Bitcoin Forum

Hello,

I just wanted to let everyone know that my account was hacked ajw7989. I contacted theymos a few days ago when I noticed it but still waiting for a reply. I can provide proof in terms of my old btc address but now since the hacker is using my account to give rep out and make posts I decided I have to tell the community.

Below is an old post with my btc wallet.


-----BEGIN BITCOIN SIGNED MESSAGE-----
This is a message to verify my bitcointalk ajw7989 was hacked. Use caution
-----BEGIN SIGNATURE-----
1GaaGPapfp5BUfQzKQrmGVpwZQvLW3SZSv
IKgP2q7WTBCHA3ZAck8TJAh/KnQ3mC5RmqQ/V9lcWsOFF8tzrEssqzNXjJ8LJ7Dyd25qrSdagKStNpXxqfpqYbI=
-----END BITCOIN SIGNED MESSAGE-----

Wait, he is very busy. Try also to contact BadBear ;).

shouldn't there be like, a timestamp on that signed message? you know, to make 100% sure that it wasn't signed some ages ago.

I timestamped the one to theymos but if you want a timestamp sure here is another message.

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is a message to verify my bitcointalk ajw7989 was hacked. Use caution
Date is 1/10/2016
-----BEGIN SIGNATURE-----
1GaaGPapfp5BUfQzKQrmGVpwZQvLW3SZSv
H8pNHpT8UfdneXnjqpJCyJglXOAXqY2/Fb25dIENzenpK8hEyBUDrzEATGO2AyLOoR/v5q7Y5VZPJoS10BihBv8=
-----END BITCOIN SIGNED MESSAGE-----


redsn0w thanks for the tip pmed badbear just now.

Theymos is more active than BB these days, but double the chances I guess

I would not be surprised if the person who hacked the OP's account is an alt of  darrenw88 (https://bitcointalk.org/index.php?action=profile;u=554129), as the OP's account vouched for his PS4 games

Why are more accounts getting hacked nowadays? ???

Does forum has any security hole? You should share your experience on how it may got hacked?

We may be more cautious considering yours as an example.

The problem is not the forum, the problem here are the people... they should care more about their security.

You have to be patient, theymos answer not so fast about this kind of problem, but he will answer...maybe one month if you're lucky, my suggestion is write to him once a day or a little less to make this process faster

Yes I tend to agree.Many people do not pay necessary attention to the security of their account which is very sad.I think accounts above Full Member are more prone to hacking therefore these rank members should be more cautious

hey guys, just saw this. its 100% not me. anyway i can prove it ?? ive bought and sold on this forum and have never wronged anyone. dont know what this is about. i didnt sell 10 to anyone

It is possible that guy was just trolling, IDK. Strange if this is the case.

honestly couldnt say. i wish there was a way to prove it. my account is 100% legit. this is the only account i have. im guessing they all say that but honestly, thats the truth. i will remove the post though, i did sell a couple to someone though.

I would not troll my own account. Like i said i already sent the proof to theymos days ago and now badbear. I just hope they can work on it soon. They will see the IPs dont match either.

I was saying that the person who hacked your account was trolling

np wasnt sure. on another note still waiting for theymos so no one trust that account yet will sign a message if/when its recovered.

For the most part I agree it is based on user.  But some of these that are not active it is possible that the forum hack a while back was still valid on password.  We never figured out (i don't think) who did and ultimate goal of the hack of the forum.   If a user kept the same password as then they now have had months to crack it.

OP since you say you know you have a hacker I'm curious what was the cause?  Did you find anything on computer?  Or no idea what caused it.

Yup, the problem is the people.

More than the 50% of members of the forum use the same password in different sites/forums... or email.

I was using the same password in different forums, till one of them was hacked, since that day i'm using different passwords (written in a paper with especial characters, to difficult a possible "force-brute" attack).

2FA in the forum would be nice (or something like that).

How about security question ?

Thats not 2FA, its just another way to recover your account and from the last breach we learned that its not as well protected as the password itself.

Yes, I think that in the new forum the 2FA will be implemented ;) (and it will be really useful).

My guess is password used in diff weaker site where database was cracked. Thats how 90% of passwords are cracked. I dont use a unique pass on every site since too much to remmeber. I save unique passwords for email and stuff like banking. If 2fa was an option i would have used it since all my btc stuff that offer it i use it. Using a different password on every forum and every site is not practical.

It is if you use a password manager or a similar scheme to store your password in a secure way. Some also have good results with "brain hash functions", e.g. a friend of mine wrote a small hash function that results in their passwords for the given site. The result of the algorithm is appended to a randomly generated password. Thus they only need to remember two things, the random part and the algorithm, to have a different password for every site. Its not as good as a password manager though, because its security by obscurity (as soon as I know the algorithm I only need to attack a single password to know all of them).

Sigh still no response from theymos guess he is ignoring me. Also it most likely is darrenw88 that is the hacker since suddenly my post in his thread is gone and the positive trust he used on his account is gone.

Just for kicks the hacker thought it would be nice to try to sell back my account? What a joke.

http://i67.tinypic.com/206fyv5.png

He may have other things to do too. Did you PM the signed message to him or email it to the designated email address? NVM, that was for locked accounts.

Pmed him i dont see an email address to email him and the thread says PM.

Bump still waiting on the recovery just PMed theymos as a friendly reminder

Thanks to Cyrus account has been recovered after a long time
http://i66.tinypic.com/2q311f4.png

I am going to be PMing everyone to remove the negative feedbacks.

If anyone would like to verify the message in that pm see below:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ajw7989 has been hacked/lost. Please reset the email to ajw7989@gmail.com. The current date is 9/10/2017
-----BEGIN SIGNATURE-----
1GaaGPapfp5BUfQzKQrmGVpwZQvLW3SZSv
H7tUcpaRX0BapcxV747bI6bHUAPhfBjeokSsEdPuJUS1SiLVStssnsCkv6p8WN2uYiGHDGcYxIdXvuY a8lEg+H0=
-----END BITCOIN SIGNED MESSAGE-----

New message verification:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ajw7989 has been hacked/lost. As of 9/10/2017 I have recovered the account
-----BEGIN SIGNATURE-----
1GaaGPapfp5BUfQzKQrmGVpwZQvLW3SZSv
IObjLUqrGKCEDEjDEzIMJ5cgLU/jaIhPLcKkLnOcCY/uchcHlMEOhsvtw3fU8/VnYIu99JoFlE4ddiP2JmXN4AU=
-----END BITCOIN SIGNED MESSAGE-----

So you wait 1 year.
May i need to wait 1 year too?