PLEASE BE AWARE HACKER(S) ACTIVE (1 Viewer)

[RadicusScout]

In addition to 2-factor, it might also be helpful if your paypal email address (that you share with people) isn't the same email as your account login here. Just sayin' it's not hard to brute force most peoples (short ass) passwords these days. The keyword for today is PassPhrase (think sentence).

My favorite xkcd: https://xkcd.com/936/

 

[Tommy]

I sent out a security reset lock for all accounts just to be safe. Please reset your PW and enable 2FA asap.

 

[raynmanas]

Just in case people didn’t realize, the hacker doesn’t necessarily know about the chips. They lifted old classified listings and copied the entirety of the text and all photos...

@justincarothers sale ad today...
https://www.pokerchipforum.com/threads/sold.72394/

The original sale ad which was copied in full...
https://www.pokerchipforum.com/threads/paulson-presidents-and-cars-rhc.69527/

Hilariously, the one difference I noticed is they deleted "not" from "racks not included" - to make the offer more enticing?

 

[JustDave]

Everyone get a password reset notification? Or just me?

i did

 

[SiouxperStack]

People are joking until they get screwed over. Let them joke , it’s sad really

Hope I didn’t offend. I also take this very seriously & I want nothing but for the issue to be resolved. I don’t think anyone getting scammed is funny.

Everyone get a password reset notification? Or just me?

confirmed here

 

[Hairy_Crocodile]

Anyone else get this? I about shit myself thinking I got hacked

 

[jpietrella]

I'm guessing everyone.

Exactly what a hacker would say.

 

[SiouxperStack]

View attachment 677119

Anyone else get this? I about shit myself thinking I got hacked

Same here

 

[buffalojim]

Two words... password manager. Best thing I ever did. Use Biwarden. Free, and syncs across all devices.


Also, I bid$ 3.50

 

[Tommy]

I sent out a security reset lock for all accounts just to be safe. Please reset your PW and enable 2FA asap.

 

[suited67]

Done!

 

[IaHawk]

For password manager, I have always used LastPass.

I also started using/testing out is Myki, it acts as a password manager and Authenticator app.

 

[CraigT78]

I sent out a security reset lock for all accounts just to be safe. Please reset your PW and enable 2FA asap.

Can you set 2FA to default?

 

[joseywales]

Thanks MOD for sending that out.

 

[lewan]

what is likely to have happened is the user who was hacked used the same password as their email address, which without them knowing was likely compromised. whoever got into their emails probably saw the poker chip forum emails about buying and selling, did a quick scan of the site to familiarise themselves with how the forum works and took the opportunity to scam. happens a lot on other forums. change passwords every 2-3 years to avoid this happening to you, and enable 2fac as advised by admins.

 

[pltrgyst]

For password manager, I have always used LastPass.

Me too. LastPass is very effective.

 

[FordPickup92]

I was locked out, just reset password and logged back in

 

[Himewad]

reset ... thanks to those who were on top of this

 

[davislane]

Do we need to mark ourselves as safe on facebook from the Great PCF Hack of 2021?

 

[cpiaaq]

 

[JustDave]

View attachment 677125

this is wrong

 

[Himewad]

View attachment 677125

I guess I’ll be worried again in 15 billion years

 

[cpiaaq]

this is wrong

got something better that illustrates the current state of brute force techniques?

 

[buffalojim]

For password manager, I have always used LastPass.

I also started using/testing out is Myki, it acts as a password manager and Authenticator app.

I used LastPass for about 4 years, liked it very much. Then they had a data breach they kept hidden from their customers for months. Shitty. The company was bought and sold several times and the prices kept rising. Discovered Biwarden, which is free, works better than LastPass IMO. Syncs across all degices. Open source I belive. I exported my LastPass database to Bitwarden, cancelled and deleted my LastPass account which still had 9 months on it and never looked back. Took about 4mins. Just an option for those who never used a password manager.

 

[ranger764]

What app should you download for the 2FA?

 

[IaHawk]

Use a passphrase, either a short phrase that makes sense or 3-4 random words. I like using spaces as well so it just feels like I'm writing a short message.

"Hackers suck butt 45!" Damn, now I have to change my new password. :-(

Easy way to come up with random words: https://www.useapassphrase.com

 

[JustDave]

got something better that illustrates the current state of brute force techniques?

brute force attacks don't work anymore.

anything used for authentication off the shelf is going to time out the account after some number of login attempts that will make a brute force attack fail.

 

[IaHawk]

What app should you download for the 2FA?

I think Microsoft Authenticator is one of the easier ones for non technical people. Authy is good as well.

 

[cpiaaq]

What app should you download for the 2FA?

I got Authy due to the good reviews (google authenticator has 2/5 stars). Simple and easy to setup/use

 

[Rakrul]

What app should you download for the 2FA?

If you're using Android, use Google Authenticate