+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+---- Forum: Suggestions and Ideas (https://hackforums.net/forumdisplay.php?fid=134)
+---- Thread: Currency Exchange Scams (/showthread.php?tid=5096631)
Currency Exchange Scams - ArtMachine - Dec 16, 2015
Greetings everyone,
As many of you may know about the recent currency exchange scams and most of them were due to accounts being hijacked.
I believe that it can be prevented with certain limitations, one of them is 2FA limitation.
Let me explain it,
"An user must have 2FA enabled for atleast a month to be able to post in currency exchange system" This way, it will prevent most of the account-hijack related scams happening on currency exchange section.
You may say that hacker will enable 2FA and wait for a month but the original account owner will notice it and report to the site administration.
I am not sure if it has been suggested before. Please kindly post your opinion on this.
* - grady - Dec 16, 2015
I saw the suggestion that Darkwin put forward.
The issue with this is that 2FA is an UB3R (i think epic too) only feature as of right now.
I personally think it's a great idea, since it won't affect me in any way but positives.
* - Schnitzel - Dec 16, 2015
I suggest we shut down the currency exchange forum for a month or so until this is settled and people have secured their accounts.
* - haydrazs - Dec 16, 2015
(Dec 16, 2015 09:02 AM)Schnitzel Wrote: I suggest we shut down the currency exchange forum for a month or so until this is settled and people have secured their accounts.
No, this isn't a HF issue:
1. the 000web leak isn't that recent anymore, if you are still using a password that got leaked you're dumb
2. stop using the same password for all your accounts
3. start exchanging with 2fa enabled users only, and trusted ones at that
* - grady - Dec 16, 2015
(Dec 16, 2015 09:06 AM)haydrazs Wrote: No, this isn't a HF issue:
1. the 000web leak isn't that recent anymore, if you are still using a password that got leaked you're dumb
2. stop using the same password for all your accounts
3. start exchanging with 2fa enabled users only, and trusted ones at that
I wouldn't go far as to say it's entirely not an HF issue.
The SPAM is very nearly an HF db, since I'd assume nearly everyone has had an account on 000wh, throwaway or not. It wasn't directly an HF issue until someone brought the issue here, with scamming.
Closing the entire section us complete overkill though
* - haydrazs - Dec 16, 2015
(Dec 16, 2015 09:14 AM)๖ۣۜInfamy Wrote: I wouldn't go far as to say it's entirely not an HF issue.
The SPAM is very nearly an HF db, since I'd assume nearly everyone has had an account on 000wh, throwaway or not. It wasn't directly an HF issue until someone brought the issue here, with scamming.
Closing the entire section us complete overkill though
Okay then simply only deal with 2fa enabled users l0l
* - ArtMachine - Dec 16, 2015
(Dec 16, 2015 09:14 AM)๖ۣۜInfamy Wrote: I wouldn't go far as to say it's entirely not an HF issue.I agree with you.
The SPAM is very nearly an HF db, since I'd assume nearly everyone has had an account on 000wh, throwaway or not. It wasn't directly an HF issue until someone brought the issue here, with scamming.
Closing the entire section us complete overkill though
Closing the section would be terrible. There are many legit members that do legit exchanges. We just need to filter the scammers.
* - Lyralei - Dec 16, 2015
So this is what the fuss is about on 2FA, Prob gonna enable it this week and daym hf scams have been increasing alot.
* - grady - Dec 16, 2015
(Dec 16, 2015 09:19 AM)Lyralei Wrote: So this is what the fuss is about on 2FA, Prob gonna enable it this week and daym hf scams have been increasing alot.
Well, "I didn't scam you I, I was commmpppromissseddd"
* - ArtMachine - Dec 16, 2015
Please feel free to share any suggestions you may have too.
* - SwordofJustice - Dec 16, 2015
(Dec 16, 2015 08:58 AM)ArtMachine Wrote: -snip
I think it's important to note that 3/4 "account hijackings" are really not hijackings. Although, recent events (in regards to Omni's thread yesterday) do prompt containment of the issue.
* - c x y k - Dec 16, 2015
Close off Currency Exchange for everybody.
Only allow Epic + Uber.
Must have 2FA in use for over two weeks.
No password change in past week.
No email change in past week.
No ip region change in past week.
* - CyberneticTitan - Dec 16, 2015
Take it a step further. A flaw in your suggestion is that people who don't have 2FA can PM the OPs of threads for an exchange, thus being able to scam.
If this was implemented I'd like to see a restriction so that if they don't meet a certain requirement, such as 2FA enabled for a month, that they cannot VIEW the threads.