Debating to block buddies 3 bagger or not.

I guess I go for the block wtfn?

microsoft auth can be on any phone

not the same as sms text 2fa

The cell you use for the microsoft app  basically makes the code like a yubi.

The Microsoft Authenticator app also supports the industry standard for time-based, one-time passcodes (also known as TOTP or OTP).

Sounds like TOTP

I am glad I required all coin withdrawals to use the auth. app .

...

I fucking hate all 2fa bs as it weakens my security.

most of my coins are in hardware wallets.

I just happened to have the large sum on coinbase prepping to spend on mine expansion.

Phone a the ported phone was a tracfone.

I do have an email/phone account so they could have ported the phone from trac phone to Verizon mobile by entering my cell number

They could have hacked the email using recovery to the phone.

This gave them the phone and the email.

they use that to go after the coinbase

they change the password.

they find that no changes in the account or withdrawals can be done without

a code that is only available on a phone that no one knows the number.  It is not 2fa. and gives a six digit number every 60 seconds .

They could have been say with draw .25 btc and putting in random six digit  numbers as I was driving home

 ( I think they get locked out after 3 wrong numbers). so I could have lost .25 btc if they got lucky.

I think my error was the email recovery was linked to the cell

which let them get into the email.  That email is 22 years old I changed the password.

I am playing with fake hacking of the now drained (by me) coinbase account to see if they just needed the have the phone number ported to be able to change the coinbase password.

I also had the account set to need the auth app for any withdrawal (thank goodness)


found this on coinbase

signout session   web   198.54.133.76   United States   about 20 hours ago
signout session   web   198.54.133.76   United States   about 20 hours ago
signout session   web   198.54.133.76   United States   about 20 hours ago
signout session   web   198.54.133.76   United States   about 20 hours ago
signout session   web   198.54.133.76   United States   about 20 hours ago
signout session   web   198.54.133.76   United States   about 20 hours ago
password reset completed   web   198.54.133.76   United States   about 20 hours ago
password reset requested   web   198.54.133.76   United States   about 20 hours ago
signin failure   api   187.11.158.232   Brazil   3 days ago
signin failure   api   187.11.158.232   Brazil   3 days ago

all of the above is bad shit

this looks like first shot they took

signin failure   api   2605:xxxx:xxxx:xxxx:xxxx:xxx:xxxx:c91f   United States   7 days ago


each signout session was likely 3 trys at moving the btc. random codes are 1,000,000 numbers so they had say 18 of 1,000,000 of grabbing the btc

I am not quite sure how they ported the phone.

I suspect they used tracfone had the cell number  hoped by getting the email

that the email linked to tracfone and to coinbase was the same

so if they hack just the email

they could try to port the cell to their carrier.

then get into coinbase change password and use 2fa to allow withdraws and alter the email

...
Best to buy a burner phone set up google to microsoft auth.

the coinbase account does not know that phone number so no one can port it over to another network.

Best to buy a burner phone set up google to microsoft auth.

cell phone was cloned almost lost $$$

~

~

A large miner may not want the variance risk of pplns.

remember that witholding / accidental bad software has hit pools for large amounts of coins.

A pps+ pool paying a big player daily means no variance risks.

the risk for that player is one days payment maybe two. as they would simply pick up and move to a different pool.

also when doing projections pps will have more stability.

and as I said if a big player is sending a lot of hash to viabtc and insists on pps+ vs pplns I am thinking viabtc may take on the big guy and give him what he wants.