Author

Topic: FORTUNEJACK.COM |Deposit 777 play with 1777 mBTC |Live Casino, Slots, Betting - page 351. (Read 465060 times)

legendary
Activity: 1834
Merit: 1008

Password manager +2FA, safest option I can see.


I have a few passwords which I remember and usually rotate them if need to change the password periodically but I always enable my 2fa function so I'm much worried about passwords leak. I also make sure that I never use my email passwords into any another site. I have installed Norton security premium version on my laptop and PC protect from malware.

I believe 2FA is the best security ever because it is only you the on who have it not others so it is much more important than any of those password. As long as people do not know your 2FA they can't even hacked your account here. That is why 2FA is like a must thing to protect every single account that you have, including your email
legendary
Activity: 2352
Merit: 1204
www.fortunejack.com
Somehow someone got into my FortuneJack account two days prior to my last login and took my loss back on dice and then cashed out .003btc.   They were able to change my email address and I can’t even do that when I go to my preferences.   The message showing my email had changed was in my inbox on FortuneJack and it was sent to me when’s i logged in.


I found this email in my junk folder unread: “Greetings, dear user.
 
We are contacting you regarding your latest withdrawal.
It was delayed by our system for security reasons as your account credentials (Withdrawal IP or Wallet Number) are different from your usual credentials.
 
Please confirm that you were the person who made a withdrawal and your transaction will be processed right away !”

So I don’t know how they were able to convince someone to let them withdraw and change the email all at the same time.   I asked live chat and they didn’t reply at all even after sending screenshots of the emails, etc.

Look how fast they turned a profit and withdrew.
https://imgur.com/a/JHWiq


It looks like they have a ton of funds collected but I may be reading it wrong.  They had to use a low fee so the TX is still pending from the ninth when the did it.    Don’t suppose any admin at FortuneJack could double spend it with a good TX fee to get the funds back to me?

They sent it to 1QHZjQHjVS4kbrQQLyswfzzsautWcHQtrh You
Before sending it in a giant 15btc tx

Hi dear player,

We are very concerned about this issue, please can you write me your FJ username, so I do additional checks and open the VERY HIGH PRIORITY TICKET about the case.

Cheers.

Are you Max?  If you are I got your reply already.  You claim that I signed up four years ago using this IP (205.185.209.93) and then logged in with the same IP to withdraw this month.  That IP is some VPN based in Arazona and I wouldn’t have used a VPN to sign up at all.  That told me what i expected.  My account wasn’t hacked.  My username is adamintx but you don’t need to “look into it” anymore.  I just wanted to see if y’all would stick to your story about me signing up and withdrawing from the same IP or admit the original mistake.

No, its David here. I think Max is handling this case, so yes, there is no need for me involving. Max is a great person and professional, sure he will give you the most accurate answers.

Cheers.
full member
Activity: 331
Merit: 100
Somehow someone got into my FortuneJack account two days prior to my last login and took my loss back on dice and then cashed out .003btc.   They were able to change my email address and I can’t even do that when I go to my preferences.   The message showing my email had changed was in my inbox on FortuneJack and it was sent to me when’s i logged in.


I found this email in my junk folder unread: “Greetings, dear user.
 
We are contacting you regarding your latest withdrawal.
It was delayed by our system for security reasons as your account credentials (Withdrawal IP or Wallet Number) are different from your usual credentials.
 
Please confirm that you were the person who made a withdrawal and your transaction will be processed right away !”

So I don’t know how they were able to convince someone to let them withdraw and change the email all at the same time.   I asked live chat and they didn’t reply at all even after sending screenshots of the emails, etc.

Look how fast they turned a profit and withdrew.
https://imgur.com/a/JHWiq


It looks like they have a ton of funds collected but I may be reading it wrong.  They had to use a low fee so the TX is still pending from the ninth when the did it.    Don’t suppose any admin at FortuneJack could double spend it with a good TX fee to get the funds back to me?

They sent it to 1QHZjQHjVS4kbrQQLyswfzzsautWcHQtrh You
Before sending it in a giant 15btc tx

Hi dear player,

We are very concerned about this issue, please can you write me your FJ username, so I do additional checks and open the VERY HIGH PRIORITY TICKET about the case.

Cheers.

Are you Max?  If you are I got your reply already.  You claim that I signed up four years ago using this IP (205.185.209.93) and then logged in with the same IP to withdraw this month.  That IP is some VPN based in Arazona and I wouldn’t have used a VPN to sign up at all.  That told me what i expected.  My account wasn’t hacked.  My username is adamintx but you don’t need to “look into it” anymore.  I just wanted to see if y’all would stick to your story about me signing up and withdrawing from the same IP or admit the original mistake.
hero member
Activity: 896
Merit: 514
I would still argue that lastpass would be the most unsecured way to keep your passwords in case you get hacked, virus infected, and whatever keylogger that was placed on your PC. It will be the most unsafe one ever. You all gotta try masterpass if you are on lastpass, it would be a world of a difference! Another thing I find really secure is using ledger nano S, it has a password manager on the device which is also nice.
legendary
Activity: 2198
Merit: 1150
Freedom&Honor
I mean, for LastPass at least, once you login, it won't kick you out of the session (so you need to type your password again for 2 days or so in my experience) so even you got keylogged, you'd probably have some time to figure it out.
On another note, if you did get keylogged, it won't matter if you have a password manager, they're still getting all your passwords.
legendary
Activity: 1316
Merit: 1011

Password manager +2FA, safest option I can see.


I have a few passwords which I remember and usually rotate them if need to change the password periodically but I always enable my 2fa function so I'm much worried about passwords leak. I also make sure that I never use my email passwords into any another site. I have installed Norton security premium version on my laptop and PC protect from malware.
legendary
Activity: 2198
Merit: 1150
Freedom&Honor
Just use a password manager...
I got all my accounts broken into including this account once betcoin.ag was hacked and the password were leaked.
Never use the same password everywhere, never.
Shit happens, it just might happen to you.
Can't stress how important this is.

Password managers are not a good idea when dealing with Crypto.

Basically you are protected if some site gets hacked and your password was completely unique.

However if you get malware, someone will have access to every single password you have.
Whats worse is if your harddrive crashed and you lose the entire database of passwords. You will have a very hard time filing support tickets to get your password reset.



Password manager +2FA, safest option I can see.

If your harddrive crashes why would you lose your your passwords?
They're stored somewhere online.
Check LastPass  Smiley

Just use a password manager...
I got all my accounts broken into including this account once betcoin.ag was hacked and the password were leaked.
Never use the same password everywhere, never.
Shit happens, it just might happen to you.
Can't stress how important this is.

Password managers are not a good idea when dealing with Crypto.

Basically you are protected if some site gets hacked and your password was completely unique.

However if you get malware, someone will have access to every single password you have.
Whats worse is if your harddrive crashed and you lose the entire database of passwords. You will have a very hard time filing support tickets to get your password reset.



I agree with this, if your password manager gets hacked (especially the online ones) then you are fucked. They get access to ALL your accounts! Though I use something that is pretty much safer even if it is a password manager.

I use masterpassword. It is a nice program, if you guys want to check it out, I recommend you do so. It combines username + password + your website's name (or whatever nickname) + password type = password. What is nice about it is that if you remember all those even if you accidentally delete the program or you're on another computer, you can use that password manager. It's kinda hard to explain, it is better if you check it yourselves.

The thing is, LastPass is definitely harder to hack then for example my laptop xD
hero member
Activity: 896
Merit: 514
Just use a password manager...
I got all my accounts broken into including this account once betcoin.ag was hacked and the password were leaked.
Never use the same password everywhere, never.
Shit happens, it just might happen to you.
Can't stress how important this is.

Password managers are not a good idea when dealing with Crypto.

Basically you are protected if some site gets hacked and your password was completely unique.

However if you get malware, someone will have access to every single password you have.
Whats worse is if your harddrive crashed and you lose the entire database of passwords. You will have a very hard time filing support tickets to get your password reset.



I agree with this, if your password manager gets hacked (especially the online ones) then you are fucked. They get access to ALL your accounts! Though I use something that is pretty much safer even if it is a password manager.

I use masterpassword. It is a nice program, if you guys want to check it out, I recommend you do so. It combines username + password + your website's name (or whatever nickname) + password type = password. What is nice about it is that if you remember all those even if you accidentally delete the program or you're on another computer, you can use that password manager. It's kinda hard to explain, it is better if you check it yourselves.
hero member
Activity: 756
Merit: 505
As I already stated, I am more than open to further investigation and making this investigation as transparent as possible. But I would really need a player to contact me and provide some more details. I am here all the time and you can reach me in PM.

I am guessing that most likely happened is that this user was using the same username and password as he did for his bitcointalk account or his bitmain account and hackers tried accessing his account and were successful.

The amount of people who reuse the same password is astonishing. Whats even worse is that some people use the same email password as they do for their crypto services; which is bad because it defeats 2FA if its active.

Most sites if you have access to someone's email, you can easily reset the 2FA.

I do not think tha 2fa can easily be reset.  I believe you need the input generated from your mobile phone (if we are talking about the authenticator app)  unless you are using the email authenticator which is actually not advisable due to the thing  you stated.  

I'm definitely not talking about some email authenticator, I'm talking about the one you need on your phone such as the Google Authenticator. In order for someone to reset that they'd need to have access to your phone as well, and if it has gone to that well then you are fucked no matter what Tongue.. It is probably the most safe you can be right now, that and regularly changing your passwords, all passwords over email accounts and website accounts.

True, and I believe 2FA is now the industry standard in securing anything online nowadays. I think it is a good protection. The only way a hacker would be able to hack an account is indeed access to your phone (or whatever authenticator you are using), or he needs to social engineer the support so he can reset the 2FA. Both of which are extremely hard to do, especially if the sit has good policies.

Though sometimes I just hate using 2FA since when I don't have my phone with me then that means I can't log anything in. However, I don't want to use an authenticator that is on my pc because if my pc is compromised so is my passwords and the supposed third layer of protection which is my 2FA. Maybe someday someone will think of a better alternative to 2FA that won't need another device or a software which is on the PC itself.

I read about yubikey, seems promising since you can use your thumb print to use it on some sort of 2FA.
legendary
Activity: 3808
Merit: 1723
Just use a password manager...
I got all my accounts broken into including this account once betcoin.ag was hacked and the password were leaked.
Never use the same password everywhere, never.
Shit happens, it just might happen to you.
Can't stress how important this is.

Password managers are not a good idea when dealing with Crypto.

Basically you are protected if some site gets hacked and your password was completely unique.

However if you get malware, someone will have access to every single password you have.
Whats worse is if your harddrive crashed and you lose the entire database of passwords. You will have a very hard time filing support tickets to get your password reset.

legendary
Activity: 2198
Merit: 1150
Freedom&Honor
Just use a password manager...
I got all my accounts broken into including this account once betcoin.ag was hacked and the password were leaked.
Never use the same password everywhere, never.
Shit happens, it just might happen to you.
Can't stress how important this is.
hero member
Activity: 896
Merit: 514
As I already stated, I am more than open to further investigation and making this investigation as transparent as possible. But I would really need a player to contact me and provide some more details. I am here all the time and you can reach me in PM.

I am guessing that most likely happened is that this user was using the same username and password as he did for his bitcointalk account or his bitmain account and hackers tried accessing his account and were successful.

The amount of people who reuse the same password is astonishing. Whats even worse is that some people use the same email password as they do for their crypto services; which is bad because it defeats 2FA if its active.

Most sites if you have access to someone's email, you can easily reset the 2FA.

I do not think tha 2fa can easily be reset.  I believe you need the input generated from your mobile phone (if we are talking about the authenticator app)  unless you are using the email authenticator which is actually not advisable due to the thing  you stated.  

I'm definitely not talking about some email authenticator, I'm talking about the one you need on your phone such as the Google Authenticator. In order for someone to reset that they'd need to have access to your phone as well, and if it has gone to that well then you are fucked no matter what Tongue.. It is probably the most safe you can be right now, that and regularly changing your passwords, all passwords over email accounts and website accounts.

True, and I believe 2FA is now the industry standard in securing anything online nowadays. I think it is a good protection. The only way a hacker would be able to hack an account is indeed access to your phone (or whatever authenticator you are using), or he needs to social engineer the support so he can reset the 2FA. Both of which are extremely hard to do, especially if the sit has good policies.
legendary
Activity: 3038
Merit: 6194
Meh.
As I already stated, I am more than open to further investigation and making this investigation as transparent as possible. But I would really need a player to contact me and provide some more details. I am here all the time and you can reach me in PM.

I am guessing that most likely happened is that this user was using the same username and password as he did for his bitcointalk account or his bitmain account and hackers tried accessing his account and were successful.

The amount of people who reuse the same password is astonishing. Whats even worse is that some people use the same email password as they do for their crypto services; which is bad because it defeats 2FA if its active.

Most sites if you have access to someone's email, you can easily reset the 2FA.

I do not think tha 2fa can easily be reset.  I believe you need the input generated from your mobile phone (if we are talking about the authenticator app)  unless you are using the email authenticator which is actually not advisable due to the thing  you stated.  

I'm definitely not talking about some email authenticator, I'm talking about the one you need on your phone such as the Google Authenticator. In order for someone to reset that they'd need to have access to your phone as well, and if it has gone to that well then you are fucked no matter what Tongue.. It is probably the most safe you can be right now, that and regularly changing your passwords, all passwords over email accounts and website accounts.
legendary
Activity: 3010
Merit: 1280
Get $2100 deposit bonuses & 60 FS
As I already stated, I am more than open to further investigation and making this investigation as transparent as possible. But I would really need a player to contact me and provide some more details. I am here all the time and you can reach me in PM.

I am guessing that most likely happened is that this user was using the same username and password as he did for his bitcointalk account or his bitmain account and hackers tried accessing his account and were successful.

The amount of people who reuse the same password is astonishing. Whats even worse is that some people use the same email password as they do for their crypto services; which is bad because it defeats 2FA if its active.

Most sites if you have access to someone's email, you can easily reset the 2FA.

I do not think tha 2fa can easily be reset.  I believe you need the input generated from your mobile phone (if we are talking about the authenticator app)  unless you are using the email authenticator which is actually not advisable due to the thing  you stated.  
legendary
Activity: 3808
Merit: 1723
As I already stated, I am more than open to further investigation and making this investigation as transparent as possible. But I would really need a player to contact me and provide some more details. I am here all the time and you can reach me in PM.

I am guessing that most likely happened is that this user was using the same username and password as he did for his bitcointalk account or his bitmain account and hackers tried accessing his account and were successful.

The amount of people who reuse the same password is astonishing. Whats even worse is that some people use the same email password as they do for their crypto services; which is bad because it defeats 2FA if its active.

Most sites if you have access to someone's email, you can easily reset the 2FA.
legendary
Activity: 3010
Merit: 1280
Get $2100 deposit bonuses & 60 FS
~
I bet their team hasn't changed, we only see their new representator here. Is this new feature to get confirm on email before withdrawing or did I forget about that? I only used one adress here one years ago and currently too.
Let's wait for an answer from their staff, they won't reject it + add more details, was your account hacked or did you try to withdraw on different wallet?
As far as I know whenever you change withdrawal address and IP and you try to withdraw they will send you verification email. It's not new feature but it isn't that old either.

You can say this way becausw you get your own money right? Last time they release the fund without let me confirm my email so what are you suppose to explain this?
What do you mean? Can you us give more information?
On side note, if you try to withdraw from bitvest you will never receive email from them. As I can see you are posting in their topic very often and I don't see you complaining there about it. So why are you doing it here? Makes no sense.

Not to mention that there's a super easy fix for this. Use 2FA and something like this can never happen, can't believe it's 2018 and people don't have 2FA on websites that holds their money.. The website itself is really not to blame in this, regardless of what website it is. Be responsible and use 2FA, it really isn't harder than that.

True, people does not effort to setup a maximum security in their accounts then.. whine when their accounts got hacked.. I have this experience in Poloniex when I was still new to this kind of stuff.. I never knew that 2fa isone of the most important security setup of an account, so I just continue without using it until the day I found out that all my coins were stolen.  Oh well that is the hard way to learn about the importance of 2FA.  No matter how annoying it is, we must set it up for our own account's security.
legendary
Activity: 3038
Merit: 6194
Meh.
~
I bet their team hasn't changed, we only see their new representator here. Is this new feature to get confirm on email before withdrawing or did I forget about that? I only used one adress here one years ago and currently too.
Let's wait for an answer from their staff, they won't reject it + add more details, was your account hacked or did you try to withdraw on different wallet?
As far as I know whenever you change withdrawal address and IP and you try to withdraw they will send you verification email. It's not new feature but it isn't that old either.

You can say this way becausw you get your own money right? Last time they release the fund without let me confirm my email so what are you suppose to explain this?
What do you mean? Can you us give more information?
On side note, if you try to withdraw from bitvest you will never receive email from them. As I can see you are posting in their topic very often and I don't see you complaining there about it. So why are you doing it here? Makes no sense.

Not to mention that there's a super easy fix for this. Use 2FA and something like this can never happen, can't believe it's 2018 and people don't have 2FA on websites that holds their money.. The website itself is really not to blame in this, regardless of what website it is. Be responsible and use 2FA, it really isn't harder than that.
legendary
Activity: 1932
Merit: 2272
~
I bet their team hasn't changed, we only see their new representator here. Is this new feature to get confirm on email before withdrawing or did I forget about that? I only used one adress here one years ago and currently too.
Let's wait for an answer from their staff, they won't reject it + add more details, was your account hacked or did you try to withdraw on different wallet?
As far as I know whenever you change withdrawal address and IP and you try to withdraw they will send you verification email. It's not new feature but it isn't that old either.

You can say this way becausw you get your own money right? Last time they release the fund without let me confirm my email so what are you suppose to explain this?
What do you mean? Can you us give more information?
On side note, if you try to withdraw from bitvest you will never receive email from them. As I can see you are posting in their topic very often and I don't see you complaining there about it. So why are you doing it here? Makes no sense.
legendary
Activity: 966
Merit: 1006
Is it possible to get a non-deposit bonus somehow here?)
No there is no any non-deposit bonus or other bonuses without any wagering requirement but you can try your luck with luckyjack where you can win some free bitcoin without any terms and condition, which you can withdraw instantly. https://fortunejack.com/luckyjack
newbie
Activity: 48
Merit: 0
Is it possible to get a non-deposit bonus somehow here?)
Jump to: