Bitcoin Forum
December 05, 2016, 12:28:43 AM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2]  All
  Print  
Author Topic: Resolving between persons  (Read 6359 times)
seventoes
Jr. Member
*
Offline Offline

Activity: 34


View Profile
June 09, 2011, 05:22:22 PM
 #21

It seems you have both been the victim of a very clever and well-executed scam. To give away the ending, it was a man-in-the-middle attack by a 3rd person. The scam was so good, in fact, that no one here seems to be able to recognize what actually happened. Sit back and listen as I recreate the scene:

0. The scammer (pork_) recognizes that #bitcoin-otc has a very serious flaw and sets out to exploit it to make a quick 20BTC for free.
1. The scammer (pork_) advertises that he wants to buy BTC on the #bitcoin-otc channel, and tiner contacts him about a sale
2. The scammer (pork_) and tiner agree to the terms of the sale, and tiner gives him his PayPal address so pork_ can send the payment
3. This part is crucial: The scammer (pork_) now has a limited amount of time to find a buyer to complete the scam. To give himself some time, he says: "<pork_> ill be a few minutes"
4. The scammer now goes into the channel using a different nick (let's call it "h___"), and advertises that he wants to sell some BTC for cheap (to get a buyer quickly)
5. jacker224 contacts the scammer (h___) and offers to buy the BTC
6. The scammer (h___) tells jacker224 to send the money to tiner's paypal address, and jacker224 does so
7. The scammer (pork_) tells tiner that he sent the payment, when in actuality it was jacker224 who sent the payment
8. tiner verifies that he has received the money, and sends the BTC to the scammer (pork_). As far as tiner is concerned, the transaction was 100% legit.
9. The scammer (h___) leaves his conversation with jacker224 without sending ever him the BTC

But how does jacker224 contacts tiner?
Do you mean scammer logs in with tiner as nick (and not h___)?

Wow, that totally fits. I wouldn't have put it together, but I'll be sure to watch for stuff like this in the future. Nice eye, KCanini!

1JHYN5dcwUcphQW18BkKPa8RTJsRYsJ8am
1480897724
Hero Member
*
Offline Offline

Posts: 1480897724

View Profile Personal Message (Offline)

Ignore
1480897724
Reply with quote  #2

1480897724
Report to moderator
1480897724
Hero Member
*
Offline Offline

Posts: 1480897724

View Profile Personal Message (Offline)

Ignore
1480897724
Reply with quote  #2

1480897724
Report to moderator
1480897724
Hero Member
*
Offline Offline

Posts: 1480897724

View Profile Personal Message (Offline)

Ignore
1480897724
Reply with quote  #2

1480897724
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480897724
Hero Member
*
Offline Offline

Posts: 1480897724

View Profile Personal Message (Offline)

Ignore
1480897724
Reply with quote  #2

1480897724
Report to moderator
1480897724
Hero Member
*
Offline Offline

Posts: 1480897724

View Profile Personal Message (Offline)

Ignore
1480897724
Reply with quote  #2

1480897724
Report to moderator
1480897724
Hero Member
*
Offline Offline

Posts: 1480897724

View Profile Personal Message (Offline)

Ignore
1480897724
Reply with quote  #2

1480897724
Report to moderator
stabaho
Newbie
*
Offline Offline

Activity: 13



View Profile WWW
June 09, 2011, 05:47:35 PM
 #22

Hate to hear this happened. Everyone should remember not to do large transactions via paypal with low rated and no rated people.

If you want to send me some coins: 1M1RFqdDHZQCezWZ9CrKvQav1MgriqjCK1
EvanR
Jr. Member
*
Offline Offline

Activity: 40



View Profile
June 09, 2011, 06:08:50 PM
 #23

I thought I had it!

Continuing to think it through to see if anymore water leaks out.

Be careful when scammers propose a wild possibility that would explain their innocence. Occams razor!

And do not trade with people that are not registered.
JackH
Sr. Member
****
Offline Offline

Activity: 355


View Profile
June 09, 2011, 06:11:02 PM
 #24

Both me and tiner messed up, and all this happened. I guess this has to be delt with between me and tiner now. Thank you all for helping collecting IP's and identifying my super bad memory in the h___ = hondura so that we could identify with him pork_

tiner, please contact me on IRC and we can talk about what we should do about all the money between us.

<helo> funny that this proposal grows the maximum block size to 8GB, and is seen as a compromise
<helo> oh, you don't like a 20x increase? well how about 8192x increase?
<JackH> lmao
kgo
Hero Member
*****
Offline Offline

Activity: 548


View Profile
June 09, 2011, 06:14:06 PM
 #25

More specificially:

;;ident username

If gribble tells you the person can't be identified, they could be anyone.  A username means nothing.

And then

;;getrating username

Or even better:

;;gettrust username

if you have some ratings of your own.
0x6763
Newbie
*
Offline Offline

Activity: 24


View Profile
June 09, 2011, 06:23:50 PM
 #26

If the theory is correct, the scammer is pork_, aka hondura, aka honduras, aka pork_honduras.

pork_ = buyer - http://paste.pocoo.org/show/403595/
hondura(s) = seller - http://paste.pocoo.org/show/403594/

IP addresses: 65.49.14.*

Here's a log of a conversation with the scammer and KCanini that just happened moments before I'm posting this: http://pastebin.com/RhSdEmxJ

Unfortunately I don't see anything where JackH (jacker224) directly communicated with any of them in my logs.  Obviously at least part of it would have been PM, if not entirely PM.

EDIT: Other nicks in my logs (which don't go back very far at this point) using IP addresses in that same range are:
titi
Miner-TE
guest1234
bridgehead
mazik

grepped log showing those nicks: http://paste.pocoo.org/show/403613/
Fiyasko
Legendary
*
Offline Offline

Activity: 1428


Okey Dokey Lokey


View Profile
June 09, 2011, 06:36:00 PM
 #27

Ho
Ly

Fuck.....
Run noobs run, Your all in danger, and now im probly a target.

http://bitcoin-otc.com/viewratingdetail.php?nick=DingoRabiit&sign=ANY&type=RECV <-My Ratings
https://bitcointalk.org/index.php?topic=857670.0 GAWminers and associated things are not to be trusted, Especially the "mineral" exchange
BTC_Bear
B4 Foundation
VIP
Sr. Member
*
Offline Offline

Activity: 364


Best Offense is a Good Defense


View Profile WWW
June 09, 2011, 11:42:38 PM
 #28

As was noted in the #bitcoin-court (hehe).

Jacker224 sent money to an unregistered, unidentified Nick. Not that would have prevented this scam, but that i could have been slowed down.

I just recently moderated an escrow between 2 nicks for a pretty substantial amount. After both identifying, we went to PM mode. One of the participants lost connection and came back online. And then asked for the BTC, I had made him re-authenticate. Before releasing the BTC.

This isn't a place for the faint hearted. Buyer beware, Seller beware. If something goes wrong or you are worried, back out, there is no harm.

This an semi-advanced scam. And am glad it was brought out.

However, buying using trusted escrow, the BTC would have been protected. A resolution could have been accomplished.

In this case, Jacker224's BTC would have been safe. Jacker224 would have know the BTC was there and his upon the OK to release from the Buyer.




Corporations have been enthroned, An era of corruption in high places will follow and the money power will endeavor to prolong its reign by working on the prejudices of the people until wealth is aggregated in a few hands and the Republic is destroyed. ~Abe Lincoln 1ApJdWUdSWYw8n8HEATYhHXA9EYoRTy7c4
BitcoinCyberStore.com
Newbie
*
Offline Offline

Activity: 10


View Profile WWW
June 10, 2011, 01:25:22 AM
 #29

Seems this could have easily been avoided if people used their PGP keys and signed contracts that detailed the scope of the transaction.

PGP: 0xCBF44B9FF2D68ADE
Fiyasko
Legendary
*
Offline Offline

Activity: 1428


Okey Dokey Lokey


View Profile
June 10, 2011, 03:55:30 PM
 #30

Seems this could have easily been avoided if people used their PGP keys and signed contracts that detailed the scope of the transaction.

Well. Thats what it's there for, If you dont use it you get fucked and all i can say is "you kinda fucked yourself yo"

http://bitcoin-otc.com/viewratingdetail.php?nick=DingoRabiit&sign=ANY&type=RECV <-My Ratings
https://bitcointalk.org/index.php?topic=857670.0 GAWminers and associated things are not to be trusted, Especially the "mineral" exchange
greatscott
Jr. Member
*
Offline Offline

Activity: 45



View Profile
June 10, 2011, 05:53:09 PM
 #31

Seems this could have easily been avoided if people used their PGP keys and signed contracts that detailed the scope of the transaction.

Even GPG aside (or with GPG), a simple way to detect this would be to have the buyer/seller verify their agreement over a simple email exchange.

The (real) buyer should send an email to the (real) seller's paypal payment address, including their receiving bitcoin address as a confirmation before actually sending the funds to the seller's paypal. The (real) seller would then see that the bitcoin receiving addresses don't match. Actually, email aside, I think you can send notes along with your paypal payment to the seller.

Pages: « 1 [2]  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!