Keep Sythe accounts safe

[sith kid]

Emails have been exploited, Sythe accounts hacked. You aren't a high priority target, they prefer hacking large donors and/or people who make a living off the market. Although old accounts have been hacked in the past, they never managed to steal anything close to what they could with say someone like Arcus's account.

This suggestion was denied in the past, I can't remember for what reason exactly. But I'd be all in for this. Someone who's donated $500, doesn't use Sythe anymore, am afraid I'd get hacked and come back banned. I'd rather pay for the text or whatever it costs for the emails and lose a few dollars than potentially paying back a few hundred. I was also a recent target when high profile accounts were getting hacked (few months ago), I got a PM from a staff saying I was a target, although no evidence I did talk to the hacker that was trying to and confirmed it. Obviously I didn't tell him who I was.

It would be a bit tedious to request an SRB to stay safe, when I just want to browse the forums and reply from time to time.

Anyway I doubt this would get approved.

Yes, I agree completely, but then that would mean implementing a system for a handful of users, which isn't viable given the resources needed to implement this.

Right.. you're a god amongst us mortals that make mistakes, you deserve the rank 'fucking amazing cunt' and we should all bow down, because it's not common for people to get hacked therefore you are right, it's the common sense that prevents hackings... fucktard..


Then possibly take out something as useless as SVU and replace it with this

Maybe I do, maybe I don't. I didn't mean to come across as cocky, although even if I did, there's truth in what I said. For most 'hackings' (phishings, social engineerings) could be prevented if the victim paid more attention to ther situation. Like it or not, that's the truth.

 

Using a random hushmail ([email protected]) pretty much rules out exploited emails and generally being careful online rules out keylogging. I don't see how else you can manage to get hacked on Sythe.

 

Then possibly take out something as useless as SVU and replace it with this

SVU doesn't cost hundreds of dollars a month...

 

[ThePrestigedMuzza]

Yes, I agree completely, but then that would mean implementing a system for a handful of users, which isn't viable given the resources needed to implement this.


Maybe I do, maybe I don't. I didn't mean to come across as cocky, although even if I did, there's truth in what I said. For most 'hackings' (phishings, social engineerings) could be prevented if the victim paid more attention to ther situation. Like it or not, that's the truth.

Sorry for coming off so negative haha, I just meant yes it's true that's how any scam occurs, it's a failure of attention. However if it's something that happens often, i think it should be addressed by adding extra security on the account. This suggestion is a non compulsory method of keeping accounts safe, not a method that with out it leaves an account compromised, just a tool to help those who might feel that they are easily compromised to these sort of incidents.

Using a random hushmail ([email protected]) pretty much rules out exploited emails and generally being careful online rules out keylogging. I don't see how else you can manage to get hacked on Sythe.

Well as you know people can be very careless sometimes, whether it is because they are multi-tasking, or have other stuff going on, it's an attention thing and sometimes we just put so much faith in others we leave ourselves vulnerable. So i don't think it's stupidity that leads us to get hacked, i think it's lack of attention or even knowledge of how stuff like this happens.

SVU doesn't cost hundreds of dollars a month...

Yes but this isn't a method that isn't a good investment, look at Zuzel's case for example, thousands of dollars gone because a sythe account was compromised. It's on us to keep ourselves protected and i don't even care if it costs $20 to register this, i would be more then happy to do it. I'm not sure what the expenses are and why they would cost hundreds of dollars, please explain it to me, and if we were using sythe resources of upto 100+ a month for this tool, i still think something like this wouldn't be a bad idea considering the benefits it could have. I understand your argument and i think it's valid, why should we spend resources when people should just make sure there accounts are safe, the reason i still refute this position is for the simple fact that we have people investing thousands of dollars into this site, keeping there accounts uncompromisable does not seem to be a worthless expense.

 

[Lvl 75 Def]

Never once in 6 years have I had my Sythe account hacked. This is a good indication that if you use common sense, you don't get hacked.

Who would hack you L0l.

No support, i hardly doubt it would get implemented anyways.

 

Sorry for coming off so negative haha, I just meant yes it's true that's how any scam occurs, it's a failure of attention. However if it's something that happens often, i think it should be addressed by adding extra security on the account. This suggestion is a non compulsory method of keeping accounts safe, not a method that with out it leaves an account compromised, just a tool to help those who might feel that they are easily compromised to these sort of incidents.



Well as you know people can be very careless sometimes, whether it is because they are multi-tasking, or have other stuff going on, it's an attention thing and sometimes we just put so much faith in others we leave ourselves vulnerable. So i don't think it's stupidity that leads us to get hacked, i think it's lack of attention or even knowledge of how stuff like this happens.


Yes but this isn't a method that isn't a good investment, look at Zuzel's case for example, thousands of dollars gone because a sythe account was compromised. It's on us to keep ourselves protected and i don't even care if it costs $20 to register this, i would be more then happy to do it. I'm not sure what the expenses are and why they would cost hundreds of dollars, please explain it to me, and if we were using sythe resources of upto 100+ a month for this tool, i still think something like this wouldn't be a bad idea considering the benefits it could have. I understand your argument and i think it's valid, why should we spend resources when people should just make sure there accounts are safe, the reason i still refute this position is for the simple fact that we have people investing thousands of dollars into this site, keeping there accounts uncompromisable does not seem to be a worthless expense.

The initial registering fee doesn't matter. It's the monthly upkeep.
The thing that costs so much is the SMS host, a monthly fee would have to be paid in order to keep the host.
We can't pay for something we don't have the money for and if people were to say "I'd pay it" we'd need a good 30 people minimum and we'd need them to consistently pay per month. If not, we just couldn't afford the host.

If we did emails then there'd be no point, as if someone can access you Sythe they'll very likely be able to access your emails.

 

[ThePrestigedMuzza]

The initial registering fee doesn't matter. It's the monthly upkeep.
The thing that costs so much is the SMS host, a monthly fee would have to be paid in order to keep the host.
We can't pay for something we don't have the money for and if people were to say "I'd pay it" we'd need a good 30 people minimum and we'd need them to consistently pay per month. If not, we just couldn't afford the host.

If we did emails then there'd be no point, as if someone can access you Sythe they'll very likely be able to access your emails.

What about IP locking an account, so that no other accounts can access the account, this can be removed through requests and approval by mods if texts are too hard. Again also a non compulsory method. So if i had this activated on my account, and i had intention of moving or using a different IP i can merely unlock the account only if i have the same IP. If something happens and I can't have the same IP I can send in a request and Mods can go through some sort of verification process like 'what is the number listed when we you activated your SVU' or something only the original sythe member would know. If the sms process is an expensive upkeep i am still unaware why SVU is still a thing considering it just doesn't seem like it's worth the expense.

 

[Swadq]

What about IP locking an account, so that no other accounts can access the account, this can be removed through requests and approval by mods if texts are too hard. Again also a non compulsory method. So if i had this activated on my account, and i had intention of moving or using a different IP i can merely unlock the account only if i have the same IP. If something happens and I can't have the same IP I can send in a request and Mods can go through some sort of verification process like 'what is the number listed when we you activated your SVU' or something only the original sythe member would know. If the sms process is an expensive upkeep i am still unaware why SVU is still a thing considering it just doesn't seem like it's worth the expense.

People's IPs change all the time. Hackers can be good social engineers. What's to say a hacker couldn't persuade a mod that they are the same person? This would also very much inconvenience normal users.

 

[Pizcheck]

the suggestion of a new ip using your account if its u using a phone to verify it is a good suggestion imo.

 

Please refer to http://www.sythe.org/suggestions/1522885-some-sort-hacking-prevention-system.html.

Thanks for the input everyone!