Pages:
Author

Topic: Someone Loan using My Account - page 4. (Read 2638 times)

legendary
Activity: 1722
Merit: 5937
July 12, 2023, 01:30:45 AM
#66
@shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?
Tbh, I am surprised that this hasn't happened earlier (or maybe it did?) since he doesn't ask for signed message like other lenders are doing, which I thought is a standard here.

What's weird to me in all this is that even after this has happened, he continues to give loans without taking extra measures so something like this doesn't happen again. He can of course do his business as he sees fit, but imo that's just unnecessary risk.
legendary
Activity: 2072
Merit: 4265
✿♥‿♥✿
July 11, 2023, 11:42:59 PM
#65
Lol, this is such a joke.

Don't consider yourself a sage. I have other sources that can help me in extreme cases. I very much hope that this will not happen, and I can confidently say that my request was considered. Likewise, I don't need money from strangers; I don't borrow; that's the rule.
As for my "fucking account", don't be overconfident; something that he does not understand can happen to everyone. I don't like unnecessary fuss, so a neutral tag is an extra safety cushion.
hero member
Activity: 2212
Merit: 670
Signature designer - start @$10 - PM me!
July 11, 2023, 10:31:37 PM
#64
Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?
You'll have to ask theymos, see: this topic.
Someone should upvote it to the Meta board, I think this proposal is also not limited to all business boards: Services, Lendings, Currency Exchange, Goods, etc.
This incident was enough to tell me the importance of using multiple notification bots, excluding lendings boards, and finding ways to gain access to accounts in an emergency.
sr. member
Activity: 546
Merit: 309
July 11, 2023, 09:31:41 PM
#63
This is a very sad incident. this happened because your account didn't use a strong password or you clicked on a known or unknown phishing link that led to a hacker getting your account login details and causing an incident.
But it has to be admitted that the hacker knows this forum very well that he cannot use it by hacking the account.  Because the real owner will recover it again through wallet sign. the hacker was very smart

We should learn a lot from this incident and be careful with account security  and lenders should also research an account thoroughly before giving a loan. And a rule should be kept that the loan will be given to the wallet that has been used for any purpose on the account at least in the last 1 month.
hero member
Activity: 2240
Merit: 537
FREE passive income eBook @ tinyurl.com/PIA10
July 11, 2023, 06:45:38 PM
#62

If I'm not wrong then the method is called as "session hijacking" or "session cookie theft." In such type of attacks the hacker often send you a malicious link, and when a users clicks on the link then the hacker take advantage of the vulnerabilities of the browser that the user is using to access the link. The hacker then steal the session cookies of the user and then use that cookie on his/her browser with the help of extensions like cookie editor. Such type of attacks are often planned by the hackers who have access to some hidden vulnerabilities of the browsers that no-one knows yet. Those hackers can steal session cookies of any website they want, and that way they hack the access of the users.

I'm quite sure that the same thing happened with @Peanutswar when he clicked on that malicious link without even thinking about such exploits. The hacker knew that the user would click on the link, and he would be able to steal the cookies one the user will click the link. It's better to be aware of such type of hacks because they can easily hack someone's account and ask for loans that the user isn't asking for. It's our responsivity to protect ourselves from such type of hacking attacks, and we should never click on the links sent by a unknown user. That way we will be able to protect ourselves from such kind of hacks.



Can attest to this. Happened several years ago from a foolish decision and got scammed a huge sum by today's standards.

It's really mindblowing and absolutely scary as the perpetrator could do anything without you even realizing he's there.
member
Activity: 196
Merit: 42
Don't talk the talk, if you can't walk the walk.
July 11, 2023, 05:14:48 PM
#61
Cry  Grin

You act like a third world war has started, why so much feelings engaged into a internet forum? It's a world outside here to, check it out!
If i want a tag its up to me and not you, you act like its your account that get tagged..  Roll Eyes
If I would need a loan ever in my life, that I highly doubt since I got a good economy and a good income, but if i would need a loan i would never take it on a anonymous internet forum, I would ask a friend or go to my bank.

Why do you all the time telling other to mind their own business when you not live after that standard yourself.
Mind your own business and we mind our own business, what I do or others have nothing to do with you.

But with that said, I agree with you and you have a very good point that if LoyceV would go offline forever on the forum or something and somebody would need a loan this is not a smart thing, but that should that person have think about before he/she asked for this. It's not like this would harm anyone or anything else expect us.

(Now please try to be funny and qoute 2/3 things and reply like you always do and ignore all the other stuff.  Grin) but after that, please leave me alone.
member
Activity: 182
Merit: 35
STRAIGHT FORWARD
July 11, 2023, 05:04:14 PM
#60
Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

CYBER_COWBOY    2023-07-10    Reference    This user confirmed he never wants to take a loan. If his account asks for it, it's not him.
lovesmayfamilis    2023-07-08    Reference    This user confirmed she never wants to take a loan. If her account asks for it, it's not her.
CryptoHFs    2023-07-08    Reference    This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Well, I did it to support the idea. If I ever need a loan in the future I will be requesting it from my alt.

This account btc address is compromised, banned before for a week, most likely I will stop using it.
copper member
Activity: 2338
Merit: 4543
Join the world-leading crypto sportsbook NOW!
July 11, 2023, 04:52:48 PM
#59
Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

CYBER_COWBOY    2023-07-10    Reference    This user confirmed he never wants to take a loan. If his account asks for it, it's not him.
lovesmayfamilis    2023-07-08    Reference    This user confirmed she never wants to take a loan. If her account asks for it, it's not her.
CryptoHFs    2023-07-08    Reference    This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?
hero member
Activity: 882
Merit: 800
July 11, 2023, 02:54:52 PM
#58
Snip

I agree with you that some concessions could be made to the OP, as the situation is not simple. Nevertheless, similar cases have already happened on the forum, and I think that everyone should take a closer look at the security of their system. Don't save your passwords in browsers, and also, I think the OP was running on a Windows system and might have some keylogger loaded, or indeed, as SamReomo wrote, a cookie session was stolen. I looked up some information about this, and I think we should know how we can protect ourselves from it.

https://learn.g2.com/session-hijacking

That should be the last thing for me to do because I am very conscious of my account and my personal details since no browser is trusted anymore.
I have red some of the implications involved in saving one details to a browser, so I do real avoid autosave options.
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
July 10, 2023, 10:40:41 AM
#57
Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?
You'll have to ask theymos, see: this topic.
hero member
Activity: 2744
Merit: 702
Dimon69
July 10, 2023, 09:32:16 AM
#56
In my opinion, this is an issue that goes well beyond the possible hacking of an account.

In the lending section there is a large group of spammers who try to cheat every day.

In addition to requesting a signed message or sending loans always and only to the same staked address (for example, I always receive my loans at the same address)

I think requesting to receive loans on different wallet address that mention on the signed message is safe too since most of us here use a non custodial wallet address to receive signature campaign payment while loan amount usually use to convert into cash so borrowers preferred to receive it directly on exchange to save fee and reduce waiting time.

it could be interesting to make the lending section off limits for some ranks, a bit like the "investigations" section of the forum. This measure would greatly limit the amount of shitposts and lenders would have more time to better follow up on their borrowers.

This suggestion is good to lessen spam post on lending section from newbie but it restrict low rank member with valid collateral to access this kind of services. Shit posters is not a problem on lending since no lenders will treat them seriously while there's only few users view lending board since there's no discussion in there unless you need to lend or borrow.
member
Activity: 182
Merit: 35
STRAIGHT FORWARD
July 10, 2023, 09:22:51 AM
#55
Congratulations  @LoyceV your idea started to expand widely to prevent scams https://bitcointalk.org/index.php?topic=5459320.msg62530688;topicseen#msg62530688
legendary
Activity: 1932
Merit: 4602
July 10, 2023, 08:01:49 AM
#54
If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.
I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come Smiley
I confirm that I do not need credits on this forum. LoyceV, please put a neutral tag on my profile.
legendary
Activity: 2660
Merit: 1261
July 10, 2023, 07:37:36 AM
#53
-snip-
Geez, hoping you have the strength for facing these problems.

Since we are from the same continent (Asia) you're on PH while looking at your post history, 1000$ it's really big for us. Take a lot of time for collecting the money, hoping there is no pressure time for giving back the loan. Feel sad mate...
-----
I also learn something from my accident, because of me someone getting scammed (getting yelled as well by my CEO). IMO, your case is really2 worse compared to mine because of the hacked potential from cookie session hijack (pretty new and more hard than mine (Bookmark Method).
legendary
Activity: 1750
Merit: 1329
Top Crypto Casino
July 10, 2023, 06:16:58 AM
#52
-snip-
Discord Community Management? Does that mean jobs are offered for you for Moderator/Admin, or something like that?

I faced the same case 2 month+ ago, the difference is for (Discord Account) not BTT. It's for (Mod/Admin) jobs, the scammer targeting people who at least moderated a project and shared a phishing/scam.

I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

I also active in Discord most likely in NFT too at the same time, I'm a moderator for a project. With the issue, my goal currently is at least pay shashan, I ask also LoyceV to put me a neutral tag to prevent this might happen again. For other members also recommend to use a notification with your telegram or more likely safe with the gmail connected with your account.

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.
Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?.
staff
Activity: 1316
Merit: 1610
The Naija & BSFL Sherrif 📛
July 10, 2023, 05:35:59 AM
#51
Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.
Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

It's strange that the lending board doesn't have such a rule; perhaps it's time to adopt one, because the IP tracker wouldn't help if the money heist had already occurred. This issue can only be fixed by the account owner and the 24 hour post delete restrictions.
sr. member
Activity: 1056
Merit: 405
July 10, 2023, 05:17:22 AM
#50
In my opinion, this is an issue that goes well beyond the possible hacking of an account.

In the lending section there is a large group of spammers who try to cheat every day.

In addition to requesting a signed message or sending loans always and only to the same staked address (for example, I always receive my loans at the same address), it could be interesting to make the lending section off limits for some ranks, a bit like the "investigations" section of the forum. This measure would greatly limit the amount of shitposts and lenders would have more time to better follow up on their borrowers.


legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
July 10, 2023, 05:09:41 AM
#49
Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.
Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.
staff
Activity: 1316
Merit: 1610
The Naija & BSFL Sherrif 📛
July 10, 2023, 05:03:42 AM
#48
Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Given that the forum accepts multiple logs, you're more likely to fall prey to this type of fraud if you neglect to look at post history.

Why wait 30 days after someone has signed a message from an old staked address to remove a tag?

A signed message is enough IMO.
My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.
That's what I was thinking, but shouldn't that be the account owner's problem if he misguard his wallet and private key? That shouldn't be a problem if the required signed message is sent to you from the account. Everyone should be responsible for their own security breach.  Grin

You should assume that the person making such a request may be in desperate need of a loan.
I disagree. If someone made the explicit statement that he'll never take a loan, you should assume someone else is asking for it, no matter what evidence he shows. The account holder shouldn't be held liable for any loans, that's why he made this explicit statement.

Life could happen to anyone; Someone could be very comfortable today without needing a loan, but we can't predict what will happen in 6-8 months, so I needed you to be at least flexible with your tag. However, I would prefer it if there is a duration on the tag as you suggested, and if the account owner wants to extend the date, he/she would need to sign another message requesting you to extend the tag.

Donald Trump had no idea 5 years ago that he would be paraded from courtroom to courtroom like a criminal.. Life happened to him  Grin
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
July 10, 2023, 04:58:09 AM
#47
Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password
Once in a while, I get a "friend request" too. I just ignore those on Discord.
What did "the link" do? Was clicking it enough to compromise your system? If that's the case, it's time for a safer browser (and OS)!

I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).
Why wait 30 days after someone has signed a message from an old staked address to remove a tag?

A signed message is enough IMO.
My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.

Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.
I've left him neutral feedback, asking to respond here.
Pages:
Jump to: