Pages:
Author

Topic: POLL: Sales of hacked, compromised, and/or unauthorized transfers of accounts. - page 4. (Read 7144 times)

newbie
Activity: 42
Merit: 0
Try saying that while thinking of Goat and Rarity and maintaining a straight face.

There's also a forum policy against trolling. This is necessary to keep the forum usable.

I find it interesting that the goal post keeps on moving every time you respond.

11 days ago, you stated that you don't believe sales of hacked accounts are immoral, but you'd let the community decide the matter.
4 days ago, results of the community poll, 9-3 majority, 75% against sales of hacked accounts. (your response, not good enough)
Today, results of the community poll, 36-8 majority, 81.8% against sales of hacked accounts (your response, not good enough, you reiterate your personal opinion and kick the bucket along hoping people will get tired of pressing the issue.)


Did you ever intend to let the community decide on this matter?

If so what is the threshold that must be reached for you to change forum policy and not allow sales of hacked/compromised accounts or unauthorized transfers of credentials?


I think this forum should prohibit ILLEGAL activities of where the servers are hosted. Are selling stolen property knowingly illegal? Yes, and there is reasonable evidence that torac is selling hacked accounts.

Trading hacked account info is not illegal as far as I know, though IANAL. If it is illegal, explain why. Illegal trades are not allowed.

So now it's no longer a community decision, but we have to cite existing case law on hacked/compromised credentials?  When I come back with case law in one jurisdiction are you going to hide behind a new excuse because a seller lives in a country which may not have laws or existing case precedent on this topic?


Do you ban posts selling stolen credit card details?

This seems more likely to be illegal. If it's not illegal, it's a similar issue to the current one and I would be inclined to allow it.

You are openly advocating sales of hacked/compromised credentials for all online/offline accounts then. Credit card numbers and CCV numbers are plain text.  Access credentials are no different than login credentials used to verify authenticity of an account holder with the organization or piece of technology that generated those credentials for authorized users.

The doors on bitcointalk.org are now wide open for all sorts of disreputable sellers.

Do you have hacked credentials for...

  • Fortune 500 firms? The victims probably never notice. It's not like they'll be missing them.
  • Ebay, Amazon, Newegg accounts?  Sure why not. Victims can probably get their accounts back without too much hassle.
  • 401K or stock market accounts? There is no violence or deception involved. We allow freedom of speech here.
  • Government agencies or defense contractors?  Selling information can never be wrong.

http://krebsonsecurity.com/2012/12/exploring-the-market-for-stolen-passwords/
http://krebsonsecurity.com/2012/10/service-sells-access-to-fortune-500-firms/
http://boingboing.net/2012/12/26/once-your-pc-is-hacked-your-e.html
newbie
Activity: 20
Merit: 0
Trolling = BAD

Selling hacked account info = GEE, I DUNNO, DUH....

Only in Bitcoin-Land.
hero member
Activity: 868
Merit: 1000


This seems more likely to be illegal. If it's not illegal, it's a similar issue to the current one and I would be inclined to allow it.

So does this mean that until someone can prove to your satisfaction that selling stolen credit card or other financial service credentials is illegal you will not ban posts offering those credentials for sale?  People are looking for a yes/no answer here, not an "if, then" answer.

Yes or no.  At this point in time - when you consider that it's "likely" the sale of stolen credit card credentials is illegal - will you allow people to offer credit card/PayPal/Dwolla/bank account/etc credentials for sale on the forums?
administrator
Activity: 5222
Merit: 13032
Try saying that while thinking of Goat and Rarity and maintaining a straight face.

There's also a forum policy against trolling. This is necessary to keep the forum usable.

I think this forum should prohibit ILLEGAL activities of where the servers are hosted. Are selling stolen property knowingly illegal? Yes, and there is reasonable evidence that torac is selling hacked accounts.

Trading hacked account info is not illegal as far as I know, though IANAL. If it is illegal, explain why. Illegal trades are not allowed.

Do you ban posts selling stolen credit card details?

This seems more likely to be illegal. If it's not illegal, it's a similar issue to the current one and I would be inclined to allow it.
sr. member
Activity: 444
Merit: 250
I prefer evolution to revolution.
When someone permits you free usage of their stuff (this forum), you should help keep it in shape, rather than calling on them to keep it in shape.  Another way to look at it is that if a forum that did better policing would be more successful, then the neglect - or lack of ethics if you want - is an opportunity for you to run a better forum.  I really hate that providers of freebies on the Internet are so often expected to do work without compensation.

Perhaps if you post your concerns in the threads the thieves start, they will tend to hide from your shining light.  In that way you will be the change you wish to see in the world, which is ideal.
legendary
Activity: 3676
Merit: 1495
It seems they haven't drawn a line anywhere, as theymos clearly stated, that
Selling hacked accounts is not banned by any current forum policy. Selling the accounts is not illegal as far as I know (maybe the act of hacking the accounts is illegal)...

Selling hacked accounts is not financial fraud, it will probably lead to financial fraud though.

IMHO selling hacked accounts should immediately be banned by a forum policy, no matter if game, torrent, or any other account. And it really doesn't matter if it was the seller who hacked it, or the one he bought it from.

I can't believe that shit about "there's no victim", "but if, not much hassle", "no violence" and best of all "only information".
Honestly, i'm shocked.
b!z
legendary
Activity: 1582
Merit: 1010
@theymos:

- torac is only selling information. Some part of me thinks that selling information can never be wrong.

Do you ban posts selling stolen credit card details?


I'm curious about this too.  Where is the line on selling stolen accounts drawn?  Forum accounts?  Game and other subscription service accounts?  PayPal and other payment processor accounts?  Bitcoin service accounts?  Conventional financial services accounts?

I'm curious about that too, what about credit cards, PayPal-, or MtGox-accounts?
Those are only information too, so i guess you're fully ok with selling stuff like that on the forums, huh?

I mean, ARE YOU SERIOUS?

Financial fraud has never been allowed on this forum, as far as I know.

It is okay to sell game / torrent accounts etc., but not Paypal, or cc info. I think the admins have already drawn the line here.
legendary
Activity: 3676
Merit: 1495
@theymos:

- torac is only selling information. Some part of me thinks that selling information can never be wrong.

Do you ban posts selling stolen credit card details?


I'm curious about this too.  Where is the line on selling stolen accounts drawn?  Forum accounts?  Game and other subscription service accounts?  PayPal and other payment processor accounts?  Bitcoin service accounts?  Conventional financial services accounts?

I'm curious about that too, what about credit cards, PayPal-, or MtGox-accounts?
Those are only information too, so i guess you're fully ok with selling stuff like that on the forums, huh?

I mean, ARE YOU SERIOUS?
newbie
Activity: 42
Merit: 0
I think it's reasonable to tell forum moderators that if they want to censor messages advertising the sale of stolen accounts, they may do so.  I doubt that Theymos strictly enforces any rules about such censoring, so he wouldn't need to say anything.  Just point the mods of the boards where thieves advertise to this thread and try to convince them to start censoring if you think that's the right thing to do.  I would stop at "If you think it's best to block that kind of post, go for it."  See if a debate develops or what.  My general strategy is to add information rather than hide it.

Anyway, if you like sticking your nose in like that, feel free to contact the website of the account that may have been stolen and ask them about contacting a possibly hacked user, if you can get enough info from the supposed thief to do that.

This really isn't a matter of free speech. I have offered to supply information and have more information on this seller to share.  Admin of targeted sites have been purging hacked/compromised accounts that they can identify, but in the process some innocent users are probably getting caught in the net.  I approached Theymos, to try and help some of these admin.

Theymos has shown minimal interest in addressing the issue of sales of hacked/compromised credentials or in dealing with sellers that transact in large volume of credentials for accounts that clearly do not belong to them.  This is highly disturbing. In principle there is not a major difference between sales of hacked/compromised forum or website accounts from that of sales of credit card numbers.  Access is unauthorized, services are being used without permission, and control over userdb is being subverted.
sr. member
Activity: 444
Merit: 250
I prefer evolution to revolution.
I think it's reasonable to tell forum moderators that if they want to censor messages advertising the sale of stolen accounts, they may do so.  I doubt that Theymos strictly enforces any rules about such censoring, so he wouldn't need to say anything.  Just point the mods of the boards where thieves advertise to this thread and try to convince them to start censoring if you think that's the right thing to do.  I would stop at "If you think it's best to block that kind of post, go for it."  See if a debate develops or what.  My general strategy is to add information rather than hide it.

Anyway, if you like sticking your nose in like that, feel free to contact the website of the account that may have been stolen and ask them about contacting a possibly hacked user, if you can get enough info from the supposed thief to do that.
hero member
Activity: 868
Merit: 1000

Do you ban posts selling stolen credit card details?


I'm curious about this too.  Where is the line on selling stolen accounts drawn?  Forum accounts?  Game and other subscription service accounts?  PayPal and other payment processor accounts?  Bitcoin service accounts?  Conventional financial services accounts?
newbie
Activity: 42
Merit: 0
Quote
I'm always reluctant to go against the forum's policy of free speech
Try saying that while thinking of Goat and Rarity and maintaining a straight face.

I think this forum should prohibit ILLEGAL activities of where the servers are hosted. Are selling stolen property knowingly illegal? Yes, and there is reasonable evidence that torac is selling hacked accounts.

Do you ban posts selling stolen credit card details?


These comments by Theymos strike me as odd.



There are good reasons to think that torac is selling hacked accounts.


2. Theymos stated that he does not think selling hacked accounts is immoral.

Selling hacked accounts is not banned by any current forum policy. Selling the accounts is not illegal as far as I know (maybe the act of hacking the accounts is illegal). I'm always reluctant to go against the forum's policy of free speech, and in this case I'm not even sure that the trades are immoral. On one hand:

- The victims probably never notice.
- If the victims do notice, they can probably get their accounts back without too much hassle.
- There is no violence or deception involved.
- torac is only selling information. Some part of me thinks that selling information can never be wrong.


3. Theymos stated that he would not object if someone hacked his own bitcointalk.org account and sold his admin credentials elsewhere.
(This is ridiculous. I do not know any admin IRL or any other person that could make that comment with a straight face and expect someone to believe them).

What boggles my mind is you would think after the cosbycoin hack of bitcointalk.org in 2011 that Theymos would not be receptive to this type of activity taking place on his own forum.  I don't think Theymos would want someone selling his login credentials on another forum.

I wouldn't like it, but I'm not sure that selling the credentials would be immoral.


4. Theymos was asked directly in a private conversation, if admin of sites affected were to contact him directly would he assist them in reclaiming accounts.  Theymos responded "no."


In two conversations, Theymos has shown little to no interest in assisting admin of other sites or in dealing with torac and sellers like him directly. Rather than dealing with the issue he suggested I create this thread in the meta forum and let the community decide. Per his suggestion I did that.  Poll traffic, responses, and feedback were small over the first week, but they did show by 9-3 that users here objected to sales of hacked accounts.  Theymos said this wasn't enough to act.  I updated the thread on Saturday asking users for direct feedback; since this update we've had additional comments and 20+ more users vote in the poll. Results now indicate a similar result as last week. Users object to sales of hacked accounts.  Theymos hasn't taken action against torac, nor has he indicated when or if he will act or what "community threshold" will convince him to act accordingly.

I wish this was not the case, but right now I don't know how to interpret Theymos continued actions other than an implicit advocation of sales of hacked/compromised credentials.

vip
Activity: 1316
Merit: 1043
👻
Quote
I'm always reluctant to go against the forum's policy of free speech
Try saying that while thinking of Goat and Rarity and maintaining a straight face.

I think this forum should prohibit ILLEGAL activities of where the servers are hosted. Are selling stolen property knowingly illegal? Yes, and there is reasonable evidence that torac is selling hacked accounts.

Do you ban posts selling stolen credit card details?
newbie
Activity: 42
Merit: 0
I know this sounds crazy, but one of the datacenters I purchase from had an aggressive marketing scheme. They were "reselling" their own servers on private sites to try to break into a different market at rates that looked like the servers were stolen/hacked, and they wanted to do so without letting their regular high-paying customers know they were offering better deals to other people. They purchased a nearby building where they were "housing the servers", but it actually became an off-site warehouse they used. Meanwhile they ran two operations, one for high priced servers for powerful clients and one for dirt cheap servers for torrenting and seedboxing. They even made up things like "make sure you don't go over too much CPU/RAM usage during the day or else it'll get noticed," but in actuality they were saying that to prevent their day-customers from having issues. To my knowledge, this company still does this, and it's a very slick way to optimize their datacenter's use.

Additionally, though it seems suspicious, having a record of the transactions will be handy for law enforcement when/if they sequester the records. If you know its an actual crime, report it and point the authorities to the thread. Otherwise you're honestly kind of speculating. I'd recommend contacting whoever you think is getting scammed as well, and point them to the thread.

That's interesting conjecture, but not relevant to the example I'd previously given.  This is not speculation, I have been in direct communication with admin, and reclaimed 7 accounts of over 60 sold from sites that torac was offering up for sale.  Admin of those sites are aware of this board and of multiple threads involving the seller. Information was passed on to those effected; if admin choose to act beyond this board they will by their own choice.  Torac's payment processing information and much more personally identifying information has been documented (not all of this has been shared publicly or privately).  

Theymos was informed a week ago privately and supplied with evidence, but chose not to act.  He's continuing to protect torac. Why I do not know, I've speculated it has to do with torac donating a portion of his proceeds back to the site. Theymos hasn't openly refused torac's donations and continues to accept his money. I had hoped that this issue would have been resolved privately.  The longer this continues with torac and similar sellers being given sanctuary it makes the reputation of the site look worse.


donator
Activity: 1419
Merit: 1015
I know this sounds crazy, but one of the datacenters I purchase from had an aggressive marketing scheme. They were "reselling" their own servers on private sites to try to break into a different market at rates that looked like the servers were stolen/hacked, and they wanted to do so without letting their regular high-paying customers know they were offering better deals to other people. They purchased a nearby building where they were "housing the servers", but it actually became an off-site warehouse they used. Meanwhile they ran two operations, one for high priced servers for powerful clients and one for dirt cheap servers for torrenting and seedboxing. They even made up things like "make sure you don't go over too much CPU/RAM usage during the day or else it'll get noticed," but in actuality they were saying that to prevent their day-customers from having issues. To my knowledge, this company still does this, and it's a very slick way to optimize their datacenter's use.

Additionally, though it seems suspicious, having a record of the transactions will be handy for law enforcement when/if they sequester the records. If you know its an actual crime, report it and point the authorities to the thread. Otherwise you're honestly kind of speculating. I'd recommend contacting whoever you think is getting scammed as well, and point them to the thread.
newbie
Activity: 42
Merit: 0
I haven't seen any offer you are describing here on bitcointalk. Can you post link to some examples?

There are good reasons to think that torac is selling hacked accounts.

Selling hacked accounts is not banned by any current forum policy. Selling the accounts is not illegal as far as I know (maybe the act of hacking the accounts is illegal). I'm always reluctant to go against the forum's policy of free speech, and in this case I'm not even sure that the trades are immoral. On one hand:

- The victims probably never notice.
- If the victims do notice, they can probably get their accounts back without too much hassle.
- There is no violence or deception involved.
- torac is only selling information. Some part of me thinks that selling information can never be wrong.

On the other hand, there are victims...

Also, I can never know with absolute certainty whether someone is selling hacked accounts or just reselling accounts that have been given to them willingly. (Reselling willingly-given accounts is OK. The forum clearly has no obligation to enforce the terms of service for other sites. Otherwise common trades such as Steam trades or PayPal transfers would be disallowed.) This makes a ban on trading hacked accounts potentially messy to enforce. Should I ban trades that are only probably trades of hacked accounts?

torac is donating a portion of proceeds from each sale back to the site, which creates a conflict of interest in acting against torac

The forum is non-profit. I don't get anything whether he donates or not.

What boggles my mind is you would think after the cosbycoin hack of bitcointalk.org in 2011 that Theymos would not be receptive to this type of activity taking place on his own forum.  I don't think Theymos would want someone selling his login credentials on another forum.

I wouldn't like it, but I'm not sure that selling the credentials would be immoral.

Theymos I can post additional background information conducted via profiling, but that would require publicly posting torac's real name.  There is ample evidence in his personal history showing similar questionable ethics and actions being taken against him elsewhere.


OFF-TOPIC: There is ample evidence to show that the rule of first-sale doctrine does apply in the case of re-selling games purchased online despite ToS not allowing such acts.  That is a completely different issue and case for discussion than what is taking place here. First-sale involves transfers of property, accounts are not property possessed by the account holder, but personal property may be contained within an account (property within an account should be allowed for transfer if evidence of ownership exists).  The point here is that a user doesn't own an account, an account is authorized for use per ToS and permission to access may be revoked.

ON-TOPIC: In this specific case, torac is selling accounts that he does not own, nor does torac own a right to property.  He and other users engaging in these types of account/invite sales have no argument on any grounds for sales of accounts or even on sales of invites.

https://en.wikipedia.org/wiki/First-sale_doctrine
http://www.wired.com/threatlevel/2012/10/scotus-first-sale-2/


The case linked above relates to resale and/or transfer of property originating from foreign markets, but also applies to IP.  Another US Supreme Court (SCOTUS) case involves the transfer of digital goods and rights associated (with arguments made about transfer of property, like games purchased/associated with an existing account).

In July the EU ruled that users can transfer property purchased via an account (this does not mean the account itself can be sold).

http://www.forbes.com/sites/gregvoakes/2012/07/03/european-courts-rule-in-favor-of-consumers-reselling-downloaded-games/
http://forums.steampowered.com/forums/showthread.php?t=2783990
http://www.techdirt.com/articles/20120703/11345519566/eu-court-says-yes-you-can-resell-your-software-even-if-software-company-says-you-cant.shtml
administrator
Activity: 5222
Merit: 13032
I haven't seen any offer you are describing here on bitcointalk. Can you post link to some examples?

There are good reasons to think that torac is selling hacked accounts.

Selling hacked accounts is not banned by any current forum policy. Selling the accounts is not illegal as far as I know (maybe the act of hacking the accounts is illegal). I'm always reluctant to go against the forum's policy of free speech, and in this case I'm not even sure that the trades are immoral. On one hand:

- The victims probably never notice.
- If the victims do notice, they can probably get their accounts back without too much hassle.
- There is no violence or deception involved.
- torac is only selling information. Some part of me thinks that selling information can never be wrong.

On the other hand, there are victims...

Also, I can never know with absolute certainty whether someone is selling hacked accounts or just reselling accounts that have been given to them willingly. (Reselling willingly-given accounts is OK. The forum clearly has no obligation to enforce the terms of service for other sites. Otherwise common trades such as Steam trades or PayPal transfers would be disallowed.) This makes a ban on trading hacked accounts potentially messy to enforce. Should I ban trades that are only probably trades of hacked accounts?

torac is donating a portion of proceeds from each sale back to the site, which creates a conflict of interest in acting against torac

The forum is non-profit. I don't get anything whether he donates or not.

What boggles my mind is you would think after the cosbycoin hack of bitcointalk.org in 2011 that Theymos would not be receptive to this type of activity taking place on his own forum.  I don't think Theymos would want someone selling his login credentials on another forum.

I wouldn't like it, but I'm not sure that selling the credentials would be immoral.
newbie
Activity: 42
Merit: 0
No I don't support this.  The bitcoin community/economy has enough troubles and misconceptions to overcome and bitcointalk.org should not be encouraging or supporting this kind of activity.

What boggles my mind is you would think after the cosbycoin hack of bitcointalk.org in 2011 that Theymos would not be receptive to this type of activity taking place on this forum.  I don't think Theymos would want someone selling his login credentials on another forum.
newbie
Activity: 42
Merit: 0
BCB
vip
Activity: 1078
Merit: 1002
BCJ
No I don't support this.  The bitcoin community/economy has enough troubles and misconceptions to overcome and bitcointalk.org should not be encouraging or supporting this kind of activity.
Pages:
Jump to: