A site like BugMeNot.com is something providing list of username/password for popular websites, so lazy fags can access and share logins for websites that require you to register in order to view content, it’s also anonymous since all people are sharing the public account.

But there’s a commercialized version for sharing VIP accounts of porn sites.

So if you wonder the source where your roommate download those AV, that’s a fare good list :)

But their business model is insecure, malicious user could change the VIP account’s password thus the investment is lost, so instead they provide a specialized browser, I didn’t try it out but we can assume one could always sniff the cookie. Unless the website use a dedicated proxy to filter any cookie leak or password change actions on their server.

Counter measures is simple for public ones like BugMeNot: collect the public account data regularly and kill them, or lawsuit. Against private or paid ones like the site mentions above is a little difficult, but you can kick off ID which is simultaneously online from multiple addresses.

via NewSMTH