nitin_g3
Herald
Market section - scams with compromised accounts
- Thread starter nitin_g3
- Start date
- Status
Still, truly hope the passwords here are stored hashed/salted and not as plain text.
On a similar note, could any of the mods clarify as to whether there is any data retention policy w.r.t. private conversations here? Concerned about this, since conversations may include transactional (and possibly confidential) data. And especially concerned, since these conversations appear undeletable.
As someone who is paranoid in the best of times, afraid these recent happenings have put me on edge.
nRiTeCh
Oracle
Mods have enabled mod approvals before posting FS threads.
Still I would suggest restrict members from posting more than 2 FS sales per month for next few months to curb such practices.
A Market Lockdown is required when people are getting duped for GPU specific sales due to GPU shortages globally and criminals taking undue advantage.
A word of caution! Dont even fall for unreal prices be it any component. Discuss or better let go the deal rather than suffering later. In these tough covid times, money is dear for family and emergencies while technology can always wait..
Still I would suggest restrict members from posting more than 2 FS sales per month for next few months to curb such practices.
A Market Lockdown is required when people are getting duped for GPU specific sales due to GPU shortages globally and criminals taking undue advantage.
A word of caution! Dont even fall for unreal prices be it any component. Discuss or better let go the deal rather than suffering later. In these tough covid times, money is dear for family and emergencies while technology can always wait..
Last edited:
goDofWar_skr
Herald
Could it have been some kind of an inside job? I mean some member from our forum itself who somehow managed to get hands on a few TE credentials..
Since they knew how to post sale threads with username pic n all
Since they knew how to post sale threads with username pic n all
It could have been plausible but the fact a mod's account was compromised makes me think otherwise.
One can just read the rules and see couple of open sale threads to figure out how to add photos with usernames and all.
y2s
Forerunner
If any Mod was trying to scam, I'm sure he would have been much more successful at it
shallg
Contributor
nRiTeCh
Oracle
Have you raised complaint with concerned authorities to get back the money or get the person punished?
shallg
Contributor
Done complaint in cyber cell let see what happens
I don't think I will get my money back as if he hacks techenclave ids pass ?
Have you tried calling on this number?
Are these same people or different people??
This IFSC is of SBI branch in Reddiarpalayam, Pondicherry.
shallg
Contributor
Mann
Herald
My guy said the phone is out of order. And make payment using Paypal.
Which did remove some of the red flags
Coz I got busy
Done now.There is no data leak on TechEnclave. Even if it were, the passwords cannot be read by anyone. They are bcrypt hashed and stored in DB. Only admins can change anyone's password but even they cannot read it. I am the only admin who has logged into the forum in last few years and I use 2FA.
Also there is no evidence that a xenforo forum has ever been hacked before. Not because of the forum software vulnerability anyway. On the server side we follow standard best practices to restrict network traffic and use security hardened operating system images and security patches. Not saying that it can't be hacked, just that all precautions do get taken.
I believe data leaks are mostly inside jobs.
Last edited:
So did you get to know what was the reason for the compromise of accounts of a staff member and some members with good number of positive feedbacks? ..or the investigation is still ongoing?Coz I got busy
There is no data leak on TechEnclave. Even if it were, the passwords cannot be read by anyone. They are bcrypt hashed and stored in DB. Only admins can change anyone's password but even they cannot read it. I am the only admin who has logged into the forum in last few years and I use 2FA.
Also there is no evidence that a xenforo forum has ever been hacked before. Not because of the forum software vulnerability anyway.
Mann
Herald
Being a victim I want it answered from a staff member. After all to the best of my knowledge I was dealing with Amandeep. And a staff member did not come out saying that the deal is legit. So a hacker or no hacker is still under question. Unless the staff knows something we don't.
Mann
Herald
So how did Amandeep regained access to his account at 11pm, i.e. 3hrs after the incident? Saying "good job bro you did not fall for their fake sale thread" ? I'm not saying he is guilty just yet. But again it all should be logical. I mean he was able to regain access to his account with changed passwords and changed email to verify within hours of the incident.
- Status