Topic: Security risk for more than 7300 bitcointalk users? (Read 559 times)

https://bitcointalk.org/index.php?topic=704320.40



Why hacking Bitcointalk accounts with Telegram names and ETH adresses? That is'nt the point at all!

By the way: I made a countercheck with other Bitcoin fora. The result: Bitcointalk is an exceptional case and therefore a black sheep.

I just wonder how possible that will be hacking someone's Bitcointalk Account with just the Telegram name and the ETH WALLET ADDRESS...🤔🤦

What are you saying? I just gave you an example of one. If you seriously expect me to bring about a list of the threads that link to these Google Sheets pages, then we can simply discontinue this discussion. Don't act in bad faith.

The explanation is that these are from bounty campaigns and are maintained by bounty campaign managers. Go talk to them about it, not Bitcointalk.

Bounty hunters are aware of that when they sign away their details, or at least they should be.

Damn, look at the smart boy with his smart knowledge that he won't disclose.

If there is no non-public displayed information on that list, then it is a non-issue (*). All the information on the list is a simple recompilation of self-declared or impersonated bounty related information, derivable from a compilation of bounty spreadsheets and posts.

(*) Further than the fact that some information has been placed on the forum or a spreadsheet willingly, which may become a nuisance at some stage for a few (i.e. someone could see the balance on a given address and decide to try to pester/scam the Telegram profile somehow – that is nothing that can’t be done without the list, simply browsing related information in posts and bounty sheets).

Did you read my previous reply? I posted a spreadsheet from one currently active bounty campaign that shows similar data. Just open the bounty section and check for yourself. You got all kinds of data there. Some campaigns even include email lists, Facebook, Twitter, Instagram profiles, etc. It's got nothing to do with the forum making those available, the bounty managers running those campaigns do so for transparency reasons.   

anyone can make a list of names from BitcoinTalk

anyone can make a list of eth or ltc or doge or btc addresses or any other address.


anyone can deposit 10 usd worth of coin into each and every address on the list.


anyone can say  I am philipma1957 of BitcoinTalk   check me out on this list.

anyone can move coin into and out of the address they control and link to my name.

or anyone's name from BitcoinTalk they placed on a fake list.

Everyone's forum name is already available.

On BitcoinTalk.org

on https://bpip.org/

It is easy peasy to make a list up

and you can even link a different address to each name on the list.

You could use the list to cause grief in various ways.

below is the most trusted list from BPIP

minerjones DT2   1087
Hhampuz DT2   751
OgNasty DT1   738
krogothmanhattan DT1   693
Blazed DT2   570
DarkStar_ DT2   495
BitcoinPenny DT1   453
greenplastic DT2   438
Lesbian Cow DT1   438
owlcatz DT1   426
chronicsky DT2   411
Mitchell DT1   389
wheelz1200 DT2   375
Kryptowerk DT1   358
anonymousminer DT1   350
TECSHARE   346
digicoinuser DT2   340
Lutpin DT2   340
vizique DT1   338
Zepher  DT2   320
Lauda DT2   315
satoshi  DT2   310
comit DT2   310
bavicrypto DT1   307
dozerz DT2   306
CanaryInTheMine   300
monbux DT2   300
dazedfool DT2   300
bithalo DT2   286
yogg DT1   283
monkeynuts DT2   281
buckrogers DT1   279
TMAN  DT2   275
smoothie  DT2   270
Vod DT1   270
AT101ET DT2   270
The Pharmacist DT2   269
Agrawas DT2   266
theymos DT1   262
ChiBitCTy DT2   262
LoyceV DT2   261
Stunna DT2   260
Ticked DT2   260
TookDk DT2   250
Rmcdermott927 DT1   248
iluvbitcoins   242
squall1066  DT2   240
philipma1957 DT1   240
zazarb   240
SaltySpitoon DT2   235
SebastianJu DT2   230
hedgy73   230
ezeminer DT2   225
Pistachio   220
ICOEthics  DT2   220
bigtimespaghetti DT2   218
Zeroxal   210
cryptoheadd DT2   208
El duderino_ DT1   207
hybridsole DT2   205
hilariousandco DT1   205
devthedev   202
yahoo62278 DT1   202
TheNewAnon135246 DT2   200
CryptoImperator   199
willi9974 DT1   195
frankbitcoin DT2   193
miffman  DT2   190
actmyname DT1   190
FiniteByDesign  DT2   180
snarlpill    180
shasan DT2   179
DaveF DT1   178
DireWolfM14 DT1   174
Anduck DT2   173
EcuaMobi DT2   170
shorena   168
elianite   163
John (John K.) DT2   160
Fortify   160
Kialara DT2   160
Xprim777 DT2   160
zekoroger   160
Tomatocage   158
Corrosive DT1   156
OneNattyLitecoin DT2   154
tothemoonsands DT2   153
dooglus DT2   150
wttbs DT2   150
Eodguy149   150
qwk DT1   149
mindtrip   148
JanEmil DT2   146
coblee DT2   144
jeremypwr DT2   143
BG4 DT2   141
SFR10 DT1   141
Lincoln6Echo DT2   140
DannyHamilton  DT2   140
Carra23



I can pick any ten you want from the list above
I can make 10 addresses one for each
I can publish a list saying why did these ten trusted members accept 1 ltc or any coin from a known scammer?

Meanwhile the addresses are all under my control.
And I made them all look bad.

BTW this could be done to try to say theymos or myself or anyone is associated to scammers or for that matter to a good project. Think of a project looking for investors

with

thermos
myself
loyce

listed as participants and being paid coin.

You may join it yourself.

The spreadsheet file/link is publicly made available for everyone to see at least so I doubt that there is really something to complain about even if you know someone can make a copy of it since it is publicly made available. Plus the information collected from this users aren't really that alarming since there are no real names involved and no personal date given. Someone might have collected a list of bounty hunters in the forum as this might be their way of seeing their target market for an upcoming project.

Coin address can only pose a risk in terms of privacy (if you use same address many times), but Telegram is a very popular place for scammers, and the crypto user base (mostly beginners) is something they will definitely use. I was only once in the signature campaign where Telegram was one of the conditions, and since that information was public, I received quite a number of strange messages.

I think there is a risk, but not to the extent that the OP wants to emphasize - and the only way for such information not to be public is to spreadsheets become only for managers eyes, which again did not go well with some campaigns in the past. Maybe only Telegram data should be hidden from the public eye?

It is just a list with ETH address and Telegram username half of it are nonexistent. They were created just for bounty purposes. Bounty hunters are aware that these kind of list are available on public forums therefore they generally create new identity whenever they join a new campaign.

I still do not understand how can ETH address and Telegram user name be a security risk?

I expected such a childish answer...

All 272 bitcointalk spreadsheets from docs.google you can't find on-forum like you claimed.

Bitcointalk has definitly to explain the mass publication of these so-called "public spreadsheets" on docs.google.

And of course there're ways to abuse them. But because you shit on everything anyway, I'm not going to disclose that.

No need to be pedantic about the word "probably". The intention of its use was to mitigate the severity of the generalization, as I cannot be absolutely certain that these Telegram spreadsheets are exclusively found in the Bounties section. Here is an example of a bounty thread, and its spreadsheet filled with Telegram names: https://docs.google.com/spreadsheets/d/1MydpoygVAXh6Z3nqUWjKAgnbnlwt_DsvXM9nCBnoupM/edit#gid=0

This is just one of many bounties.

Probably??  Then show me where exactly!

Did you read that these are all from bounty campaigns, where you can probably find most of them in the Bounties (Altcoin) section on-forum? They are publicly available, and the bounty hunters don't give a shit.

Hell, they signed up for it! Willingly providing the details to a public spreadsheet.

---

I'm pretty unpopular, then, huh? Out of the cool club

It took me 10 sec to get all "docs.google bitcointalk spreadsheets" listed - there're 272! results.
So the first two lists are only the peak of an iceberg.


Type in Google search:  site:docs.google.com spreadsheet bitcointalk

In order to creat more transparency, Bitcointalk should now invastigate that phenomena and publish the results.


Control ist better than trust...

Lol, someone used my name to sign up for that Artcoin telegram bounty. It is in the 2nd spreadsheet that OP posted. Some UnoDeiTanti (telegram id) guy. But what is the difference to what you posted and any other campaign that has publicly available spreadsheets?

Here, took me 20 seconds to find. From a random ongoing bounty right now:
https://docs.google.com/spreadsheets/d/1iNKSOVT9-8wvLwOJp9H8NbNqPET5rpRe7ZCyPng6rgg/edit#gid=194578416

  Brings up an interesting point.  You could get you btctalk id attached to an eth address holding 1000 eth coins.  You know you have nothing to do with it. But a tax authority could try to tax you on it.  In the usa the burden of proof for income is on the government. I wonder if we will hear about  this in the near future. I WOULD THINK that your forum name on a list is not proof of income.

Even the telegram name and the ETH address are random or fake in the below quoted spreadsheet. I can see my name is included in this spreadsheet, but the ETH address and telegram ID is never seen by me before, I mean it's not mine. The telegram id doesn't exist at all.

that is why i smell a troll.

My name it's not in the list and please my apologies look back to your word above I bet you didn't look up your sentence before posting you were to say A friendly greeting to all am I correct?

I searched the whole list and my name was not found in it. Even if my name was included in it , what harm would i have ?
It only contains the telegram name and Eth address. You cannot hack anyone's account by knowing the Etherum or telegram address.