Muhammed Zakir hacked? Account reactivated just now

[ibminer]

YOU'RE FUCKIN STUPID.

I've been logged into this accout for 3 weeks straight retard!

Always full of assumptions! CORRUPTION ALERT. CORRUPTION ALERT

"Always full of assumptions" and then you insert an assumption right after that. You're cool.

[1714868901]

1714868901

[1714868901]

1714868901

[1714868901]

1714868901

[1714868901]

1714868901

[1714868901]

1714868901

[The Sceptical Chymist]

So yeah, looks pretty suspicious to me right now.   This forum is a hacker's wet dream and I'd be willing to bet money that this isn't MZ.  Think I'm going to change my password pretty soon, because the security on this site sucks--I've known that for a while now, but watch out when the hackers start doing this crap.  Nothing is safe.

[Patatas]

because the security on this site sucks--I've known that for a while now

You think so ? I doubt it.Never had a complain from people with strong passwords losing access to accounts.Most of the accounts are hacked due to indirect phishing or direct attacking the victims machine.Data-base breach was a different case altogether.My point being,it's due to users fault their accounts are hacked and not the forum.

[tspacepilot]

That is proof-of-proxy, i.e. you. Whether you can be trusted with that is debatable for each individual. I'd prefer cryptography over trust. Anyhow, the password problem with Windows can be semi-easily mitigated and thus voids the excuse.

Yah,  I don't use windows but you should just be able to put a linux distro on a usb, boot from that usb, mount the harddrive, read all the data you want to read.

[Muhammed Zakir]

I am unable to login to my profile. I am using windows and have 2 profiles, 1 admin & 1 standard user. I am not exactly sure what is the problem, but I guess it is related to password. I tried many times, but I can't login. It is not possible to recover password using recovery tools because of the length of password. So I am only left with cracking it with a software available online. Like I said earlier, chances for logging in again is very low.

What version of Windows?  There should be ways to get around the password issue.

Windows 7.

Is it telling you the password has failed or is it giving you another message?

Password failed.

As long as the drive is readable, which it is if you are loading Windows, the data should be retrievable. I assume this machine is where the PGP & wallet exists? 

Yes.

And you don't know your password but you know how long it is? 

I know my password, but I can't login to my profile. I think maybe a letter or number is wrong. I'm not sure about it though!

So the new accusation is: "I don't trust them because they lost access to an empty wallet and pgp key cannot sign a message proving their identity"?

I can't help with that, but as MZ offered a proof of knowledge. Would that be acceptable? I can think of a question only they should be able to answer based on our past exchange of encrypted messages.

FTFY


It seems like Muhammed Zakir is well aware that a signed message is needed to prove identity:

[ img]https://i.imgur.com/bbPkYwh.png[/img]

His own demands to require a signed message are being honored.
 -snip-

I understand what you're saying, but if I can't access my wallet or PGP, how can I sign?

-snip-
I can't help with that, but as MZ offered a proof of knowledge. Would that be acceptable? I can think of a question only they should be able to answer based on our past exchange of encrypted messages.

@hilariousandco:- Will this work?


Edit:- If anyone has any instructions on recovering them, please do post here! Thanks in advance! AFAIK, internet connection is broken where I am going. I will be off for about 2-5 days! If there is internet connection, I will try to come online. So if you don't see me around these days, don't make this anymore worse, if you know what I mean!

[Timelord2067]

Just like how TomatoCage came back to life then when challenged to provide proof went offline.

Nice to see the global moderators are about six to nine months behind the rest of us.

[ibminer]

Edit:- If anyone has any instructions on recovering them, please do post here! Thanks in advance! AFAIK, internet connection is broken where I am going. I will be off for about 2-5 days! If there is internet connection, I will try to come online. So if you don't see me around these days, don't make this anymore worse, if you know what I mean!

http://pogostick.net/~pnh/ntpasswd/
Disclaimer: If you encrypted files through Windows, this will not fully work. But based on your current situation, I doubt you were encrypting files.

[digaran]

Why is he so important now? lol he was probably out there killing for ISIS all this time and now is back just give him another chance guys, Muslim=Arab=Terrorist.
Your password is : administrator and if it's not that then just contact NSA and ask them what is the backdoor code for windows.

[Muhammed Zakir]

Just like how TomatoCage came back to life then when challenged to provide proof went offline.

I informed I may not be online for a few days to not see these kind of comments, but sigh... 

Nice to see the global moderators are about six to nine months behind the rest of us.

I don't understand!

Edit:- If anyone has any instructions on recovering them, please do post here! Thanks in advance! AFAIK, internet connection is broken where I am going. I will be off for about 2-5 days! If there is internet connection, I will try to come online. So if you don't see me around these days, don't make this anymore worse, if you know what I mean!

http://pogostick.net/~pnh/ntpasswd/

Thank you, ibminer! I will give it a go when I return home!

Disclaimer: If you encrypted files through Windows, this will not fully work. But based on your current situation, I doubt you were encrypting files.

I didn't encrypt.

[theymos]

At Muhammed Zakir's request, I looked into his IP logs, and he is currently accessing the forum from roughly the same location as he did previously.

[shorena]

At Muhammed Zakir's request, I looked into his IP logs, and he is currently accessing the forum from roughly the same location as he did previously.

Thanks, but you probably know that it wont do.

So the new accusation is: "I don't trust them because they lost access to an empty wallet and pgp key cannot sign a message proving their identity"?

I can't help with that, but as MZ offered a proof of knowledge. Would that be acceptable? I can think of a question only they should be able to answer based on our past exchange of encrypted messages.

FTFY


It seems like Muhammed Zakir is well aware that a signed message is needed to prove identity:
-snip-

Fair enough.


Maybe we can keep the tech support and trolling out of this and just bump it when something happens. It would be greatly appreciated.

[digaran]

At Muhammed Zakir's request, I looked into his IP logs, and he is currently accessing the forum from roughly the same location as he did previously.

Thanks, but you probably know that it wont do.

Maybe we can keep the tech support and trolling out of this and just bump it when something happens. It would be greatly appreciated.

Guilty as charged, I can't believe The "Shorena" indirectly addressed me in his post now I'm walking on pink clouds.
Now the one person with the ability to kick every body from trust list or add any body at will, having access to IP logs and everything is telling you that the user is connecting roughly from same location yet you tell him it's not enough?
Wasn't this like: theymos first trusts a few people and adds them into his list and as they in turn trust a few people themselves and adding them to their list, is there some body above theymos other than the late great Satoshi himself or even if he comes here and vouch for MZ you'll be wanting your signed message?
Am I going to get banned and tagged now after I posted after "Shorena" indirectly told me not to? lol I think you guys are a little bit full of yourselves, if a hacker were that good to duplicate the IP address then don't you think they could come up with a private key?

[kiklo]

Theymos himself pops in to let people know that Muhammed Zakir account is using the exact same IP as before and still these users do not remove their False Negative Trust Ratings.
Zepher
Lauda
hilariousandco

@Theymos , you know Lauda has been abusing her position as a DT member for months and you continue to let her place false ratings as she see fit.

How about removing Lauda and blazed from DT because their abuse of it is breathtaking.
They are making a complete and utter joke of your trust system.

 


FYI:
Current Members of a Rogue Default Trust Gang,
tagging others with red trust to limit signature and escrow competition   

https://bitcointalk.org/index.php?topic=1938190
Who are we?
    Blazed
    minerjones
    Lauda
    Zepher

[boldar]

All DT members make questionable calls on situations like these. From my speculation, Lauda has made the worst calls. Nothing is worse than a red tag an innocent person doesn't deserve. All DT members make mistakes, and for sure many of them have jumped the creek and made a guess here or there. It seems that Lauda does not think the rating's thoroughly, and simply puts red. This is very unfair.

theymos, something must be done.

[Quickseller]

I would say that based on the fact that MZ changed his PW after the forum's member's table was leaked, that MZ not only posted, but also traded/lent BTC a decent number of times after the forum was hacked would make it reasonable to say that his account was secured after the forum hack. In addition to this, MZ repaid a loan several months late, many months after the hack, communicated with shorena regarding repayment, and shorena did not mention anything about MZ's account getting hacked at the time.

I would also argue that the way MZ is behaving is consistent with how I believe the "real" MZ behaves. Although this can reasonably be faked.

Lastly, per theymos, the IP address of MZ is ~the same as what it was previously. If shorena can confirm some kind of proof of knowledge, then I would say that the person behind the MZ account is likely to be the "real" MZ.

With the above being said, I would still be hesitant to trust someone who has been away from the community for as long as MZ was away, at least at first.....

[shorena]

-snip-
Guilty as charged, I can't believe The "Shorena" indirectly addressed me in his post now I'm walking on pink clouds.
Now the one person with the ability to kick every body from trust list or add any body at will, having access to IP logs and everything is telling you that the user is connecting roughly from same location yet you tell him it's not enough?

Because it does not matter what theymos thinks. It matters what hilarious and Zepher think.

Am I going to get banned and tagged now after I posted after "Shorena" indirectly told me not to? lol I think you guys are a little bit full of yourselves, if a hacker were that good to duplicate the IP address then don't you think they could come up with a private key?

No, Ill probably have forgotten about you in a day or two. Sup with the air quotes though?

-snip-

 

I would say that based on the fact that MZ changed his PW after the forum's member's table was leaked, that MZ not only posted, but also traded/lent BTC a decent number of times after the forum was hacked would make it reasonable to say that his account was secured after the forum hack. In addition to this, MZ repaid a loan several months late, many months after the hack, communicated with shorena regarding repayment, and shorena did not mention anything about MZ's account getting hacked at the time.

Payment was received from the known address[1][2].

I would also argue that the way MZ is behaving is consistent with how I believe the "real" MZ behaves. Although this can reasonably be faked.

Lastly, per theymos, the IP address of MZ is ~the same as what it was previously. If shorena can confirm some kind of proof of knowledge, then I would say that the person behind the MZ account is likely to be the "real" MZ.

With the above being said, I would still be hesitant to trust someone who has been away from the community for as long as MZ was away, at least at first.....

[1] https://www.blocktrail.com/BTC/address/1MZakirz92c76pK6BNy1NAEmbWYpDcP7mh/transactions
[2] https://www.blocktrail.com/BTC/tx/6a961761f0bc515eee5e6be191e45a344e38bababcdd3e235960187136de462e

[aadje93]

If you can not login to windows, how about to boot via a Linux cd or usb stick you can then easily access the hard drive files and recover your data no?

[Lauda]

At Muhammed Zakir's request, I looked into his IP logs, and he is currently accessing the forum from roughly the same location as he did previously.

Same IP(s) or same location? Spoofing the location would be fairly trivial.

Am I going to get banned and tagged now after I posted after "Shorena" indirectly told me not to?

There's an ignore button which works very nicely.

lol I think you guys are a little bit full of yourselves, if a hacker were that good to duplicate the IP address then don't you think they could come up with a private key?

The database, including IP logs (IIRC) was leaked. Thus getting the IP address that was used with some account should not be too difficult. Spoofing the IP to corresponds with one used before is much harder than just spoofing the location.

With the above being said, I would still be hesitant to trust someone who has been away from the community for as long as MZ was away, at least at first.....

No harm done to wait for a signed Bitcoin/PGP message. Do I need to remind the *knights in shining armor* of their complete failures again?

One of the most recent cases is nachius.

[kiklo]

At Muhammed Zakir's request, I looked into his IP logs, and he is currently accessing the forum from roughly the same location as he did previously.

Same IP(s) or same location? Spoofing the location would be fairly trivial.

Sorry calling your bullshit out on that one.

Explain how you can have two way communications with a false IP Address

https://stackoverflow.com/questions/5180557/why-is-it-not-possible-to-fake-an-ip-address

It is fully possible to send data with a fake sender IP. You'll have a hard time getting replies though, since the replies will be sent to the fake IP and never reach you. Additionally, if you send data with a "from" IP that a router doesn't expect to arrive from you, the router will often simply drop it, and sometimes inform the ISP that you're up to something that violates your TOS.

Login to Btctalk requires a reply to your system, if the IP was faked the login approval is sent to the wrong ip address and you can't login.

So Lauda, why are you lying , hmm?


 


FYI:
Seems like you are still red tagging first and asking questions almost never.

FYI2:
LOL,  
leave it to Lauda to blame the users for Btctalk Staff losing the IP address information.
Then punish the users for the BTCtalk staff's fault. 

[philipma1957]

All DT members make questionable calls on situations like these. From my speculation, Lauda has made the worst calls. Nothing is worse than a red tag an innocent person doesn't deserve. All DT members make mistakes, and for sure many of them have jumped the creek and made a guess here or there. It seems that Lauda does not think the rating's thoroughly, and simply puts red. This is very unfair.

theymos, something must be done.

I  have got to ask you  where have you been for 2 years? 

You have a 2 year shutdown  from 2015 to 2017  this attracts attention  from  people that try to do security.

I gave you stellar trust  back in Dec 2014  and now I am reviewing  your account and a dozen others that are gapped with inactivity then started up again.

I frankly  don't want to bother  but Muhammed Zakir has asked me more then once to review  accounts to see if they were bad. 

So  who are you?  The real  boldar  or  the same person that hacked into  bitcointalk data base?  Or a different hacker.

I do not like doing detective work  and I am not going to redline you  or pull my  trust away.

But 2 year gaps  in activity make me nervous.