Bitcoin Forum

Other => Meta => Topic started by: The Sceptical Chymist on May 01, 2019, 04:21:07 PM



Title: Can someone help me with a seclog question?
Post by: The Sceptical Chymist on May 01, 2019, 04:21:07 PM
I got a PM from RAGEmond (https://bitcointalk.org/index.php?action=profile;u=916871), who I tagged a while back for selling his account.  He says he recovered it from the hacker and gave me a link to the seclog. 

My question is:  what does "manual recovery, previously-queued ownership change completed" mean?  Does that mean he successfully recovered his account via petitioning Theymos or the mods?  I don't see how he could have gotten the account back from the hacker, and I'm not sure whether to believe his story.  Thanks, guys and gals.


Title: Re: Can someone help me with a seclog question?
Post by: TryNinja on May 01, 2019, 04:23:26 PM
I'm not sure if that's all correct, but:

Simply you can check on seclog; https://bitcointalk.org/seclog.php , you can see same below quote.
Quote
manual recovery, previously-queued ownership change completed
Means they have recovered account successfully. Seems recovery system working fine now if someone able to provide valid information. If you have staked address and control original email then it's very easy to recover your account.
According to users who succeeded to recover their accounts, two fundamental elements needed to start the manual recovery process:
- Signed message from a staked btc address (not altcoin) in an unedited post.
- Full control over the original email used for account registration (may be more important than the signed message) .

The new system seems to be smoothly running without problems. Thanks Admin :)

I made a thread to record all the data entries in SecLog (https://bitcointalk.org/seclog.php) about manual recovery of lost/hacked accounts: All the Ownership-Changed and Restored accounts (https://bitcointalk.org/index.php?topic=5099645.msg49317801#msg49317801)

67 accounts have been manually recovered for the last two months (+2 recovered late in December 2018) . Scroll to the first comment of the thread (https://bitcointalk.org/index.php?topic=5099645.msg49317814#msg49317814) to see reports sorted by month basis.
Report for January (https://bitcointalk.org/index.php?topic=5099645.msg49524952#msg49524952)
Report for February (https://bitcointalk.org/index.php?topic=5099645.msg49967460#msg49967460)

Looks like he may have gone through the new recovery system (https://bitcointalk.org/index.php?topic=5089777.0) and an admin/mod recovered his account.


Title: Re: Can someone help me with a seclog question?
Post by: suchmoon on May 01, 2019, 05:09:39 PM
what does "manual recovery, previously-queued ownership change completed" mean?  Does that mean he successfully recovered his account via petitioning Theymos or the mods?

Yes... I think Cyrus is heading that effort. Basically they collect evidence of ownership and if it's considered proven they "queue" it for 7 (?) days (probably to give a chance for potential appeals) and then return it to the owner.

With that said, an account seller could probably abuse that in a few different ways. They could force the recovery from a real buyer. They could fake a hack and a recovery in collusion with the buyer to make you think there was no sale. I wouldn't take this seclog entry as gospel.


Title: Re: Can someone help me with a seclog question?
Post by: DireWolfM14 on May 01, 2019, 05:22:49 PM
They could force the recovery from a real buyer. They could fake a hack and a recovery in collusion with the buyer to make you think there was no sale.

Wow, that would be a dirty trick.  Good thing most scammers aren't that clever, but maybe a few have figured it out.

Here's a situation where a hero account was recently recovered and had the "manual recovery" tag applied in the sec-log.
 Subsequently, the user skipped out on a $80 loan.  So, yeah I wouldn't take that as a sure thing the account holder is trustworthy...

https://bitcointalk.org/index.php?topic=5137126.msg50811742#msg50811742


Title: Re: Can someone help me with a seclog question?
Post by: YOSHIE on May 01, 2019, 06:34:56 PM
Maybe you can see a little about RAGEmond (https://bitcointalk.org/index.php?action=profile;u=916871), who exactly is he,

Maybe this can help you with other evidence: Topic: [CLUB] The SpamBuster! Over 7000+ accounts reviewed : [23.11] (https://bitcointalk.org/index.php?topic=4720640.msg49270544#msg49270544)

I hope this can work.
sold, spamBuster or something else, alt account.


Title: Re: Can someone help me with a seclog question?
Post by: The Cryptovator on May 01, 2019, 07:41:00 PM
We should not doubt about ownership if account recovered by forum. Account recovery team will not handover a account to other user. Because there is need original email address which was used during registration and staked address. So it doesn't matter account operated by whom. Main fact is forum itself give him ownership of account.

What happened if account sold with stake address key and original mail? In that case admin or recovery team investigate about IP address, and it is noticed from below quote,
Quote
Limit IP retention:
Reduce the retention of your future logged IP addresses. This will make it far more difficult to recover your account if it is ever stolen; make sure that your email address is correct and that you have staked a public key.  

So if account manually recovered by forum, that means forum itself giving statement that account holder is original owner. If there is no any other issue, you might remove your negative feedback (IMO), although its depend on you but at least we should respect forum/admin statement.


With that said, an account seller could probably abuse that in a few different ways. They could force the recovery from a real buyer. They could fake a hack and a recovery in collusion with the buyer to make you think there was no sale. I wouldn't take this seclog entry as gospel.
As I said above, most likely account recovery team also checking IP details.(Not sure but probably on specific case)

Edit,
Seems mentioned user (RAGEmond) is correct, account recovered today,
Quote
Today at 11:25:01 AM - RAGEmond - manual recovery, previously-queued ownership change completed


Title: Re: Can someone help me with a seclog question?
Post by: The Sceptical Chymist on May 01, 2019, 08:11:29 PM
We should not doubt about ownership if account recovered by forum.
While I don't trust this 100%, I'm inclined to give this guy a break and remove my neg on him.  I think that's what I'm going to do, but if any of you guys check this member's background or whatnot and find anything you deem neg-worthy, obviously do your thing.

Thank you for schooling me on what that phrase meant.  I don't often visit the seclogs and don't recall anyone defining what that meant.  Going to lock the thread now.