User spamming?

[Dawelio]

Heya,

The last couple of days I’ve noticed both an user with an registration longer back in time than a few years yesterday who posted random spam in the forum.
But I also just noticed that ”Avet”, which I know is also an long time member, also posted spam.

Has there been some kind of security issue on OC3D or what?…

 

[Damien c]

Noticed that myself, I reported a spam thread yesterday.


I think Avet's account may have been compromised, rather than the site to be honest.

 

[WYP]

It's not a security issue. Passwords get compromised. If there were a security issue, there are much bigger accounts to steal than Avet's.

 

[Dawelio]

It's not a security issue. Passwords get compromised. If there were a security issue, there are much bigger accounts to steal than Avet's.

Fair enough then, although I'm not into the whole IT-online-security sector so don't have any knowledge of that site of it.

 

[Dicehunter]

Fair enough then, although I'm not into the whole IT-online-security sector so don't have any knowledge of that site of it.

More than likely both used the same email+password on here that they did on other sites and those sites may have been compromised. Hackers/scammers then try thousands of sites and then start spamming/scamming.

This is why I try and always use a very long password that is completely different for different sites.

 

[Dawelio]

More than likely both used the same email+password on here that they did on other sites and those sites may have been compromised. Hackers/scammers then try thousands of sites and then start spamming/scamming.

This is why I try and always use a very long password that is completely different for different sites.

Yeah this is basically the most preached way, although most don’t do this due to it’s not that easy to remember passwords for several dozens of sites unfortunately. Most people probably find it difficult and hard, including myself, even though I try.

 

[Dicehunter]

You can save all your passwords and usernames to a simple text file, Keep it somewhere on your computer and keep a backup on a USB stick, No need to remember anything

 

[Warchild]

I have used KeePass for years. Even at work. Useful tool for storing multiple node information.

 

[Dawelio]

You can save all your passwords and usernames to a simple text file, Keep it somewhere on your computer and keep a backup on a USB stick, No need to remember anything

Yeah but that would require you to be at your PC, which I'm not as much these days as I am on my phone for example.

 

[NeverBackDown]

I have used KeePass for years. Even at work. Useful tool for storing multiple node information.

Only useful until their algorithm gets cracked. Then it's compromised.

 

[Dawelio]

Only useful until their algorithm gets cracked. Then it's compromised.

Yeah, wasn't this the exact thing that happened to LastPass late last year?...

 

[Dicehunter]

Only useful until their algorithm gets cracked. Then it's compromised.

Isn't keepass an offline solution ?

 

[Warchild]

Isn't keepass an offline solution ?

Correct.

 

[AlienALX]

Never had a problem with Chrome password manager. Ever. It uses your Windows pin to access.

 

[scubasteve]

its not just here its on a few sites , the site im admin on iv banned and deleted over 15-20 members past week or so for spamming and putting up links to cypto and win a phone stuff



they are all old accounts as well some dating from 08 upto past mid 2000


every day there's 2 -3 of them

 

[AlienALX]

its not just here its on a few sites , the site im admin on iv banned and deleted over 15-20 members past week or so for spamming and putting up links to cypto and win a phone stuff



they are all old accounts as well some dating from 08 upto past mid 2000


every day there's 2 -3 of them

2-3? lucky you.

I used to mod a cat forum and we got about 200 a day ffs. I bailed in the end was tired of deleting it all

 

[NeverBackDown]

Isn't keepass an offline solution ?

Correct.

My mistake then.