we will then do a get request and use that list. When you support a new domain, just edit that script. All account users will update every 30mins and refresh that list.





raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #155  
Old 31.03.2016, 17:30
rayhansen
Guest
 
Posts: n/a
Default depfile not working properly

Hello,

Every time i try downloading from depfile using the premiumax plugin it ask me for a recaptcha for ever. It just keep asking me for recaptchas, even if i solved them and then i can not download anything. But if i disable premiumax plugin i can download files from depfile with a free account and everything works fine.
It seems there is a problem with the plugin, i hope you can fix it in the next update, thank you very much!
Reply With Quote
  #156  
Old 31.03.2016, 17:46
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,289
Default

Please provide logfiles!
https://support.jdownloader.org/Know...d-session-logs
and post logID
__________________
JD-Dev & Server-Admin
Reply With Quote
  #157  
Old 31.03.2016, 17:56
rayhansen
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by Jiaz View Post
Please provide logfiles!
**External links are only visible to Support Staff**...
and post logID
there you go, i hope i did it well

31.03.16 09.56.37 <--> 31.03.16 09.56.34 jdlog://5610942995541/
Reply With Quote
  #158  
Old 31.03.2016, 18:10
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,289
Default

Log is full of network issues, Offline?! DNS do not resolve!
Also lot of premiumax server issues, 500 Internal Server Error
__________________
JD-Dev & Server-Admin
Reply With Quote
  #159  
Old 31.03.2016, 19:09
rayhansen
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by Jiaz View Post
Log is full of network issues, Offline?! DNS do not resolve!
Also lot of premiumax server issues, 500 Internal Server Error
I see, well my internet crashes sometime while at heavy traffic, but i think the problem is due to that "500 Internal Server Error" message. In premiumax they told me everything is working fine so it must be something wrong with the jdownloader plugin, is that the case?
Reply With Quote
  #160  
Old 31.03.2016, 20:13
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,289
Default

Nope, that is not the case. We use their service, their server respond with 500 internal Server Error, so there is something not okay with their service
__________________
JD-Dev & Server-Admin
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT +2. The time now is 21:55.
Provided By AppWork GmbH | Privacy | Imprint
Parts of the Design are used from Kirsch designed by Andrew & Austin
Powered by vBulletin® Version 3.8.10 Beta 1
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.