Bitcoin Forum

Total amount excluding losses on dice: 0.1 BTC now.

2 heroes 1 senior some other shit


This is some fucking revenge for you Stunna.

https://bitcointalk.org/index.php?topic=1544437.0
https://bitcointalk.org/index.php?topic=1544607.0
https://bitcointalk.org/index.php?topic=1544607.0

In other words you stole $65 for shits and giggles. Pathetic.

Actually more like $200 but I lost over 50x that amount because of this piece of shit forum.

b4tbm9D8pfk

Are you fucking kidding me?
So you scammed me?
Are u serious or just a troll?

Either way pathetic. It isn't anyone's fault except your own that you have a gambling problem.

Actually it has nothing to do with gambling.

I'm on a vendetta and I'll never stop.

Posting 2 of the same threads? Where is the 3rd?

How did the server make you lose 10 grand?

... and how did Stunna have anything to do with that?
Since:

Says a gambling addicted kid who is not worth two shits.Oh you poor little Robert,I forget you're such a massive hacker.You will always be the cunt you were.Stealing money is not hacking btw,work up your English lessons.

How the hell do you think I got into 4 accounts? Oh no, I just guessed the password. You always did know what I was up to!

You have been spending a lot of time on HackForums recently yeah ? Why dude ? You're a nice guy ,stop making these poor signature campaign earners suffer for your loses.Your vendettas are against PrimeDice or Stunna or whatver,what hacking accounts to do with this ? Get your shit together Robertt.Be a good boy that you're,stop being a wanna thug.

Anyone ELI5 on the history of this?

ELI5:

I found a SMF 0day.

Fuck you you piece of shit. You don't even know what's coming to you.

Thank you for your support, it means alot to me.


We are not finished yet, but Robertt u will find out. I will not let Robertt get away unpunished.
I am going to a local service that I will pay to find out who Robertt is, and mayby let them do some more stuff  :P I am sick of getting scammed, it isn't even pathetic anymore, it is far below that.

Can anyone tl;dr this whole story so everyone can understand it as our dawgie requested before?
FruitsBasket more details?

Okay, so this is what happend:

I saw that the user stealth923 was asking for a loan, so I decided to look at the request and accepted it. I thought it was shady that there was no signed message, but it was never staked so I though it was ok, since all the posts were in altcoin announcements. Then he gave me the password, which sounded like easy hackable. So then I made a post and said it, then the lender/scammer became angry and said I was a scammer, so I was forced to send him the lending amount we agreed on. Since the that account I control now is a hero member, is it lucky that there was only scammed 0.08BTC and not more, so the damage that is caused is small. I have send an email to the real owner, since that email was staked in a PM from 2014 and was in the profile page. Now I will be waiting for the real owner to contact me and we will talk about what we will do. Please son't send me fake emails, I am not stupid.

I'll remove the negative feedback once the accounts are back in control of the original owner.

I don't understand why you judge stunna in your scam (except you're lost a lot money in his site, and you blame him for your loss, PD has provably fair and they are one of trusted gambling sites). But didnt you have shame? You just scam people who already trust in you.

But what if hes just trollin around here?? if he really hack those accounts he will not possibly expose it on public and the big possibilities there is he will use it on big scams in future, but what happen here is he easily drop the name out of them maybe he just random picked it from auction section because their are possibilities that the owner of that accounte are temporary off since he was use his account as collateral. OP seeks attention only here.


I think he lose big money in their and he was catching the attention of stunna and thats sad since no one's forcing him to gamble and yet if he lose he will blame the owner that he is being by the said site.

If you dont want to lose money dont gamble.

Condoras seem to be one of the victim.   https://bitcointalk.org/index.php?topic=1544437.0;topicseen
User took loan and the account was provided as a collateral I think. Condoras said he secured the account. Poor man, he took a negged account.

there are 2 other victims too, Fruitbaskets, and the one still no idea because OP just posted 3 link, which 2 of them are same link. This is the risk when you're going to give loan to people, even though they can do sign msg from old address.

Actually the borrower didn't provide a signed message. Condoras took a signed message from a new address. Borrowers reason was that he can't provide an ol signed message because he never staked an address. Personally I wouldn't give a loan to someone who can't provide a proof that he is the original owner of the account.

oh my bad, i though the borrower was did sign msg from old address.

Causing other people to suffer while you feel you are justified in your action, will only lead to pain. for both the people you harm and yourself

Yes, if you can't get a signed message prior to buying, or accepting as collateral an account, then the account might as well be hacked. It is one thing if you simply can't sign a message from an old address associated with their account, however once that account starts changing hands (possibly multiple times), fairly serious issues start popping up, especially considering that it can often be difficult to tell the "real" person who sold a particular account.   

the problem on lender's side is even they know the account can't provide a signed message they still accept it now they gave free bitcoins to the scammer, good for them atleast they will learn the lesson about the signed message

The three accounts he's talking about are:
jylee1997123
phosphorush
stealth923

They were all almost certainly hacked using the password hashes that were leaked a year ago -- these users never changed their password since then, and were probably using fairly simple passwords.

For all of these users, I randomized their passwords and changed their email addresses to their initial values. So if they return, they'll probably (though not certainly) be back in the hands of their original owners.

Hey Theymos,

Thank you for helping me out here, I have had contact with the original owner and I told him what u told me through PM. I am still a bit upset about the fact that I loose the collateral(I was going to give it back anyway, there was no point in keeping it) and my money, but I guess no one can help that and it is my own fault. And yes the password was so easy hackable that it would only take seconds to crack.

The real owner of the account replied and said he didn't make those loan requests.
So he was indeed hacked.

According to the seclog, the password has been reset through the email.
Please Stealth923 confirm it here and send me an email saying that you got your account back.

I assume you just hacked 3 alt accounts of Stunna? :P

Yes, i am the other victim of this scam... :-\

I should be more cautious, its my fault...

So now what?  I need to wait for the original owners?

EDIT : Btw and just for the record, this is his Alt account https://bitcointalk.org/index.php?action=profile;u=876555 to communicate with me,, when he "gave" me the Hero account for collateral.

I confirm that. I have no access to the Hero account that i take as collateral.

I hope at least, the original owners to get these accounts back...

Do you have any idea who the OP is? (Was his account hacked too?).

stealth923 was already a Dash scammer and cult enforcer, so this isn't really much of a change.   ;D

Plz LMK when you're going to dump his Masternodes, so I can short ahead of time.   :P

That is online terrorism.Taking revenge on someone else for someone else's mistakes or blaming our own fault on others

Hi FruitsBasket,

Yes I have got my account back by resetting the password.

thanks. Need to the bad rating removed

I am replying because I got a PM from an user asking me to confirm that your account is not in the hands of the original owner. To confirm this I need you to reply to the email I have sent you a while ago, I already told you that. If you can not reply to that email that I sent to, you are not the original owner.

The admin should really do a force reset of all the passwords, this is going out of controll and need to be stoped right now.

Is it not possible that he simply do a force reset?

The question would be how he could go about doing something like this.
Would he set all the passwords to the same and allow every account on the website to be hacked much easier?
Would he send out user's passwords through E-mail, leaving those without an E-mail linked to their accounts locked out?

Theymos already sent out an email when the leak happened (over a year ago) warning users to change their passwords; I do not think there is not much more he could do without breaking some user's forum experience.

I'm done with the hacking.

This is the final message you will receive from me. Just to confirm; I was not using a leak. I was using a SMF vulnerability that allowed me to get into accounts created between a few specific years & some other requirements.

Good day.

Any credibility to this post?

Seems to be a lot of hacks going on. Did no one provide a signed message for these accounts when received as collateral?

I do not believe someone who has hacked accounts and scammed people would be bold enough to say that publicly, at the risk of getting a permanent ban.

Banned on what grounds? Its not against the rules to scam someone.

Omg what a stupid user opened this topic.Why you scammed him?You are too stupid to earn money alone or what?You can earn thausands $ per month and more you can earn million $ on internet with your hadwork but no you must scam somebody and stole money because you are stupid and lazy.

Hacking, maybe?  Although the rule is not written anywhere I doubt it is allowed.
I actually thought OP already got banned for this.

Hacking the forum is actually allowed (as long as you follow some guidelines) and might even get you rewarded. Hacking a user account, e.g. through phishing isnt punished AFAIK. The hacked user may not get the account back, because its unclear who the original owner is.

You make it sounds as if scamming is a good thing to do. Hacked accounts are getting banned though.
I have been reporting hacked accounts and a staff member(not mentioning names) has banned the accounts.
If there is no rule for it, staff members should decide by themselves what is needed to do.

Im sorry you think so.


I doubt that an account gets banned just for "its hacked".

That depends. IIRC some hacked accounts have been banned (once the original owner has provided sufficient proof) by staff to prevent their misuse.
I somewhat doubt this is the case with some of these accounts however, since I remember seeing some of then didn't have a staked address.

In which case its just one step in the restoring process and the account is not actually "banned", but rather "locked".

Three  accounts that were hacked by robertt were banned, I don't know if they still are banned.
I could provide you proof if you want, since I still have the PM from the staff member. I think the ban was deserves since robertt was going full delusional.

All Im saying is that there is very likely more to it. Otherwise its too easy to get someone banned when no one was actually hacked. Admins (and maybe globals now as well?) also have additional information that might help them decide (like e.g. IP addresses).

The hacker was using the stolen DB from the hack last year. He is stupid enough to leave a lot of information about himself so it is fairly easy to confirm when he actually hacked an account (plus the fact that an account's PW was not changed since the hack.

The hacker isn't even using a VPN, and most likely purchased the DB fairly recently. He is nothing more then a script kiddy.

Whoa extreminitey.  Sorry for your loss but you know you can get banned for death threats, right?

explicitly, if death threats for trolling, and completely unreasonable.
and Ypii, you need not to use death threat to vent your anger, because Robertt is being furious about something he hate - which is similar to my case when i was new.

You could say it's not a death threat, but a movie reference. No harm done there.

Hope Epochtalk comes out soon, sick off Robertt exploiting SMF. I do remember the time when he was cool and did lots of good stuff for the forum.

This kind of justification is sad and clearly shows a lack of desire for truth in you, or a rebellion to need to try to attempt to bend the truth to suit your will.

You are funny. The forum having a reward system for hacks[1] is a good thing, because it gives those smart enough to actually find and exploit a bug to report it to theymos and not sell it to someone else. I dont know why you think an account should be restored without proper proof or what that has to do with my desires for "truth". Whos truth are you talking about anyway?

---

Is that known? I still have to catch up on recent events (yes even things months ago). I wonder what the database costs and howmuch rockyou.txt[2] with good rules can get out of it. I would assume a large portion was breached quickly after the attack.


[1] Yes, I know, but its the commonly used term and Im lazy right now.
[2] https://wiki.skullsecurity.org/Passwords

Yes theymos confirmed that the hacker (robertt (https://bitcointalk.org/index.php?topic=1544686.0)) was using the leaked password hashes here (https://bitcointalk.org/index.php?topic=1546524.msg15551954#msg15551954).

Robert only recently started hacking forum accounts, and trolling/scamming with them somewhat recently, so it is possible that he only recently figured out how to check for passwords from the hashes of the passwords. However the amounts that he is stealing from others is low enough to suggest that he purchased the DB recently (from what I have been told, the value of DBs declines over time, especially after it has been known that the DB has leaked).

I am not sure how much the leaked DB is worth, however I have been told that someone found the DB for sale on a DNM a few months after the hack for 100BTC by a seller with a lot of reputation on that DNM. I visited that DNM recently, and it appears that the DB is no longer listed for sale there; I am also not sure that the particular DNM in question is not an outright scam (it is listed on Deep Dot Web).

Well if i would be the admin yes then i would have no choice but lock out the users who have no access to the e-mail anymore or else sign a message!!!!

The security of this forum should be the top priority and not a few users who are stupid enough to use a email that they can not access anymore!

So you shall put this in question as well :

Why he makes it so hard to recover hacked account but does not simply force lock/reset all the accounts?

But who cares right he have enough money...

A password reset would be to help a few users who are too stupid to change their passwords. It is not theymos's fault that they didn't oblige to what his message said. Responsibility should be with the user, not the admin.

Thanks for the links and pointers. I guess I have to wait a little longer to take a look at bitcointalk passwords.

So you would lock out users 'stupid' enough to not use an email (which could be for several valid reasons) to protect those who are stupid enough to not change their password after a hack?

Theymos has several large communities that he takes care of; he is too busy to answer most queries of account recovery (especially considering that the majority of account problems are caused by the users themselves). If you can prove to a moderator that your account was hacked (through signing a message from a staked address usually) then they will apply a ban onto your account, essentially locking it.

What kind of revenge from stunna i don't think he will give a damn because they were not his accounts.

So what makes you think you revenged stunna ?

You would have to be delusional to think this database would be worth 100BTC lol.

Sure maybe some people used the same password for the website that they did on some financial account,
but anyone with half a brain is going to use different passwords for different sites,
and especially for any kind of Bitcoin wallet/ program.
(I'm assuming they put the price so high because people assumed you could use the info to steal coins from members.)

Did anyone see what "eng.chaps.returns" posted on here before the post got deleted (I assume the account probably got nuked).

It's *Engg Chakks S.After days of connecting the dots,I have managed to find his doxx.He's an Indian and a Computer Science Engineer.I missed that post anyway.Mind telling us,what was it about this time ? He still has active alt's on this forum.

It wouldn't surprise me. Remember we're talking about the details of (probably) 500,000 members.

There are more ways to steal Bitcoin than getting someone's wallet.
Look in the OP, he was able to get 0.16-0.17BTC from 3 members using accounts with little trust. If the could get that with those accounts, what if he got one with Dark Green trust? What if he got one on the DT network? Not to mention that he could also sell the accounts on, or scrape the accounts for personal details to sell.

You'd think so, but it's amazing how many people practice terrible security.

Are you going to give the hero member account to its right full owner without asking for the btc which you have lost in lending ?
You should ask the owner around 0.1-0.15 BTC for recovering his account  ;D and for work you have done in finding the real owner

hmm i guess we wont know because the OP isnt responding anymore
but this thread is wierd with the guy conffesing and spitting on the forum that it sucks

I didn't have a chance to, since theymos had to come in and reset the password of the account I held as collateral. Of course I was upset about it, since I worked hard for that bitcoin. The real owner didn't even bother to reply when he got his account back(most probable).

This hacking thing is just over my head. I have absolutely no idea how a hacker does his work.

Looks like rocket science to me :-\ :-\