Ancient Bitcoin Talk accounts logging in

[pandalion98]

Feels spooky. Ancient Bitcointalk accounts are starting to log in. Do you think this is connected to a forum breach?

Here's some samples:
Logged in recently, but no new posts
https://bitcointalk.org/index.php?action=profile;u=11
https://bitcointalk.org/index.php?action=profile;u=13
https://bitcointalk.org/index.php?action=profile;u=27
https://bitcointalk.org/index.php?action=profile;u=32
https://bitcointalk.org/index.php?action=profile;u=34
https://bitcointalk.org/index.php?action=profile;u=49

Logged in recently and posted something
https://bitcointalk.org/index.php?action=profile;u=6

[digaran]

I could say with 100% certainty that it is related to recent leaks it's just too obvious.
One thing we can do is to track them and tag them so everyone know who are they.

[OmegaStarScream]

The forum breach/leak that everyone is talking about happened a year ago so why suddenly everyone is talking about it and since then we were asked to change our passwords so everything should be okay (unless those users never changed their passwords)
Looking at the UID of the users and their current ranks , I'd say they were inactive for long long time , they probably left the forums .

[Senor.Bla]

well one owner of those opened a thread here:
https://bitcointalk.org/index.php?topic=1609612.0
he basically explains that he bought the account as a collectors item. i guess it would be hard to find out if this is true and also if the account was hacked before or not, but this should not matter. since selling account is allowed and you should always be careful when you deal with other users here. 

[BitHodler]

These accounts should be frozen or completely disabled in order to prevent people from selling these accounts and maybe even using them for scamming purposes.

Otherwise we'll see much more of these low ID number accounts come to life and get sold. Nothing will be lost when these accounts get disabled or even completely removed.

[klarki]

Unfortunately, one can not deny a given phenomenon.
How to struggle with this?

[snipie]

Hacked? Sold to users by the hackers? Or sold by the original owners?
Thoses old accounts are valuable and shouldn't imo been sold... Ofc since there is a rule about it, let's see the admins reaction

[vlight]

This just doesn't seems right. Obviously hacked/bought accounts

[NorrisK]

Most of those accounts haven't been very active since the accounts were created. It is more than likely that their passwords were not changed since they created it and if it was a weak password, it would easily be extracted with a rainbow table.

Change your passwords, that is the best thing you can do. Personally I would love to see some additional security features such as 2fa implemented somehow. There should be enough funds for forum development to introduce this right?

[Jhanzo]

I'm starting to think nothing can be done about them because there's simply not enough evidence to prove that they're hacked and get tagged.  I guess it shouldn't hurt too much unless they start scamming people.  It's a shame that there are some DT users on that bunch though (but again, not enough proof).

[KWH]

I'm starting to think nothing can be done about them.  There's simply not enough evidence to prove that they're hacked and get tagged.  I guess it shouldn't hurt too much unless they start scamming people.  It's a shame that there are some DT users on that bunch though (but again, not enough proof).

You can politely ask the person(s) that added them to DT to require proof of ID or they will be removed.. With private keys often sold with accounts, it could be a problem but still worth the effort to inquire.

[Zoomer]

Add that one :

https://bitcointalk.org/index.php?action=profile;u=17455

[pandalion98]

The forum breach/leak that everyone is talking about happened a year ago so why suddenly everyone is talking about it and since then we were asked to change our passwords so everything should be okay (unless those users never changed their passwords)
Looking at the UID of the users and their current ranks , I'd say they were inactive for long long time , they probably left the forums .

Were password hashes at the time salted?

[Jhanzo]

The forum breach/leak that everyone is talking about happened a year ago so why suddenly everyone is talking about it and since then we were asked to change our passwords so everything should be okay (unless those users never changed their passwords)
Looking at the UID of the users and their current ranks , I'd say they were inactive for long long time , they probably left the forums .

Were password hashes at the time salted?

Apparently so.  theymos posted about it here.

[Arcteryx]

So my question is:
When will we see Satoshi's account being used soon?
It will have a lot pm's in the inbox and possibly the private keys.
Then that person who has possession of that account would of hit the jackpot and we might start to see a mass of coins moving from that wallet.
The markets will reflect that. Whether it be a good thing or a bad thing we just have to wait and see.
 

[theymos]

Were password hashes at the time salted?

The new password hashing scheme was implemented in July 2012. Accounts that never logged in after then still have the old hashes, which are IIRC one round of SHA-1, salted with the username. Strong passwords could survive, but it's certainly much easier to crack the old hashes than the new hashes.

When will we see Satoshi's account being used soon?

You won't, since I locked his account long ago. The password hashes leaked in 2015 aren't even his original hashes.

[pandalion98]

So my question is:
When will we see Satoshi's account being used soon?
It will have a lot pm's in the inbox and possibly the private keys.
Then that person who has possession of that account would of hit the jackpot and we might start to see a mass of coins moving from that wallet.
The markets will reflect that. Whether it be a good thing or a bad thing we just have to wait and see.
 

It won't get used anytime soon since the account itself was locked by the admin. They need to positively identify themselves, using a PGP-signed message or any other mean, to claim the account.
And no, I don't think anyone with a working brain would store private keys in a forum inbox.

[Das]

The accounts could have been sold off, since the original users are now inactive on the forum. If there was a security breach as suspected, newer accounts will also be hacked and their owners will be crying foul on "Meta" right now.

[Cast12]

Change your passwords, that is the best thing you can do. Personally I would love to see some additional security features such as 2fa implemented somehow. There should be enough funds for forum development to introduce this right?

I think that 2fa will be implemented in the new forum, but I can't be too sure on that. Anyways, this is most definitely in connection to the data breach, does this warrant a negative trust from DT members seeing as those account are hacked?

[pandalion98]

Change your passwords, that is the best thing you can do. Personally I would love to see some additional security features such as 2fa implemented somehow. There should be enough funds for forum development to introduce this right?

I think that 2fa will be implemented in the new forum, but I can't be too sure on that. Anyways, this is most definitely in connection to the data breach, does this warrant a negative trust from DT members seeing as those account are hacked?

New forum?