Author

Topic: Newbie PM changes to address phishing (Read 378 times)

copper member
Activity: 2996
Merit: 2374
October 27, 2017, 01:27:50 AM
#7
- The body of a PM sent by a newbie will not be sent via email. You'll still get a notification, but you'll have to visit the forum to read the PM.
As a receiver of PM's, can we have the option to disable this? I frequently receive PMs from newbies and like to gauge the urgency of the message without visiting the forum. Also, having the content of a PM allows me to have a verifiable record of the content of a PM (provided it is not encrypted).


Also, as an FYI, the subject line of PMs from newbies is still sent in the email. This could potentially result in a scammer sending a PM with the subject line "send payment to 1scamaddress..." from a phishing account.
member
Activity: 88
Merit: 10
October 25, 2017, 08:17:37 AM
#6
To address phishing, I made the following changes to PMs sent by newbies:

 - Newbie PMs will not have the following bbcode tags parsed: font, glow, img, iurl, move, size, shadow, url. Not allowing clickable URLs may be annoying, but it should make phishing a lot more difficult.
 - The warning appears in a different area when you click the "reply to this PM" link in an email (or just reply to a newbie PM).
 - The body of a PM sent by a newbie will not be sent via email. You'll still get a notification, but you'll have to visit the forum to read the PM.

Also, where previously the newbie PM warning was actually attached to their PM (so you'd see it when quoting, etc.), now it's part of the page, and will disappear when the user is no longer a newbie. A bit cleaner. For all previously-sent newbie PMs, you will now see two warnings, though.

So when newbie get message from higher rank they can see BBcode ?
legendary
Activity: 2954
Merit: 3060
Join the world-leading crypto sportsbook NOW!
October 25, 2017, 03:22:16 AM
#5
How about you address Phishing,HackedBTC Accounts but yet you put them off and do nothing. Why have users Email you through your own guidelines only to ignore those users?

Theymos should probably remove his name from the recovery process if he's not really involved in it any more. It will save both him and other's time. Maybe change it to tell people just to create a thread in Meta with all the details instead to stop cyrus and other staff being spammed with requests. At least if the info checks out others can verify it and leave appropriate feedback and an admin can still get to it at some point and close the thread once handled. It'll probably be a much more efficient system.
hero member
Activity: 920
Merit: 1014
October 24, 2017, 05:51:09 PM
#4
How about you address Phishing,HackedBTC Accounts but yet you put them off and do nothing. Why have users Email you through your own guidelines only to ignore those users?

You have ignored Abused Users of this Forum for years.  IF you can't Do your Job as an ADMIN why the fuck are you here?

You are an Abusive prick.
If you are not willing to do your job as an Admin of this site at least tell those Users they will not get their accounts back instead of ignoring them Douchebag!

People have a real life, and afaik hacked users are getting their accounts back but after few weeks or maybe months..
Forums need a dedicated member to do this job tho..

Back to the subject, any img to have an idea?

Agreed with this part. But it sure as hell doesn't Exist right now.
legendary
Activity: 2142
Merit: 1065
✋(▀Ĺ̯ ▀-͠ )
October 24, 2017, 05:43:44 PM
#3
How about you address Phishing,HackedBTC Accounts but yet you put them off and do nothing. Why have users Email you through your own guidelines only to ignore those users?

You have ignored Abused Users of this Forum for years.  IF you can't Do your Job as an ADMIN why the fuck are you here?

You are an Abusive prick.
If you are not willing to do your job as an Admin of this site at least tell those Users they will not get their accounts back instead of ignoring them Douchebag!

People have a real life, and afaik hacked users are getting their accounts back but after few weeks or maybe months..
Forums need a dedicated member to do this job tho..

Back to the subject, any img to have an idea?
hero member
Activity: 920
Merit: 1014
October 24, 2017, 05:37:29 PM
#2
How about you address Phishing,HackedBTC Accounts but yet you put them off and do nothing. Why have users Email you through your own guidelines only to ignore those users?

You have ignored Abused Users of this Forum for years.  IF you can't Do your Job as an ADMIN why the fuck are you here?

You are an Abusive prick.
If you are not willing to do your job as an Admin of this site at least tell those Users they will not get their accounts back instead of ignoring them Douchebag!
administrator
Activity: 5222
Merit: 13032
October 24, 2017, 04:34:55 PM
#1
To address phishing, I made the following changes to PMs sent by newbies:

 - Newbie PMs will not have the following bbcode tags parsed: font, glow, img, iurl, move, size, shadow, url. Not allowing clickable URLs may be annoying, but it should make phishing a lot more difficult.
 - The warning appears in a different area when you click the "reply to this PM" link in an email (or just reply to a newbie PM).
 - The body of a PM sent by a newbie will not be sent via email. You'll still get a notification, but you'll have to visit the forum to read the PM.

Also, where previously the newbie PM warning was actually attached to their PM (so you'd see it when quoting, etc.), now it's part of the page, and will disappear when the user is no longer a newbie. A bit cleaner. For all previously-sent newbie PMs, you will now see two warnings, though.
Jump to: