Pages:
Author

Topic: [Controversial] Who's to blame when an account gets hacked? (Read 2089 times)

legendary
Activity: 1582
Merit: 1006
beware of your keys.
for me, i carried out the other option:
if the lender lent to a hacked account, in which the address given was not identical to the original owner, that would be a failure to the lender. blame the hacker as soon as felt to be scammed, so you can indicate if it was a hacker or original, then blame theymos for not giving a warning on the accounts' reply which their passwords were recently changed.
sr. member
Activity: 770
Merit: 268
If the girl didnt went out that night, or didnt wears skirt? Or to lessen the volume that she take. Would it be possible for her not to get raped? Of course yes, She knew her responsibility as a woman. That would go the same for your responsibility of your account
In the world of permutation combinations there is this possibility:  If the girl didn't went out that night, there is possibility of break-in and attacker/rapist cause the damage.

Proving account is hacked could be difficult? rather proving hack was unintentional is difficult. Once hacked activity is proved then something could be done. Personally didn't like the analogy of rape with hacking. Each person would have different perception. Lender was at fault because he did not verified the account details of person.  If lender is innocent then how verification process was conducted. Tomorrow lender could run a scam and claim you requested for loan.
Imagine same hacking and loan scenario happened with 100s of people. Would you still blame victims or lender or hacker? 

It is difficult to find real culprit and person who is responsible for it.  These kind of scenario are too intricate to deal with.
hero member
Activity: 1246
Merit: 588
If the girl didnt went out that night, or didnt wears skirt? Or to lessen the volume that she take. Would it be possible for her not to get raped? Of course yes, She knew her responsibility as a woman. That would go the same for your responsibility of your account
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
Indeed, I hope those who victim-blame see how its really not helping, and more likely to drive away users from using Bitcoin itself, instead you should sympathize and provide them with tips on how to be secure and remove any vulnerabilty they may have.

It should be obvious that the blame should always be on the aggressor (hacker), rather than the defendant (victim), but when it comes to exchanges where a lot of money is being held, you should remember you are putting your trust into a entity that may go insolvent, and likely protected itself from any law-suites you may use against them should they get "hacked".

Overall, when it comes to exchanges it falls into more of a grey area, since we can't really know if they got hacked, or if they have an insider who took the money and made a coverup.

*cough cough* you are posting in meta, it might help to read the entire thread instead of just the title.
full member
Activity: 162
Merit: 100
Indeed, I hope those who victim-blame see how its really not helping, and more likely to drive away users from using Bitcoin itself, instead you should sympathize and provide them with tips on how to be secure and remove any vulnerabilty they may have.

It should be obvious that the blame should always be on the aggressor (hacker), rather than the defendant (victim), but when it comes to exchanges where a lot of money is being held, you should remember you are putting your trust into a entity that may go insolvent, and likely protected itself from any law-suites you may use against them should they get "hacked".

Overall, when it comes to exchanges it falls into more of a grey area, since we can't really know if they got hacked, or if they have an insider who took the money and made a coverup.
legendary
Activity: 1382
Merit: 1122
Why are people even voting for lenders ? If the hacked account is asking for a loan,it is completely the owner's fault that due to improper precautions taken the hacker managed to hack the account.Not only lending but also trading or anything general that happens with the hacked account is solely owners fault.

If I go and buy a legendary account for 0.01BTC with no signed message and it turns out to be hacked, should I be allowed to keep that account? I can tell you what's going to happen. The original owner of the account signs a message in a  to Theymos and the account is stripped from me. Why did it happen to me? I didn't get the signed message.
copper member
Activity: 2562
Merit: 2510
Spear the bees
Why are people even voting for lenders ? If the hacked account is asking for a loan,it is completely the owner's fault that due to improper precautions taken the hacker managed to hack the account.Not only lending but also trading or anything general that happens with the hacked account is solely owners fault.

So you're saying the owner of the hacked account should repay the loan in full?

Here's my question for you: do you think that the fault doesn't lie with the lender when they allow the loan without asking for a signed message or proof that the account-holder is the true owner?

Obviously not, so then the fault should lie with the lender. This is where it goes into a case-by-case basis because primarily I would expect that the account-holder would pay at least a significant amount of the funds but the lender shouldn't get a free pass, either.

This leads into the problem where people may claim to be hacked but rather simply defaulting on a loan and then paying back either nothing or an amount less than what they received.



I'm saying that at least for lower-status accounts, all of the blame is on the lender. They took the risk, knowing full well that the loan could be defaulted. Things are a bit more blurred when you get into BiPolar territory.
hero member
Activity: 910
Merit: 1000
「きみはこれ&#
Why are people even voting for lenders ? If the hacked account is asking for a loan,it is completely the owner's fault that due to improper precautions taken the hacker managed to hack the account.Not only lending but also trading or anything general that happens with the hacked account is solely owners fault.
copper member
Activity: 2562
Merit: 2510
Spear the bees
Why is the lender at just 13% votes?

The lender is liable to hand over the ownership of the collateral to the original owner (on making certain the claim is really true and valid)
The lender is subsequently entitled to get back the lent money from the hacker. Grin With interest.



I hack an account, lend myself and the owner pays me the 'lent' money (or half of that). Interesting.

Or, alternatively, you pretend as if your account were hacked and then take out a loan, paying back only half of it. This is where I think the lender is to blame - a signed message is always essential.

In the end, they made the decision to lend to a user, carrying all the risks. Under no circumstances can you state that it is the fault of the account that was hacked, since the lender willingly chose to lend to the account which did not provide sufficient evidence of validation.



It's a shame that you can't prove that a user was hacked or wasn't hacked - I have a feeling that some "hacked" users attempted (and succeeded in) scamming via loan requests.
legendary
Activity: 1302
Merit: 1005
New Decentralized Nuclear Hobbit
Why is the lender at just 13% votes?

The lender is liable to hand over the ownership of the collateral to the original owner (on making certain the claim is really true and valid)
The lender is subsequently entitled to get back the lent money from the hacker. Grin With interest.



I hack an account, lend myself and the owner pays me the 'lent' money (or half of that). Interesting.
newbie
Activity: 71
Merit: 0
Well, at first i find your topic intriguing, understanding that the accounts here at bitcointalk forum are stored securely in a private database and hacking through these needs superb skill so the other known option to why your account is hacked is if you're phised or if you're scammed both are commonly owner's error. The forum already provided a warning to be careful and vigilant, its up to you to do what ever precaution necessary to prevent these from happening.
member
Activity: 112
Merit: 10
female ;)
If a hacker wants to scam, he will scam no matter what.

They'll go through pages of accounts and try to find one they can hack. From there, they'll most likely leave the info as is and turn email notifications off.

They prefer accounts that were inactive for a few weeks with no addresses posted.

If they can't hack one, move on to the next. It's only a matter of time before they strike.
legendary
Activity: 1302
Merit: 1005
New Decentralized Nuclear Hobbit
It is the lender.
Vod
legendary
Activity: 3668
Merit: 3010
Licking my boob since 1970
Let's say she was drunk and in a short skirt just got out of a club. Would that really be her fault if someone had sex with her without consent? NO! That's victim blaming which is completely not ok. Ever. It's the rapist's fault. They raped her. Victim blaming happens constantly on this forum. It's not ok.

Not her fault, but she is partly to blame for inducing evolutionary reproduction hormones.  

But you can prove a rape happened.  Sure, a woman can fake it with some work, but it's not just as easy as saying "I was raped".

Anyone can scam then simply say "I was hacked" and you want us to believe them?
newbie
Activity: 55
Merit: 0
The best thing that can be done is that, a PGP key should be made mandatory for signing up on this forum. This does a lot of good.

1. It prevents account farming because I believe making a huge amount of PGP keys is definitely tough.
2. It increases security. As a person who is genuine usually holds only one key and hosts it on a public server.
3. On creating an account, the person should be staking his PGP Public Key on a thread and he would have to use only that PGP keys while he trades via that account.
4. Also, in a case an account gets hacked, a simple message from the account linked PGP key should be signed to verify the authenticity of the claim.


This would definitely make this forum a better place, but this is according to my knowledge. Maybe more knowledgeable people here might have something more substantial to say.
1 - in the time it took me to read your post, I could have generated many PGP keys.

2 - If I wanted to, I could store many PGP keys on my computer (and backups). I do not host my PGP key on any keyserver, I upload it to one keyserver and it will propagate to other keyservers over time.

3 - Just like bitcoin private keys, PGP private keys have the potential to get compromised, or lost. If a PGP key is compromised then the owner should revoke the key publicly, and will probably want to start using a new key.

4 - Just because someone signs a message that their account was hacked does not make it a true statement. All that a PGP signed message will mean is that the owner of the PGP key is making the statement. It would be possible to fake getting hacked if a lender fails to ask for/verify a signed message.   
legendary
Activity: 1246
Merit: 1029
The best thing that can be done is that, a PGP key should be made mandatory for signing up on this forum. This does a lot of good.

1. It prevents account farming because I believe making a huge amount of PGP keys is definitely tough.
2. It increases security. As a person who is genuine usually holds only one key and hosts it on a public server.
3. On creating an account, the person should be staking his PGP Public Key on a thread and he would have to use only that PGP keys while he trades via that account.
4. Also, in a case an account gets hacked, a simple message from the account linked PGP key should be signed to verify the authenticity of the claim.


This would definitely make this forum a better place, but this is according to my knowledge. Maybe more knowledgeable people here might have something more substantial to say.
hero member
Activity: 896
Merit: 508
It's your fault to get drunk and wear a short skirt in the first place.
It's partly the users fault to not have a secure enough password. If the hacker is able to crack you password, you've done something wrong. Exploiting the "hacked" excuse is in no way acceptable for me.
legendary
Activity: 2590
Merit: 2156
Welcome to the SaltySpitoon, how Tough are ya?
(...) email/password has been changed recently (...).


Hey,

I recommend to change your passwords from time to time. It's a good habit.
Personally I'm going to change my password right now and it doesn't mean that account doesn't belongs to me anymore. We shouldn't exaggerate.

If password and email has been changed recently then it might mean something.

"Hey, his password has been changed! Scammer?"   Grin


My password has been recently changed! xD
Best regards.

Having a recently changed password doesn't mean they have been hacked, it means its worth doing an extra layer of diligence to protect yourself. I could decide to start frequenting the Russian local section to practice my language skills. It doesn't mean I've been hacked, but it certainly would be suspicious enough that I'd recommend someone use escrow with me when trading.

The reason I used the tape analogy is because unfortunately rape victims have been blamed in the past. It's horrible and should never be ok in any situation. I couldn't really think of another instance when the victim would be blamed so that's what I went with.

I guess the main issues brought up are the fact that how can you really prove that your account was in fact hacked? I'll be sure to sign a message with every transaction from this point forward and I have a difficult password. The only possible way for me to be hacked would be to know the password to my encrypted computer, then the login password then my bitcointalk password. I hope that I never get hacked because it seems like people just naively trust that it's the original account owner too often. If I were a lender I wouldn't take an account for collateral if they couldn't sign a message from 6 months ago (give or take) just like I would never buy one of those cheap accounts you always see being sold by brand new accounts. Hero's for 0.04BTC and things like that. They obviously have to be hacked because no one would spend a year and a half of their life building up an account to sell it for $40 IMO. I know I wouldn't.

Anyways sorry about the rape analogy but if it's not breaking any rules I'll leave it to make a point. Here are a few instances where it's happened in the past:

http://huffpost.com/ca/entry/12538648
http://www.euronews.com/2017/01/06/canada-judge-fights-to-save-job-after-victim-blaming-rape-trial
http://jezebel.com/5855255/canadian-rape-case-is-a-celebration-of-victim-blaming

Another good article on the issue: https://inequalitygaps.org/first-takes/gender-roles-of-women-since-1945/rape-where-the-blame-lies/


Yeah, you are fine, its not against any rules, and I get your point. I thought you were making a comparison for shock value rather than to make a point.
 
legendary
Activity: 2212
Merit: 1199
(...) email/password has been changed recently (...).


Hey,

I recommend to change your passwords from time to time. It's a good habit.
Personally I'm going to change my password right now and it doesn't mean that account doesn't belongs to me anymore. We shouldn't exaggerate.

If password and email has been changed recently then it might mean something.

"Hey, his password has been changed! Scammer?"   Grin


My password has been recently changed! xD
Best regards.
legendary
Activity: 1382
Merit: 1122
The reason I used the tape analogy is because unfortunately rape victims have been blamed in the past. It's horrible and should never be ok in any situation. I couldn't really think of another instance when the victim would be blamed so that's what I went with.

I guess the main issues brought up are the fact that how can you really prove that your account was in fact hacked? I'll be sure to sign a message with every transaction from this point forward and I have a difficult password. The only possible way for me to be hacked would be to know the password to my encrypted computer, then the login password then my bitcointalk password. I hope that I never get hacked because it seems like people just naively trust that it's the original account owner too often. If I were a lender I wouldn't take an account for collateral if they couldn't sign a message from 6 months ago (give or take) just like I would never buy one of those cheap accounts you always see being sold by brand new accounts. Hero's for 0.04BTC and things like that. They obviously have to be hacked because no one would spend a year and a half of their life building up an account to sell it for $40 IMO. I know I wouldn't.

Anyways sorry about the rape analogy but if it's not breaking any rules I'll leave it to make a point. Here are a few instances where it's happened in the past:

http://huffpost.com/ca/entry/12538648
http://www.euronews.com/2017/01/06/canada-judge-fights-to-save-job-after-victim-blaming-rape-trial
http://jezebel.com/5855255/canadian-rape-case-is-a-celebration-of-victim-blaming

Another good article on the issue: https://inequalitygaps.org/first-takes/gender-roles-of-women-since-1945/rape-where-the-blame-lies/
Pages:
Jump to: