Armed Polite Society
Main Forums => The Roundtable => Topic started by: K Frame on December 19, 2021, 07:45:43 AM
-
I'm an admin at TFL. In the past month we've had two cases of European fraudsters hacking a TFL member's account and posting what seems to be a smoking hot deal in the sales forums.
The first case, which tipped us off to what might be happening, was noticed by the member who responded to a private message asking about the item.
That's when we discovered the European connection.
The second incident a few days ago very likely would have resulted in a TFL member losing $1,000 had it not been for a simple error caught by a third member.
The IPs used in both cases have resolved to Europe, in both cases with a known history of being used by spammers. We've locked down the IP ranges, but in the past they've proven to be pretty adept at slipping through the cracks.
Our best guess is that they're getting in simply by using brute force password hacks against older, weaker passwords. Don't have 100% confirmation of that.
So, suggestion. If you've not changed your password for online forums for awhile, it's probably time to do so, and to make them a lot more robust.
-
How do we know that you are the real K Frame? Maybe you are actually Taurus Judge trying to trick everyone into buying you .410 shotshells.
-
Been using same password a couple years, not usually log out. Now can't figure out how to change it. Search says change feature has been disabled?
HELP!!!!
-
So you are saying 12345 is not a good password? I guess I will have to start using 54321.
-
At the top: Profile
Then: Account Settings
There is a spot to update your password there.
-
Another way passwords may be getting online...
If you've used a password for a long time, there's a chance that it's been compromised through one of the various breeches and it's now on a list on the dark web. My one identity protection services (which I got when OPM decided that computer security and hardening is for chumps) indicates shows whether your passwords and associated accounts and user names have shown up on the dark web.
I've had a couple that have so shown up.
-
So you are saying 12345 is not a good password? I guess I will have to start using 54321.
Hey, I have that combination on my luggage!
-
So you are saying 12345 is not a good password? I guess I will have to start using 54321.
Too weak, need to add at leat 1 upper case and 1 lower case letter... might I suggest 54321BoOm!
-
PASSWORDS FOR
MY STUFF
pASSWORD1
PaSSWORD2
PAsSWORD3
PASsWORD4
PASSwORD5