Epoch Question

Mutt · 11-14-2002

Does Epoch allow paysites to gather the credit card number on the server of the company operating the paysite or does that have to happen only on Paycom's server?

Dianna Vesta · 11-14-2002

Quote:

Originally posted by Mutt@Nov 14 2002, 02:35 PM
Does Epoch allow paysites to gather the credit card number on the server of the company operating the paysite or does that have to happen only on Paycom's server?

I don't think anyone allows you to collect that info and store it but if you have SSL you can probably host the join pages.

11-14-2002

They used to allow this, they didn't even require SSL on the source page. I can say this with confidence because we did it at one of the old companies I worked with. Some bigger boys still do use custom signup pages, but Epoch/Paycom changed their policies over a year and a half ago, we had to switch our join pages at the time.

C.

Epoch · 11-14-2002

Epoch does not allow companies to gather credit card data on their servers and then POST this info to our systems,
we do allow a 2 part join process, the first of which can reside on the companies server but the card
data collection page is always on an epoch server.

Clay
EPOCH

Mutt · 11-14-2002

hmmmmmmm................. well Python seems to be getting extra special treatment.

i'm really getting tired of the Python spam. Some interesting things with their spam. Does anybody know anything about the domain WEBFINITY.COM?

Seems like this domain was involved in other major spamming scams and i don't remember them working with Python.

When you get Python spam there's always a directory called /bnr/ in the URL, is this a standard Python link or a special URL for spam traffic?

the initials are familiar.

i'd show you the URL of Python collecting the credit card on their own unsecure server but they don't allow direct access to that URL.

Mutt · 11-14-2002

really Clay.

i'll screencap it for you then, i can't give out the URL it won't work that way.

hmmmm...........maybe they framed it.............i didn't think to check that out.

11-14-2002

Mutt if you want to do research into the spamming history of that domain let me know, I can provide the tools.

C.

Epoch · 11-14-2002

No one gets special treatment when it comes to posting, we do not allow this.
If you do a traceroute to the URL of the data collection page you will see that
it resolves to an epoch server.

It may look like they are collecting data but they are not.

do a traceroute to trans2.pythonvideo.com

and then to wnu.com

both resolve to same IP

Clay

Mutt · 11-14-2002

well that explains that then.

i don't get it, if it resolves to wnu.com what's the point of having that domain.

11-14-2002

It's all in the appearance my friend! That's why I love managing my own nameservers, I can point my domains wherever I want. If paycom allows that, it's a nice feature. I'm sure many people would rather point secure.theirdomain.com to ibill so their customers felt better signing up.

C.

Epoch · 11-14-2002

Exactly Cal.

Plus during the two part join process it prevents the popup window on certain browsers

Clay

Mutt · 11-14-2002

really? as a customer i'd feel more secure seeing Paycom in the location bar. Most surfers know IBILL, CCBILL, Paycom, JETTIS etc

Nickatilynx · 11-14-2002

Frankly we found it easier to leave it all to Epoch.

We tried doing interesting stuff.Was easier to let them do what they do.

RawAlex · 11-14-2002

Mutt, you can drop me mail if you want and I can tell you stories about WEBFINITY that would make your toes curl. Makes Nick and Anthony look like amateurs... (for once, no offence meant Nick).

askme at monolithnet dot com

Alex

Nickatilynx · 11-14-2002

None taken

11-14-2002	#14
RawAlex Members $100 for every ImLive sign-up Join Date: Oct 2002 Posts: 4,036	Mutt, you can drop me mail if you want and I can tell you stories about WEBFINITY that would make your toes curl. Makes Nick and Anthony look like amateurs... (for once, no offence meant Nick). askme at monolithnet dot com Alex __________________ Let's go to the edge of disaster Push the pedal and go a little faster Let's slam into a wall at ramming speed Let's go to the edge of a mountain Jump off and lets start countin' Hit the ground and tell me if it bleeds

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

11-14-2002	#1
Mutt Members Join Date: Oct 2002 Posts: 1,087	Does Epoch allow paysites to gather the credit card number on the server of the company operating the paysite or does that have to happen only on Paycom's server?

11-14-2002	#3
Cal Guest Posts: n/a	They used to allow this, they didn't even require SSL on the source page. I can say this with confidence because we did it at one of the old companies I worked with. Some bigger boys still do use custom signup pages, but Epoch/Paycom changed their policies over a year and a half ago, we had to switch our join pages at the time. C.

11-14-2002	#4
Epoch Members Join Date: Oct 2002 Posts: 21	Epoch does not allow companies to gather credit card data on their servers and then POST this info to our systems, we do allow a 2 part join process, the first of which can reside on the companies server but the card data collection page is always on an epoch server. Clay EPOCH

11-14-2002	#13
Nickatilynx Banned Want to see your own Advertising Here! Join Date: Oct 2002 Location: Vancouver Canada Posts: 15,115	Frankly we found it easier to leave it all to Epoch. We tried doing interesting stuff.Was easier to let them do what they do.