Bitcoin Forum
November 19, 2017, 11:13:55 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2] 3 »  All
  Print  
Author Topic: delete  (Read 3420 times)
CEG5952
Hero Member
*****
Offline Offline

Activity: 658

Buy and sell bitcoins,


View Profile
June 08, 2014, 11:59:42 PM
 #21

While the Heartbleed OpenSSL exploit existed, weren't passwords compromised? We were told to change passwords. I imagine a lot of the less active or inactive people did not bother.

1511090035
Hero Member
*
Offline Offline

Posts: 1511090035

View Profile Personal Message (Offline)

Ignore
1511090035
Reply with quote  #2

1511090035
Report to moderator
1511090035
Hero Member
*
Offline Offline

Posts: 1511090035

View Profile Personal Message (Offline)

Ignore
1511090035
Reply with quote  #2

1511090035
Report to moderator
1511090035
Hero Member
*
Offline Offline

Posts: 1511090035

View Profile Personal Message (Offline)

Ignore
1511090035
Reply with quote  #2

1511090035
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1511090035
Hero Member
*
Offline Offline

Posts: 1511090035

View Profile Personal Message (Offline)

Ignore
1511090035
Reply with quote  #2

1511090035
Report to moderator
devthedev
Legendary
*
Offline Offline

Activity: 1008



View Profile
June 09, 2014, 12:51:13 AM
 #22

While the Heartbleed OpenSSL exploit existed, weren't passwords compromised? We were told to change passwords. I imagine a lot of the less active or inactive people did not bother.

I believe we were told to change our passwords as a precaution. I don't necessarily think sensitive user info was compromised to be honest.

jeffersonairplane
Legendary
*
Offline Offline

Activity: 1372


www.bitkong.com


View Profile
June 09, 2014, 01:01:47 AM
 #23

I would say RATs or keyloggers of some sort. A person tried to get a hold of my account through that.
cryptodevil
Legendary
*
Offline Offline

Activity: 1344


Thread-puller extraordinaire


View Profile
June 09, 2014, 06:18:11 AM
 #24

This still doesn't prove anything.  I registered at the site also and just to test it out I entered my password that I use here and I didn't get any message to download a game and my account here wasn't compromised.  Should really check your system for trojans/malware...

FFS what is wrong with your critical thinking skills? The fact that your account wasn't compromised wouldn't prove anything as they obviously wouldn't do this to everyone's account because that would be too obvious. Let me put it this way, a number of people who have announced in the last 48 hours that their accounts have been compromised and/or have received a forum pm with a file attached from a zero post account.

These people confirmed that they registered on the Honorcoin website, a website that specifically asked for their forum account name, a password and and email address. This doesn't strike you as highly likely a way to target users who are likely to either use the same password (which happened) or be so keen for 'free money' that they'll download and run a 'game' pm'd to them (which happened)?

Oh, btw, I would also find it suspicious that you would claim to have gone and registered on that website after hearing these allegations only to, supposedly, use the same password with the same forum name in order to find out if your account would be compromised? That's like checking to see if a gun is loaded by pulling the trigger.

Either you're immensely stupid or you are posting from a compromised account as a sock puppet in order to try and play down the exposed scam.




Warning! Multiple ICO scams being launched through bot-posting forum threads, bought/hacked accounts and fake team profiles
hilariousandco
Global Moderator
Legendary
*
Online Online

Activity: 1470


How does one bitcoin?


View Profile WWW
June 09, 2014, 06:21:51 AM
 #25

Haha, plus if they'd just been publicly exposed/found out they're unlikely to keep hacking into people's accounts this way as it could easily be verified by creating a new one and signing up.

TradeFortress
VIP
Legendary
*
Offline Offline

Activity: 910


View Profile
June 09, 2014, 08:03:24 AM
 #26

Oh, btw, I would also find it suspicious that you would claim to have gone and registered on that website after hearing these allegations only to, supposedly, use the same password with the same forum name in order to find out if your account would be compromised? That's like checking to see if a gun is loaded by pulling the trigger.

Either you're immensely stupid or you are posting from a compromised account as a sock puppet in order to try and play down the exposed scam.

lol Cheesy

Use a password manager btw, http://keepass.info/download.html
Justin00
Legendary
*
Offline Offline

Activity: 910


★YoBit.Net★ 350+ Coins Exchange & Dice


View Profile
June 09, 2014, 08:12:47 AM
 #27

its possible people were exploiting heartbleed issue long before it was released/made public.

however i suspect alot of users sign up to lame bitcoin websites, newsletters and anything else were they need to enter user/pass... that seems much more likely.. I have seeen a number of 'zomg our newsletter tells you when to sell/buy' sites and you sign up and nothing happens...which is kind of odd.

dafrank99
Newbie
*
Offline Offline

Activity: 18


View Profile
June 09, 2014, 01:35:16 PM
 #28

Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Some people have used the same password there as for their accounts here. Bitcoin_Mafia for one admitted to me after opening a thread to say her account had been compromised, that she had used the same password on the Honorcoin website as here and a number of users in the Honorcoin thread have registered accounts today to say their proper accounts have been compromised, only to be screamed at by the idiots in the Honorcoin thread!

Bitcoin_Mafia's thread about it: https://bitcointalk.org/index.php?topic=643807.msg7199245#msg7199245

My first post in the Honorcoin thread to warn them: https://bitcointalk.org/index.php?topic=639043.msg7195985#msg7195985

If you check Honorcoins website and go through to the section listing the premine registrants forums names you will see Bitcoin_Mafia listed there: http://honorcoin.co/2-free-distribution/

I registered my forum name but used a random password and shortly afterwards received a pm here from a zero-post account with an attached file related to something called RPG-Coin to download and 'test for them. It clearly was part of the Honorcoin attempt to compromise everything they could.

http://honorcoin.co/2-free-distribution/

The useraccount that pm'd me a file https://bitcointalk.org/index.php?action=profile;u=337252







My accout got hacked few hours after I filled up my info on the honorcoin link mentionned on the quote. Unfortunately my email and this website had the same password and they were able to access all my coins on Mintpal, bittrex and bter. That really sucks.

They close my previous bitcointalk accout so I had to create a new one and look like a brand new poster on this forum so I have no credibility. I use to post on dafrank9. Is there any way I can get my account back at least?
hilariousandco
Global Moderator
Legendary
*
Online Online

Activity: 1470


How does one bitcoin?


View Profile WWW
June 09, 2014, 01:55:14 PM
 #29

You need to sign a message from a Bitcoin address known to be associated with that account.

https://bitcointalk.org/index.php?topic=497545.0

Follow all the instructions at the above link and PM theymos.

cryptodevil
Legendary
*
Offline Offline

Activity: 1344


Thread-puller extraordinaire


View Profile
June 09, 2014, 01:55:59 PM
 #30

Guys, that Honorcoin thread needs locking, the compromised accounts are still trying to convince people that everything is fine so they can dump whatever they are still holding in the meantime.

https://bitcointalk.org/index.php?topic=639043.msg7213878;topicseen#new


Warning! Multiple ICO scams being launched through bot-posting forum threads, bought/hacked accounts and fake team profiles
jarvis
Sr. Member
****
Offline Offline

Activity: 322


View Profile
June 09, 2014, 02:01:07 PM
 #31

need locking? lol you are the only person, referring to another account of yours screaming close, dump, close. no one else has claimed this. there would be hundreds of hacks if that was true.
Nobitcoin
Legendary
*
Offline Offline

Activity: 966


In holiday we trust


View Profile
June 09, 2014, 02:02:50 PM
 #32

A good idea is to stay away from porn sites and sites that download any type of exe only to your computer. No matter how updated your AV is there's always gonna be someone who's coding 24/7.
cryptodevil
Legendary
*
Offline Offline

Activity: 1344


Thread-puller extraordinaire


View Profile
June 09, 2014, 02:12:16 PM
 #33

need locking? lol you are the only person, referring to another account of yours

Nothing of mine was compromised, I didn't fall for the scam. You, however, are clearly posting from a compromised account.

When the evidence is stacking up all around you, with multiple people all acknowledging that they had registered for the Honorcoin website and then suffered compromised accounts across forums, emails and exchanges, admitting they had used the same password, anyone who is still trying to discredit the exposing of the scam is part of it.

Give me one piece of evidence that proves me wrong scammer.


Warning! Multiple ICO scams being launched through bot-posting forum threads, bought/hacked accounts and fake team profiles
phreakish
Full Member
***
Offline Offline

Activity: 120



View Profile WWW
June 09, 2014, 02:18:57 PM
 #34

I for one will say, I registered on honorcoins site but never got any emails, or pm's as such. But I also didn't use the same password nor the same email on there site either.

a cunning and whitty statement to follow.
cryptodevil
Legendary
*
Offline Offline

Activity: 1344


Thread-puller extraordinaire


View Profile
June 09, 2014, 02:29:14 PM
 #35

Yeah a number of people tried to claim the, "hey it didn't happen to me so it must be FUD" fallacious reasoning on that thread too.

Either genuinely unable to apply critical thinking, or just compromised accounts posting BS as cover.

Warning! Multiple ICO scams being launched through bot-posting forum threads, bought/hacked accounts and fake team profiles
phreakish
Full Member
***
Offline Offline

Activity: 120



View Profile WWW
June 09, 2014, 02:32:44 PM
 #36

well Im not a microshit user either not new to the internet and the great glories and dis-heartening things one can do with the power of a keyboard. But with that said HonorCoin thread should be locked to end the madness.

a cunning and whitty statement to follow.
d2dtk
Hero Member
*****
Offline Offline

Activity: 518


View Profile
June 09, 2014, 04:40:19 PM
 #37

Maybe it has to do with the security flaw that was found a few weeks back that affected hundreds of sites?

cryptodevil
Legendary
*
Offline Offline

Activity: 1344


Thread-puller extraordinaire


View Profile
June 09, 2014, 04:46:02 PM
 #38

Maybe it has to do with the security flaw that was found a few weeks back that affected hundreds of sites?

:rolleyes: Or maybe it is to do with the Honorcoin website, a website which specifically asked for Bitcointalk forum usernames and a password and email to register? You know, the very same website used by the multiple people who said their accounts had been compromised and who had admitted they used the same password on the Honorcoin website as here?

But, sure, maybe its something entirely unrelated to that glaringly obvious connection. Let's talk about what else it might be other than the one thing that it has most definitely proven to be connected to.

Warning! Multiple ICO scams being launched through bot-posting forum threads, bought/hacked accounts and fake team profiles
tfbpa
Jr. Member
*
Offline Offline

Activity: 47


View Profile
June 09, 2014, 05:31:16 PM
 #39

OK, now I know what happened...

I also filled in my details at honorcoin website, never received an email, which I thought was strange and even asked about it in their thread.

What they did:

- Emptied out my Bittrex account
- Traded my valuable coins for shitcoin at Mintpal and bought high and sold low. These &#&&# bastards knew they couldn't withdraw any money due to email verification, so they simply decided to make sure my balance was as close to zero as possible by buying high and trading low.
- Tried to access my email account as I received a 2FA SMS from Google while I was sleeping, luckily they didn't get in.
- Cryptsy had email 2FA, so no problems there

I am mostly SHOCKED by the second item, that they knew very well it was impossible to withdraw money and therefore just kept on buying high and selling low so my balance would go as close to zero as possible.

Truly unbelievable BASTARDS!

I never understood how they could both have my email and username, as my email is not visible anywhere to anyone, but now I understand...

Since I absolutely hate smartphones and besides, I am behind my laptop for 16 hours a day anyway, I never bother to have true 2FA. This, together with indeed using the same password, was of course foolish of me and let me to have to buy a smartphone yesterday, or actually got one from my wife as I was understandably upset and complaining.

Hopefully this will not happen again and I do advice everybody to use 2FA. If you don't have a smartphone, you can also use https://winauth.com/
Whatever option you choose, remember to write down the very first code the exchanges give you as with this code you can always use another program or another computer or another phone when it gets lost and still login and trade at the exchanges.

HONORcoin, the irony and the #@&$#*&#&# bastards!
bqxpd
Member
**
Offline Offline

Activity: 83


View Profile
June 09, 2014, 07:01:57 PM
 #40

Jesus Christ, people. Giving some anonymous website owner the email address AND password you've also used for your exchange accounts where you're storing lots of money? Seriously?

1enUo5AVqwx4LradGPimKJAvV5gzK1Z3g
Pages: « 1 [2] 3 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!