delete

[BitcoinEXpress]

delete

[1715108966]

1715108966

[1715108966]

1715108966

[Parazyd]

What accounts got hacked? I haven't heard of any.

[shorena]

I think the way theymos is handling this currently is fine. You either can prove in a very specific way that you used to own a certain account or you cant. If you cant make that PM¹ just make a new one.

He even offered a way² to make sure you have a BTC address that can not be deleted by a hacker.


[1] https://bitcointalk.org/index.php?topic=497545.0
[2] https://bitcointalk.org/index.php?topic=642008.msg7169449#msg7169449

[hilariousandco]

I was wondering this too. Maybe they're downloading crapcoin wallets with keyloggers in or something or logging into fishing sites?

What accounts got hacked? I haven't heard of any.

There's three hacked account requests on the first page of Meta alone:

https://bitcointalk.org/index.php?topic=644198.0
https://bitcointalk.org/index.php?topic=643713.0
https://bitcointalk.org/index.php?topic=623415.0

[tysat]

...
It seems to me that people are either using weak PW or reusing PW on other sites.
...

That would be my guess

[Mikez]

Using the same user/password combination on multiple websites is the primary reason, in my opinion.
Phishing would be the number two reason I guess.

[theymos]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

[Parazyd]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

[Mikez]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

Why not change the questions then?

[eid]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

Why not change the questions then?

The question box is blank. It is created by the user.

[hilariousandco]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

[Cryptopher]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

It's good to have a secret question 'password'. That is something which follows the basics for a good password. It doesn't necessarily have to be something really strong, but something that is out of the ordinary, but password like so you commit it to memory.

That's what I do anyway.

[Parazyd]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

It's good to have a secret question 'password'. That is something which follows the basics for a good password. It doesn't necessarily have to be something really strong, but something that is out of the ordinary, but password like so you commit it to memory.

That's what I do anyway.

Just a good passphrase will do, I see no need for random symbol there. Okay, maybe one

[Cryptopher]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

When doing those questions, I tend to make the answer unrelated to the question.

But then there's a good chance you'll forget what it was. If you make it something very personal that only you could know then you should be ok... Or just don't use a secret question.

It's good to have a secret question 'password'. That is something which follows the basics for a good password. It doesn't necessarily have to be something really strong, but something that is out of the ordinary, but password like so you commit it to memory.

That's what I do anyway.

Just a good passphrase will do, I see no need for random symbol there. Okay, maybe one

Yeah, it needs to be memorable that's for sure, else you're screwed - well not always. People who actually answer their secret question with the appropriate answer make me weep.

[cryptodevil]

Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Some people have used the same password there as for their accounts here. Bitcoin_Mafia for one admitted to me after opening a thread to say her account had been compromised, that she had used the same password on the Honorcoin website as here and a number of users in the Honorcoin thread have registered accounts today to say their proper accounts have been compromised, only to be screamed at by the idiots in the Honorcoin thread!

Bitcoin_Mafia's thread about it: https://bitcointalk.org/index.php?topic=643807.msg7199245#msg7199245

My first post in the Honorcoin thread to warn them: https://bitcointalk.org/index.php?topic=639043.msg7195985#msg7195985

If you check Honorcoins website and go through to the section listing the premine registrants forums names you will see Bitcoin_Mafia listed there: http://honorcoin.co/2-free-distribution/

I registered my forum name but used a random password and shortly afterwards received a pm here from a zero-post account with an attached file related to something called RPG-Coin to download and 'test for them. It clearly was part of the Honorcoin attempt to compromise everything they could.

http://honorcoin.co/2-free-distribution/

The useraccount that pm'd me a file https://bitcointalk.org/index.php?action=profile;u=337252

[mprep]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

Since it appears to be mainly end user error, people should be glad there is a mechanism in the first place to recover accounts.

It's almost as if I am seeing people claim it is just to darn difficult to read any one of the 20+ instructional threads on PGP Bitcoin Signatures or too lazy to Google it.




~BCX~

It's actually even easier than that. There are several trustworthy clients that allow you to sign messages easily, like Electrum or Multibit.

[hilariousandco]

Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Honorcoin? The irony. I'll never understand why people clamour for all these free yet always worthless crapcoins, especially when this is what you end up getting.

[mprep]

Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Honorcoin? The irony. I'll never understand why people clamour for all these free yet always worthless crapcoins, especially when this is what you end up getting.

People expect free money. But as you can see here, nothing comes free except cheese in a mousetrap.

[darthburnstuff]

Guys I've been trying to let people know all day, including alerting the admins here, Honorcoin is the culprit. They send people to their website to register for 'free' coins and as part of the registration process they ask for the Bitcointalk forum name, a password and an email address.

Some people have used the same password there as for their accounts here. Bitcoin_Mafia for one admitted to me after opening a thread to say her account had been compromised, that she had used the same password on the Honorcoin website as here and a number of users in the Honorcoin thread have registered accounts today to say their proper accounts have been compromised, only to be screamed at by the idiots in the Honorcoin thread!

Bitcoin_Mafia's thread about it: https://bitcointalk.org/index.php?topic=643807.msg7199245#msg7199245

My first post in the Honorcoin thread to warn them: https://bitcointalk.org/index.php?topic=639043.msg7195985#msg7195985

If you check Honorcoins website and go through to the section listing the premine registrants forums names you will see Bitcoin_Mafia listed there: http://honorcoin.co/2-free-distribution/

I registered my forum name but used a random password and shortly afterwards received a pm here from a zero-post account with an attached file related to something called RPG-Coin to download and 'test for them. It clearly was part of the Honorcoin attempt to compromise everything they could.

http://honorcoin.co/2-free-distribution/

The useraccount that pm'd me a file https://bitcointalk.org/index.php?action=profile;u=337252

This still doesn't prove anything.  I registered at the site also and just to test it out I entered my password that I use here and I didn't get any message to download a game and my account here wasn't compromised.  Should really check your system for trojans/malware...

[devthedev]

It seems to usually be people with very weak secret questions/answers. Like "What kind of pet do you have?", which has only very few possible answers.

Since it appears to be mainly end user error, people should be glad there is a mechanism in the first place to recover accounts.

It's almost as if I am seeing people claim it is just to darn difficult to read any one of the 20+ instructional threads on PGP Bitcoin Signatures or too lazy to Google it.

~BCX~

It's actually even easier than that. There are several trustworthy clients that allow you to sign messages easily, like Electrum or Multibit.

Wouldn't it just be smartest to include a PGP signed thread, like mine? https://bitcointalk.org/index.php?topic=340642.0