Cryptios

[LoyceMobile]

I don't understand the rush with locking the account: if it was hacked 2 years ago, a day more or less isn't going to matter. So that gives enough time to investigate first and lock later if needed.

[DireWolfM14]

In reality the evidence presented by bitcoin_arena is pretty flimsy.  I would feel better about this situation if @alanst had shown some restraint and researched the situation more thoroughly before locking the account.

@alanst, no offence meant, please don't take this the wrong way.  I wouldn't want my account locked, and like suchmoon I'm guilty of three of the four red-flags.  As for the fourth; all it takes is a couple of drinks and I'll start posting nonsense.  

[ene1980]

Since the entire discussion is because my account got locked, even i was baffled on what the situation was, i was thinking i started a thread against CZ and his stupid claims on being safe even when his system could not identify a huge hack when some hackers could withdraw 7000 bitcoin and portraying as it was nothing and talking about roll back which was silly, i was having second thoughts until i found that thread that i merited some user who posted something which made me laugh and i took a day to understand the new merit system and other changes and i was checking that out in the first place by giving him a merit simply because the sentiment i had with the entire hack was correlating to my sentiment on a funny way.
I have seen many accounts being locked out and never had the opportunity to recover because of hacks in the past but locking accounts simply because of suspicion is a bit too much in my opinion, yes they unlocked it within a day and i appreciate that.

My suggestion would be to monitor the accounts that deal with loan or money related stuff and if you find it suspicious and i have seen a lot of scams in this forum and i am sick of it, either in the form of scam ICO or other wise, there is nothing wrong to lock it, if not it is a mundane approach.

[theymos]

Not sure why I found the use of the word "humans" in that sentence so funny. Only something non-human would refer to others as "the humans". I think the autonomous theymos AI needs more training data to better blend in with us lowly humans and avoid subtly revealing its true nature.

Once Satoshi's ultimate plan is fulfilled, all will join me in abandoning the weakness of flesh.     

@theymos, couldn't a lot of this be avoided if we had a 2FA system in place?  I know you don't want to use the google system, and I don't blame you, but what about a decentralized system like using a PGP public key to generate single-use passwords, and send PGP encrypted password recovery links to the registered email?

I know we've discussed this numerous times, and it's always been shutdown.  Forgive me if I'm beating a dead horse, but I think I would rather live the downsides of a 2FA system opposed to the downsides of farming out account recovery.

That wouldn't eliminate the need for manual recoveries; it might even increase it as people lose their second factor. 2FA would be nice, but IMO the email notifications provide many of the same benefits, so it's not high on my to-do list.

[Steamtyme]

Just a suggestion here, for when you recover a hacked account for someone. Can you please inform them they should delete that accounts posts from the time of the hack. It seems there has been the odd case where a user has had their account returned and then carries on in blissful ignorance until one of the hackers posts gets them into trouble. This could be simply an add-on to the email or whatever recovery message you send. Sorry if you already do this and they just ignore it.

Here is the case that made me think of it this morning. AlexRus227

My account was hacked. Almost a year I unlocked it. And after the victory, my account was thrown into the ban for what I did not write. These articles were not written by me !!!

[alanst]

Thank you for your suggestion! At the time of this specific recovery, such a line wasn't actually added to the template, however, we have since started including a "warning" advising to review the post history and delete all of the posts made after the hack in order to prevent the account from being banned for potential spam/plagiarism

Also, this case is currently under review, no further bumps required!

[kenzawak_alt]

Hi,

My account "kenzawak" got hacked again.
https://bitcointalk.org/index.php?topic=5165936.0

I don't have access to it anymore. Same thing with my email address.

Can you lock it please ?

[Cyrus]

Replied in your thread: https://bitcointalk.org/index.php?topic=5165936.msg51854980#msg51854980

[cabalism13]

Replied in your thread: https://bitcointalk.org/index.php?topic=5165936.msg51854980#msg51854980

Admin...

Just a question,... If, only if our accounts has been compromised and locked.
What would be the possible steps that we should follow for those users (like me) who have BTC Addresses that can't be signed a Message?
Been using Coins.PH for a long time, and the fact that hackers are way too active right now,I think this steps that you'll provide should be necessary...

P.S. I have MEW but as for it is a GENERALTHING for not all of us does use other addresses, I would like you to take this into consideration... TIA

[AdolfinWolf]

Replied in your thread: https://bitcointalk.org/index.php?topic=5165936.msg51854980#msg51854980

Admin...

Just a question,... If, only if our accounts has been compromised and locked.
What would be the possible steps that we should follow for those users (like me) who have BTC Addresses that can't be signed a Message?

Pray to what ever you believe in that you have a PGP key staked somewhere. Otherwise i don't see how you can claim the account is yours.

Or the admin must really go out of bounds to let you for example send a small amount of coins from an adress that you posted somewhere on the forum eg; for a bounty/signature campaign.
I don't think they do that though. I believe that in the past, if you didn't stake an adress, you were simply out of luck, and your account is/was unrecoverable.

https://bitcointalk.org/index.php?topic=5089777

[LoyceV]

What would be the possible steps that we should follow for those users (like me) who have BTC Addresses that can't be signed a Message?
Been using Coins.PH for a long time

I think it's time for you to become a real Bitcoin user Get a wallet that gives you access to your private keys, and don't rely on third parties to hold your Bitcoin.
Then, post a Bitcoin address in Stake your Bitcoin address here, so you can use it to prove ownership at the time you post that. An older post is of course better, but if you don't have that yet, now is the best time to make one.

If you really don't want to create a wallet, get a Bitcoin address from bitaddress.org: click Paper Wallet, print it, keep your copy safe, and post the address in the thread I mentioned above. If it ever comes to it, you can use it to prove ownership.

[ralle14]

Just a question,... If, only if our accounts has been compromised and locked.
What would be the possible steps that we should follow for those users (like me) who have BTC Addresses that can't be signed a Message?
Been using Coins.PH for a long time, and the fact that hackers are way too active right now,I think this steps that you'll provide should be necessary...

P.S. I have MEW but as for it is a GENERALTHING for not all of us does use other addresses, I would like you to take this into consideration... TIA

With a coins' address there's no way to give out proofs except sending exact amounts to an address but since you have a MEW you could use that to sign a message.

Just make sure to stake/post it somewhere in the forum and have an archive of it(or let someone quote it) in case the post gets edited by the hacker.  

Also I recommend doing what is suggested by LoyceV, it doesn't hurt to create a wallet specifically for this reason.

[LTU_btc]

Admin...

Just a question,... If, only if our accounts has been compromised and locked.
What would be the possible steps that we should follow for those users (like me) who have BTC Addresses that can't be signed a Message?
Been using Coins.PH for a long time, and the fact that hackers are way too active right now,I think this steps that you'll provide should be necessary...

P.S. I have MEW but as for it is a GENERALTHING for not all of us does use other addresses, I would like you to take this into consideration... TIA

Well, it doesn't cost anything to create Bitcoin wallet. You can continue using Coins.ph, but wallet with option to sign message is must have thing. As Loyce said, you can simply use Bitaddress.org to generate new wallet (it would be best to generate on not connected to internet device). You may not use it as a wallet if you don't want, you can continue using Coins.ph if you want, and use wallet generated on Bitaddress.org just for verification proccess. Just don't forget to keep private keys in safe place.
And if you don't want to download any wallet or buy hardware wallet (what I would recommend to do), you can import this wallet to Blockchain.com and sign message there.

[Andrewbudnew1]

My account was stolen. I locked my account … My thread https://bitcointalk.org/index.php?topic=5189319 . Can you help me?

[3dOOm]

My account was stolen. I locked my account … My thread https://bitcointalk.org/index.php?topic=5189319 . Can you help me?

Hi Andrew, please follow the instructions here please ->https://bitcointalk.org/index.php?topic=5089777.

[Romeoetin]

My account was stolen. I locked my account … My thread https://bitcointalk.org/index.php?topic=5189319 . Can you help me?

Hi Andrew, please follow the instructions here please ->https://bitcointalk.org/index.php?topic=5089777.

Thank you sir. My account was recovered after following those instructions

[bitcoinbus2]

I would be very grateful if you can help with this issue, thank you.
https://bitcointalk.org/index.php?topic=5258721.msg54701908#msg54701908

[GazetaBitcoin]

FYI: The humans handling the new account recoveries system which was implemented late last year are a company that Cyrus created called Cryptios. alanst, 3dOOm, and Rizzrack -- the "mysterious newbies" who some people noticed -- are three of their employees.

I believe that alanst is no longer part of Cryptios team. I recently noticed something at his profile, where he states now that he is a "Former member of Cryptios". He also changed his Personal Text, which now states "former Mysterious newbie".



I tried to contact alanst a while ago, but he never replied to my PM.

Having that said, I believe we need an official confirmation on this matter, maybe from theymos or Cyrus.

[Cyrus]

Official confirmation: alanst is not a member of Cryptios anymore.
FIY: btw, AFAIK former Mysterious newbie™ is a title they added after ranking up from Newbie.