Silk Road forums
Discussion => Security => Topic started by: jtemp102311 on April 01, 2012, 07:11 pm
-
I have sent this to a bunch of my favorite vendors.. I just wanted to get it out to the community at large and other vendors that we may order from in the future so that our/my hard-earned reputation on the Road doesn't go into limbo.
(Also, mods:: I'm sorry to post in two topics. Just not sure where this belongs. Thanks.)
-
Just letting you know that our account got hacked last night. (Jtemp102311) We lost almost 50BTC due to this. Quite unnerving as this is the first time this has happened to us.
-
So, if you get any weird correspondence from this account please disregard it.
Just in case this person is still able to get into this account we have created a new one with extra layers of security. This new account on SR is::
c20h25n3oL
The TorMail address to this account is::
c20h25n3oL@tormail.net
We would ask (an we'll remind you) that you use the great and established buyer feedback and reputation from this account (Jtemp102311) when dealing with (c20h25n3oL) and future purchases on the Road.
We can provide PGP and PUB Keys for this new account if you wish.
-
Thanks for your time and understanding.
Have a great weekend.
J
-
How do you manage to get phished?
-
How do you manage to get phished?
Holly baby, I have NO idea.
I think I may have mistyped/spell the addy wrong and someone set up a redirect..
I have it bookmarked now (duh) but aside from that thought, I really have no idea how this happened..
-
Maybe they will transfer your buyer stats if you explain the situation, I'd give it a shot.
-
Maybe they will transfer your buyer stats if you explain the situation, I'd give it a shot.
Yeah, I had thought about this earlier today and sent something to the admins.
Thanks for the idea
<3 you mike
-
<3 you too j... ahh the bromance is in the air this time of year :P
-
How do you manage to get phished?
Holly baby, I have NO idea.
I think I may have mistyped/spell the addy wrong and someone set up a redirect..
I have it bookmarked now (duh) but aside from that thought, I really have no idea how this happened..
The only other reason I could think of is you getting bruteforced but that is why most of us should have 25 character at least length passwords ;) hope it wasn't a major burn.
-
i'd check your computer for some RAT or keylogger. maybe someone's reading everything you write while laughing his ass off.
-
How do you manage to get phished?
Holly baby, I have NO idea.
I think I may have mistyped/spell the addy wrong and someone set up a redirect..
I have it bookmarked now (duh) but aside from that thought, I really have no idea how this happened..
The only other reason I could think of is you getting bruteforced but that is why most of us should have 25 character at least length passwords ;) hope it wasn't a major burn.
can you come over and iv me some piracetam before i do this... :)
-
How do you manage to get phished?
Holly baby, I have NO idea.
I think I may have mistyped/spell the addy wrong and someone set up a redirect..
I have it bookmarked now (duh) but aside from that thought, I really have no idea how this happened..
The only other reason I could think of is you getting bruteforced but that is why most of us should have 25 character at least length passwords ;) hope it wasn't a major burn.
can you come over and iv me some piracetam before i do this... :)
Yeah let me get my nurse outfit too.
-
How do you manage to get phished?
Holly baby, I have NO idea.
I think I may have mistyped/spell the addy wrong and someone set up a redirect..
I have it bookmarked now (duh) but aside from that thought, I really have no idea how this happened..
The only other reason I could think of is you getting bruteforced but that is why most of us should have 25 character at least length passwords ;) hope it wasn't a major burn.
can you come over and iv me some piracetam before i do this... :)
Yeah let me get my nurse outfit too.
That's hott ;)
-
Zeus is very sorry to hear that. As we have talked about, just hit me up from your new buyers account. I've got your old buyer stats recorded.
If you need any charity, hmu.
-
how did they get your PIN? Or did they just change the password so the coins are now sitting there and can't be moved?
-
how did they get your PIN? Or did they just change the password so the coins are now sitting there and can't be moved?
I was hoping no one asked this.. this is embarrassing. It was 12345.
Me and my people IRL have locked ourselves out so many fucking times that we decided on a complex password and an easy pin..
So much for that.
J
-
how did they get your PIN? Or did they just change the password so the coins are now sitting there and can't be moved?
I was hoping no one asked this.. this is embarrassing. It was 12345.
Me and my people IRL have locked ourselves out so many fucking times that we decided on a complex password and an easy pin..
So much for that.
J
Sorry man... but I have to say it... that's stupid as hell. How hard is it to make a pin that can't be bruteforced? Just write it down somewhere... a basic sentence with numbers throughout it. No body will know what it is for if you write it somewhere.
I doubt your password was bruteforced. For me, silk road is notorious for saying Login Failed even when I have entered the right information and perfect captcha, and I end up having to try to login multiples times, sometimes.
I hope you learned from this.... make a stronger pin... it's honestly not that hard to keep track of it. Perhaps develop a system to remember it.
-
how did they get your PIN? Or did they just change the password so the coins are now sitting there and can't be moved?
I was hoping no one asked this.. this is embarrassing. It was 12345.
Me and my people IRL have locked ourselves out so many fucking times that we decided on a complex password and an easy pin..
So much for that.
J
Sorry man... but I have to say it... that's stupid as hell. How hard is it to make a pin that can't be bruteforced? Just write it down somewhere... a basic sentence with numbers throughout it. No body will know what it is for if you write it somewhere.
I doubt your password was bruteforced. For me, silk road is notorious for saying Login Failed even when I have entered the right information and perfect captcha, and I end up having to try to login multiples times, sometimes.
I hope you learned from this.... make a stronger pin... it's honestly not that hard to keep track of it. Perhaps develop a system to remember it.
You're right a thousand ways buddy...
Thanks :(
-
Have you been downloading/installing any uncommonly used or known files lately? I'd keep an eye out for some of those digital goods because not even a good scanning software like malwarebytes won't be able to detect some of the things you get here if they're really hard to find on the surface web.
-
Have you been downloading/installing any uncommonly used or known files lately? I'd keep an eye out for some of those digital goods because not even a good scanning software like malwarebytes won't be able to detect some of the things you get here if they're really hard to find on the surface web.
FUCKING A DUDE...
THAT WAS IT!
THAT WAS IT!
-------
thank you for shining light on this...... fuck weird digital goods guys....
-
that's what i said... should have used less "technical" terms maybe 8)
-
I sent you 0.5 BTC. Enjoy mate.
-
thank you for shining light on this...... fuck weird digital goods guys....
Please, tell us more, it might save someone some money and headache!
-
thank you for shining light on this...... fuck weird digital goods guys....
Please, tell us more, it might save someone some money and headache!
What we think right now is the following:
Upon receiving a digital good from "captainpicard" (not trying to fuck you over captain) computer started to become unresponsive.
I believe someone put something malicious on there.
SR has NO record of my 50 coins ever even being in my wallet to begin with!
So be careful, it could have been anything.
-
I know I'm bumping an old thread, but seeing people falsely accuse me of doing something malicious on SR pisses me off. Please don't blame me for your fuck ups. If I was slipping malicious stuff into my digital downloads and using it to steal peoples bitcoins I think someone would have noticed something after the thousands of digital orders I've filled. I'm one of the few digital vendors on here that has almost perfect feedback.
-
how did they get your PIN? Or did they just change the password so the coins are now sitting there and can't be moved?
I was hoping no one asked this.. this is embarrassing. It was 12345.
Me and my people IRL have locked ourselves out so many fucking times that we decided on a complex password and an easy pin..
So much for that.
J
1, 2, 3, 4, 5??
That's the kind of combination an idiot would have on his luggage!