Poor Security System By PlayerAuctions

I'm very glad to hear that, thank you! Keep us updated please.

Edit:

In contact with a PA manager about the issue and their IT department is looking into it. Will post any update.

 

Just want to update, nothing has been done so far, been approx 1 month.

 

i can tell you that if they hack your account while you had a password that:

- is 16 chars long
- contains [a-zA-Z0-9]
- so having 62^16 possibilities

you can be damn sure that it is not brute-forced. I suspect a very bad encryption design (basically no encryption, because even sub-standard encryption methods like SHA or md5 will hash a 16 character string good enough so that itll never appear inside rainbow tables).

Some1 has access to raw password data.

 

If you need someone to bounce ideas off of as far as security solutions go, PM me, I will be able to help you. It's my specialty area.

Jon
CEO of LogicalNode and BotProx

 

I thought PA was known for it's intense security/scam prevention? Lol rather use Sythe now that this shit is going on.

 

Ive only ever had issues with PA and that was when i attempted to buy gold. I fucking bailed on that website years ago.

 

Classic

Still nothing? Have you contacted them again in the meanwhile?

 

Jacob sent me an email saying they couldn't find out anything and then stopped responding. I checked the website and they haven't fixed any of the issues been brought out.

 

Seems like this would be an easy fix. For starters, allow a maximum logins per minute + hour. Secondly, implement an option to log out all other sessions. Thirdly, they really should be implementing 2 FA. Any website that deals with real money should have 2 FA.