HACKED ACCOUNTS!!!!!

[John Galt]

Most commonly, you'll get a text with a string of numbers to enter. It slows down the login process by a minute but it increases the security of your login process by orders of magnitude.

For the love of God, please don't make visiting this forum conditional on a cell phone signal!

Something went wrong on my phone about 2 weeks ago so that it won't call or text over WiFi. I couldn't communicate with my wife until we got to Panama yesterday. I tried to use WhatsApp and they want to verify my number by sending me a text. If I could text, I wouldn't need WhatsApp!

Please remember us little guys that go weeks and sometimes months without cell phone service if/when you set up any 2FA.

 

[candcallen]

For the love of God, please don't make visiting this forum conditional on a cell phone signal!

Something went wrong on my phone about 2 weeks ago so that it won't call or text over WiFi. I couldn't communicate with my wife until we got to Panama yesterday. I tried to use WhatsApp and they want to verify my number by sending me a text. If I could text, I wouldn't need WhatsApp!

Please remember us little guys that go weeks and sometimes months without cell phone service if/when you set up any 2FA.

It emails you your code.

 

[John Galt]

That I could live with.

 

[benenglish]

if/when you set up any 2FA.

It's already set up. It's not mandatory for normal users.

 

[Axxe55]

Ben, I haven’t figured out how to pm on TGT. Kevin has my number but when I tried to call him just now it said invalid. Can one of you contact me? I have a couple concerns that may involve us all
Thanks
Darren

@dlbleak Welcome to TGT. Sorry it had to be under the circumstances that they are.

What is 2FA?

Two Factor Authentication.

Basically, when you log in and give your password, the software asks you for an additional piece of information that only you should possess.

Most commonly, you'll get a text with a string of numbers to enter. It slows down the login process by a minute but it increases the security of your login process by orders of magnitude.

Unfortunately, the forum software is not set up to provide that extra bit of information via text which is the simplest and most convenient way to do it. This forum uses either an app on your phone (which is convenient in the long run though it requires you to install an app to make it work the first time) or it sends you an email.

2FA is not mandatory for regular users but it's smart. It's now mandatory for staff.

I saw where @Darkpriest667 mentioned that and was going to ask as well.

 

[toddnjoyce]

@dlbleak Welcome to TGT. Sorry it had to be under the circumstances that they are.



I saw where @Darkpriest667 mentioned that and was going to ask as well.

If you’re interested in turning it on, got to your account, then password and security

From there, select “change” under two-step verification

You still need to ensure the “remain logged in” option is deselcted when you sign in.

 

[dlbleak]

@dlbleak Welcome to TGT. Sorry it had to be under the circumstances that they are.



I saw where @Darkpriest667 mentioned that and was going to ask as well.

If you’re interested in turning it on, got to your account, then password and security

From there, select “change” under two-step verification

You still need to ensure the “remain logged in” option is deselcted when you sign in.

Thanks guys, Ben turned it on for me.

 

[BBL]

FWIW, MFA/2FA that emails a code is not as secure as texting the code or messaging it to a completely separate app. (do not get me wrong, I am NOT advocating for texting codes)
Often hackers gain access to one's email and from there, it is very easy to gain access via "I forgot my pwd" links in PayPal, forums and other online outlets.
Or at least if I was a hacker, that's how I would choose to do it. Because it is easy for the hacker to go through the email box and see what forums the user is receiving notifications from and then it's just a matter of trial&error to find a PayPal, Venmo or other money account by using the hijacked email.
I do not receive forum notifications so a hacker would have a hard time connecting me to any forums online.
I utilize more than one emails as well to make it harder to connect my identity across the internet for exploitation.
Heck, I don't even use the same username on forums. I used to but then I realized how easy it is to track and abuse.

Glad things got resolved here and settled. It sucks when we get taken advantage of by crooks.

 

[benenglish]

FWIW, MFA/2FA that emails a code is not as secure as texting the code

True. I chose not to delve into the finer points of 2FA because I'm not competent to speak on the subject...but even I realize that using email is less secure than a text or separate app, if only because that puts all the verification work on the same platforms.

I utilize more than one emails as well to make it harder to connect my identity across the internet for exploitation.

Good point. I have several, including a last-ditch, if-everything-goes-to-Hell option of an email that I've held in reserve with a small European ISP for over 20 years. Nobody knows that one but, if I had to, I could rebuild my online life again by starting with it.

But how much security is enough? How many layers does a person need? That's a choice everyone has to make for themselves.

In the instant case and as a practical matter, 2FA via email is better than no 2FA. It's mandatory for staff and I recommend it for everyone, especially after this scare.

And I salute the folks who will be installing a third-party app for even better 2FA protection.

 

[45tex]

I can't make the app load. It scans then says it can't be opened. Used the email, it worked
Don't know what a FIDO is

 

[TheDan]

Don't know what a FIDO is

I googled "what is a fido" and this came up...

 

[45tex]

I googled "what is a fido" and this came up...

Already have a few of them didn't know you could DL them.

 

[mroper]

Fido is generally a usb-based key you plug into your computer USB and it will generate a code or pass the credntials to the computer

 

[HKaltwasser]

Well, I was wrong. PP started sending me conflicting responses and the scam just hit my account.

 

[toddnjoyce]

Damn

 

[HKaltwasser]

Damn

Damn

Yeah, what's screwed up is the scammer actually refunded the money as it looked on my account. Then Paypal pushed it through after they told me it looked suspicious. . Not sure what was real.

 

[HKaltwasser]

They literally refunded the refund.................

Here's their first response:

 

[benenglish]

If this stays this way, make sure you send a full report to texcross.

 

[leVieux]

Do not PayPal any money to anyone!

Someone is hacking accts to sell and hacked the benenglish acct.

More details to come.

Anyone having an issue buying from this person, hit the contact button below and email me.

"PayPal" supports ANTIFA !

 

[Hoji]

Anymore updates?