Silk Road forums

Discussion => Security => Topic started by: dirtymind901 on July 18, 2012, 01:06 pm

Title: Forgot PIN, need to wait 1 week!?
Post by: dirtymind901 on July 18, 2012, 01:06 pm
Are you fucking kidding me? FIrst i have to wait 1 full week for my bitcoins to get to SR, and now when I finally was about to order I need to enter a PIN which I cant remember, and it takes 1 week for it to reset!?!?

WHY?

Is there no admins on this site that can make it faster??----
Title: Re: Forgot PIN, need to wait 1 week!?
Post by: Krisdanz on September 25, 2012, 12:45 am
I am in the same situation something is definitely strange I never remember having a pin and have been away from the site for a while... then all of a sudden it wants a pin... and I got the same msg saying wait a week. Is SR compromised? 
Title: Re: Forgot PIN, need to wait 1 week!?
Post by: grahamgreene on September 25, 2012, 03:01 am
Are you fucking kidding me? FIrst i have to wait 1 full week for my bitcoins to get to SR, and now when I finally was about to order I need to enter a PIN which I cant remember, and it takes 1 week for it to reset!?!?

WHY?

Is there no admins on this site that can make it faster??----

The reasons "WHY?" are (at the bottom of the quote):

The Infamous PIN

Support gets more PIN related messages than anything else. They'd get half as many of these or less if everyone understood the reset process a little better.
1. Enter 5 incorrect PINs to lock it. At this point an automated message will be sent to you by Support, notifying you to reply "in 7 days," meaning after at least 7 days, to have your PIN finally reset.
2. Wait 7 days. Not 4 days, not 2 days, and certainly not 5 minutes. Feel free to wait 14 days, just make sure it's 7+.
3. Reply and wait for new message telling you to log out and in.
4. Log in and set new PIN.

Why does Support make you wait 7 days to have your PIN reset? It's in case your account has been compromised, and someone else is attempting to empty your wallet. Assuming any identifying information may be compromised with your account, the one thing Support can do is give you a week to find out that someone else locked your PIN and message them that it wasn't you, before they can take your money.

Quite simply it is your responsibility to remember your PIN. Why do so many people lack an understanding of 'responsibility' and get all riled up when they are asked to act so?! I blame the internet. And Rock 'n Roll music. And the Teletubbies.

@ Krisdanz:

No, SR is not compromised. Well, it MAY be, but that is why we use PGP to encrypt all sensitive information. The PIN system is in place for the above reasons; namely to protect your Account from being emptied of Bitcoin should an attacker somehow gain access to it. It's in place for the protection of members - I don't see how requiring a PIN would imply that SR has been compromised though.  ???

Regardless, act as though Silk Road IS compromised; protect all of your personal data through the use of PGP when ordering, and when discussing sensitive details with your vendor.

- grahamgreene
Title: Re: Forgot PIN, need to wait 1 week!?
Post by: Krisdanz on September 25, 2012, 03:05 am
Grahamgreene,

Was this new PIN addition added when SR changed addresses?  I truly do NOT remember having to enter a pin the last time I used SR over a year ago.  Also all my past transaction history is wiped... so I am assuming the pin is a new thing added in the last year or so? I don't remember it being there when I originally first used the site and had successful transactions.  This is very frustrating to me.  I wouldn't have transferred the BTC in if I knew about this pin deal because I don't remember having a pin I am that old of an account.
Title: Re: Forgot PIN, need to wait 1 week!?
Post by: bloodyone on September 25, 2012, 06:06 pm
Remember those 7 days. Was my first days at SR. and I forgot my PIN. 5 chances and I missed all of them. and its a 4 digit number..damn. Don't ask what I been taking that day.
Great full for the security that SR road admins has brought to us with knowledge , patience and dedication. You are a solid part of our future revolution. That has already belong .
Title: Re: Forgot PIN, need to wait 1 week!?
Post by: grahamgreene on September 25, 2012, 10:08 pm
Grahamgreene,

Was this new PIN addition added when SR changed addresses?  I truly do NOT remember having to enter a pin the last time I used SR over a year ago.  Also all my past transaction history is wiped... so I am assuming the pin is a new thing added in the last year or so? I don't remember it being there when I originally first used the site and had successful transactions.  This is very frustrating to me.  I wouldn't have transferred the BTC in if I knew about this pin deal because I don't remember having a pin I am that old of an account.

Hi Krisdanz,

Yes, the PIN feature was added after SR commenced operations and had been running for a couple of months. There have been many changes since your last visit; perhaps you might want to take a read through the following posts / threads, and the SR Wiki:

DPR's State of the Road Adress:
http://dkn255hz262ypmii.onion/index.php?topic=8397.0

DPR's thread regarding the implementation of the PIN system:
http://dkn255hz262ypmii.onion/index.php?topic=7381.msg66166#msg66166

DPR's post regarding transaction records and general time-frames for various things on-site:
http://dkn255hz262ypmii.onion/index.php?topic=32573.msg370788#msg370788

DPR's thread on the new site layout:
http://dkn255hz262ypmii.onion/index.php?topic=31863.0

DPR's post on the changes to Vendor's feedback that is viewable to buyers:
http://dkn255hz262ypmii.onion/index.php?topic=14458.msg149034#msg149034

DPR's thread about "Becoming a Fan" and "Bookmarking Items":
http://dkn255hz262ypmii.onion/index.php?topic=13458.msg129326#msg129326

The Silk Road backup URLs:
http://dkn255hz262ypmii.onion/index.php?topic=32771.0

The recently updated SR Wiki:
http://dkn255hz262ypmii.onion/wiki/index.php/Main_Page

The slightly updated Buyer's Guide (which there is also a version of on the Wiki):
http://silkroadvb5piz3r.onion/index.php/silkroad/buyers_guide

You can reset your PIN via the process outlined in my post above. I understand that it may be frustrating, but it was put in place as a security measure. It's caused untold headaches for SR Support given that new users, despite being told in capital letters upon registration not to forget their PIN, regularly do.
As an older account, you don't have a PIN. I seem to recall that when the PIN system was introduced I was asked to create a PIN upon my login, though I may be mistaken - I'm afraid my memory isn't quite as sharp as it used to be.

I'll update this post with any further links I come upon that may be relevant to the changes introduced since you last visited SR.

I hope the information contained here is of some use to you.  :)

- grahamgreene