Bitcoin Forum

Alternate cryptocurrencies => Service Discussion (Altcoins) => Topic started by: Peanutbutterpolka on June 27, 2017, 07:48:59 PM



Title: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 27, 2017, 07:48:59 PM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: McWorse on June 27, 2017, 07:53:39 PM
How many deaths in traffic does it take for you to fasten your seatbelt?


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Kazkar on June 27, 2017, 08:00:37 PM
How many deaths in traffic does it take for you to fasten your seatbelt?


I completely agree.
This is the choice of everyone. And to force, does not make sense.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 27, 2017, 08:01:25 PM
How many deaths in traffic does it take for you to fasten your seatbelt?


How many licks does it take to get to the center of a lollipop?

Ok lets stay on topic.

Polo and their complacency has exposed them to the possibility of a class action lawsuit.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 27, 2017, 08:05:43 PM
How many deaths in traffic does it take for you to fasten your seatbelt?


I completely agree.
This is the choice of everyone. And to force, does not make sense.

Says the hacker..  ::)

Seriously, no 2fa, you might as well give the hacker your monies up front. Polo knows accounts keep getting hacked. They do nothing. Their complacency has opened them up to a lawsuit


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: bathrobehero on June 27, 2017, 08:14:00 PM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.



Please....

Lawsuit because of stupid people?

People who gamble with ICOs are asking to get ripped off,
people who download all kinds of crap wallets/miners are asking to get hacked and
people who refuse to use 2FA are asking to get hacked - simple as that.

You can learn from other people's mistakes or you can learn the hard way. I learnt the hard way but I didn't blame the exchange, I blamed myself.

Like many other, Poloniex provides a simple service, it's like a tool. Educate people how to use said tools instead of blaming the tool itself.

Do you really think that people who are not using 2FA are making the necessary steps not to be hacked otherwise? Be it password security, antivirus, etc. They are all likely oblivious to all of this and you should educate them instead of blaming exchanges or other services.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: McWorse on June 27, 2017, 08:14:47 PM
You have a big, big amount of gold on your table.
When you go on vacation, do you leave your door open, or do you close it... ?

Feel free to leave your door wide open.
And after returning home and recognizing, that your gold is away:
Feel free to proclaim, that door manufacturers have to write on every door:
You better close it, when you leave!

I am sad about every lost because of hacking.
But:
Everyone has the chance of 2FA at Polo.

But in life, everyone is free in his decisions.
And some decisions are sometimes wrong.

Learn to walk alone!




Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: stupid_seb on June 27, 2017, 08:29:09 PM

Please....

Lawsuit because of stupid people?

People who gamble with ICOs are asking to get ripped off,
people who download all kinds of crap wallets/miners are asking to get hacked and
people who refuse to use 2FA are asking to get hacked - simple as that.

You can learn from other people's mistakes or you can learn the hard way. I learnt the hard way but I didn't blame the exchange, I blamed myself.

Like many other, Poloniex provides a simple service, it's like a tool. Educate people how to use said tools instead of blaming the tool itself.

Do you really think that people who are not using 2FA are making the necessary steps not to be hacked otherwise? Be it password security, antivirus, etc. They are all likely oblivious to all of this and you should educate them instead of blaming exchanges or other services.

You're speaking the truth @bathrobehero.
2FA is not complicated, and people should be educated. These tool are as powerful and as dangerous as the use you make of it.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 27, 2017, 08:31:48 PM
You guys are funny.

Polo clearly isnt safe for accounts without 2fa.

Polo knows its site continually gets hacked by this type of attack.

Polo is guilty by allowing this to continue. Easy lawsuit win.


Edit. Polo also made and kept money from the fraud, ie transaction fees. Sounds guilty by association to me.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Snail2 on June 27, 2017, 09:07:17 PM
Polo and their complacency has exposed them to the possibility of a class action lawsuit.

Well, and what those claimants would ask for? Punishing Polo for their own ineptitude?


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Haladay on June 27, 2017, 09:22:05 PM
How many deaths in traffic does it take for you to fasten your seatbelt?


This is exactly what's happenning with polo's 2fa situation. The results never make people take an action about a problem. Never forget.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: clardalan on June 27, 2017, 09:26:44 PM
>5000 dollar should be mandatory 2FA, or 2 day delayed transfers.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: bathrobehero on June 28, 2017, 12:53:43 AM
You guys are funny.

Polo clearly isnt safe for accounts without 2fa.

Polo knows its site continually gets hacked by this type of attack.

Polo is guilty by allowing this to continue. Easy lawsuit win.


Edit. Polo also made and kept money from the fraud, ie transaction fees. Sounds guilty by association to me.

If anything, your mindset is what I find funny. Your famous US arrogance that some people over the pond have is seeping right through.

If you have a properly safe password and don't have a keylogger or session stealer you're fine.

AFAIK polo still requires you to click on a confirmation through an email link in case of a withdrawal so in order for anyone to get their funds stolen they would have to have both their Polo and their email compromised.

Lawsuit...   :D :D :D


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: SimpeleSimpele on June 28, 2017, 01:08:39 AM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.



you have proof, if this month poloniex account get hack
i have several poloniex account, use 2fa and without 2fa, all my account is safe without problem


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: pumpmydump on June 28, 2017, 04:01:06 AM
You guys are funny.

Polo clearly isnt safe for accounts without 2fa.

Polo knows its site continually gets hacked by this type of attack.

Polo is guilty by allowing this to continue. Easy lawsuit win.


Edit. Polo also made and kept money from the fraud, ie transaction fees. Sounds guilty by association to me.
What you don't seem to understand is that it isn't Poloniex that gets hacked, it is the computers and/or emails of the account holders that get compromised, allowing the hackers to get their Poloniex password and compromise their accounts.

You are the one enabling yourself to get hacked when you don't use 2fa, Poloniex isn't there to protect your computer/email from hackers.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 28, 2017, 04:42:26 AM
The victim blaming here is over the top. Dangerous products get recalled all the time. This is a repeat issue.


Of note, mine happened end of may, this guy just recently. Polo allows this to happen or is in on it.

Same exact shit happened to me.

Polo is in on it, I guarantee it 100%

This happened at the end of may. They ultimately traded out my 600 litecoins to fucking qora, first to btc, then xmr.

Polo is like swiss cheese.

Actually Im very certain it was one of the help desk fucktards as I had contacted support a week prior. I had this particular account for maybe two weeks before it was hacked the exact same way as yours.

If polo is this insecure, why the hell haven't they fixed this problem. Make 2fa mandatory.

Polo is probably insolvent, and hence hacking users accounts using this method. Their response is always, its your fault not ours.


Fuck them



Hi Guys,

First of please be nice and constructive. I had my fortune stolen away and I am at a very bad place, infact I am depressed ($17000 worth of my savings that took me more than 8 years to save). I would appreciate if you guys can give me honest suggestions of what to do or if there is any chance Poloniex will refund me for the hack that happened.

So here is what happened as I sent email to Poloniex but they have not responded to me yet:

TICKET NUMBER # 273741

Dear Poloniex,
My account was hacked this morning at 2:50 am BST (british standard time). I am devastated as I had upwards of $17000 worth of portfolio of coins. Someone logged into my account, converted all the coins to BTC first, then to BCN, then he went on to a very illiquid BCN/XMR and started buying high and selling very low at huge spreads. I suspect he was on the other side of the trade to profit from it. I am sure you can easily find out who the culprit by checking on the other side of the trade.
Please check the activity between 2:50 am - 3:00 am BST (british standard time). This is a clear theft where your site has been hacked to gain access to my account and upwards of $17000 was stolen from my account.
I have contacted the Attorney General at your state who has advised me to contact you directly first before taking it further with him.
I have the evidence of the email I received at 2:50 am BST, the ip address where it was logged in from and I have also downloaded the transactions to prove it.
Please look into this issue asap and get back to me please. This is my hard earned savings over past 7 years and I will leave no stone unturned to get this resolved.
Thanks


So here is the email above. Please suggest what to do, I have also reported it to Police and action fraud. I did not have 2FA. I did not use this password on any other sites.
I know I am very silly not to have 2FA. This thread is all about what options I have, please suggest.

Thanks in advance





Staff can steal it then play dumb.. Implying hackers.
Perfect crime.. It would impossible to catch the staff doing it because they all operate with 0 transparency.
Think about it people.. I am just pointing out common sense.



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 28, 2017, 04:48:30 AM
In case any of you were wondering. I boot from a live linux cd before any exchange activity or email and reboot inbetween steps.

And just randomly the account gets hit right after contacting customer support.

I still have the qora in my account, that is evidence of a crime. If they delete it they are destroying evidence.

Polo also made and kept the transaction fees from the theft.

Thats pretty fucked up to make money off of a theft.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: bathrobehero on June 28, 2017, 09:19:46 AM
In case any of you were wondering. I boot from a live linux cd before any exchange activity or email and reboot inbetween steps.

And just randomly the account gets hit right after contacting customer support.

I still have the qora in my account, that is evidence of a crime. If they delete it they are destroying evidence.

Polo also made and kept the transaction fees from the theft.

Thats pretty fucked up to make money off of a theft.

I don't believe you. Why not just use 2FA instead of this nonsense then? Unless you use a unique, otherwise unused email, with a unique password, it's a useless excercise.

You have to have your email hacked to allow the hacker to recover your poloniex password and do the deed.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: sud on June 28, 2017, 12:48:27 PM
Some people will never learn.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 28, 2017, 01:45:38 PM
In case any of you were wondering. I boot from a live linux cd before any exchange activity or email and reboot inbetween steps.

And just randomly the account gets hit right after contacting customer support.

I still have the qora in my account, that is evidence of a crime. If they delete it they are destroying evidence.

Polo also made and kept the transaction fees from the theft.

Thats pretty fucked up to make money off of a theft.

I don't believe you. Why not just use 2FA instead of this nonsense then? Unless you use a unique, otherwise unused email, with a unique password, it's a useless excercise.

You have to have your email hacked to allow the hacker to recover your poloniex password and do the deed.

If my email was hacked then why not just withdraw the whole amount? They didn't withdraw anything. Just a transfer to btc then, to xmr, then to qora which they left me a bag full of, and they got the xmr and out the door with their account.

The email was new, the polo acc was new. The polo account was maybe two weeks old and began with an A.
I believe that they hacked polo, and got a list of non 2fa accounts and started alphabeticaly at the top.


Youre right, why not just use 2fa? That is what Im arguing. Why is it NOT mandatory? Polo is like swiss cheese. They know this yet wont dont change their policy.

Read my spoetnik quote in my last post.

Polo is not secure and is not trust worthy. And I believe have opened themselves up to a lawsuit.

Don't yall have consumer protection across the pond? I bet you do.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 28, 2017, 01:48:54 PM
Some people will never learn.

Oh, Ive learned that only 2fa is really secure, until it aint.

So why is it not mandatory, the whole point of this thread.

Of course id like my litecoin back. And I want the fees polo made off my theft back.

However, I am simply arguing for 2fa to be mandatory at polo. The fact that it isn't, when this is a repeat problem effecting several people should leave them open to a lawsuit.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: sud on June 28, 2017, 01:58:23 PM
Some people will never learn.

Oh, Ive learned that only 2fa is really secure, until it aint.

So why is it not mandatory, the whole point of this thread.

Of course id like my litecoin back. And I want the fees polo made off my theft back.

However, I am simply arguing for 2fa to be mandatory at polo. The fact that it isn't, when this is a repeat problem effecting several people should leave them open to a lawsuit.

It's not mandatory because some prefer convenience over security. Their choice.

If you want best protection of your account, go to settings page and enable all security options. I do it on every exchange right after sign up.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: silvermetal on June 28, 2017, 02:01:47 PM
Oddly enough an E-mail confirmation is not necessary to process the withdrawal after the hack at poloniex.

Agree with the op, because poloniex is aware that multiple accounts without a 2fa are hacked they must take action (eg inform their customers, make 2fa mandatory and delay withdrawals). Because they don't, it makes them (partly) accountable for the current hacks.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: NeuroticFish on June 28, 2017, 02:09:06 PM
Some people will never learn.

Oh, Ive learned that only 2fa is really secure, until it aint.

So why is it not mandatory, the whole point of this thread.

Of course id like my litecoin back. And I want the fees polo made off my theft back.

However, I am simply arguing for 2fa to be mandatory at polo. The fact that it isn't, when this is a repeat problem effecting several people should leave them open to a lawsuit.

If you lose your phone, the 2FA will make your life hard. If you only keep pennies on Poloniex, it's not worth it.
I did a factory reset for my phone and I kept my exchange accounts without 2FA for some 2-3 days with no 2FA (obviously they were empty too).
When the phone came to a good status, I've re-enabled 2FA everywhere.

Bottom line: there are moments when it's okay to have no 2FA. Making it mandatory would be stupid. It's the user's problem to deal correctly with this.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: btc_zero_sum on June 28, 2017, 04:02:42 PM
Polo continually is getting hacked.

wrong!

it's people and their shitty computers getting hacked.

i bet you guys have wallets, login to exchanges and other valuable stuff on the same computer you use to watch porn, open any email attachments and visit other lame site that would refill your stupid windows os with malware and keyloggers

yes, start a class action and people will laugh at you  ::)


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on June 28, 2017, 04:38:10 PM
Reread the thread. I used a fresh boot from a livelinux cd. And used a fresh email account. If email account was hacked why not just withdraw, why trade the value out? No, it seems to me polo help desk or polo is ,has been, and still is hacked.

The exact same thing has happened to others.

Polo is complicit and negligent. They are complicit cause they made $ off the theft and then investigated themselves and found no wrong doing. And then low and behold it happened again to somone else.



Polo continually is getting hacked.

wrong!

it's people and their shitty computers getting hacked.

i bet you guys have wallets, login to exchanges and other valuable stuff on the same computer you use to watch porn, open any email attachments and visit other lame site that would refill your stupid windows os with malware and keyloggers

yes, start a class action and people will laugh at you  ::)


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: btc_zero_sum on June 29, 2017, 12:17:39 PM
Reread the thread. I used a fresh boot from a livelinux cd. And used a fresh email account. If email account was hacked why not just withdraw, why trade the value out? No, it seems to me polo help desk or polo is ,has been, and still is hacked.

The exact same thing has happened to others.

Polo is complicit and negligent. They are complicit cause they made $ off the theft and then investigated themselves and found no wrong doing. And then low and behold it happened again to somone else.



Polo continually is getting hacked.

wrong!

it's people and their shitty computers getting hacked.

i bet you guys have wallets, login to exchanges and other valuable stuff on the same computer you use to watch porn, open any email attachments and visit other lame site that would refill your stupid windows os with malware and keyloggers

yes, start a class action and people will laugh at you  ::)


which linux distro and which version?
did you connect from your house network, from a cafe or from an open network?

explain better how you got your funds stolen, even if i really don't like poloniex i hardly believe it's their fault


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: xbiv2 on June 29, 2017, 12:21:20 PM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.


New support members from moderators have to many rights on getting information. It the problem.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: NUFCrichard on June 29, 2017, 02:15:52 PM
Do you have any information about how many people have been hacked, and whether or not there has been a password leak?
The fault could lie with you, we don't know that. I don't know why you don't just activate 2FA, even if it is a just in case.

I hope your password is crazy strong too. I don't keep much money at Poloniex or any other exchange, but I always use 2FA.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Hueristic on June 29, 2017, 04:55:46 PM
Some people will never learn.

Oh, Ive learned that only 2fa is really secure, until it aint.

So why is it not mandatory, the whole point of this thread.

Of course id like my litecoin back. And I want the fees polo made off my theft back.

However, I am simply arguing for 2fa to be mandatory at polo. The fact that it isn't, when this is a repeat problem effecting several people should leave them open to a lawsuit.


So you want to blame the exchange for not forcing you to use the extra security they provide and your answer to that is to force everyone else to have to use it. Fucking ridiculous, your out of your fucking mind. Go back to banks and fuck off.


Polo continually is getting hacked.

wrong!

it's people and their shitty computers getting hacked.

i bet you guys have wallets, login to exchanges and other valuable stuff on the same computer you use to watch porn, open any email attachments and visit other lame site that would refill your stupid windows os with malware and keyloggers

yes, start a class action and people will laugh at you  ::)

QFT



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: mmhaimhai on June 29, 2017, 04:59:54 PM
I dont understand why some people dont use the 2fa when its just few clicks away in exchange of haigh security of their account. Personally, i activate 2fa on all necessary accounts i have.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: silvermetal on June 29, 2017, 05:40:18 PM
So you want to blame the exchange for not forcing you to use the extra security they provide and your answer to that is to force everyone else to have to use it. Fucking ridiculous, your out of your fucking mind. Go back to banks and fuck off.

Well maybe they should leave the option open for idiots like you to switch off the 2fa with the following disclaimer:  At your own risk! It is a matter of time that your account will be hacked and your coins stolen.

Not everybody knows that nowadays you don't have to provide your mobile number or other private information to enable 2fa. That is why a lot of people have not enabled it. It is the task of a decent and reliable exchange to educate and inform their customers!



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: TrueAnon on June 29, 2017, 05:44:13 PM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.



More ppl need get on 1ex.trade!!!
Big vol this summer coming.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Spoetnik on June 29, 2017, 06:18:35 PM
How about stop using crooked exchanges ?

What you think someone is guessing all those stolen passwords ?
Jeez you brats are naive and gullible  :D

Didn't learn from GOX, Cryptsy, Mintpal, MCXNow ?


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Hueristic on June 30, 2017, 12:07:55 AM
So you want to blame the exchange for not forcing you to use the extra security they provide and your answer to that is to force everyone else to have to use it. Fucking ridiculous, your out of your fucking mind. Go back to banks and fuck off.

Well maybe they should leave the option open for idiots like you to switch off the 2fa with the following disclaimer:  At your own risk! It is a matter of time that your account will be hacked and your coins stolen.

Not everybody knows that nowadays you don't have to provide your mobile number or other private information to enable 2fa. That is why a lot of people have not enabled it. It is the task of a decent and reliable exchange to educate and inform their customers!



YUP, real idiot here been around here for years and never been hacked. Yup real dumbass. If your a retard your gonna lose your money know matter what. I'd explain that in more detail but I doubt you could grasp it.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: silvermetal on June 30, 2017, 05:04:07 AM


YUP, real idiot here been around here for years and never been hacked. Yup real dumbass. If your a retard your gonna lose your money know matter what. I'd explain that in more detail but I doubt you could grasp it.

If your vocabulary reflects who you are in reality; aggressive and suspicious then I understand that in this crypto world you have never lost a penny. I am happy for you, and hope you can say that after a few years as well.

But not everybody is like you, there are also a lot naive and faithful people who should be protected by making 2fa mandatory and by proper education/information.
 
Currently in this wild west of crypto it is steal or get robbed.



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Pente on June 30, 2017, 09:06:59 AM
How are the accounts getting hacked? Don't they use a hash of the password. I would think that as long as you use a strong password you would be okay. My Keepass generates a 24 random ASCII digit password. That should be more than sufficient.

2FA is a pain because you can't access your account when you travel overseas. I have to use a separate phone for each country due to phone incompatibilities, but I have never seen a 2FA account that allows for that.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: SomethingMAD on June 30, 2017, 09:45:19 AM
Bittrex has been a target since a long time ago, and many people have been hacked. And now Poloniex, the largest and most trusted Exchanger. Poloniex often encourages users to change their passwords regularly to avoid hacked accounts. The use of Authy / 2fa is highly recommended before more people lose money there.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: JasonXIII on June 30, 2017, 10:07:49 AM
In case any of you were wondering. I boot from a live linux cd before any exchange activity or email and reboot inbetween steps.

And just randomly the account gets hit right after contacting customer support.

I still have the qora in my account, that is evidence of a crime. If they delete it they are destroying evidence.

Polo also made and kept the transaction fees from the theft.

Thats pretty fucked up to make money off of a theft.

I don't believe you. Why not just use 2FA instead of this nonsense then? Unless you use a unique, otherwise unused email, with a unique password, it's a useless excercise.

You have to have your email hacked to allow the hacker to recover your poloniex password and do the deed.
So with a safe mail, everything is ok?
Which provider is the most safe? gmail, hotmail, yahoo, gmx? What do you advise please?


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Hueristic on June 30, 2017, 01:21:52 PM


YUP, real idiot here been around here for years and never been hacked. Yup real dumbass. If your a retard your gonna lose your money know matter what. I'd explain that in more detail but I doubt you could grasp it.

If your vocabulary reflects who you are in reality; aggressive and suspicious then I understand that in this crypto world you have never lost a penny. I am happy for you, and hope you can say that after a few years as well.

But not everybody is like you, there are also a lot naive and faithful people who should be protected by making 2fa mandatory and by proper education/information.
 
Currently in this wild west of crypto it is steal or get robbed.



I don't want a nanny state everywhere I go that is all. I believe in Darwinism and don't think everyone should be forced to do things they don't feel they need to save a few morons (not saying every hacked is a moron just making a general statement). We are Adults that can make our own decisions. Whats right for a few is not always right for all. There is headgear in all Our futures if the insurance companies have their way. How do you like having traffic stopped both ways for a school bus and a16 year old kid jumps out and gets in there car and drives away? I say if they are that dumb by that age they should not breed.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Mallyx on June 30, 2017, 01:25:37 PM
No 2fa is like hiding your life savings under your bed.
It's safe, until a thief come.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Hueristic on June 30, 2017, 01:40:50 PM
No 2fa is like hiding your life savings under your bed.
It's safe, until a thief come.

https://img0.etsystatic.com/027/0/7362041/il_340x270.526764524_lj5g.jpg


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: btcmaker21 on June 30, 2017, 02:24:16 PM
everyone should do his best to protect your money soo i think it should be up to you if u use 2FA the exchange cant nothing really do about unsecure computers .... the "unsecure" thing is the user of the Computer :P


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: ethereumhunter on June 30, 2017, 02:29:32 PM
i think not just in polo that we should do the best for our self because when we decide to make an account into every site, we need to make sure that our account is safe from the attacker. so if we are made an account in polo, then we need to activate 2fa before something bad is happen and we are only regret it because of that.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Spoetnik on July 01, 2017, 02:21:22 AM
everyone should do his best to protect your money soo i think it should be up to you if u use 2FA the exchange cant nothing really do about unsecure computers .... the "unsecure" thing is the user of the Computer :P

Like what when I ran around warning people about GOX or Crypts or RawX or?

OR how I did on the previous page?

You see investards..
You are well aware of the risks but proceed anyway.
You know better but shove your face in the ROI's beehive regardless.

If all the exchanges run the same way and all pretty much have the same complaints what'd you do?

Spoiler..

You leave dumb fucks.  :D

.. Then you all chant well huh how am I supposed to make Bitcoin profits then?

The answer?
You Don't.

So who is guessing 24 char long random passwords?
Where are they getting the account names from?
Who could do it and get away with it over & over?

Easy questions guys  ::)


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on July 01, 2017, 05:21:21 AM
At the end of may there was a polo ddos attack, the official story was too many new users. That is the time my account was hacked.

I really feel that the attacker got a list of non 2fa accounts and just started going alphabetical. This other user had the exact same thing happen, A full fucking month later. Coincidence that both accounts started with an A?

Doubt it.

Polo was and is still compromised.


My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.




In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?


My Account started with A as well (we may be on to something here)!! but not, I did not contact their help desk at all before that,
Did you see any unauthorized activity on your account?


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Zadicar on July 01, 2017, 05:54:00 AM
How many deaths in traffic does it take for you to fasten your seatbelt?


I completely agree.
This is the choice of everyone. And to force, does not make sense.

Says the hacker..  ::)

Seriously, no 2fa, you might as well give the hacker your monies up front. Polo knows accounts keep getting hacked. They do nothing. Their complacency has opened them up to a lawsuit
They wont do nothing even if they did make some investigations i will see that this thing would be a hard thing for them. This is the sole purpose of 2fa and as a user of the site and as a sensible person we would really use up this thing to secure our accounts and the funds inside it because if you dont set this up you are really making a hole into your account that can someone could able to bypass and stole funds inside of it. We should really be responsible and this is the main concern here.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Pente on July 01, 2017, 06:34:06 AM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.



I found your polo password: https://www.youtube.com/watch?v=QcyeYFXdHNQ#t=1m17


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: TastyChillySauce00 on July 01, 2017, 06:44:24 AM
At the end of may there was a polo ddos attack, the official story was too many new users. That is the time my account was hacked.

I really feel that the attacker got a list of non 2fa accounts and just started going alphabetical. This other user had the exact same thing happen, A full fucking month later. Coincidence that both accounts started with an A?

Doubt it.

Polo was and is still compromised.


My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.




In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?


My Account started with A as well (we may be on to something here)!! but not, I did not contact their help desk at all before that,
Did you see any unauthorized activity on your account?
Pretty sure that the hackers got the lists of both accounts with 2fa or non 2fa but just can't access the 2fa enabled accounts so the hackers just went through the unenabled ones.
Big chances the hackers themselves have the access to the database because phishing account especially an exchanger ones is kinda difficult.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Spoetnik on July 01, 2017, 11:09:49 AM
Wow you are all ultra fucking stupid.

Guess what?

Accounts with 2fa can still get hacked..
But it's rare because it puts the blame on guess whom?

If I had an exchange I could simply go through the accounts and take money from any with no 2fa..
Then simply imply it must have been "hackers"
And since there is no transparency or accountability it would 100% impossible to prove it wasn't.

So let's break it down stupid people..

If you had a 24 char random pass how does a guy guess it with only a few tries while not getting Blocked by the service?
Ever put in the password wrong some place before 3 times?

If they are allowing random people to brute force accounts then uhhh LOL

Further more I use a Password manager that creates deliberately hard passwords.
24 carefully designed chars that it says would take millions of years to crack.
And since I never reuse passwords I would blame 1 source if I got hacked.
Guess who?

Now on the other hand there is idiots out there that use basic simple passwords and also reuse them.
This would be target no. 1
Who could see password lengths of all users?

Mythical magic "hackers".. Or?


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Hueristic on July 01, 2017, 04:36:12 PM
At the end of may there was a polo ddos attack, the official story was too many new users. That is the time my account was hacked.

I really feel that the attacker got a list of non 2fa accounts and just started going alphabetical. This other user had the exact same thing happen, A full fucking month later. Coincidence that both accounts started with an A?

Doubt it.

Polo was and is still compromised.


My working theory is that the attackers hacked polo, got a list of non 2fa, then went manually through them alphabetical.

The hacker has been able to do this for atleast a month and a half.

The hacker drained my account nearly exactly like yours by setting counter trades.

Yes polo should be able to track this, have they made any effort to call in authorities? I doubt it.

Hence, I believe they should be opened to a lawsuit.




In my case ,at the end of May, I booted fresh from a livelinux CD and used a new email address. The only thing I did different was I had to contact their help desk.
So I'm not sure how my account was compromised then.


Also my compromised account started with an A, so I assume hacker got access to polo database an went alphabetical.

Op did you previously contact the polo help desk for anything.
 Also what letter did your account begin with?


My Account started with A as well (we may be on to something here)!! but not, I did not contact their help desk at all before that,
Did you see any unauthorized activity on your account?

Only a complete retard could be effected by that old hack that polo already made whole and patched. If you haven't changed your password in the years since they warned you to then I hope you lose your assets and that's not called a being hacked, that's called being stupid.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: xbiv2 on July 01, 2017, 04:57:07 PM
New support staff from moderators have to many rights on getting information. It the problem.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: MRlong on July 01, 2017, 05:23:06 PM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.

Just by user not keep their account safe and not use 2FA when use exchange site, do that look like as they not seriously when keep their money. When use exchange site or other gate can send money, admin always recommend user use 2FA for safe and security when have hacker try hack your account.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Spoetnik on July 01, 2017, 10:20:32 PM
You guys are missing the point..
Why should no 2fa be a problem if using a secure setup?
Think about it.

How would a hacker know your correct account name / email login
And on top of that manage to brute force guess a 24 char random password using a pro password creator?

It just wouldn't happen.. You would have better odds buying a lottery ticket..
Or guessing the private key to a BTC account with money on it.

You guys get it yet?
I don't think so by the replies..

And I also am not sure if Poloniex or Bittrex have a guard in place.
Do they lock out people who put in the wrong password too much?
If they don't do that it's Hella scammy!

And yeah of course some users are going to be easy pickin's.
Some have simple little passwords.. Reused etc.
And yeah you can get *some logins from other sources like say a pool..
But it comes down to probability and the stats / odds.

If no one has local access to my machine and I have not been hacked / infected...
And... I have a long unique random password..
The fucking exchange is to blame.. NOT HACKERS!


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Hueristic on July 01, 2017, 11:32:00 PM
 Lets not forget they also give you an email notice if your account is accessed from a new IP as well as a confirmation email for withdrawals.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: silvermetal on July 02, 2017, 06:23:29 AM
Lets not forget they also give you an email notice if your account is accessed from a new IP as well as a confirmation email for withdrawals.

Let's not forget that the withdrawal is processed without clicking on the e-mail link after a hack.
Checking recent activity of the e-mail account confirms the hacker had no access to the e-mail.

That the withdrawal is processed without the e-mail confirmation after a hack is a known flaw by poloniex.

And what can you do with the notification? It just shows you unauthorised access to your account but it doesn't prevent anything. The hack has already occured.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Spoetnik on July 02, 2017, 08:30:50 AM
Interesting replies..
Would be good if we had a wiki on known problems or policies.

For example.. Shouldn't they all lock you out after putting in the wrong password too many times?
Like which do that?
I'm not too sure..

I often avoid 2fa because it's a pain in the ass.
But i would be more inclined if I had money on a service.. Pool.. Online wallet.. Exchange etc.
Right now I might have a $100 on an exchange.. So I am not worried about it.
If I was risto with 2 million in xmr on Polo fuck yeah I would have 2 factor auth enabled.
But..
I just don't think it should be mandatory like this topic is about.

I am convinced exchanges can and do simply take our money though.
It's too easy for them and don't forget...
It's not illegal.
They can do what ever they want.. This stuff is not regulated.
For example if Polo says they are retiring and taking all our money then oh well..
They can.
It's there right to do it.
And we can bitch and moan about it but that is the price we pay for screaming the free market mantra for 8 years.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Pente on July 02, 2017, 08:37:45 AM
2FA is actually less secure than a strong password. Phone accounts can be easily hacked via various methods. In fact, I am suspecting that OP is really a hacker that is trying to make Polo accounts less secure by getting them to require 2FA.

Accounts with 2FA allow a password reset using your phone, that is how Coinbase accounts get hacked all the time. If you don't use 2FA on your Coinbase account, you can't be hacked with a strong password.

2FA = hacker's wet dream

2FA is like requiring home owners to put multiple locks on their guns so that they can't quickly arm themselves if they get robbed.

I just used my Keepass to generate this 24 digit password: Ã:äPrQÕ¾+N=í©Sÿ3ƽ§«7Ùà2

I checked the generator and there are a potential of over a hundred different characters, so 100^24 = over 10^48 possible combinations.

There is no way OP can hack 10^48 possible combinations, so he wants to degrade security by using the 2FA back door method.

This is how you know OP is a hacker.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Salicorne on July 02, 2017, 09:29:10 AM
Bittrex forced it, and I am not sure if there is a lesser percentage of hacked accounts.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: swissgang on July 02, 2017, 09:41:51 AM
Over the last 3 month there are many newbie users who don't even about 2fa, there may be more hacked accounts.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Pente on July 02, 2017, 07:40:02 PM
Over the last 3 month there are many newbie users who don't even know the dangers about 2fa, there may be more hacked accounts.

FTFY - 2FA is very hackable and a security weakness



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: sud on July 02, 2017, 07:43:39 PM
Over the last 3 month there are many newbie users who don't even know the dangers about 2fa, there may be more hacked accounts.

FTFY - 2FA is very hackable and a security weakness



Maybe, but it's another layer of security. The more the better.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Bigzilla on July 02, 2017, 09:44:28 PM
2FA is actually less secure than a strong password. Phone accounts can be easily hacked via various methods. In fact, I am suspecting that OP is really a hacker that is trying to make Polo accounts less secure by getting them to require 2FA.

Accounts with 2FA allow a password reset using your phone, that is how Coinbase accounts get hacked all the time. If you don't use 2FA on your Coinbase account, you can't be hacked with a strong password.

2FA = hacker's wet dream

2FA is like requiring home owners to put multiple locks on their guns so that they can't quickly arm themselves if they get robbed.

I just used my Keepass to generate this 24 digit password: Ã:äPrQÕ¾+N=í©Sÿ3ƽ§«7Ùà2

I checked the generator and there are a potential of over a hundred different characters, so 100^24 = over 10^48 possible combinations.

There is no way OP can hack 10^48 possible combinations, so he wants to degrade security by using the 2FA back door method.

This is how you know OP is a hacker.

Not really. Better have a strong password and 2FA but via App and not SMS.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on July 04, 2017, 06:27:18 PM
Third person, same hack. Wtf??!!

Hi Guys,

First of please be nice and constructive. I had my fortune stolen away and I am at a very bad place, infact I am depressed ($17000 worth of my savings that took me more than 8 years to save). I would appreciate if you guys can give me honest suggestions of what to do or if there is any chance Poloniex will refund me for the hack that happened.

So here is what happened as I sent email to Poloniex but they have not responded to me yet:

TICKET NUMBER # 271818

Dear Poloniex,
My account was hacked this morning at 2:50 am BST (british standard time). I am devastated as I had upwards of $17000 worth of portfolio of coins. Someone logged into my account, converted all the coins to BTC first, then to BCN, then he went on to a very illiquid BCN/XMR and started buying high and selling very low at huge spreads. I suspect he was on the other side of the trade to profit from it. I am sure you can easily find out who the culprit by checking on the other side of the trade.
Please check the activity between 2:50 am - 3:00 am BST (british standard time). This is a clear theft where your site has been hacked to gain access to my account and upwards of $17000 was stolen from my account.
I have contacted the Attorney General at your state who has advised me to contact you directly first before taking it further with him.
I have the evidence of the email I received at 2:50 am BST, the ip address where it was logged in from and I have also downloaded the transactions to prove it.
Please look into this issue asap and get back to me please. This is my hard earned savings over past 7 years and I will leave no stone unturned to get this resolved.
Thanks


So here is the email above. Please suggest what to do, I have also reported it to Police and action fraud. I did not have 2FA. I did not use this password on any other sites.
I know I am very silly not to have 2FA. This thread is all about what options I have, please suggest.

Thanks in advance


HERE IS HOW THE ATTACK UNFOLDED

Here is how the attack unfolded:

Someone hacked into my account on the 26th of June at 02:50 AM BST (British standard time) to do unauthorised trading. First he converted all my coins into bitcoin. Then bought BCN form BTC. Then the attacker went on to XMR/BCN (which is very illiquid) and traded a very wide spread, kept buying very high and selling very low until my account turned from $17000 to mere $450. To carry out this attack the hacker must have been on the other side of this illiquid XMR/BCN pair to profit from i.e., collecting huge spread in the process by trading his account against my hacked account

STEP 1: CONVERTING ALL MY COINS TO BTC

Date   Market   Category   Type   Price   Amount
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010483   1590.715688
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010413   448.875
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.0001041   1805.496701
26/06/2017 02:55   BTS/BTC   Exchange   Sell   0.00010409   3144.41261
26/06/2017 02:55   DASH/BTC   Exchange   Sell   0.06699959   0.89588201
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002954   335.598172
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000295   774.6756601
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002931   3.41180585
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000293   3.41297029
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002925   341.8808419
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002923   3.42114367
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002922   3.42231449
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002921   3.42348611
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000292   3.42465854
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002919   3.42583177
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002918   3.4270058
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002917   3.42818064
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002916   3.42935629
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002915   3.43053274
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002913   3.43288806
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002912   3.43406694
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002911   3.43524663
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.0000291   3.43642712
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002909   3.43760843
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002908   3.43879055
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   3.43997349
26/06/2017 02:55   EMC2/BTC   Exchange   Sell   0.00002907   4467.303294
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158738   484.8682556
26/06/2017 02:55   GAME/BTC   Exchange   Sell   0.00158737   313.9317444
26/06/2017 02:56   XRP/BTC   Exchange   Sell   0.00010416   999.6340003
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540007   3.25036868
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540006   7.1795983
26/06/2017 02:56   ZEC/BTC   Exchange   Sell   0.12540001   5.2431235


STEP 2: EXCHANGE BTC FOR BCN

Date   Market   Category   Type   Price   Amount
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   59272.84047
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   178.1245725
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   13321.02993
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   69900
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   80995.4
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   120185.7244
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   602409.6386
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   367221.477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000113   26745.53571
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   44136.3825
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   34648.81477
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   131.5789474
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   4647.389196
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   654545.0659
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   218000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   185.4027405
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   26623.01727
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   986.5
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1322
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   412161.8432
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   150.0663717
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1324.999999
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   378442.6232
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   175000
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   14621.3292
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   91423.83194
26/06/2017 02:56   BCN/BTC   Exchange   Buy   0.00000114   1538148.525
26/06/2017 02:57   BCN/BTC   Exchange   Buy   0.00000114   315275.8772



STEP 3:  BUY HIGH AND SELL LOW ON BCN/XMR (potentially sitting on the other side collecting the spread)

Date   Market   Category   Type   Price   Amount
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.887E-05   4674.970916
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   80735.18691
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   7.57050629
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5.94189602
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.886E-05   5441.088052
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.885E-05   8906.780966
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.882E-05   523.2942593
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.861E-05   3977.657
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000586   3300.7546
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.853E-05   141.66457
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.799E-05   8620.83829
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.762E-05   13994.92212
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.746E-05   104.0725224
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.735E-05   168943.4675
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.731E-05   536.1849055
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000572   91.74545454
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.699E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.695E-05   358.2730872
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.607E-05   39329.59247
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.606E-05   12105.36604
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   35714.28554
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   44642.85714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000056   93.41535714
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.599E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.598E-05   1.80421579
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.586E-05   1118.808514
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.513E-05   90694.72157
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000551   2283.690563
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   990
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   1000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000055   38499.04
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.499E-05   9091.074383
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.483E-05   1139.918108
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.473E-05   45673.07692
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   37037.03704
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000054   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.379E-05   1161.83961
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000535   47004.15421
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.347E-05   46751.9685
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000533   1988.743152
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.325E-05   20944.09527
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000532   187969.9248
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000053   34423.65019
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.276E-05   1184.620779
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000525   27526.34213
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.223E-05   38292.16925
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.221E-05   47883.06452
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   11979.19308
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000052   556.8425
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.181E-05   1.94943061
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.121E-05   58582.30892
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   19607.84314
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000051   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.094E-05   49070.24793
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   2000
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   8238.9328
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   100
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   5680
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.00005   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.987E-05   17022.35808
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.977E-05   60277.27547
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.968E-05   50317.79661
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000495   202020.202
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   13425.43367
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   1059
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   5756.03
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000049   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.881E-05   22848.10393
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.842E-05   51630.43478
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   10.625
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000048   131516.4717
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.795E-05   24272.80944
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.783E-05   2.11164541
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000475   16.03052631
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.715E-05   53013.39286
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.0000471   213.4694268
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   500
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4264707.907
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000602   3164.0142
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.021E-05   2916.2629
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.074E-05   2493.666412
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.105E-05   10828.10402
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.113E-05   4074.274417
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   116.1580385
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.265E-05   9713.187093
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000063   7980
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.309E-05   298.8293266
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.326E-05   201.8952973
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.327E-05   400681.0796
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   4759.920572
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.329E-05   340969.5528
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.349E-05   570.5983376
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.366E-05   234.9259049
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.426E-05   2845.660706
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.441E-05   98.01294347
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.516E-05   550.543843
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.547E-05   15274.17138
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.573E-05   2500
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.585E-05   1.8
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.599E-05   120263.334
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.000066   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.611E-05   21422.44154
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   360.6507619
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.621E-05   112350.767
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.658E-05   3415.547555
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.663E-05   806.9169328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000667   42437.93762
26/06/2017 02:58   BCN/XMR   Exchange   Buy   0.0000668   80000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.681E-05   304.6794857
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   19970
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   3206873.721
26/06/2017 02:58   BCN/XMR   Exchange   Sell   5.634E-05   1700.12886
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   4485532.328
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.118E-05   1121.922674
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.298E-05   134779.4884
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.559E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1051437.124
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1983484.409
26/06/2017 02:58   BCN/XMR   Exchange   Sell   4.701E-05   24430.74249
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   3158417.117
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.697E-05   121882.2575
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   2114199.137
26/06/2017 02:58   BCN/XMR   Exchange   Sell   0.000047   2230491.191
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.242E-05   97892.15736
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.657E-05   20000
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   381120.4842
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.97766106
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978763
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1.88978764
26/06/2017 02:58   BCN/XMR   Exchange   Buy   6.699E-05   1062006.459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.0000534   10666.77678
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1492923.806
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   2549.400068
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   50988.05572
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.198E-05   408422.6922
26/06/2017 02:59   BCN/XMR   Exchange   Buy   0.000062   5427.485332
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.228E-05   36147.77078
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   647567.6459
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.584E-05   857.6760387
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   1093964.004
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   799807.093
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   797807.5753
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.657E-05   380818.5655
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.659E-05   20000
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.699E-05   157521.6889
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   556944.4037
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   383236.4612
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.617E-05   9044.32432
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   391300.0835
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   278723.3007
26/06/2017 02:59   BCN/XMR   Exchange   Sell   5.217E-05   19139.35231
26/06/2017 02:59   BCN/XMR   Exchange   Sell   4.701E-05   6400.635184
26/06/2017 02:59   BCN/XMR   Exchange   Sell   0.000047   252486.505
26/06/2017 02:59   BCN/XMR   Exchange   Buy   6.615E-05   3536.569787
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   100976.5906
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.617E-05   10955.67568
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.699E-05   84161.39945
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   199131.16
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.615E-05   140697.8605
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   140346.1158
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.614E-05   111708.5747
26/06/2017 03:00   BCN/XMR   Exchange   Sell   5.258E-05   7131.833572
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   104297.4697
26/06/2017 03:00   BCN/XMR   Exchange   Buy   6.612E-05   79981.08567
26/06/2017 03:00   BCN/XMR   Exchange   Sell   4.831E-05   8927.255227
26/06/2017 03:00   BCN/XMR   Exchange   Sell   0.000047   70853.87773





hello the exact same thing happened to me yesterday, someone hacked into my account and sold all my coins and started to buy bcn, this has happened to a few other people also, also if you check bcn on polo its having problems so its clearly happened to a few people, when i logged onto my account they was in my account then i got locked out, froze my account straight away and contacted poloniex


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Peanutbutterpolka on July 04, 2017, 06:33:51 PM
Wow, you are a dick.    I get your point about​ a strong pw, but you are still a dick.

To the other person who insisted that I didn't change my password, this was a new account, it got hacked within a few weeks of opening it.

Btw folks the hacker Still has access to polo accounts and is still draining them.

2FA is actually less secure than a strong password. Phone accounts can be easily hacked via various methods. In fact, I am suspecting that OP is really a hacker that is trying to make Polo accounts less secure by getting them to require 2FA.

Accounts with 2FA allow a password reset using your phone, that is how Coinbase accounts get hacked all the time. If you don't use 2FA on your Coinbase account, you can't be hacked with a strong password.

2FA = hacker's wet dream

2FA is like requiring home owners to put multiple locks on their guns so that they can't quickly arm themselves if they get robbed.

I just used my Keepass to generate this 24 digit password: Ã:äPrQÕ¾+N=í©Sÿ3ƽ§«7Ùà2

I checked the generator and there are a potential of over a hundred different characters, so 100^24 = over 10^48 possible combinations.

There is no way OP can hack 10^48 possible combinations, so he wants to degrade security by using the 2FA back door method.

This is how you know OP is a hacker.



Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Pente on July 07, 2017, 06:18:23 AM
Coinbase just disabled 2FA SMS due to lack of security in phones.

They are allowing you to use 2FA Apps though if you have the money to get an Android, iPhone, or Windows phone.

Personally, I think people should just strong passwords.


Title: Re: How many hacked polo accounts does it take for them to make 2fa mandatory?
Post by: Katashi on July 07, 2017, 07:31:02 AM
Polo continually is getting hacked. User accounts without 2fa are the target. Value in said accounts is traded out to the attackers benefit.

Polo is complacent in this. They know and do nothing. They are enabling this to happen. Most likely they are insolvent and or are in on it. Very shaddy!

Its time for a class action lawsuit.



This is serious threat i think they must do something about this asap