Fossilman's Stars Account Hacked?

[Alexisonfyre]

[ QUOTE ]
has anyone ever had their account hacked by a joyrider and find extra money in it?

like they wanted to play high stakes, and ended up winning money for you?

[/ QUOTE ]That happened to tournament player Annette_15 lately, there is a thread about this somewhere.

[MrFizzbin]

First of all from your previous post you were lucky you got hacked by a dumb-xxx who made it easy for you to recover the cash. Here's my suggestion on how to fix this:

Every PC today comes with an ethernet card which has a specific id, and all CPU's have a specific ID number associated with them. It wouldn't be hard for PS to imlement an option to only allow connection on THIS computer in the client. This won't keep ultra sophisticated hackers out, but it will keep the dumb criminals out. There is still access to these #'s over dial up so thats not an issue.

IF they don't do that, just do what I do, rotate your password every 60 days, and use alphanumeric and special characters in then and make them longer than 10 chars.

[J.Brown]

Dids,

GG's name is wsop2005, nothing involving champ or whatever.

and he is a good guy, what are you picking on?

that and answer my question for you in your gym thread i am really curious about your haps in the workout dept.

that is all, [img]/images/graemlins/grin.gif[/img] J.

[SpaceJanitor]

[ QUOTE ]
I would think Greg's only legal recourse at this point would be to refer the matter to prosecutors in Costa Rica, in the hope that they:

1) would be interested in pursuing,
2) could get a Costa Rican judge to issue a subpoena forcing Stars to give up the IP address, and
3) could coordinate with US prosecutors.

The US prosecutors would in turn have to:

4) be interested in pursuing,
5) get a subpoena forcing the ISP to give up the name and address behind the IP address and
6) pursue the guy, who might be in a different state from the ISP.

That's a lot of hoping. But I'm not a criminal lawyer and don't know what I'm talking about.

[/ QUOTE ]

I have no clue myself, but the thought that a crime like that (it is a serious offense in my opinon) goes unpunished is pretty disturbing. I bet that guy loses at the most a couple hundred dollars when Pokerstars confiscates his funds.

[MicroBob]

Greg -
as has been mentioned in this thread, there are already sites that require a seperate log-in handle that is completely different from your screen-name at the table.
Bodog, Prima, WilliamHill among others.

Also - not sure what happens when you change your screen-name on Party (they give you the option to do this every 6 mths) but they might have you keep the same log-in name you had before even though your screen-name is different. So this is kind of the same too.


It definitely would keep out some of the less sophisticated hackers which, it seems, is what a lot of these are.


I'm going to repeat that the option to "only allow me to log-in from this computer" should be considered.

Also, if ANYONE attempts to log-in from a different computer while I have that option on then that computer should immediately not be allowed to log-on to ANY account.
Just shut them out.

As it currently stands, I believe some guy can just sit at home and try to log-on to one account after another after another all day long and Stars just lets this person do it continually.
Certainly there are ways to automate such continuous log-in attempts.


Also - to solve the problem of people intentionally locking-out someone's account:
After 5 tries or whatever - That SPECIFIC computer is not allowed to log-on to any account until they clear it up with stars support.


There have to be ways to do this.
And I can't imagine they would be THAT incredibly difficult to implement.

Expensive and time-consuming to add such features?
"BAH!" I SAY!!!!
Some players have thousands of dollars (me), or even tens or hundreds of thousands of dollars (other players who are better than me) on their site.

Stars can spend a little bit to increase the security to protect OUR money.


I also think that increasing the security with such measures could stand a good chance of getting rid of a lot of those hacking headaches and perhaps even end up saving them $$ in the long-run.

[Jack Bando]

[ QUOTE ]
[ QUOTE ]
Wouldn't it be very simple to have a max of 5 log-in attempts a day?

[/ QUOTE ]

I was liking this idea myself. But then somebody pointed out that if a person wanted to make life hard for you, they'd just try to log in as you 5 times, and get you locked out. Once you got things up again, they could repeat the process. Basically, they could get you locked out as often as they wanted.

Now that I've read lots of these posts, I'm a big fan of the idea of having a separate ID name, different from your screenname, that you use along with a password when you login. This way, if you got locked out, you could change your ID and your password, and the person trying to hassle you would have to guess your ID name in order to get you locked out again. And, if they're trying to hack into your account, they'd have to guess your ID name and password, simultaneously, to succeed. That makes it WAY less likely that somebody could do it without using spyware or something to get the information from your computer.

If anybody can explain why having a separate login ID name would be a problem for the sites, I'd love to hear. If there is no such problem, I'll lobby PS to get it done.

Later, Greg Raymer (FossilMan)

[/ QUOTE ]

A few sites do have that IIRC, where the ID is not the same as the SN. Much harder for people to break into your account, at least the low level idiots.

The big sites need...
1)ID=/=SN
2)Only play from this PC option(If you want to log in somewhere else, you have to tell them in advance or something)

[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
Yes, my account was hacked.

It appears that this ikeyrson bastard managed to guess my password after making multiple attempts. He then played like an idiot as you are all aware, blatantly dumping chips from my account to his account. Based upon dozens of emails sent to PokerStars security, they jumped in and froze his account. So, all of my money will be returned, and he gets nothing.

[/ QUOTE ]

Not to be a dick but i know of people(some have posted on 2p2) that got their stars acct hacked and stars does not give them their money back. WTF?

[/ QUOTE ]

There are two major types of hackers, referred to by PS security as malicious and joy-rider. The malicious types do what this jerk did, they try to get all of your money into their own account to steal it. When this happens, and the person is caught before the money leaves PS, then it is easy enough for PS to freeze the account, do their internal paperwork, and then put the money back into your account.

The joy rider types hack your account, and then they play big games against other players using your money. They lose to innocent third parties. Once this type of hacking is discovered, your money is gone, because PS isn't going to take it away from the innocent third parties who were just fairly playing the available games. And if it was your account that was hacked, not PS computers or software, then they won't repay you out of their own funds for money lost due to somebody guessing or stealing your password.

As far as I know, that is why I got my money back, and some other people have been hacked and permanently lost their money.

Later, Greg Raymer (FossilMan)

[/ QUOTE ]

I don't know Greg. I have a feeling that PokerStars would give you your money back regardless of either situation. Just a hunch.

[TheRock69]

The easiest way is to get into someones email account and get passwords from there. Many people have same password for all their accounts making it that much easier. Most people also save account info emails in special webmail folders for years.

[nineinchal]

[ QUOTE ]
[ QUOTE ]
I go with "Bosco". That was George's password on Seinfeld.

[/ QUOTE ]

Lol



Slickpoppa,

Hey, That was great. How did you remember all of that schtick?

Nineinchal



"Ah, all right, yeah... Let's see... Well, we can throw out birthdays immediately. That's too obvious. And no numbers for you. You're a word man. Let's go deeper... What kind of man are you? Well, you're weak, spineless, a man of temptations. But what tempts you? You're a portly fellow. A bit long in the waistband. So what's your pleasure? Is it the salty snacks you crave? No no no no... Yours is a sweet tooth. Oh, you may stray, but you'll always return to your dark master... The cocoa bean! And only the purest syrup nectar can satisfy you. If you could, you'd guzzle it by the gallon... Ovaltine!? Hershey's!? Nestle's Quick!?"

[/ QUOTE ]

[burningyen]

Fact is, this situation was caused by Greg having an easy-to-guess password. I see almost no incremental benefit between having a hard-to-guess password and having a separate login name and table name. What's of bigger concern are the spyware/keylogger/software hack attacks out there. To protect against those, I think poker sites should provide players with hard security tokens.



The main reason I don't play on FTP these days is because of the recent horror stories regarding account security. Any site that raises the bar in that area would definitely win more loyalty from its players.

P.S. Isn't it ironic that the UIGEA helped prevent Greg's account from being emptied?