Anyone know Rimmerryan in Real Life ? Sus his account is hacked (1 Viewer)

[LeLe]

I saw those threads and it never entered my mind that the deals may have been too good to be true. Whether you are right or wrong, it was a good pick-up @LeLe and I commend you for warning the community. You likely struggled on whether you should make the post.

Nice catch @LeLe

It’s unfortunate that the biggest clue of a potential hack is that someone is selling chips at a very good price.

thank you for saying something because you saw something. I guess in this day and age it's something that we have to do more often.

I believe anyone who saw and notice it will have done the same thing, we chippers gonna help each another

 

[Tommy]

I put a notice up in the classifieds section for now. I have to go back to work in a few hours so I need to get some sleep (if I can, I'm pretty riled up right now) but then I'm off for a few days so I'll get the new rule in place with a separate required check box when posting an ad to remind everyone of the new photo rule ASAP.

 

[David O]

@David O and anyone else have his contact info please let me know.

I do not.

 

[Tommy]

I do not.

No problem. I just got a PM with some contact info. I'm going to try and reach out to him.

 

[VMR911]

I put a notice up in the classifieds section for now. I have to go back to work in a few hours so I need to get some sleep (if I can, I'm pretty riled up right now) but then I'm off for a few days so I'll get the new rule in place with a separate required check box when posting an ad to remind everyone of the new photo rule ASAP.

Thanks for the quick measures @Tommy, get some rest, you did great.

P.S. I turned on 2FA and maybe you can ask the designers to put a label on profiles to show if 2FA is on or not. So we can see who we're dealing with has it enabled or not as extea measure of credibility

 

[ekricket]

I’d make it a practice as well to request more photos via pm before sending money. No need to clog up the sales thread a whole bunch, just do your homework before firing off $$$. I’m in agreement about the listing photos, but follow up via pm is so easy - you have to exchange info anyway. Just ask for more proof

 

[CrazyEddie]

I'm going to add a new rule that photos must be included and must include your username on an index card or a piece of paper. I don't know if that will stop it but hopefully it deters these POS scammers.

This is a great idea and something I’ve seen done on other forums with major classifieds sections. Btw doing username, name of item, and date is best practice I’ve seen.

 

[Tommy]

Thanks for the quick measures @Tommy, get some rest, you did great.

P.S. I turned on 2FA and maybe you can ask the designers to put a label on profiles to show if 2FA is on or not. So we can see who we're dealing with has it enabled or not as extea measure of credibility

That's an interesting idea. Let me look into it as that will require some custom code but I think it is doable.

 

[Tommy]

View attachment 831259

That was a good movie.

 

[krafticus]

This could/would prevent people from selling chips before they actually received them too. Not sure if that’s a big deal or not, since I don’t buy or sell chips.

 

[LeLe]

This is a good reminder

 

[VMR911]

View attachment 831262
This is good reminder

Again thanks for being the voice of many @LeLe - Good instincts!

 

[CrazyEddie]

It’s unfortunate that the biggest clue of a potential hack is that someone is selling chips at a very good price.

Please suspect that my account has been hacked if you ever see me selling chips.

 

[Taghkanic]

Be sure to copy and save the one time use back up codes shown on your screen when you set it up in case you accidently un-install the app or get a new phone. You only get one chance to copy down these back up codes.

I did not know about the backup codes, so I guess it is too late to find these?

I notice however that in Google’s Authenticator app there is an option to “Export Accounts” to another device. I’ve not used it, but perhaps this is another option when changing phones. Anyone used it?

 

[BearMetal]

I did not know about the backup codes, so I guess it is too late to find these?

I notice however that in Google’s Authenticator app there is an option to “Export Accounts” to another device. I’ve not used it, but perhaps this is another option when changing phones. Anyone used it?

Yes, that's exactly what it's for. They actually didn't used to have that in the app, so when I switched phones before they implemented that feature it really sucked.

 

[Tommy]

I did not know about the backup codes, so I guess it is too late to find these?

You can also do this too....

If you didn't save them, and can still log in, you can turn 2FA off and back on to get new one time use back codes. Otherwise, I would have verify that its you another way.

 

[WedgeRock]

This is good reminder

*Recommended @Tommy

Sad day for PCF. 2FA on a chip hobby site... Seems overkill, but with five-figure sets trading hands, it's unfortunately necessary.

Nevertheless, great efforts and quick actions by @LeLe and of course @Tommy to keep members safe.

 

[ekricket]

I haven’t done a bunch of detailed research, but it seems these scam deals also come early in the morning here, like before everyone’s up and viewing - just a few eager early birds that jump on a too good to be true deal, before it’s been viewed and vetted a bunch.

If there is not a bunch of “GLWS” and “great price” and “how is this still here” and “great chips great seller” posts then it hasn’t been vetted yet.

 

[Irish]

is 2FA the same as the two step verification in the PCF password & security section of the settings? Currently after 30 days (for each device), I need to sign back in and get a code that's emailed to my account, but I don't recall ever having to copy a one-time code. I just got a new phone and didn't have any issues, when I logged in on the new device, I got an email with a new code, entered that in and done.

 

[Tommy]

I believe you can do 2FA with an app on your phone (recommended) or have the code emailed to you.

There is a check box to remember this device for 30 days. Have to re-authenticate every 30 days using the app or code via email.

 

[Tommy]

The back up codes are only shown on your screen one time when you first setup 2FA. Copy and save those.

 

[Irish]

I believe you can do 2FA with an app on your phone (recommended) or have the code emailed to you.

There is a check box to remember this device for 30 days. Have to re-authenticate every 30 days using the app or code via email.

Cool, I'm fine with just using email, I do 90% of my browsing from a PC anyways, thanks man. Go to bed!

 

[buzzmonkey]

That's an interesting idea. Let me look into it as that will require some custom code but I think it is doable.

They likely won't as it's bad practice for security. It outs all of the people who don't have it setup and then concentrates all of the attackers to those accounts.

 

[gopherblue]

View attachment 831262
This is a good reminder

A couple grammatical errors tho.

 

[Tommy]

Guys (and Gals), please do not use the same passwords here that you use on the CPC chip tool site or The Chip Board. Neither of those sites use SSL and The Chip Board is using very old forum software that is no longer maintained.

 

[Tommy]

A couple grammatical errors tho.

I was rushing when I put it up. I'll fix them.

 

[MoT519]

Is Username and Date of Listing sufficient? Should name of item(s) be listed too? I don't know if that would be too much for listings that have many items in it.

Yes please! This is a great idea.

 

[VMR911]

I was rushing when I put it up. I'll fix them.

@Tommy get some rest. No more fires to put out for now! You'll get it done in the next few. Everyone is more aware now

 

[Tommy]

@Tommy get some rest. No more fires to put out for now! You'll get it done in the next few. Everyone is more aware now

@David O @Jeff @Payback @Trihonda

 

[David O]

I was rushing when I put it up. I'll fix them.

Watch out for the grammar police! Wow, this place never gets old!