In the past 15 minutes (currently 5:08 PM) I've seen 4 scam reports from ub3r members. Upon trust scanning them I found that each of them have not enabled 2fa for whatever reason. These types of accounts are going to be used to scam members of the community because of their rank and possible reputation.
My suggestion is to either close or disable Ub3r accounts that have been inactive for longer than 4 months and do not have 2fa enabled. I don't think this will be considered but I felt it's worth a thread regardless.
By disable I mean remove pm/posting privileges that way they cant communicate with anyone in order to scam.
It's also very obvious these accounts are more than likely hacked.
Merry Christmas.
Edit: Keep in mind this is just a suggestion. I don't really know how hard it would be to do this, but I assume it's just like the system that closes normal accounts after 6 months to a year.
I feel like this will reduce the scamming even more.
EXAMPLES
---------------------------------------------------------
https://hackforums.net/showthread.php?tid=5108317
https://hackforums.net/showthread.php?tid=5108232
https://hackforums.net/showthread.php?tid=5060730
https://hackforums.net/showthread.php?tid=5108346
https://hackforums.net/showthread.php?tid=5105325 - iffy.
https://hackforums.net/showthread.php?tid=5106343 - iffy as well.
And tons more I cant bother with.
Check the trust scans of the person that scammed the OP of each thread.
(Dec 25, 2015 03:12 PM)๖ۣۜCreative Wrote: Sounds like a good idea or they can just ban the accounts and the real owner of the account would have to prove owner ship through https://hackforums.net/contact.php
Exactly. I mean, if they were inactive for that long anyway I doubt they would come back.
(Dec 25, 2015 03:15 PM)Zexo Wrote: I like the idea but some people so just take breaks from hf for personal reasons.
Then you would simply use the contact page and explain the situation. If you could provide proof of ownership then I see no problem with this.
(Dec 25, 2015 03:16 PM)EthanX Wrote: or just make it harder to get back in an inactive account. Aka 1month inactive requires contact form or email verification?
There's the possibility the email could also be compromised. I feel this is the safest way to go about this. Not a bad idea though.
(Dec 25, 2015 03:17 PM)Aurora Wrote: If this could be automated somehow, I guess this could work out. I think it's too much of a hassle for Omni.
I've stated in the OP that it could work sort of like the current system for normal inactive account closures.
(Dec 25, 2015 03:18 PM)DustDice Wrote: How about "cannot deal for one week or until investigated" if inactive for 60+ days?
There's no way to automate that at all and it would be a huge hassle. The only way to do that would be to remove pm/posting privs as I stated above.
(Dec 25, 2015 03:20 PM)DustDice Wrote: Check my edited post.
That pretty much goes back to my suggestion in the OP - removing posting/pming privileges.
(Dec 25, 2015 03:20 PM)Hopsin Wrote: There are sometimes that I take long HF breaks like example 2-6 months, it will be pain in the ass if I had to prove my ownership every single time.
If the ub3rs accounts are lost or hacked, its their fault and responsibility since HF staff don't get involved with scam reports, I highly doubt that this is going to be accepted.
As for the people who get scammed, they should check the profile and the trust scan to avoid being scammed.
Nonetheless, I partially agree with your idea. Good luck!
I'm going to edit the OP.
I've added if they have gauth disabled then this suggestion would follow.
(Dec 25, 2015 03:26 PM)Bata Wrote: I think it could be a good idea, but as another poster said, I often take long breaks because I get tired of this place. I'm not trying to submit an appeal on why I'm coming back every time. Bad idea in my opinion, just no logical way to enforce it.
I've stated in another post that if you have 2fa enabled, no matter how long your inactivity period is, you will remain open.
(Dec 25, 2015 03:51 PM)Mons Wrote: Why don't the scammers activate 2FA after they have hacked into those accounts though?
This would make them seem more trusable.
Because all they're looking to do is scam and move on to the next account.
(Dec 25, 2015 03:57 PM)Hellblazer Wrote: Maybe for new members, whenever they buy l33t/ub3r, before they buy it a message appears telling them they must activate 2fa as soon as the membership gets activated or you wont be allowed to post/pm. Then when you have activated it then it restores the functions.
As for current l33t/ub3r members just block all functions until they activate 2fa?
Well, as of a recent update Omni pushed out, all upgraded members are required to enable 2fa before they can use the marketplace.
Even that won't prevent it.
(Dec 25, 2015 04:00 PM)Mons Wrote: Gauth doesn't provide you much guarantee of the account being in control of actual owner and not hacker, because the hacker can enable it too.
It can only help you from not being hacked.
I think you're completely missing my point.
(Dec 25, 2015 04:01 PM)Hellblazer Wrote: So they can see what users have posted in "buyers bay" even though they cant use the actual marketplace?
Yes, they can view it, just not post inside of it.
All they would have to do is PM the user and then proceed to scam them.
(Dec 25, 2015 04:02 PM)zer0w1re Wrote: How about just forcing all upgraded accounts to use 2FA? Make it so that they have 1 week to enable it, or else they will be locked out? Don't have a phone? Use Authy on the computer. There are no excuses not to have it enabled other than laziness.
Because if an account is inactive then there's no way the owner would be alerted of this.
Please read the whole thread, you're the 3rd person that has shitposted and completely neglected my point.
(Dec 25, 2015 04:03 PM)Hellblazer Wrote: It should be the Market tab on the main page is locked and cant click it unless 2fa is enabled.
Even if they are after a service etc can still scam that way. Better be safe then sorry.
Then all a hacker has to do is enable 2fa and vula, scamming spree incoming.
You have to think of the loop holes dude.
(Dec 25, 2015 04:19 PM)Ahri Wrote: Personally I think people who vacation ban right after a open dispute should be dealt with.
I do too, but that's not really the issue at hand.
Doing this should be able to prevent things like that from happening.
(Dec 25, 2015 04:28 PM)Ahri Wrote: It will take care of those who scam and run. Sure HF doesn't get involved with DD but anyone vac banning themselves after a open DD does raise questions. It's like running away from a crime scene in your house. You've basically told others you did it else you'd have no reason to run. After some time you'd be free to vac ban yourself.
I mean yeah I guess?
|
