Topic: Security risk for more than 7300 bitcointalk users? (Read 560 times)

https://bitcointalk.org/index.php?topic=704320.40



Why hacking Bitcointalk accounts with Telegram names and ETH adresses? That is'nt the point at all!

By the way: I made a countercheck with other Bitcoin fora. The result: Bitcointalk is an exceptional case and therefore a black sheep.

I just wonder how possible that will be hacking someone's Bitcointalk Account with just the Telegram name and the ETH WALLET ADDRESS...🤔🤦

What are you saying? I just gave you an example of one. If you seriously expect me to bring about a list of the threads that link to these Google Sheets pages, then we can simply discontinue this discussion. Don't act in bad faith.

The explanation is that these are from bounty campaigns and are maintained by bounty campaign managers. Go talk to them about it, not Bitcointalk.

Bounty hunters are aware of that when they sign away their details, or at least they should be.

Damn, look at the smart boy with his smart knowledge that he won't disclose.

If there is no non-public displayed information on that list, then it is a non-issue (*). All the information on the list is a simple recompilation of self-declared or impersonated bounty related information, derivable from a compilation of bounty spreadsheets and posts.

(*) Further than the fact that some information has been placed on the forum or a spreadsheet willingly, which may become a nuisance at some stage for a few (i.e. someone could see the balance on a given address and decide to try to pester/scam the Telegram profile somehow – that is nothing that can’t be done without the list, simply browsing related information in posts and bounty sheets).

Did you read my previous reply? I posted a spreadsheet from one currently active bounty campaign that shows similar data. Just open the bounty section and check for yourself. You got all kinds of data there. Some campaigns even include email lists, Facebook, Twitter, Instagram profiles, etc. It's got nothing to do with the forum making those available, the bounty managers running those campaigns do so for transparency reasons.   

anyone can make a list of names from BitcoinTalk

anyone can make a list of eth or ltc or doge or btc addresses or any other address.


anyone can deposit 10 usd worth of coin into each and every address on the list.


anyone can say  I am philipma1957 of BitcoinTalk   check me out on this list.

anyone can move coin into and out of the address they control and link to my name.

or anyone's name from BitcoinTalk they placed on a fake list.

Everyone's forum name is already available.

On BitcoinTalk.org

on https://bpip.org/

It is easy peasy to make a list up

and you can even link a different address to each name on the list.

You could use the list to cause grief in various ways.

below is the most trusted list from BPIP

minerjones DT2   1087
Hhampuz DT2   751
OgNasty DT1   738
krogothmanhattan DT1   693
Blazed DT2   570
DarkStar_ DT2   495
BitcoinPenny DT1   453
greenplastic DT2   438
Lesbian Cow DT1   438
owlcatz DT1   426
chronicsky DT2   411
Mitchell DT1   389
wheelz1200 DT2   375
Kryptowerk DT1   358
anonymousminer DT1   350
TECSHARE   346
digicoinuser DT2   340
Lutpin DT2   340
vizique DT1   338
Zepher  DT2   320
Lauda DT2   315
satoshi  DT2   310
comit DT2   310
bavicrypto DT1   307
dozerz DT2   306
CanaryInTheMine   300
monbux DT2   300
dazedfool DT2   300
bithalo DT2   286
yogg DT1   283
monkeynuts DT2   281
buckrogers DT1   279
TMAN  DT2   275
smoothie  DT2   270
Vod DT1   270
AT101ET DT2   270
The Pharmacist DT2   269
Agrawas DT2   266
theymos DT1   262
ChiBitCTy DT2   262
LoyceV DT2   261
Stunna DT2   260
Ticked DT2   260
TookDk DT2   250
Rmcdermott927 DT1   248
iluvbitcoins   242
squall1066  DT2   240
philipma1957 DT1   240
zazarb   240
SaltySpitoon DT2   235
SebastianJu DT2   230
hedgy73   230
ezeminer DT2   225
Pistachio   220
ICOEthics  DT2   220
bigtimespaghetti DT2   218
Zeroxal   210
cryptoheadd DT2   208
El duderino_ DT1   207
hybridsole DT2   205
hilariousandco DT1   205
devthedev   202
yahoo62278 DT1   202
TheNewAnon135246 DT2   200
CryptoImperator   199
willi9974 DT1   195
frankbitcoin DT2   193
miffman  DT2   190
actmyname DT1   190
FiniteByDesign  DT2   180
snarlpill    180
shasan DT2   179
DaveF DT1   178
DireWolfM14 DT1   174
Anduck DT2   173
EcuaMobi DT2   170
shorena   168
elianite   163
John (John K.) DT2   160
Fortify   160
Kialara DT2   160
Xprim777 DT2   160
zekoroger   160
Tomatocage   158
Corrosive DT1   156
OneNattyLitecoin DT2   154
tothemoonsands DT2   153
dooglus DT2   150
wttbs DT2   150
Eodguy149   150
qwk DT1   149
mindtrip   148
JanEmil DT2   146
coblee DT2   144
jeremypwr DT2   143
BG4 DT2   141
SFR10 DT1   141
Lincoln6Echo DT2   140
DannyHamilton  DT2   140
Carra23



I can pick any ten you want from the list above
I can make 10 addresses one for each
I can publish a list saying why did these ten trusted members accept 1 ltc or any coin from a known scammer?

Meanwhile the addresses are all under my control.
And I made them all look bad.

BTW this could be done to try to say theymos or myself or anyone is associated to scammers or for that matter to a good project. Think of a project looking for investors

with

thermos
myself
loyce

listed as participants and being paid coin.

You may join it yourself.

The spreadsheet file/link is publicly made available for everyone to see at least so I doubt that there is really something to complain about even if you know someone can make a copy of it since it is publicly made available. Plus the information collected from this users aren't really that alarming since there are no real names involved and no personal date given. Someone might have collected a list of bounty hunters in the forum as this might be their way of seeing their target market for an upcoming project.

Coin address can only pose a risk in terms of privacy (if you use same address many times), but Telegram is a very popular place for scammers, and the crypto user base (mostly beginners) is something they will definitely use. I was only once in the signature campaign where Telegram was one of the conditions, and since that information was public, I received quite a number of strange messages.

I think there is a risk, but not to the extent that the OP wants to emphasize - and the only way for such information not to be public is to spreadsheets become only for managers eyes, which again did not go well with some campaigns in the past. Maybe only Telegram data should be hidden from the public eye?

It is just a list with ETH address and Telegram username half of it are nonexistent. They were created just for bounty purposes. Bounty hunters are aware that these kind of list are available on public forums therefore they generally create new identity whenever they join a new campaign.

I still do not understand how can ETH address and Telegram user name be a security risk?

I expected such a childish answer...

All 272 bitcointalk spreadsheets from docs.google you can't find on-forum like you claimed.

Bitcointalk has definitly to explain the mass publication of these so-called "public spreadsheets" on docs.google.

And of course there're ways to abuse them. But because you shit on everything anyway, I'm not going to disclose that.

No need to be pedantic about the word "probably". The intention of its use was to mitigate the severity of the generalization, as I cannot be absolutely certain that these Telegram spreadsheets are exclusively found in the Bounties section. Here is an example of a bounty thread, and its spreadsheet filled with Telegram names: https://docs.google.com/spreadsheets/d/1MydpoygVAXh6Z3nqUWjKAgnbnlwt_DsvXM9nCBnoupM/edit#gid=0

This is just one of many bounties.

Probably??  Then show me where exactly!

Did you read that these are all from bounty campaigns, where you can probably find most of them in the Bounties (Altcoin) section on-forum? They are publicly available, and the bounty hunters don't give a shit.

Hell, they signed up for it! Willingly providing the details to a public spreadsheet.

---

I'm pretty unpopular, then, huh? Out of the cool club

It took me 10 sec to get all "docs.google bitcointalk spreadsheets" listed - there're 272! results.
So the first two lists are only the peak of an iceberg.


Type in Google search:  site:docs.google.com spreadsheet bitcointalk

In order to creat more transparency, Bitcointalk should now invastigate that phenomena and publish the results.


Control ist better than trust...

Lol, someone used my name to sign up for that Artcoin telegram bounty. It is in the 2nd spreadsheet that OP posted. Some UnoDeiTanti (telegram id) guy. But what is the difference to what you posted and any other campaign that has publicly available spreadsheets?

Here, took me 20 seconds to find. From a random ongoing bounty right now:
https://docs.google.com/spreadsheets/d/1iNKSOVT9-8wvLwOJp9H8NbNqPET5rpRe7ZCyPng6rgg/edit#gid=194578416

  Brings up an interesting point.  You could get you btctalk id attached to an eth address holding 1000 eth coins.  You know you have nothing to do with it. But a tax authority could try to tax you on it.  In the usa the burden of proof for income is on the government. I wonder if we will hear about  this in the near future. I WOULD THINK that your forum name on a list is not proof of income.

Even the telegram name and the ETH address are random or fake in the below quoted spreadsheet. I can see my name is included in this spreadsheet, but the ETH address and telegram ID is never seen by me before, I mean it's not mine. The telegram id doesn't exist at all.

that is why i smell a troll.

My name it's not in the list and please my apologies look back to your word above I bet you didn't look up your sentence before posting you were to say A friendly greeting to all am I correct?

I searched the whole list and my name was not found in it. Even if my name was included in it , what harm would i have ?
It only contains the telegram name and Eth address. You cannot hack anyone's account by knowing the Etherum or telegram address.

You got me!
Plot twist: anyone can enter my Bitcointalk username with his Telegram and HardforkEther address to spam bounties. This has been going on for years, all it shows is that bounty spam "managers" don't care.

What if I told you I have a list of all Bitcointalk users?

Bounty case? Possible scammer? Should be on scam section, wrong section dude.
I feel this thread will be deleted soon.

oh my god, i really don't understand what you mean...!

What list...!
What case...!
What document...!
And what does that have to do with us here and the name you mentioned.
I don't see the name you mentioned and in the spreadsheet.
Too much, you say a pseudonym.

Are we here doing something for you, so you told us to go and do it.

You're not partying alcohol, are you?

when you sell something then you no longer have any claims to it. that would be like saying the person buying my house is now living in it against my will.
when bounty hunters sold their information to obvious scammers to receive a worthless token that was created out of thin air without any cost they should have expected things like this to happen.

Most likely this spreadsheet is one of two things:

1) A collection of responses that bounty hunters provided in a google forms survey. The title of the document seems to imply this is the case.

2) Someone scraped various google docs sheets that did the above and complied them into a single google docs spreadsheet.

Did you mean people are using fake data like fake bitcointalk profile? It is not a new issue. Most of the telegram campaign and airdrop campaigns are full of such scammers.

Seems like.

I smell a troll.

1. If you guys read the headline of this thread, then you would also see the question mark behind!

2.
So just open one of the provided documents and click "Forum Profile ID". Yeah, I love fast acting people...

What is going on? Has it turned into a shitpost now, or are you reading into things way more deeply than needed? No problem with altcoins, but the bounty section is absolutely terrible and plagued with scams and spam. Do you disagree?

All the useless reports, authentication posts, and other egregious uses of bandwidth... :/

those are garbage information in there. so what if they know about their telegram account?
these data are available in every bounty threads in the forum. he can collect it for whatever he wanna use it. there is no sensitive information to that file. they could even be fake data. cheaters had been submitting someone else telegram.

Most of these are for report services in a bounty. I suppose you could say something to the tune of, "poor bounty hunters," but really this is not unexpected. Many signature campaign spreadsheets are open to the public and users can easily harvest the links between users and their addresses, along with whatever additional details they provide for the spreadsheet. If you really have a problem with this, perhaps you want to start a revolution in the Bounties section... then again, staying away from that fetid mess is your best call.

Collecting what? Their KYC data? Most of the bounty hunters don't give any importance to their identity. So, they never bother to share their documents. However, what's the security risk with KYC related to bitcointalk account?

But the fact that someone is collecting it up is against the will of a bounty hunter

Exactly...

Sensitive? (2)

Basically a compilation of spreadsheet on every bounty, what's so sensitive about it? Can't even use to get into someone's dm in telegram. But the fact that someone is collecting it up is against the will of a bounty hunter, they don't fill those bounty forms just to be included in here, this is what I find wrong about the sheet. Nonetheless, I can't see anything more here, nothing to worry about 

Ok, if you think the free availability of data would not be a problem, then people should know where to look. Here is another list with over
13000 bitcointalker users from 2019.

https://docs.google.com/spreadsheets/d/1YfMiqd37buZfMnQgtBtHakYyVc0mawpt6Ldo93mVvaA/htmlview

We will see what reactions that will cause.

Let's not forget about those fallen bounty warriors that had to give up their KYC just so they could claim their $5 worth of shit tokens when they spent months advertising for a scam that the owners were going to dump as soon as they hit the exchanges.

Largely full of shit posters too who mostly don’t have a pot to piss in any way. Nothing to see here.

Sensitive?
It's a bounty response spreadsheet... what is sensitive about it? I mean the bounty hunters were not forced to fill the Google response form on gun point. They did it willingly.

A friendly great to all


When I researched the numberous usernames of Patrick John Ennis aka Sollog aka Sol Adoni today, I found a sensitive list of bitcointalk users on the internet:

https://docs.google.com/spreadsheets/d/1g7hz04V8A0B3kN5GQiWR-uxPkbtUybL2-MyJ7SyvACc/htmlview

So go there right now and find out if your usernames are on the published list. For any case I secured this document, you should do
also.

To the admin Cyrus: Don't delete my postings... I wasn't finish with this Ennis. And you're wrong, his last acitivity here wasn't in 2014 but in 2018.

https://bitcointalk.org/index.php?topic=704320.40