LOL Smurfin Pardon

http://www.sythe.org/request-pardon/1912648-requesting-pardon-being-hacked-2-a.html

His account wasnt hacked, It was a vbulletin exploit. They didnt need to recover his password or emails to get it. This is 100% sythe.org issue and not the account owner. Not everyone can afford a smart phone to 2fa their account. Only recently has sythe even admitted their was a exploit and let alone corrected it or trying to correct it. Ive been told its still currently active... Why is sythe.org holding its own members liable for their security breach? A database leak isnt our fault and since 2fa isnt a mandatory we shouldnt be held responsible as a community. Jesus christ at least allow other mods and admins to discuss before locking the thread? Nigga's be getting trigger happy when they get that mod status..

 

[Pain]

I agree it is a sythe.org issue.


Of course then theres the problem of everyone that's been forced to refund is absolutely going to go ape shit on staff if they decide to change the policy.


I do feel bad for people in certain cases though tbh.

 

The same thing happened to me, at least I caught it that day.

 

I don't understand why you continuously go on tantrums about the simplest things.

His account wasnt hacked, It was a vbulletin exploit

As was the majority of every hacking in the last few years.

This is 100% sythe.org issue and not the account owner.

It's a sythe issue and a personal security issue. One of the two can be avoided by activating 2fa.

Not everyone can afford a smart phone to 2fa their account.

You can use your desktop, or any reasonable smart device to enable 2fa, there is even a guide on sythe on how to do so.

Only recently has sythe even admitted their was a exploit and let alone corrected it or trying to correct it.

What about the previous exploits? They were also corrected.

Ive been told its still currently active..

A better reason to activate 2fa.

Why is sythe.org holding its own members liable for their security breach?

Because advancing the fortification of your account security is an option with 2fa. You won't be forced to enable it, but if you get hacked, it will be your burden, not the sites.

Jesus christ at least allow other mods and admins to discuss before locking the thread? Nigga's be getting trigger happy when they get that mod status..

I closed it because it is protocol. I'm sorry your friend got hacked and you want to white knight for him, but it's always been this way buddy. The rule won't change for him.

 

lol hattez why are you doing this to yourself bud.

 

I don't understand why you continuously go on tantrums about the simplest things.



As was the majority of every hacking in the last few years.



It's a sythe issue and a personal security issue. One of the two can be avoided by activating 2fa.



You can use your desktop, or any reasonable smart device to enable 2fa, there is even a guide on sythe on how to do so.



What about the previous exploits? They were also corrected.



A better reason to activate 2fa.



Because advancing the fortification of your account security is an option with 2fa. You won't be forced to enable it, but if you get hacked, it will be your burden, not the sites.



I closed it because it is protocol. I'm sorry your friend got hacked and you want to white knight for him, but it's always been this way buddy. The rule won't change for him.

luke isnt my friend i barely know the guy. This is my opinion and luke's right others have been pardoned with out repaying for database leaks/exploits. I didnt throw a tantrum im expressing my opinion. If you cant see the difference then fuck off.

 

Also, if we don't place the burden on those hacked, it will be extremely easy to fake hackings, scam, and come back like nothing happened.

 

luke isnt my friend i barely know the guy. This is my opinion and luke's right others have been pardoned with out repaying for database leaks/exploits. I didnt throw a tantrum im expressing my opinion. If you cant see the difference then fuck off.

You're free to express your opinion without threatening me in a pm and acting like a child about the situation. The situation does suck, but this is the best way about handling it.

 

now looking through it, why is sythe having a double standard? expects the users of the site to repay for their issues with security but when it happens to the site itself, its on the user.

why isn't this case an exception for the 2fa issues w/ hackings? his damn password was leaked from sythe database ffs. lol

>database is leaked
>account password hacked from site's own database
>user banned because didn't have 2fa on
>sythe database still leaked
>user made to pay in full w/ denial of pard
>mfw??????

 

mfw...

 

[JSand]

Yea... this doesn't make sense at all. Why should a user be held accountable for the lack of security on Sythe? If a site issue caused a user to be hacked shouldn't the site be held liable?

edit: Also, if Sythe has accepted pardons before because of this or similar circumstances why shouldn't this pardon at least be considered?

 

I understand that this policy isn't always fair, but I have to agree with ghast. Looking at the big picture, this policy does more good than bad. It's screwed up when someone does get hacked due to a Sythe Security issue. However, it would be even worse if anyone could claim it's a Sythe security issue, resulting with a free pass to scam. We are all under this same risk, it's not different for me or a newcomer. I'd like the prevent a hacking as much as possible so I take additional steps to do so, all I can do now is keep my fingers crossed.

 

[JSand]

I understand that this policy isn't always fair, but I have to agree with ghast. Looking at the big picture, this policy does more good than bad. It's screwed up when someone does get hacked due to a Sythe Security issue. However, it would be even worse if anyone could claim it's a Sythe security issue, resulting with a free pass to scam. We are all under this same risk, it's not different for me or a newcomer. I'd like the prevent a hacking as much as possible so I take additional steps to do so, all I can do now is keep my fingers crossed.

If that's the case why have exceptions been made? If everyone is to be held to the same standard then ALL pardons should be denied for database leaks/exploits but according to hattez people have been able to successfully pardon without having to re-pay any damages so that makes it wholly unfair.

 

if they go ahead and decide that he has to refund full before pardon is considered, sythe should at least cover a certain % due to it being partially a site fault.

this 2fa shit is so stupid. if you don't have it you're pretty much setting yourself up for a scam. get 2fa you dum dum fuccs.

 

now looking through it, why is sythe having a double standard? expects the users of the site to repay for their issues with security but when it happens to the site itself, its on the user.

why isn't this case an exception for the 2fa issues w/ hackings? his damn password was leaked from sythe database ffs. lol

>database is leaked
>account password hacked from site's own database
>user banned because didn't have 2fa on
>sythe database still leaked
>user made to pay in full w/ denial of pard
>mfw??????

Blame the manufacturer about the poor security (vBulletin). There is literally nothing Richard can do, except fix breaches when he's notified of how it's done. How do you prepare for these situations?

Think of it this way.

I get a home security system that covers any logical situation one might deal with when dealing with breaking of entry.

Someone finds a way to bypass that security system using an unorthodox method, e.g., digging a tunnel under the home. You can go ahead and say it's the home security system's fault for not covering that, but you can't blame the system for not covering impractical situations.

The possibilities of bypassing website security is virtually endless. Do we expect Richard to predict the future?

U.S. Government Online Security Website Hacked

If a government regulated website that specifies in online security can get hacked, so can Sythe, was exceptional ease.

If that's the case why have exceptions been made? If everyone is to be held to the same standard then ALL pardons should be denied for database leaks/exploits but according to hattez people have been able to successfully pardon without having to re-pay any damages so that makes it wholly unfair.

If your account gets hacked, and the hacker is unable to use it to scam others, you won't be held accountable, since there are no damages in that regard.

I can't recall an incident where someone didn't have to pay any damages when there were damages.

if they go ahead and decide that he has to refund full before pardon is considered, sythe should at least cover a certain % due to it being partially a site fault.

this 2fa shit is so stupid. if you don't have it you're pretty much setting yourself up for a scam. get 2fa you dum dum fuccs.

This wouldn't work because:

Also, if we don't place the burden on those hacked, it will be extremely easy to fake hackings, scam, and come back like nothing happened.

Wouldn't want scammers to profit now, do we?

Again, being responsible for your account security is your job, not the sites.

If I create an account and make an easy password, then my account gets hacked by the use of brute-forcing, it would be my fault for not strengthening my password. The same logic goes for setting up 2fa.

 

If that's the case why have exceptions been made? If everyone is to be held to the same standard then ALL pardons should be denied for database leaks/exploits but according to hattez people have been able to successfully pardon without having to re-pay any damages so that makes it wholly unfair.

I'm not aware of anyone who has been pardoned without paying, I've been inactive for quite some time. If there have been people, I personally would not have supported the decision. I can only guess if they were pardoned without paying, they must have been very benefical to the site (still wouldn't agree with their pardon). This is Richard's website after all, and he is entitled to make any decision he likes.

 

You're free to express your opinion without threatening me in a pm and acting like a child about the situation. The situation does suck, but this is the best way about handling it.

Originally Posted by hattez
I suggest you reopen lukes pardon. This was a exploit in vbulletin that resulted in his account password being made available. Sythe has finally acknowledged that the exploit was still being actively used up until recently. This isnt your call to close it. Let other mods have a say in what happens.

My message to Ghast ^

This is a threat to you? What a complete fucking pussy. Getting mod is going to your head boy.

 

I had no idea how vbulletin worked, guess i shoulda looked into it more.

tough cookie to swallow for smurf in this situation, at least that's how i'd feel, but looks like he'll have to bite the bullet

 

Look At The Use Of Idioms ^^^

 

Originally Posted by hattez
I suggest you reopen lukes pardon. This was a exploit in vbulletin that resulted in his account password being made available. Sythe has finally acknowledged that the exploit was still being actively used up until recently. This isnt your call to close it. Let other mods have a say in what happens.

My message to Ghast ^

This is a threat to you? What a complete fucking pussy. Getting mod is going to your head boy.

Look up idiom. I didn't take action because it wasn't serious. Stop trying to act like a badass on the internet, it's getting old.