Account hacked -- should I blame admins or not?

[zoeh]

@OP.

Account is banned too. So it does not make any sense to red trust it.

Which account is banned?

But you look quite a naive in this forum.

1. posting multiple comment in a row in thread.

I have the time I guess
2.

not able to secure your account.

It was password secured, if there was 2fa, I would have installed in, or at least email 2fa
3.

Did not provided any concrete proof that hacked/banned account belonged to you.
  (concrete proof means signing the message from the address that was posted from that account in this forum)

Yes, i haven't

Now my Snr Member account is hacked, when will I rank as senior again since they have introduced this merit system?

Since you gained 3 merits in a year, it will take you 250/3 years that will be approximately 80 years.

I hope you got paid to write that, what a bad joke it was

My argument is based on the fact an email address was changed without letting the owner confirm it, it can be referred to as unauthorized change of ownership. In this case, everyone's account is at risk, including the admins.

Nopes, If admin think,hacking of account is so easy then he is not openly giving 1 troy once of gold for finding the email address of default trust account.

- 1 XAU: Find the email address of user DefaultTrust and explain in detail how you did it.

[r1s2g3]

When I said you are naive , there is a reason.Look  how badly you mixed all the quoting in above post. (https://archive.is/72Chr)

Coming back to your questions in that post.
1. Which account is banned?

Your account is banned that you are talking  in previous posts

He is the link to the account: https://bitcointalk.org/index.php?action=profile;u=1000883

You can check in bpip : https://bpip.org/profile.aspx?p=FrankNoland


2.I hope you got paid to write that, what a bad joke it was

I think you got worst joke, hacked + banned account.

[zoeh]

When I said you are naive , there is a reason.Look  how badly you mixed all the quoting in above post. (https://archive.is/72Chr)

Coming back to your questions in that post.
1. Which account is banned?

Your account is banned that you are talking  in previous posts

He is the link to the account: https://bitcointalk.org/index.php?action=profile;u=1000883

You can check in bpip : https://bpip.org/profile.aspx?p=FrankNoland


2.I hope you got paid to write that, what a bad joke it was

I think you got worst joke, hacked + banned account.

The account is hacked not banned

[Veleor]

The account is hacked not banned

Account 'FrankNoland' was banned on the 7th December 2018, as you can see on bpip.org.




The last owner of the profile 'FrankNoland' also said about it.

Hello. Today my BTT account was blocked, I didn’t break anything, why was my account blocked? thanks for the answer

https://bitcointalk.org/index.php?action=profile;u=1000883 (FrankNoland)

[zoeh]

The account is hacked not banned

Account 'FrankNoland' was banned on the 7th December 2018, as you can see on bpip.org.

https://i.imgur.com/lUCeMdi.png


The last owner of the profile 'FrankNoland' also said about it.

Hello. Today my BTT account was blocked, I didn’t break anything, why was my account blocked? thanks for the answer

https://bitcointalk.org/index.php?action=profile;u=1000883 (FrankNoland)

Thanks for that, and it looks like it was locked a day after I realized that it was being hacked. I think this user is the one that hacked the account and changed the email and password:
https://bitcointalk.org/index.php?action=profile;u=2499248. And continued to create this thread acting and pretending to be innocent: https://bitcointalk.org/index.php?topic=5081485.msg48511454#msg48511454 whereas he knows very well that he hacked the account.. I rated his trust that he hacked it, I hope to recover it since it has some sensitive information in it.

[trapatalce]

Apparently, my account got hacked on the 1st November by the unknown hacker for unknown reasons.

First of all, my password was secure atleast with 3 capital letters, 6 numeric numbers and the rest was just small letters.

It came as a surprise when I tried logging just now, but I was unable due to the unknown hacker my account. The next move that anyone would take after, would be recovering the password using the email. Then again, the email was invalid.

Then I headed to bitcointalk search box and tried searching the account user name, it showed up and indicated that it was last active this morning, and proceed to show last posts and noticed that the new owner is making use of it by participating in signature campaigns and social media campaigns, and probably hacking some forum users. This individual is impersonating me and in a way ruining my reputation since I am not well aware what he uses the account for. 

Enough about that, let head over to the forum security now.

After I released that the account email and passwords were changed, I then headed to my mailbox, searched bitcointalk on the search box to find out what really happened, and guess what happen; this happened:
https://i.imgur.com/tEfWDCy.png

This is what was happening, the bitcointalk team was telling me that the email has changed. I mean, what happened to " Confirm that you are changing the email by clicking this option? Even a site that was built a day ago has that.

The admin should do a better job in securing the forum because at the moment, I don't consider it safe, how can users not confirm the emails addresses they are changing? instead, they get a notification inform them that the email changed whereas the user didn't change it. Sometimes, we take more than month without accessing the forum, so the 14 day notification doesn't do much- look at me now.

Now my Snr Member account is hacked, when will I rank as senior again since they have introduced this merit system?
Please do something about this, there have too may complain regarding hacked account.

This is my email looked before the hack - 1 November. Bitcointalk PMs:
https://i.imgur.com/zOisUw3.png

You should definitely blame the admins, as do I. My account was hacked this summer, it had a secure password, but this forum is not secure at all, there's no email confirmation about changing the email address, no 2FA and what grinds mt gears is "If this change wasn't made by you, lock your account".

I clicked that link, and now both the hacker and I are locked out of my account, I had a thread active for more than a month, a few high ranking members verified that I'm genuine, but no, the admins don't give a fuck.

It took me more than a year to rise that account from the ground, 750+ posts and 101 merit, that is not easy to attain right now.

[xtraelv]

Most likely your account didn't get hacked. It is far more likely that your password got phished by visiting one of the several clone phishing sites.

[zoeh]

Apparently, my account got hacked on the 1st November by the unknown hacker for unknown reasons.

First of all, my password was secure atleast with 3 capital letters, 6 numeric numbers and the rest was just small letters.

It came as a surprise when I tried logging just now, but I was unable due to the unknown hacker my account. The next move that anyone would take after, would be recovering the password using the email. Then again, the email was invalid.

Then I headed to bitcointalk search box and tried searching the account user name, it showed up and indicated that it was last active this morning, and proceed to show last posts and noticed that the new owner is making use of it by participating in signature campaigns and social media campaigns, and probably hacking some forum users. This individual is impersonating me and in a way ruining my reputation since I am not well aware what he uses the account for. 

Enough about that, let head over to the forum security now.

After I released that the account email and passwords were changed, I then headed to my mailbox, searched bitcointalk on the search box to find out what really happened, and guess what happen; this happened:
https://i.imgur.com/tEfWDCy.png

This is what was happening, the bitcointalk team was telling me that the email has changed. I mean, what happened to " Confirm that you are changing the email by clicking this option? Even a site that was built a day ago has that.

The admin should do a better job in securing the forum because at the moment, I don't consider it safe, how can users not confirm the emails addresses they are changing? instead, they get a notification inform them that the email changed whereas the user didn't change it. Sometimes, we take more than month without accessing the forum, so the 14 day notification doesn't do much- look at me now.

Now my Snr Member account is hacked, when will I rank as senior again since they have introduced this merit system?
Please do something about this, there have too may complain regarding hacked account.

This is my email looked before the hack - 1 November. Bitcointalk PMs:
https://i.imgur.com/zOisUw3.png

You should definitely blame the admins, as do I. My account was hacked this summer, it had a secure password, but this forum is not secure at all, there's no email confirmation about changing the email address, no 2FA and what grinds mt gears is "If this change wasn't made by you, lock your account".

I clicked that link, and now both the hacker and I are locked out of my account, I had a thread active for more than a month, a few high ranking members verified that I'm genuine, but no, the admins don't give a fuck.

It took me more than a year to rise that account from the ground, 750+ posts and 101 merit, that is not easy to attain right now.

My point exactly, thank you for highlighting it, you and I have one thing in common, which is feeling that the forum isn't secure enough. The  admin should do something about this issue or their accounts will follow as well. It takes years to grow an account, especially with this merit system, and it sucks to see accounts being deprived from original users whereas the admin don't give a damn, they don't even bother responding to our messages, I find it somehow unproffessional, but its their choice.

Yeah, you should blame the admins so your account won't be recovered and get ignored as long as you live. But even if you can get patient enough and wait until theymos for a year he doesn't even read a single word to your thread though.

Whats the use of having admins if they can't even recover a simple account, what they do is ignore users messages, and it's not doing anything but harm to this forum.

Most likely your account didn't get hacked. It is far more likely that your password got phished by visiting one of the several clone phishing sites.

You will never know buddy and I am not arguing with your statement, but I have also installed, metamask, metacert and alot more to ensure a secure browser. However, even if that might have been the case, users should atleast be informed when an intruder is accessing their account and change the email and password, especially from an unathorised IP address.

[LeGaulois]

Requiring confirmation from the old email is not a good idea for the reason already mentioned.
Asking for password reentry to change the mail address would be good. If you have left your browser open where other people could have access to it, then it gives an extra measure of protection. Requiring a signed blockchain message for an email change could be a good way to stop this type of hijack.

Requiring email confirmation on signup is also good to help reduce spammers. It doesn't help in this case, but I believe it would be beneficial for the forum.

{reply crafted before the previous post was submitted}

Email confirmations don't help to reduce spammers (or just a little) since bots are usually coded to verify emails as well. But an email confirmation to authorize to change the email is more convenient. (And not after like it's currently) I know people say "what if they lost their email box access" Well you can't hold hands with everyone like you do with children.

[zoeh]

Requiring confirmation from the old email is not a good idea for the reason already mentioned.
Asking for password reentry to change the mail address would be good. If you have left your browser open where other people could have access to it, then it gives an extra measure of protection. Requiring a signed blockchain message for an email change could be a good way to stop this type of hijack.

Requiring email confirmation on signup is also good to help reduce spammers. It doesn't help in this case, but I believe it would be beneficial for the forum.

{reply crafted before the previous post was submitted}

Email confirmations don't help to reduce spammers (or just a little) since bots are usually coded to verify emails as well. But an email confirmation to authorize to change the email is more convenient. (And not after like it's currently) I know people say "what if they lost their email box access" Well you can't hold hands with everyone like you do with children.

That is a very great point you have highlighted right there, the admins should at least let us confirm that we are changing our email addresses, it's for the benefit of the forum.

[trapatalce]

Yeah, you should blame the admins so your account won't be recovered and get ignored as long as you live. But even if you can get patient enough and wait until theymos for a year he doesn't even read a single word to your thread though.

It's been 5 months since my account was hacked. Did the mods help me recover it? No. Could I recover it if I didn't use their "lock this account" thingy? Yes, the email was changed to a yopmail address.
They tell me to lock my account if I didn't authorize the changes and then tell me you can't prove ownership of this account after I fucking proved it? Fuck that.

They don't give a fuck for us, what happened to BTCTalk 2.0? Supposedly, that was supposed to be better and more modern, I hope more secure, but that's dead now it seems.

Give me some security features, we need 2FA, especially in this crypto world.

Yes, blaming other doesn't help and I mainly blame myself for not securing my account better, but the mods are offering a feature that they're not willing to enforce, can't blame myself for that.

[zoeh]

Yeah, you should blame the admins so your account won't be recovered and get ignored as long as you live. But even if you can get patient enough and wait until theymos for a year he doesn't even read a single word to your thread though.

It's been 5 months since my account was hacked. Did the mods help me recover it? No. Could I recover it if I didn't use their "lock this account" thingy? Yes, the email was changed to a yopmail address.
They tell me to lock my account if I didn't authorize the changes and then tell me you can't prove ownership of this account after I fucking proved it? Fuck that.

They don't give a fuck for us, what happened to BTCTalk 2.0? Supposedly, that was supposed to be better and more modern, I hope more secure, but that's dead now it seems.

Give me some security features, we need 2FA, especially in this crypto world.

Yes, blaming other doesn't help and I mainly blame myself for not securing my account better, but the mods are offering a feature that they're not willing to enforce, can't blame myself for that.

What you are saying is that the after you clicked on the lock account link, you never got access to your account ever again?

[khaled0111]

What you are saying is that the after you clicked on the lock account link, you never got access to your account ever again?

No, locking the account is just a preventive measure, this way you will be sure the hacker will be unable to use this account for frodulent activities (scamming other users, posting links to phishing websites/malwares...)

You can recover your account by proving it is yours. You can read more about how to do that here: Recovering hacked accounts or accounts with lost passwords
You have to be patient though 

[trapatalce]

What you are saying is that the after you clicked on the lock account link, you never got access to your account ever again?

That is exactly what I'm saying. There's this system where you "stake" your bitcoin address, meaning you post it in a dedicated thread and with that you can prove ownership of the account, such a flawed thing. Nobody promotes that, until I got my account hacked I didn't even know that existed.

Nevremind that, I've proven my identity with an Ethereum address, but who the fuck cares? You can find my thread in my profile, it's one of the only ones I've started.

No, locking the account is just a preventive measure, this way you will be sure the hacker will be unable to use this account for frodulent activities (scamming other users, posting links to phishing websites/malwares...)

You can recover your account by proving it is yours. You can read more about how to do that here: Recovering hacked accounts or accounts with lost passwords
You have to be patient though 

Except the mods don't really give a shit, unless you use their shitty "staking" system, which they tell you to use after your account gets hacked.. Even then, it's a matter of chance and praying to the mod gods or some shit..

[zoeh]

What you are saying is that the after you clicked on the lock account link, you never got access to your account ever again?

That is exactly what I'm saying. There's this system where you "stake" your bitcoin address, meaning you post it in a dedicated thread and with that you can prove ownership of the account, such a flawed thing. Nobody promotes that, until I got my account hacked I didn't even know that existed.

Nevremind that, I've proven my identity with an Ethereum address, but who the fuck cares? You can find my thread in my profile, it's one of the only ones I've started.

No, locking the account is just a preventive measure, this way you will be sure the hacker will be unable to use this account for frodulent activities (scamming other users, posting links to phishing websites/malwares...)

You can recover your account by proving it is yours. You can read more about how to do that here: Recovering hacked accounts or accounts with lost passwords
You have to be patient though  

Except the mods don't really give a shit, unless you use their shitty "staking" system, which they tell you to use after your account gets hacked.. Even then, it's a matter of chance and praying to the mod gods or some shit..

I have signed the message using MEW, I hope they allow it and give me access back to my account:

Code:

{
  "address": "0x47c3b73c1ffa061ae4a37c553780e426f883860a",
  "msg": "My account <FrankNoland> has been hacked/lost. Please reset the email to <franknoland060@gmail.com>. The current date is <10 January 2019>.\n-----BEGIN SIGNATURE-----\n<0x47c3b73c1fFa061aE4A37C553780e426F883860A>\n
-----END Ethereum SIGNED MESSAGE-----",
  "sig": "0xe89b163080156409be5fa1ceb2cdd8d5c01036558a18176e5939e2dde4deb739390f11951329c11194a76cf6522389453d3ce1aff0f416cbffa4ba1bbccd91c21c",
  "version": "3",
  "signer": "MEW"
}

1. Unedited posts:
https://docs.google.com/spreadsheets/d/19iXe4KB5eYYaurMOMN8cB9NnZC_zXzlOb6sFLvD_4_A/edit#gid=0
(User Number 158 registered on this campaign(VLB) was FrankNoland and I have registered using the signed MEW address). The same applies on the link below: https://docs.google.com/spreadsheets/d/1Eh7Rzyt9gr_f5GPdxFvGfA-7aogGAzBJ1OCtXT0TRyI/edit#gid=0 (User number 158)

[zoeh]

Apparently, my account got hacked on the 1st November by the unknown hacker for unknown reasons.

First of all, my password was secure atleast with 3 capital letters, 6 numeric numbers and the rest was just small letters.

It came as a surprise when I tried logging just now, but I was unable due to the unknown hacker my account. The next move that anyone would take after, would be recovering the password using the email. Then again, the email was invalid.

Then I headed to bitcointalk search box and tried searching the account user name, it showed up and indicated that it was last active this morning, and proceed to show last posts and noticed that the new owner is making use of it by participating in signature campaigns and social media campaigns, and probably hacking some forum users. This individual is impersonating me and in a way ruining my reputation since I am not well aware what he uses the account for. 

Enough about that, let head over to the forum security now.

After I released that the account email and passwords were changed, I then headed to my mailbox, searched bitcointalk on the search box to find out what really happened, and guess what happen; this happened:
https://i.imgur.com/tEfWDCy.png

This is what was happening, the bitcointalk team was telling me that the email has changed. I mean, what happened to " Confirm that you are changing the email by clicking this option? Even a site that was built a day ago has that.

The admin should do a better job in securing the forum because at the moment, I don't consider it safe, how can users not confirm the emails addresses they are changing? instead, they get a notification inform them that the email changed whereas the user didn't change it. Sometimes, we take more than month without accessing the forum, so the 14 day notification doesn't do much- look at me now.

Now my Snr Member account is hacked, when will I rank as senior again since they have introduced this merit system?
Please do something about this, there have too may complain regarding hacked account.

This is my email looked before the hack - 1 November. Bitcointalk PMs:
https://i.imgur.com/zOisUw3.png

The account was successfully recovered, thanks to the bitcointalk recovery department for doing a fantastic job. I tried deleting this thread but it was not possible, I will just lock it since no further comments will be accepted.. thanks for contributing