Ethical issue about ignoring hacked account

[Justice11]

I read thymos post about the recovery process, it's helpful but only if you have a bitcoin address used through the hacked account. People who don't have such an account  are asked to forget about recovering their old account and let the  hacker use it as he sees fit; the effort needed to rectify the issue is considered not worth it.

I understand the administrators are swamped with such requests, but to let the hackers basically go free is simply wrong. The hacked account has no use anywhere except for this forum, the hacker who hacked the account can only use the account to swindle, cheat and spam the members of this forum. The more we let this pass the more seedy this forum will become for the detriment of all members.

Is ignoring the problem the only solution? If returning the account to its rightful owner is too time consuming why not just delete the account or at least flag it as suspicious? As a warning to fellow forum members who might be dealing with an unethical hacker through this hacked account.

My account was hacked recently, i had it since 2014, now someone is simply using it as if I never existed in this forum. The account has no monetary value but it still hurts to loss it, it contains my memories, both good and bad that I had in this forum. The thought that the hacker will be using my account to cheat or spam other people in this forum by this account is very disturbing to me. I don't expect to recover my account, just want to notify that the account with the username 'ashapasa' is an hacked account.

The account with the username 'ashapasa' was created by me in 2014 through my email ashapasa@yahoo.co.uk
People can figure out simply by looking at my email address that this account is mine. Anyway thanks for reading.

[1715067291]

1715067291

[1715067291]

1715067291

[1715067291]

1715067291

[1715067291]

1715067291

[Vod]

Is ignoring the problem the only solution? If returning the account to its rightful owner is too time consuming why not just delete the account or at least flag it as suspicious? As a warning to fellow forum members who might be dealing with an unethical hacker through this hacked account.

What would happen if someone said the Vod account was hacked, and did not provide proof?  Do I deserve to have my account flagged as suspicious without any proof?

[minifrij]

I read thymos post about the recovery process, it's helpful but only if you have a bitcoin address used through the hacked account. People who don't have such an account  are asked to forget about recovering their old account and let the  hacker use it as he sees fit; the effort needed to rectify the issue is considered not worth it.

Other than a staked Bitcoin address, how would you suggest that hacked accounts be proven (that does not take a lot of investigation/time by staff)? Email addresses and other such information is not proof, as that can also be hacked.

Is ignoring the problem the only solution?

The optimal solution is not letting your account get hacked in the first place. Doing so is your own problem, and therefore a low priority for staff to clean up after.

If returning the account to its rightful owner is too time consuming why not just delete the account or at least flag it as suspicious? As a warning to fellow forum members who might be dealing with an unethical hacker through this hacked account.

That's not the Staff's problem necessarily. If you have sufficient proof, request a DT member flag your account until further notice (however if said proof was already given it is likely that this would have already been done).

[VeryFunnny]

I read thymos post about the recovery process, it's helpful but only if you have a bitcoin address used through the hacked account. People who don't have such an account  are asked to forget about recovering their old account and let the  hacker use it as he sees fit; the effort needed to rectify the issue is considered not worth it.

Other than a staked Bitcoin address, how would you suggest that hacked accounts be proven (that does not take a lot of investigation/time by staff)? Email addresses and other such information is not proof, as that can also be hacked.

Is ignoring the problem the only solution?

The optimal solution is not letting your account get hacked in the first place. Doing so is your own problem, and therefore a low priority for staff to clean up after.

If returning the account to its rightful owner is too time consuming why not just delete the account or at least flag it as suspicious? As a warning to fellow forum members who might be dealing with an unethical hacker through this hacked account.

That's not the Staff's problem necessarily. If you have sufficient proof, request a DT member flag your account until further notice (however if said proof was already given it is likely that this would have already been done).

Its still not so easy to recover its with proof too,im wait second week now,all that time myhacked was online twice and by few minutes,most of time accountis offline,im use many resources ,but for all time that im using internet at all i was hacked and its happen here with my  Legendary account,three years using growth from newbie to Legendary with +60 trust points ,sign message,proof from exchanges,from other members of that forum about my identification,Cyrus answer me yersterday after 10 times PM with requests,that he look into it and get  back to me ,and quit again. Anyway if account was using long time with good activity ,real owner have a information that cannot be hacked,why so much request about hacking last time here? May be,because  accounts prices are grow or may be any problems with security here,like in 2015 year or in 2016?

[minifrij]

Its still not so easy to recover its with proof too,im wait second week now,all that time myhacked was online twice and by few minutes,most of time accountis offline,im use many resources ,but for all time that im using internet at all i was hacked and its happen here with my  Legendary account,three years using growth from newbie to Legendary with +60 trust points ,sign message,proof from exchanges,from other members of that forum about my identification

As I said, account recovery is a low priority for staff to deal with (apart from special circumstances). It can be up to months before you get your account back.

Cyrus answer me yersterday after 10 times PM with requests,that he look into it and get  back to me ,and quit again.

I'm not going to make excuses for Cyrus as to why he may not answer, however it has only been a day. Wait a few more and try again if nothing is solved.

Anyway if account was using long time with good activity ,real owner have a information that cannot be hacked,why so much request about hacking last time here? May be,because  accounts prices are grow or may be any problems with security here,like in 2015 year or in 2016?

I'm not entirely sure what you're asking, so I will answer what I think you are.
In May 2015 there was a hack on the forum which released everyone's hashed passwords and such. If your password was weak and you didn't change it since then, it is possible for someone to bruteforce the hash and get your password out of it. That accompanied with account sales/scammers is likely a reason that a large number of older accounts are suddenly being hacked. Other than that, it is just people not using proper password security and paying the price for it.

[rizzlarolla]

Thousands of accounts have quite suddenly and recently been "reactivated". I touched on the subject here,

https://bitcointalk.org/index.php?topic=1702409.msg17944110#msg17944110
https://bitcointalk.org/index.php?topic=1702409.msg17974610#msg17974610

A simple problem to deal with, just like the 900 farmed accounts i have listed. https://bitcointalk.org/index.php?topic=1670807.0
theymos, mods and DT do nothing. Why? Because theymos is the "farmer/hacker"?

Edit - I bumped into a hacked account straight after posting here https://bitcointalk.org/index.php?topic=1812677.msg18151089#msg18151089

[Quickseller]

There is no authoritative way to say that an account is "hacked".

If a new user buys your account from you with the intention of participating in a signature campaign, but is not experienced enough, nor has done sufficient research to know to ask for a signed message, then your account is not hacked. The presence of a signed message will not prove that an account was hacked.

If someone infects your computer with malware, and is able to steal both your private keys and your passwords, then the hacker will be able to produce a signed message claiming the account was sold, yet it would in fact be hacked.

There are many other situations in which the issue is muddy when dealing with potentially hacked accounts.

For the most part, the forum does not get involved in these kinds of disputes. It is also fairly rare that accounts get hacked because of a security breach on the part of the forum, although this is somewhat more common now because of the 2015 hack -- if your account is getting hacked two years after the fact, then this is really your fault because you very much should have been aware that you should have changed your password. Most "true" account hacks are the result of the end user making some kind of mistake.

[VeryFunnny]

Im changed password in 2015 and in 2016 years and what? Im was online here and after restarting my  Wi-Fi router im cannot login ONLY in my bitcointalk account,all open exchanges and other services not even logout.Only here im was kick out and my mail address with password was changed in 30 seconds. If my PC was hacked at first was hacked my funds,but exactly not a account on bitcointalk.org and only it. Why i can say that its hacking ,because was changing mail address and passwords and after im try few times to use "Forgot Password" button ,someone login to forum and logout using my account.Now its offline since 04 March 2017 ,no activity ,not any post was not send by hacker from my account (may be only PM). Its first account and first forum where my account was hacked and that is fact. When ppl want to recovery their accounts ,put in requests all needs information and wait months,its a normal? By date since 17 Feb here are starts not one or two  topics with recovery requests(in most times Legendary accounts was hacked/lost),just coincidence of mass users mistakes,not think so. Ignoring requests from other members not better way. Many of ppl are here not one year.Any forum are live only because ppl use it.

[VeryFunnny]

As I said, account recovery is a low priority for staff to deal with (apart from special circumstances). It can be up to months before you get your account back.

So,you mean its a normal practice? All that years ,im think that cryptocommunity at first its a most honest community,because all here are build on trust and help each other,and ppl here respect one another and are equal to each other.

I'm not going to make excuses for Cyrus as to why he may not answer, however it has only been a day. Wait a few more and try again if nothing is solved.

Its 11 day in a row,not one day. And where im use word "excuse"? or im ask you to "make excuses"?

I'm not entirely sure what you're asking, so I will answer what I think you are.
In May 2015 there was a hack on the forum which released everyone's hashed passwords and such. If your password was weak and you didn't change it since then, it is possible for someone to bruteforce the hash and get your password out of it. That accompanied with account sales/scammers is likely a reason that a large number of older accounts are suddenly being hacked. Other than that, it is just people not using proper password security and paying the price for it.

So,you are did a mistake here,about me.Its easier way to try explain all only "user  mistake" and "user not using proper password security",but its not always corresponds to reality.Im changed password and not once.My previous post  include all information about what i  do and how its happen.And im never sell my account (even not think about that). Im get information about prices and  how  i can calculate real price of account after my account was hacked.

[marlboroza]

I've found 2 address in ashapasa's post history

https://archive.fo/Gkth3

Can you sign message from them? It should be good proof.

[rizzlarolla]

ashapasa is now a slave account on the same rota as these other "reactivated" accounts.

https://bitcointalk.org/index.php?action=profile;u=49366    pieppiep
https://bitcointalk.org/index.php?action=profile;u=74353    shiunsai
https://bitcointalk.org/index.php?action=profile;u=84739    strunberg
https://bitcointalk.org/index.php?action=profile;u=125571  mega
https://bitcointalk.org/index.php?action=profile;u=194388  pungopete468
https://bitcointalk.org/index.php?action=profile;u=232031  ashapasa
https://bitcointalk.org/index.php?action=profile;u=256026  whale123
https://bitcointalk.org/index.php?action=profile;u=303997  sj2199
https://bitcointalk.org/index.php?action=profile;u=315811  tazmania
https://bitcointalk.org/index.php?action=profile;u=452046  patrickmh

If you check the post history's they multi post march 4/5/6 then on march 11 all 1 post applying for secondstrade campaign on after the other.
https://bitcointalk.org/index.php?topic=907271.msg18147835#msg18147835
(i believe most/all have just been kicked from bitmixer campaign?)
Only ashapasa does not apply to secondstrade. Probably saw this thread had been started?
All march posts are identical in lengh/style (or lack of)
All march posts are on "rota"

Obvious really, except apparently to mods or admin or DT1 who all cry "nothing can be done" - if they respond at all.
Funny that.

edit- names added to uid

[VeryFunnny]

ashapasa is now a slave account on the same rota as these other "reactivated" accounts.

https://bitcointalk.org/index.php?action=profile;u=49366
https://bitcointalk.org/index.php?action=profile;u=74353
https://bitcointalk.org/index.php?action=profile;u=84739
https://bitcointalk.org/index.php?action=profile;u=125571
https://bitcointalk.org/index.php?action=profile;u=194388
https://bitcointalk.org/index.php?action=profile;u=232031
https://bitcointalk.org/index.php?action=profile;u=256026
https://bitcointalk.org/index.php?action=profile;u=303997
https://bitcointalk.org/index.php?action=profile;u=315811
https://bitcointalk.org/index.php?action=profile;u=452046

If you check the post history's they multi post march 4/5/6 then on march 11 all 1 post applying for secondstrade campaign on after the other.
https://bitcointalk.org/index.php?topic=907271.msg18147835#msg18147835
(i believe most/all have just been kicked from bitmixer campaign?)
Only ashapasa does not apply to secondstrade. Probably saw this thread had been started?
All march posts are identical in lengh/style (or lack of)
All march posts are on "rota"

Obvious really, except apparently to mods or admin or DT1 who all cry "nothing can be done" - if they respond at all.
Funny that.

Can I ask you to check my two accounts,all info about is here ,if you are have a free few minutes for that?

[minifrij]

So,you mean its a normal practice? All that years ,im think that cryptocommunity at first its a most honest community,because all here are build on trust and help each other,and ppl here respect one another and are equal to each other.

Don't be silly. This community has some of the worst scumbags of any community I've been in before. Accounts get hacked and stolen on a regular basis.

Its 11 day in a row,not one day.

Cyrus answer me yersterday

And where im use word "excuse"? or im ask you to "make excuses"?

I meant that I don't know why Cyrus doesn't recover accounts faster, so I'm not going to pretend like I do and give excuses for it.

So,you are did a mistake here,about me.Its easier way to try explain all only "user  mistake" and "user not using proper password security",but its not always corresponds to reality.Im changed password and not once.My previous post  include all information about what i  do and how its happen.And im never sell my account (even not think about that).

Did you reuse the password anywhere else that could have been hacked? Was your password random, or made up of dictionary words? Did you log into your account anywhere that the connection could have been snooped?
There are several questions that you have to ask if an account gets compromised. Regardless, there is no point in focusing on how your account got hacked now; it is in the past.

[VeryFunnny]

So,you mean its a normal practice? All that years ,im think that cryptocommunity at first its a most honest community,because all here are build on trust and help each other,and ppl here respect one another and are equal to each other.

Don't be silly. This community has some of the worst scumbags of any community I've been in before. Accounts get hacked and stolen on a regular basis. - Im ask you again ,its normal situation? If its normal for you and for admins and mods ,here soon was only staff with tonns of farming accounts.

Its 11 day in a row,not one day.

Cyrus answer me yersterday

And where im use word "excuse"? or im ask you to "make excuses"?

I meant that I don't know why Cyrus doesn't recover accounts faster, so I'm not going to pretend like I do and give excuses for it.

So,you are did a mistake here,about me.Its easier way to try explain all only "user  mistake" and "user not using proper password security",but its not always corresponds to reality.Im changed password and not once.My previous post  include all information about what i  do and how its happen.And im never sell my account (even not think about that).

Did you reuse the password anywhere else that could have been hacked? Was your password random, or made up of dictionary words? Did you log into your account anywhere that the connection could have been snooped?
There are several questions that you have to ask if an account gets compromised. Regardless, there is no point in focusing on how your account got hacked now; it is in the past.

"Regardless, there is no point in focusing on how your account got hacked now; it is in the past." - Lol,stop throlling me,enought. Wish you never be hacked "wise" man. Or if that would be done,read at first your own posts here. Good Luck.

[minifrij]

"Regardless, there is no point in focusing on how your account got hacked now; it is in the past." - Lol,stop throlling me,enought.

I don't feel like giving a rundown on every possible way that you could have put your account in danger, so it's best to just focus on getting it back. I don't see how that is trolling at all.

Wish you never be hacked "wise" man. Or if that would be done,read at first your own posts here.

I've never had my Bitcointalk account hacked and probably never will. I stand by what I wrote, and you're probably only ignoring it because you don't want to accept it.

Good Luck.

Thanks, you too.

[Justice11]

I've found 2 address in ashapasa's post history

https://archive.fo/Gkth3

Can you sign message from them? It should be good proof.

Thanks for your help but I don't have that bitcoinwallet anymore, it's an old deleted one from 2014. I wrote a message to the hacker and he said he will return it   . So I will wait to see if he does. Also thank you rizzarolla

[Justice11]

Is ignoring the problem the only solution? If returning the account to its rightful owner is too time consuming why not just delete the account or at least flag it as suspicious? As a warning to fellow forum members who might be dealing with an unethical hacker through this hacked account.

What would happen if someone said the Vod account was hacked, and did not provide proof?  Do I deserve to have my account flagged as suspicious without any proof?

The issue is not about lack of proof but lack of one particular type of proof, there are more than one way of proving theft. The person who hacked my account sent me a message he will give me my account back after I sent a message asking for the return of my account. I am hoping he will. If he does not return my account, does not the fact that he basically admitted the theft by replying through the stolen account prove the account is mine.

[VeryFunnny]

"Regardless, there is no point in focusing on how your account got hacked now; it is in the past." - Lol,stop throlling me,enought.

I don't feel like giving a rundown on every possible way that you could have put your account in danger, so it's best to just focus on getting it back. I don't see how that is trolling at all.

Wish you never be hacked "wise" man. Or if that would be done,read at first your own posts here.

I've never had my Bitcointalk account hacked and probably never will. I stand by what I wrote, and you're probably only ignoring it because you don't want to accept it.

Good Luck.

Thanks, you too.

"I've never had my Bitcointalk account hacked and probably never will. I stand by what I wrote, and you're probably only ignoring it because you don't want to accept it." - Im not wish you to be hack,but never say never. And why i must accept your position if its not have any sense exactly in my situation? Im easy agree with you about possible ways how user can put its accounts in danger.You are make a mistake when You are make a mistake in your conclusions about me and the fact that you can surprise me with your knowledge of security. You refuse to consider the fact that I have observed all the basic principles of security, ignore the fact that this is the first hacked account in my Life and it is very strange that it occurred on this forum. But this is all the lyrics. Much more interesting why you are not answer on one question(twice in a row).In the my first post in this thread, I indicated that I fulfilled all the necessary conditions for recovery, but the account has not been returned to me yet, you explain it to yourself that the requests about recovery have a low priority for administrators,so its mean that administrators not want to help users in their main,real important for users,sort of available problems,I'll ask you again, is this normal,really? so it should be?

[minifrij]

Im not wish you to be hack,but never say never. And why i must accept your position if its not have any sense exactly in my situation? Im easy agree with you about possible ways how user can put its accounts in danger.You are make a mistake when You are make a mistake in your conclusions about me and the fact that you can surprise me with your knowledge of security. You refuse to consider the fact that I have observed all the basic principles of security, ignore the fact that this is the first hacked account in my Life and it is very strange that it occurred on this forum. But this is all the lyrics.

Indeed, let's just agree to disagree on this.

In the my first post in this thread, I indicated that I fulfilled all the necessary conditions for recovery, but the account has not been returned to me yet, you explain it to yourself that the requests about recovery have a low priority for administrators,so its mean that administrators not want to help users in their main,real important for users,sort of available problems,I'll ask you again, is this normal,really? so it should be?

I never said it was normal; the speed of account recovery is generally rather terrible on this forum (and seems to have been for a long time). As to why:

I'm not going to make excuses for Cyrus

If it were up to me there would be lots of changes made to the way that this place is run, but it isn't. It's not 'interesting' as to why I didn't answer your question, it is simply because I have no idea.

[VeryFunnny]

Im not wish you to be hack,but never say never. And why i must accept your position if its not have any sense exactly in my situation? Im easy agree with you about possible ways how user can put its accounts in danger.You are make a mistake when You are make a mistake in your conclusions about me and the fact that you can surprise me with your knowledge of security. You refuse to consider the fact that I have observed all the basic principles of security, ignore the fact that this is the first hacked account in my Life and it is very strange that it occurred on this forum. But this is all the lyrics.

Indeed, let's just agree to disagree on this.

In the my first post in this thread, I indicated that I fulfilled all the necessary conditions for recovery, but the account has not been returned to me yet, you explain it to yourself that the requests about recovery have a low priority for administrators,so its mean that administrators not want to help users in their main,real important for users,sort of available problems,I'll ask you again, is this normal,really? so it should be?

I never said it was normal; the speed of account recovery is generally rather terrible on this forum (and seems to have been for a long time). As to why:

I'm not going to make excuses for Cyrus

If it were up to me there would be lots of changes made to the way that this place is run, but it isn't. It's not 'interesting' as to why I didn't answer your question, it is simply because I have no idea.

That place have a problem,how we can see and  in my point of view,its more deeper than it seems at first sight.Any problems can be solved,if ppl want to solve it. Im well know that not only recovery accounts can taking much time here,any type of problem .that needs to ask administrators about help can getting more time in last year,why and what a result wants to get theymos ,using same practice ,know only theymos.But middle results we are all well see,main part of active community (real helpful ppl and members who are at firstgoing here for getting new information and disscussion ,who are care aboutcommunity) decreases. Of course theymos make a huge work and  much more than respected person.But why not to make any new rules about time of reactionand solving requests,may be vote for administratorwho are was work only with recovery requests ,if they are not have enought time and huge number of requests  about recovery? Waiting so long without any normal feedback cannot getting any good feelings,especially when unclear what is the time to wait and there are no real visible reasons for the solution. Anyway thank you for discussion and best of all to you