Pages:
Author

Topic: delete - page 2. (Read 3709 times)

legendary
Activity: 1522
Merit: 1000
www.bitkong.com
June 08, 2014, 08:01:47 PM
#23
I would say RATs or keyloggers of some sort. A person tried to get a hold of my account through that.
legendary
Activity: 1050
Merit: 1004
June 08, 2014, 07:51:13 PM
#22
While the Heartbleed OpenSSL exploit existed, weren't passwords compromised? We were told to change passwords. I imagine a lot of the less active or inactive people did not bother.

I believe we were told to change our passwords as a precaution. I don't necessarily think sensitive user info was compromised to be honest.
hero member
Activity: 658
Merit: 500
Buy and sell bitcoins,
June 08, 2014, 06:59:42 PM
#21
While the Heartbleed OpenSSL exploit existed, weren't passwords compromised? We were told to change passwords. I imagine a lot of the less active or inactive people did not bother.
legendary
Activity: 1050
Merit: 1004
June 08, 2014, 06:41:54 PM
#20
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.


Since it appears to be mainly end user error, people should be glad there is a mechanism in the first place to recover accounts.

It's almost as if I am seeing people claim it is just to darn difficult to read any one of the 20+ instructional threads on PGP Bitcoin Signatures or too lazy to Google it.

~BCX~
It's actually even easier than that. There are several trustworthy clients that allow you to sign messages easily, like Electrum or Multibit.

Wouldn't it just be smartest to include a PGP signed thread, like mine? https://bitcointalksearch.org/topic/devthedevs-reputation-thread-340642
full member
Activity: 224
Merit: 100
June 08, 2014, 06:34:27 PM
#19
global moderator
Activity: 3794
Merit: 2612
In a world of peaches, don't ask for apple sauce
June 08, 2014, 03:43:55 PM
#18
Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Honorcoin? The irony. I'll never understand why people clamour for all these free yet always worthless crapcoins, especially when this is what you end up getting.
People expect free money. But as you can see here, nothing comes free except cheese in a mousetrap.
global moderator
Activity: 4018
Merit: 2728
Join the world-leading crypto sportsbook NOW!
June 08, 2014, 03:31:36 PM
#17
Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Honorcoin? The irony. I'll never understand why people clamour for all these free yet always worthless crapcoins, especially when this is what you end up getting.
global moderator
Activity: 3794
Merit: 2612
In a world of peaches, don't ask for apple sauce
June 08, 2014, 03:23:40 PM
#16
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.


Since it appears to be mainly end user error, people should be glad there is a mechanism in the first place to recover accounts.

It's almost as if I am seeing people claim it is just to darn difficult to read any one of the 20+ instructional threads on PGP Bitcoin Signatures or too lazy to Google it.




~BCX~
It's actually even easier than that. There are several trustworthy clients that allow you to sign messages easily, like Electrum or Multibit.
legendary
Activity: 2240
Merit: 1254
Thread-puller extraordinaire
June 08, 2014, 03:17:55 PM
#15
Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Some people have used the same password there as for their accounts here. Bitcoin_Mafia for one admitted to me after opening a thread to say her account had been compromised, that she had used the same password on the Honorcoin website as here and a number of users in the Honorcoin thread have registered accounts today to say their proper accounts have been compromised, only to be screamed at by the idiots in the Honorcoin thread!

Bitcoin_Mafia's thread about it: https://bitcointalksearch.org/topic/m.7199245

My first post in the Honorcoin thread to warn them: https://bitcointalksearch.org/topic/m.7195985

If you check Honorcoins website and go through to the section listing the premine registrants forums names you will see Bitcoin_Mafia listed there: http://honorcoin.co/2-free-distribution/

I registered my forum name but used a random password and shortly afterwards received a pm here from a zero-post account with an attached file related to something called RPG-Coin to download and 'test for them. It clearly was part of the Honorcoin attempt to compromise everything they could.

http://honorcoin.co/2-free-distribution/

The useraccount that pm'd me a file https://bitcointalksearch.org/user/shirojimetsu-337252





legendary
Activity: 1789
Merit: 1008
Keep it dense, yeah?
June 08, 2014, 03:01:03 PM
#14
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

It's good to have a secret question 'password'. That is something which follows the basics for a good password. It doesn't necessarily have to be something really strong, but something that is out of the ordinary, but password like so you commit it to memory.

That's what I do anyway.

Just a good passphrase will do, I see no need for random symbol there. Okay, maybe one Cheesy

Yeah, it needs to be memorable that's for sure, else you're screwed - well not always. People who actually answer their secret question with the appropriate answer make me weep.
hero member
Activity: 812
Merit: 587
Space Lord
June 08, 2014, 02:56:02 PM
#13
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

It's good to have a secret question 'password'. That is something which follows the basics for a good password. It doesn't necessarily have to be something really strong, but something that is out of the ordinary, but password like so you commit it to memory.

That's what I do anyway.

Just a good passphrase will do, I see no need for random symbol there. Okay, maybe one Cheesy
legendary
Activity: 1789
Merit: 1008
Keep it dense, yeah?
June 08, 2014, 02:52:27 PM
#12
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

It's good to have a secret question 'password'. That is something which follows the basics for a good password. It doesn't necessarily have to be something really strong, but something that is out of the ordinary, but password like so you commit it to memory.

That's what I do anyway.
global moderator
Activity: 4018
Merit: 2728
Join the world-leading crypto sportsbook NOW!
June 08, 2014, 02:39:59 PM
#11
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.
eid
hero member
Activity: 616
Merit: 500
June 08, 2014, 02:20:55 PM
#10
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

Why not change the questions then?

The question box is blank. It is created by the user.
hero member
Activity: 508
Merit: 500
June 08, 2014, 02:17:56 PM
#9
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

Why not change the questions then?
hero member
Activity: 812
Merit: 587
Space Lord
June 08, 2014, 02:15:55 PM
#8
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.
administrator
Activity: 5222
Merit: 13032
June 08, 2014, 02:08:46 PM
#7
It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.
hero member
Activity: 508
Merit: 500
June 08, 2014, 01:10:25 PM
#6
Using the same user/password combination on multiple websites is the primary reason, in my opinion.
Phishing would be the number two reason I guess.
legendary
Activity: 966
Merit: 1004
Keep it real
June 08, 2014, 12:34:07 PM
#5
...
It seems to me that people are either using weak PW or reusing PW on other sites.
...

That would be my guess
global moderator
Activity: 4018
Merit: 2728
Join the world-leading crypto sportsbook NOW!
June 08, 2014, 12:21:37 PM
#4
I was wondering this too. Maybe they're downloading crapcoin wallets with keyloggers in or something or logging into fishing sites?

What accounts got hacked? I haven't heard of any.

There's three hacked account requests on the first page of Meta alone:

https://bitcointalksearch.org/topic/theymos-please-help-644198
https://bitcointalksearch.org/topic/i-can-not-access-my-original-account-643713
https://bitcointalksearch.org/topic/cannot-reset-password-help-please-623415
Pages:
Jump to: