Bitcoin Forum
October 17, 2019, 10:08:30 PM *
News: Latest Bitcoin Core release: 0.18.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: Showing I merited 3 people 2 days ago but I never even visited those threads..  (Read 772 times)
Elwar
Legendary
*
Offline Offline

Activity: 2898
Merit: 1486


Viva Ut Vivas


View Profile WWW
July 20, 2018, 09:40:04 AM
 #21


I always type in websites before I log in. Bitcointalk is always up for me. But thinking about it I did have to log in again several days ago.
Why you even bother to type the "Bitcointalk" in the search bar? I just simply bookmarked the boards where I normally read and post. Then tick the "show bookmarks bar". I only logging with those bookmarked links and problem solved, no phishing links at all Cheesy

Ya, usually I just go to the address bar and type bitc and it has bitcointalk at the top.

The reality though is I usually have about 20 tabs open at once and bitcointalk is usually one of them. So I rarely need to actually go to the site.

First seastead company actually selling seasteads: Ocean Builders https://ocean.builders  Of course we accept bitcoin.
Seastead talk at http://seasteadtalk.org
1571350110
Hero Member
*
Offline Offline

Posts: 1571350110

View Profile Personal Message (Offline)

Ignore
1571350110
Reply with quote  #2

1571350110
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1571350110
Hero Member
*
Offline Offline

Posts: 1571350110

View Profile Personal Message (Offline)

Ignore
1571350110
Reply with quote  #2

1571350110
Report to moderator
Piggy
Hero Member
*****
Offline Offline

Activity: 784
Merit: 1385



View Profile WWW
July 20, 2018, 04:27:23 PM
Last edit: July 20, 2018, 04:48:32 PM by Piggy
 #22

Just did a scan of my computer so I'm not seeing any virus or anything along those lines. I use antivirus but also do a scan with a secondary program periodically.

I'm curious about who I would talk to about checking the IPs I've logged in as over the past week. Should all be the same country if it was me.

Do you remember if at the time the merits where assigned you were logged in the forum or online at all doing something else?

My computer was online and connected but I wasn't posting on bitcointalk. But was likely still logged in at the time. I don't recall if the next morning I had to re-log in.

I don't click on links to go to bitcointalk. I have been using the site for 8 years, I know the address. I just type in the URL.

Without going into too many technical details, i was just asking because i thought would be possible just by visiting a link "make you assign merit to somebody" through an exploit, but i verified and is not possible. So i guess somebody took control of your account.
seoincorporation
Legendary
*
Offline Offline

Activity: 1498
Merit: 1501


BtcBoss


View Profile
July 20, 2018, 04:46:15 PM
Merited by Elwar (3)
 #23

I know, I may have been hacked but...

I checked my merits sent and on July 17 it shows 3 different merits given of 50 merits each for threads I have never visited.

Very odd that someone would hack my account just to merit someone.

I have since changed my password but I would have figured a hacker would do some more interesting things with a Legendary account than merit some people.

Or is this a random bug.


Ummm... seems pretty similar than this case https://bitcointalk.org/index.php?topic=4642710

I don`t know, but maybe this is a new way of merit trading, maybe you should red tag those that steal merits from you. They`ve been already tagged by the pharmacist and suchmoon.
I suspect those merits have been sold, we have a new kind of merit-trading-hacking activity around here.

.BitDice.               ▄▄███▄▄
           ▄▄██▀▀ ▄ ▀▀██▄▄
      ▄▄█ ▀▀  ▄▄█████▄▄  ▀▀ █▄▄
  ▄▄██▀▀     ▀▀ █████ ▀▀     ▀▀██▄▄
██▀▀ ▄▄██▀      ▀███▀      ▀██▄▄ ▀▀██
██  ████▄▄       ███       ▄▄████  ██
██  █▀▀████▄▄  ▄█████▄  ▄▄████▀▀█  ██
██  ▀     ▀▀▀███████████▀▀▀     ▀  ██
             ███████████
██  ▄     ▄▄▄███████████▄▄▄     ▄  ██
██  █▄▄████▀▀  ▀█████▀  ▀▀████▄▄█  ██
██  ████▀▀       ███       ▀▀████  ██
██▄▄ ▀▀██▄      ▄███▄      ▄██▀▀ ▄▄██
  ▀▀██▄▄     ▄▄ █████ ▄▄     ▄▄██▀▀
      ▀▀█ ▄▄  ▀▀█████▀▀  ▄▄ █▀▀
           ▀▀██▄▄ ▀ ▄▄██▀▀
               ▀▀███▀▀
        ▄▄███████▄▄
     ▄███████████████▄
    ████▀▀       ▀▀████
   ████▀           ▀████
   ████             ████
   ████ ▄▄▄▄▄▄▄▄▄▄▄ ████
▄█████████████████████████▄
██████████▀▀▀▀▀▀▀██████████
████                   ████
████                   ████
████                   ████
████                   ████
████                   ████
████▄                 ▄████
████████▄▄▄     ▄▄▄████████
  ▀▀▀█████████████████▀▀▀
        ▀▀▀█████▀▀▀
▄▄████████████████████████████████▄▄
██████████████████████████████████████
█████                            █████
█████                            █████
█████                            █████
█████                            █████
█████                     ▄▄▄▄▄▄▄▄▄▄
█████                   ▄█▀▀▀▀▀▀▀▀▀▀█▄
█████                   ██          ██
█████                   ██          ██
█████                   ██          ██
██████████████████▀▀███ ██          ██
 ████████████████▄  ▄██ ██          ██
   ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ██          ██
             ██████████ ██          ██
           ▄███████████ ██████▀▀██████
          █████████████  ▀████▄▄████▀
[/]
vphasitha01
Full Member
***
Offline Offline

Activity: 196
Merit: 172


View Profile
July 20, 2018, 05:37:04 PM
 #24

I suspect those merits have been sold, we have a new kind of merit-trading-hacking activity around here.
I remembered a poem of "Emily Dickinson" which I learned for literature at school and I made few changes for that (just for fun).

"I'm Merit abuser! Who are you?
Are you - Merit abuser too -?
Then there's a pair of us!
Don't tell! They'd ban us - you know!
"

Actually they don't Cheesy

Merit abuse isn't moderated by the forum.
theymos
Administrator
Legendary
*
Offline Offline

Activity: 3542
Merit: 6326


View Profile
July 20, 2018, 06:33:23 PM
Merited by Elwar (5)
 #25

Since it was a large amount and a clear-cut case, I deleted those merit sends.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
LoyceV
Legendary
*
Offline Offline

Activity: 1638
Merit: 4825


Largest Merit Circle on BPIP!


View Profile WWW
July 20, 2018, 06:37:26 PM
Merited by Elwar (3)
 #26

Since it was a large amount and a clear-cut case, I deleted those merit sends.
From your first post about Merit:
While we will not be directly moderating this
I'm glad to see you've drawn a line and made an exception!

Now all that's needed is a picture of the Merit thief's face when he sees it's gone again Cheesy

ibminer
Legendary
*
Offline Offline

Activity: 1366
Merit: 1373


Goonies never say die.


View Profile
July 20, 2018, 06:43:32 PM
Merited by Elwar (5)
 #27

Is this being accepted as a hack or potential bug in the merit system? I assume IP records would indicate whether the account was compromised?

:-: Bitcointalk Public Information Project (BPIP) New stats, new reports, and a new design(done by me. Smiley)
Don't be obsessed with your desires. The Zen philosopher Basho once wrote, 'A flute with no holes, is not a flute... and a donut with no hole, is a Danish.' He was a funny guy.
suchmoon
Legendary
*
Offline Offline

Activity: 2100
Merit: 4094


Pedal-powered plaguebot


View Profile
July 20, 2018, 06:45:14 PM
Merited by Elwar (2)
 #28

Since it was a large amount and a clear-cut case, I deleted those merit sends.

Oh boy... brace yourselves for 500 new threads about merit abuse.


theymos
Administrator
Legendary
*
Offline Offline

Activity: 3542
Merit: 6326


View Profile
July 20, 2018, 06:49:37 PM
 #29

Is this being accepted as a hack or potential bug in the merit system? I assume IP records would indicate whether the account was compromised?

His account was compromised.

Oh boy... brace yourselves for 500 new threads about merit abuse.

I'm not going to do reversals on mere abuse.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
suchmoon
Legendary
*
Offline Offline

Activity: 2100
Merit: 4094


Pedal-powered plaguebot


View Profile
July 20, 2018, 06:56:46 PM
Merited by Elwar (2)
 #30

I'm not going to do reversals on mere abuse.

Fair enough, we're gonna have to use this quote instead of "merit is not moderated".

Elwar
Legendary
*
Offline Offline

Activity: 2898
Merit: 1486


Viva Ut Vivas


View Profile WWW
July 20, 2018, 06:58:47 PM
 #31

Thanks for looking into this. I'm just glad that's all the hacker did.

Now I get to spend the day scrubbing my computer for anything suspicious.  

Fortunately I lock my keys up in cold cold storage plus they need to know which numbers I added/deleted.

First seastead company actually selling seasteads: Ocean Builders https://ocean.builders  Of course we accept bitcoin.
Seastead talk at http://seasteadtalk.org
vphasitha01
Full Member
***
Offline Offline

Activity: 196
Merit: 172


View Profile
July 20, 2018, 08:03:12 PM
 #32

I'm not going to do reversals on mere abuse.
Oh yeah finally our great "theymos" heard my poem Wink . I think we can take as " I'm going to do reversals on large scale Merit abuses" is it valid for the ANN underworld freaks too? ,who do Merit business more oftenly.
suchmoon
Legendary
*
Offline Offline

Activity: 2100
Merit: 4094


Pedal-powered plaguebot


View Profile
July 20, 2018, 08:07:58 PM
 #33

I'm not going to do reversals on mere abuse.
Oh yeah finally our great "theymos" heard my poem Wink . I think we can take as " I'm going to do reversals on large scale Merit abuses" is it valid for the ANN underworld freaks too? ,who do Merit business more oftenly.

No, you should probably not interpret it as that. This was reversed because theymos was able to verify that the account was compromised.

vphasitha01
Full Member
***
Offline Offline

Activity: 196
Merit: 172


View Profile
July 20, 2018, 08:14:34 PM
 #34

I'm not going to do reversals on mere abuse.
Oh yeah finally our great "theymos" heard my poem Wink . I think we can take as " I'm going to do reversals on large scale Merit abuses" is it valid for the ANN underworld freaks too? ,who do Merit business more oftenly.

No, you should probably not interpret it as that. This was reversed because theymos was able to verify that the account was compromised.
Okey my mistake. But I think theymos will spell it out sooner than we think Wink isn't that great if it happens?
Elwar
Legendary
*
Offline Offline

Activity: 2898
Merit: 1486


Viva Ut Vivas


View Profile WWW
July 20, 2018, 09:39:42 PM
Merited by Foxpup (2)
 #35

Ok, I found it in my browser history.

https://bitcointalk. to /index.php?topic=1638278.0

Did a google search to find out how to do animated gifs on bitcointalk.


Damn, sneaky bastards.

Thanks to ibminer for suggesting I check my browser history.

Sorry for causing any trouble for anyone due to my mistake.

Merits all around.


Still scrubbing and locking down my computer anyway...wake up call I suppose.

First seastead company actually selling seasteads: Ocean Builders https://ocean.builders  Of course we accept bitcoin.
Seastead talk at http://seasteadtalk.org
LoyceMobile
Full Member
***
Offline Offline

Activity: 488
Merit: 103


theymos: "scammers are often pretty stupid"


View Profile WWW
July 20, 2018, 10:00:54 PM
Merited by suchmoon (7), Foxpup (3), Elwar (1)
 #36

Ok, I found it in my browser history.

https://bitcointalk. to /index.php?topic=1638278.0

Did a google search to find out how to do animated gifs on bitcointalk
Add the phishing site to your hosts file, and reroute it to localhost. That prevents this in the future:
I have added this line to /etc/hosts
Code:
127.0.0.1       bitcointalk.to
Now my computer can't access that phishing site anymore.

LoyceV on the road (or in bed, couch, ....). Don't deal with this account (there's one exception), I use it on untrusted devices.
<<Lightning Network: Tip me 1 satoshi>>. <<Exchange Bitcoin LN for onchain coins>> <<"When AI roams free, that's LoyceV...on mobile" (by Steamtyme)>>  <<your text here for free? come up with something good>>
Look at me, I'm DT3!
[/size]
bananaunana
Member
**
Offline Offline

Activity: 252
Merit: 14

MenaPay - Crypto made easier than cash


View Profile
July 20, 2018, 10:46:27 PM
 #37

I'm not going to do reversals on mere abuse.
Oh yeah finally our great "theymos" heard my poem Wink . I think we can take as " I'm going to do reversals on large scale Merit abuses" is it valid for the ANN underworld freaks too? ,who do Merit business more oftenly.

No, you should probably not interpret it as that. This was reversed because theymos was able to verify that the account was compromised.
Reversals of Merit abuse look fine at the first glance and while I read that I thought first this could be a good idea. But it's obvious that a Merit reversal of abusers will lead to nothing because all the sMerit will be given back to the same cheater and it's possible for him to spent these sMerits again, a never ending story and only more work for admins.

And thanks to OP, now we know that we have to be careful. I'm just wondering the hackers got access but OP didn't enter his login data on this phishing site. Fortunately the hackers didn't change your password.

Selling bananas for 1 BTC each => PM if you are interested
Litecoindigger
Jr. Member
*
Offline Offline

Activity: 98
Merit: 3


View Profile
July 20, 2018, 11:15:46 PM
 #38

Elvar, may I ask, if you can add the other accounts which were involved? It's likely there are more accounts connected and if you include them into your entry post this could help for future references and investigations. I can have a look into it, if I find something suspicious.

Thanks  Smiley

◉—◈—◉—◈—◉ TOGACOIN ◉—◈—◉—◈—◉
The New Generation of Mining Operations (https://togacoin.com/)
Elwar
Legendary
*
Offline Offline

Activity: 2898
Merit: 1486


Viva Ut Vivas


View Profile WWW
July 21, 2018, 05:05:31 AM
 #39

FYI. To verify that I am still in control of my account.

https://www.blockchain.com/btc/address/1ELWAR1qFQbfmpMhcsTaBniFRLewrYqGo2

---
July 20, 2018
---
G66OM3cEsEwaosWnMALZoy1+5KhsaEqAMeWjNv/MiYI1QC+lyyNFmOYVOl63JI0ocoBMsAKKCh3xQJ4Mk3k1AR4=

First seastead company actually selling seasteads: Ocean Builders https://ocean.builders  Of course we accept bitcoin.
Seastead talk at http://seasteadtalk.org
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!