Silk Road forums

MaidMandy is correct.

This is unacceptable, there NEEDS to be something in place to close, freeze or at least resolve a hacked account ASAP, this is peoples money and more at stake here 

Which is exactly why you have a presumably strong password AND a strong PIN.  No one can get the bitcoins from your account without both of those pieces of information.  Those are the things in place to prevent people from stealing your bitcoins.  If your account was accessed, then it is probably because you, at some point, put your password and PIN into a phishing site that looks like SR but was created to trick people.  Either that, or you're mistyping your password or your password and PIN were stolen somehow.  Have you ever used the same login info anywhere else?

In my other post on this it appears others have had their account hacked also in the past day or two so beware people!

That's not true at all, actually.  No one's account has been hacked.  What you're referring to are vendors who gave their passwords and PINs to a phishing site.  People didn't break into their accounts - they simply logged in using information the vendors provided.

What about all the other vendors who don't have access to the vendors round table yet (myself included!!) and haven't been warned of this?

That is worrying. Even though some vendors don't have access to the roundtable they still have large amounts of money in accounts and possible orders that have been FE.

Glad I saw this message here.

I think you misunderstood.  This wasn't a warning that went out to all vendors on the forum - it was just a thread a single individual posted about a weird message they received.  You can get access to the vendor forum once you've received a refund of your vendor bond and qualify.

I'm confused about what you meant when you said "some vendors [...] still have large amounts of money in accounts and possible orders that have been FE." 

What do you mean?  All you would have to do to prevent this from happening to your account is to ensure that you never provide your password and PIN to a phishing site! 

Quote from: scout on May 10, 2013, 05:52 am

Quote from: BlueBalls on May 10, 2013, 02:18 am

how do you get hacked?

He provided his PIN and password to a phishing site because he thought the message was legitimate. 

What message?

I know there is a fishing site that I stumbled upon the other day and the homepage looks the same but it asks for your pin, and once you log in it says the site has been compromised by the US gov't DEA or somethin like that.

Really strange, Albion is a smart man....

The message was:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good day our fellow Vendors!

After recent DoS (denial of service) attacks, we decided do a step which was seriously considered for some time already. And it is separating the buyers and sellers area to different servers, which allow you handling their orders without participation on main server over-load and as well in case of general unavailability.

The address to access new server called Vendor Panel is:

http://vc3vveg64kbhtfrn.onion


This address is temporary only, and will be changed when this vendor server will be open for all sellers! For now, we automatically selected and invited just part, based on your seller stats and with regard to the location.
As we want to try new server in real performance (if you have new product pictures to upload, do it please through new server!) and also hear your opinions on few new included features, therefore few domestic based sellers were invited too.
If all goes well, the open date for all sellers will be right after the month. But even then, we want to keep this server PRIVATE, not public, therefore new vendors will receive the address together with refund of their bond, without previous information this server exist!
This way we want prevent leakage and avoid the attackers who will have no clue about this server. Until then please keep it for yourself, even out from vendor section on forum, as not all of them there were informed yet!
The address will be changed later, the current is just random assigned address by Vidalia, as it take some time until special application for this purpose generate usable and easy to remember one (8 letters take over 20 days, computer must be always-on btw). Some of you who are with us a bit longer sure remember even SR was before on one of such addresses, I personally still remember it from head (ianxz6zefk72ulzz:-)

Please note: During the first time login into, you will have to enter and confirm some other settings (seller account for example now can't have the home location undeclared)!
This is especially due to new personal wallet interface, which is from now same as whole this new server completely independent part of the system (mean another security layer)! And we want to stay far away of using JavaScript at all, therefore some functions requires a direct load.
This is also the reason behind recent deposits/withdrawals delays, as we needed to separate wallet system from main SR system, instead of just creating a bridge.
Also during the first login, some new values are needed to be added and actualized on yours account ID's in database, to allow functionality of this new vendor panel which current SR db don't contain (basically this is done in background by scripts, just informing). If you proceed this already now, later when the server will be fully launched and during any next login, this step will be already skipped for you.

The new vendor panel also introduce few new features. Between them for example export of orders to txt file with values you set (faster to decrypt in your client at once than one by one), and also some marketing focused tools, which will help increase your customer base - PM newsletter for fans, statistic of bookmarked items, some basic charts and so on.
Simply we gradually want to upgrade the system to become a equally useful tool to a modern e-shop solutions (but of course fully inside TOR security frame, without using JavaScript), and make your business easier by this.


If you are curious what else the new vendor panel brings, do not hesitate to look inside and try:

http://vc3vveg64kbhtfrn.onion

Let your business grows!
Hope you enjoyed first week of the May, spread the Love!
Yours,
Dread Pirate Roberts and Developers team


Please BEWARE: You should never ever use your sensitive login data on foreign websites, except silkroadvb5piz3r.onion.onion and this new one:
http://vc3vveg64kbhtfrn.onion
Please bookmark it for use until new easy to remember address will generated!
We are looking forward on your opinions and possible help with fixing some bugs! Please keep in mind that this new server is still in real-time debugging!
We created this special account for communication with you on this matter! Always at least one of our engineers will be on the hand to response.
This message is signed of course with my personal key to allow you verify it's integrity.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQFcBFDBcgAGBQQJpK8y3AoJEAIiQjntnol/yusIALCChZM49sth+5wudmHXeI5P
Lu1aZuIUQdNVyvK51omKFugB1oH4Fv+X7s+p2bFrUy1Ras5qtvBQf3qo9xF2doUj
QvPlN20eZX7+bRcjUqW8w+SKxD0BB+Q0twkE04uQj4iggMyZWzjdN5IFTxnW1kmg
i/HYh8HkS3bB20bjHJg1wQVhxX8E0A4ie+1K8i8d9ofwv2uRc37PaXqPVmpFE7AD
bvnF9EH5iHfl8gOeRWU6Vch2NFf9s6zR2yOBCxg4tHsMarlsOjktMVX0Vh0RCn2d
FPheQyPgblSPOmSRYQCIfBxwei6sniCkX/i7dd/l5A7fqqjfehh3HBk8bBulfM7=
=mi39
-----END PGP SIGNATURE-----

how do you get hacked?

He provided his PIN and password to a phishing site because he thought the message was legitimate. 

I'm having the exact same problem. I sent a deposit over 24 hours ago and I'm still not funded either. I can see it in my account history, and I can see where the tumbler got it, but after that my balance is still zero.

I hope you get it worked out, man. This sucks. I sent .45 BTC for the first deposit so it could be worse but still....that's money I didn't want to lose. I'm still holding out hope that they get it resolved and our accounts are funded soon.

Did you contact SR Support by using the link at the bottom of this page:  http://silkroadvb5piz3r.onion/help   

Have you received the refund of your vendor bond?  If you have, please read the wiki:

http://dkn255hz262ypmii.onion/wiki/index.php?title=Vendor_roundtable

The Vendor roundtable is a private message board on the Silk Road forum for vendors to discuss issues in private. To qualify for access to the board, you must meet the following requirements:

    You must have received a bond refund.
    Your forum username must be identical to your vendor username
    You must keep a link to your vendor page in your forum signature

When you've met these criteria, message Vendor Support and they will give you access.

I'm starting to get worried at this point that I will not receive the bitcoins I deposited or did something incorrect with the deposit itself.

That's why SR Support needs to look into it for you - they'll be able to tell you whether it's just something weird with your account, or if it was an issue at the other end of the transaction.