Explain this to me please?

[Edit] Removed Link to Vbulletin Exploit-

BA guys told me this is why sythe accounts were being hacked as of last year. Considering several users (including me) had to repay back hundreds of dollars id like a explanation... Shouldnt sythe be responsible for this?

In my opinion users shouldnt be held responsible for the insecurity of the website. Several users should be given access back to sythe considering they cant repay the large amounts scammed. Luke is a perfect example.

 

[Tyler]

 

Honestly had to after this

 

[Tyler]

riperino

 

[Yousuckv2]

lol there was something last year?
there was something this year, too, hence so many accounts being hacked

 

[Carbon]

Having 2FA is good, but this doesn't mean that someone could just randomly guess all of the Ex-Mods, and other staff member's passwords.

 

That's really not to say that 2fa is foolproof and there is not an exploit to get around it. Have good passwords, have good 2fa, hope for the best. All you can really do.

 

[Shall Skill]

yolo im not 2fa if i get hacked i quit sythe

 

[Syed]

yolo im not 2fa if i get hacked i quit sythe

ban this retarded fuck his password is literally like "kitten123" he's a fucking security risk

 

[Tyler]

ban this retarded fuck his password is literally like "kitten123" he's a fucking security risk

dont you mean goldfish123

 

lol there was something last year?
there was something this year, too, hence so many accounts being hacked

I had the exploit linked but i was told to remove it. Some mods are looking for any reason to permanently ban me. Pretty much it was a exploit of vbulletin. I didnt realize theyre still using versions of the exploit i posted.

[Edit] Funny enough it was the BA guys who told me to remove it. They thought it was to strong of a statement and this websites ego's would be furious.

 

[Alch]

Really difficult situation. First of all you have to decide whether Sythe is responsible or not. Since it was a vBulletin exploit, it's impossible to blame the development of the site, and since it's a site that doesn't commission trades, it's impossible for them to reimburse anything. They also have (1) 2Fa available, and (2) an announcement to change your passwords, after I'm assuming the exploit was patched.

I'm going to go with the premise that they aren't responsible, and wouldn't be responsible for repayment - but who should be responsible the consumers or the hacked 'merchants'(going to use the word merchants, since at the time of the hijacking, they were likely acting like they were buying/selling goods to scam people)?

If the 'merchants' are responsible:
1)Less people are affected, but more greatly affected
2)Less fleeting presence on the site, and are more likely to right the wrong
3)Less impact on the site overall

If the consumers are responsible:
1)Would be less likely to return to Sythe, due to just dismissing it as a site full of scammers
2)Way more people affected

Which is the lesser of 2 evils when considering the site's health?

 

Really difficult situation. First of all you have to decide whether Sythe is responsible or not. Since it was a vBulletin exploit, it's impossible to blame the development of the site, and since it's a site that doesn't commission trades, it's impossible for them to reimburse anything. They also have (1) 2Fa available, and (2) an announcement to change your passwords, after I'm assuming the exploit was patched.

I'm going to go with the premise that they aren't responsible, and wouldn't be responsible for repayment - but who should be responsible the consumers or the hacked 'merchants'(going to use the word merchants, since at the time of the hijacking, they were likely acting like they were buying/selling goods to scam people)?

If the 'merchants' are responsible:
1)Less people are affected, but more greatly affected
2)Less fleeting presence on the site, and are more likely to right the wrong
3)Less impact on the site overall

If the consumers are responsible:
1)Would be less likely to return to Sythe, due to just dismissing it as a site full of scammers
2)Way more people affected

Which is the lesser of 2 evils when considering the site's health?

vbulletin itself didnt even acknowledge that there was a exploit in its own services. Im interested in why the users are being made to refund? Most wherent active for years, some even before 2fa was even made accessible. They shouldnt be forced to refund at all. Sythe loses reputable users because of a breach in the websites security. Most had left the market and only returned years later to find out they need to repay 2k+ in damages. Most cant afford to repay.