Flagging accounts which are up to sale [DT member actions needed]

[bones261]

My account was hacked and sold. I post some details here.

bitcointalk.org forum is very helpful to restore account to me. I say thank you to this thread. You are real heros!

Yes, and it appears the one of the members of the enterprise has decided to give a red flag to bob123, whose investigation helped discover this.
https://bitcointalk.org/index.php?action=trust;flag=292
It appears some member believe bob123 went to0 far by lying to the account sellers and getting them to reveal details on accounts they were selling and to verify a few. Apparently, this resulted in harm to the poor account sellers because their merchandise could not be sold for a premium. Never mind that it appears 2 out of the 6 accounts are verified as hacked.   I'm glad that bob123's efforts helped you in the end regain control of your account.

[TECSHARE]

My account was hacked and sold. I post some details here.

bitcointalk.org forum is very helpful to restore account to me. I say thank you to this thread. You are real heros!

Yes, and it appears the one of the members of the enterprise has decided to give a red flag to bob123, whose investigation helped discover this.
https://bitcointalk.org/index.php?action=trust;flag=292
It appears some member believe bob123 went to0 far by lying to the account sellers and getting them to reveal details on accounts they were selling and to verify a few. Apparently, this resulted in harm to the poor account sellers because their merchandise could not be sold for a premium. Never mind that it appears 2 out of the 6 accounts are verified as hacked.   I'm glad that bob123's efforts helped you in the end regain control of your account.

*entered into a contract with intent to deceive and take rights of another user.

If he was just lying there would be no flag. He formed a contract with intent to defraud and destroy value. He had no way of knowing if the accounts were legitimately obtained or not. The ends do not justify the means. They are both wrong.

[TR45EP]

Do you mean to sign my current account with the same address that is signed pant -79? If yes, then of course I can.

Sign from 1L1Rtv4w8guaVSbCwqmysWauJDKhVHUMPU and say something like:

Code:

Today is July 19, 2019, and my account pant-79 is hacked. This message is posted by user TR45EP to prove ownership

I signed the message. Tell me please where can I check my signature. Earlier, I used the online service https://tools.bitcoin.com/verify-message/, but now it doesn't work. Thank you.

Perhaps the signature itself will be useful: H2sqfbHDbK7dgZGdawoSp9rLyH9pHsC3pTOcxraABGQiJfKFeXbJ8LVmvd+FU9bQQBzAhjZmo3HsxayQ3v/GfKg=

[LoyceV]

Do you mean to sign my current account with the same address that is signed pant -79? If yes, then of course I can.

Sign from 1L1Rtv4w8guaVSbCwqmysWauJDKhVHUMPU and say something like:

Code:

Today is July 19, 2019, and my account pant-79 is hacked. This message is posted by user TR45EP to prove ownership

I signed the message. Tell me please where can I check my signature. Earlier, I used the online service https://tools.bitcoin.com/verify-message/, but now it doesn't work. Thank you.

Perhaps the signature itself will be useful: H2sqfbHDbK7dgZGdawoSp9rLyH9pHsC3pTOcxraABGQiJfKFeXbJ8LVmvd+FU9bQQBzAhjZmo3HsxayQ3v/GfKg=

Verified!
I've tagged the account. You'll have to sign another message when you have your account back, so I can remove the tag.

[TR45EP]

Do you mean to sign my current account with the same address that is signed pant -79? If yes, then of course I can.

Sign from 1L1Rtv4w8guaVSbCwqmysWauJDKhVHUMPU and say something like:

Code:

Today is July 19, 2019, and my account pant-79 is hacked. This message is posted by user TR45EP to prove ownership

I signed the message. Tell me please where can I check my signature. Earlier, I used the online service https://tools.bitcoin.com/verify-message/, but now it doesn't work. Thank you.

Perhaps the signature itself will be useful: H2sqfbHDbK7dgZGdawoSp9rLyH9pHsC3pTOcxraABGQiJfKFeXbJ8LVmvd+FU9bQQBzAhjZmo3HsxayQ3v/GfKg=

Verified!
I've tagged the account. You'll have to sign another message when you have your account back, so I can remove the tag.

Of course. Thank you very much.

[narousberg]

Please remove negative trust point from my account.
I DONT SELL MY ACCOUNT
thanks

[LoyceV]

Please remove negative trust point from my account.
I DONT SELL MY ACCOUNT

Can you explain this PM you've sent to user alice321 a month ago?
Direct link to the screenshot: https://imgur.com/HwLLIE2

[narousberg]

that is not message from me!!! i will change my password now.
looks like somebody have access to my account.

[hacker1001101001]

that is not message from me!!! i will change my password now.
looks like somebody have access to my account.

You should sign a message from any of your connected old address to prove your ownership here, you could be an impostor for most of us.

[narousberg]

how to do this?
which old address your mean? IP or email.
ip is dynamic. I can only send message from my email or twitter.

[narousberg]

posted! https://twitter.com/narousberg

password changed to better one....

upd: I suggest to forum admins to add a 2FA verification!

[LoyceV]

how to do this?
which old address your mean?

I couldn't find any old Bitcoin address in your post history, but archive.org shows 1P4QrAHTrzSFZRfzwTQoTQx4DZjWzRpxH9 in your signature on October 25, 2012.

[narousberg]

this is very old BTC address, i am have no more access to this address

[narousberg]

is post in my twitter is not enough?
my nickname is my family name, how you imagine i will sell my account to some scamers? In this case i will compromise my name.
WTF is this all!

[DireWolfM14]

this is very old BTC address, i am have no more access to this address

It's an old address, but a message was signed with it before.  The address is tagged with your username on Blockchain.com, which requires a message to be signed.

is post in my twitter is not enough?
my nickname is my family name, how you imagine i will sell my account to some scamers? In this case i will compromise my name.
WTF is this all!

A post on twitter doesn't mean anything.  The account seller could have given you all the social media accounts that relate to your Bitcointalk.org account.  The only way is if you can point to an un-edited old post where you posted a different bitcoin or altcoin address that you can use to sign a message.  


BTW; stop multi-posting.  

[narousberg]

Are you see which date a last transaction to this address??? 2014 !!!
This addresses no more under my control, maybe that was addresses from vircurex or MtGox. Simple to old information.
Sorry, but you waste my time. I will write to forum administrator to delete negative trust points. I can verify my identity over my account email, which was never changed.
Have a nice day.

[LoyceV]

Are you see which date a last transaction to this address??? 2014 !!!
This addresses no more under my control, maybe that was addresses from vircurex or MtGox.

The address is from a wallet that allows you to sign a message. Otherwise it couldnt' have your nickname as tag on blockchain.com.

I will write to forum administrator to delete negative trust points.

Trust is not moderated.

[narousberg]

Please remove negative trust point from my account.
I DONT SELL MY ACCOUNT

Can you explain this PM you've sent to user alice321 a month ago?
Direct link to the screenshot: https://imgur.com/HwLLIE2

somebody has definitely hacked my old password, this was very simple. But he cant change password due he dont know secret answer and post some messages.
Now i cant more find this post which on screenshot.

[DireWolfM14]

Sorry, but you waste my time.

Your time?  I spent my time trying to help you.  You're welcome.

This addresses no more under my control, maybe that was addresses from vircurex or MtGox.

Unlikely.  Most exchanges don't provide the option to sign messages.  The private key of the address above had to be accessible by you at one point in time, or the tag on Blockchain wouldn't be possible.

somebody has definitely hacked my old password, this was very simple. But he cant change password due he dont know secret answer and post some messages.
Now i cant more find this post which on screenshot.

This is a distinct possibility.  There have been other members who've had similar issues with their accounts recently.  It could be due to a phishing site tricking members into exposing their username and password.  

Theymos has provided a link that allows us to see our own IP activity for the last month, that may help you find out if someone else has logged into your account.  Look for anything out of the ordinary on June 22.  Here's the link: https://bitcointalk.org/myips.php

[Quickseller]

I don't think the signed messages is sufficient to prove the various accounts were hacked. All a signed message proves is that the person has access to the private key, or can communicate with someone who has access to the private key. A signed message does not confirm the contents of the message are accurate. if tags will be removed from some of those who allegedly had their accounts hacked, it is probably best to remove all the tags in question, even without a signed message.

I don't know how the blockchain.info (now .com) tagging system worked over the years, and don't know if it was ever possible to tag an address without a signed message. I would not find it unreasonable to hear that the private key to someone's 2012 address that was never used to receive bitcoin is lost/inaccessible.

Perhaps theymos can comment on if there is evidence that the accounts in question were hacked, as he can review IP evidence (and other evidence) to see if this is a reasonable conclusion. Until theymos confirms this, I will be unconvinced the accounts in question are hacked.

If the accounts in question are hacked, there may be an unknown security risk to either the forum or popular services widely used by forum users that is leading to many passwords being leaked.