Ransom Demands

13

Comments

  • LeatherGryphonLeatherGryphon Posts: 12,096

    Yeah, I got an e-mail ransom demand a few weeks ago.  No proof of actual infection or stolen information, just statement that they'd hacked me and demanded $1000 or they'd tell my boss and friends the kinds of websites I'd been visiting. frown (Ooh, shame on me! blush)  So, it was probably just a bluff but I went ahead and changed all my major passwords anyway (they're all different everywhere).  But I have had difficulty getting into my telephone company website lately, coincidently right after they redesigned their website suggesting there might be problems.  I just haven't persisted or called them on the phone yet.  I will soon.

  • SpitSpit Posts: 2,342

    The basic truth is that the internet was designed and built for communication not transactions.

    Period.

    All the 'safeguards' created are just bandaids. The underlying---underneath the web---need to be changed or replaced. Good news is many minds are currently working on ways to do just that.

    It will come---someday. Maybe.

     

  • Spit said:

    The basic truth is that the internet was designed and built for communication not transactions.

    It will come---someday. Maybe.

    With all that we do successfully online in this day and age, I kind of doubt that we'll redesign it.

     

  • namffuaknamffuak Posts: 4,409
    3dOutlaw said:

    Thanks for this, I just checked my Daz Password at https://haveibeenpwned.com/Passwords, and it was in there...5 times!

    Just changed it! ;-)

    Fascinating. I have a 'generic' password I've been using for years for sites that require a logon but no financial data. At least 3 of these sites have suffered data breaches of one kind or another. But good ol' generic password? Not found! The handful I use for actual financial transactions are also safe, and the password I use here - has been used 852 times. Probably should change it . . .

  • Ryuu@AMcCFRyuu@AMcCF Posts: 772
    Chohole said:

    Change it, Chohole! CHANGE IT!! CHANGE IT!!! surprise

    image

    laugh

    incorrect.jpg
    1249 x 869 - 219K
  • McGyverMcGyver Posts: 7,085
    Spit said:

    The basic truth is that the internet was designed and built for communication not transactions.

    It will come---someday. Maybe.

    With all that we do successfully online in this day and age, I kind of doubt that we'll redesign it.

     

    I kinda agree with that... humans never change/fix anything unless it’s fully engulfed in flames or about to sink... actually both and change “about to sink” to “actively engaged in sinking”.

  • TSasha SmithTSasha Smith Posts: 27,267
    McGyver said:
    Spit said:

    The basic truth is that the internet was designed and built for communication not transactions.

    It will come---someday. Maybe.

    With all that we do successfully online in this day and age, I kind of doubt that we'll redesign it.

     

    I kinda agree with that... humans never change/fix anything unless it’s fully engulfed in flames or about to sink... actually both and change “about to sink” to “actively engaged in sinking”.

    Like the titanic kind of sinking?

  • ArtAngel said:

    Changed my password to mypassword

    I never change my password, it is the same for everythihg, makes it more convenient - so yeah my password is easy to remember too it is simply DOG as easy as all my PIN #'s which is 1234.

    not really of course LOL

     

     

  • Oso3DOso3D Posts: 15,085

    What I do is have a core password I always use, then attach site specific stuff.

     

    So lets say it was Armoir3.

    My Daz password is then Armoir3daz

    google would be Armoir3g

    and so on.

    Yeah, if hackers are studying and correlating two or more sets of passwords they’ll figure it out, but at that point I’m boned unless I’m a security expert anywY.

     

     

  • ChoholeChohole Posts: 33,604

    I opften wonder,  when reading threads like this, if people to whom English is a 2nd language make thier passwords in English or their first language.  And if the latter do they get hacked as easily as English and American English passwords.

  • TaozTaoz Posts: 10,260

     

    Chohole said:

    I opften wonder,  when reading threads like this, if people to whom English is a 2nd language make thier passwords in English or their first language.  And if the latter do they get hacked as easily as English and American English passwords.

    I make mine in Gibberish.

  • Charlie JudgeCharlie Judge Posts: 13,253
    Chohole said:

    I opften wonder,  when reading threads like this, if people to whom English is a 2nd language make thier passwords in English or their first language.  And if the latter do they get hacked as easily as English and American English passwords.

    I don't use words at all. I just use combinations of letters, numbers, and symbols.

  • kyoto kidkyoto kid Posts: 41,861

    ...all I have to do is try and text on my phone and I can come up with great passwords and codes.  Surprised the CIA or MI-5 haven't tried to recruit me yet.

  • marblemarble Posts: 7,500

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

  • LeatherGryphonLeatherGryphon Posts: 12,096

    Yeah, and just try typing in hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY on an input screen where you have to keep switching back and forth between letters/uppers/numbers/specials on different input screens where you have to use arrow keys to make selections.  Ghaaaa...

  • bluejauntebluejaunte Posts: 1,990
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

  • namffuaknamffuak Posts: 4,409

    Back in the day, as a sysadmin, I did set the system requirements for passwords to by 6 character minimum, with at least one digit and one special character. I didn't have an option for both upper and lower case, but I did try the built-in dictionary check - and gave up on it after arguing about the implementation with IBM. As implemented, reallywas in the dictionary and not valid. really1, real1y, and 1really were NOT in the dictionary and perfectly valid.

    I've never been a fan of 'change the password every n days' - this just leads to bad passwords or post-it notes with passwords on them. And as near as I can tell, the theory is that you'll have changed your password between the time the site was hacked and the bad guys tried to use your credentials.

     

  • ChoholeChohole Posts: 33,604
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I go to several sites that won't allow a paste in the password field, 

  • WendyLuvsCatzWendyLuvsCatz Posts: 40,101

    Yeah, and just try typing in hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY on an input screen where you have to keep switching back and forth between letters/uppers/numbers/specials on different input screens where you have to use arrow keys to make selections.  Ghaaaa...

    i clicked on that and it opened compose in gmail for me to send it a letter devil

  • TSasha SmithTSasha Smith Posts: 27,267

    Yeah, and just try typing in hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY on an input screen where you have to keep switching back and forth between letters/uppers/numbers/specials on different input screens where you have to use arrow keys to make selections.  Ghaaaa...

    i clicked on that and it opened compose in gmail for me to send it a letter devil

    That is due to its at sign which there are two of them in that fake password.  It is not a real email address but probably not a real password.  I hope it is not one.

  • marblemarble Posts: 7,500
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I use LastPass which automatically pastes my credentials and several sites don't allow it.

  • bluejauntebluejaunte Posts: 1,990

    So send them a mail and let them know about their backwards security.

  • TSasha SmithTSasha Smith Posts: 27,267
    marble said:
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I use LastPass which automatically pastes my credentials and several sites don't allow it.

    I use LastPass too.  I recommend LastPass.

  • WonderlandWonderland Posts: 7,133

    I posted this in a separate thread, but just wanted to make sure people saw this. There is a huge Indian hacker group going after PayPal users and if you call PayPal, they hijack your number and call back pretending to be PayPal! 

    What I wrote: 

    There are major hackers out there who can get into your account and disable your password (although you can reset it.) I called PayPal originally, for another issue entirely and the phone call was cut off and I was immediately called back from an Indian man claiming to be from PayPal. He knew my email, home address, PayPal balance, everything. He said my account was red flagged, put me on hold, then claimed I had been hacked in small amounts over the last 3 months adding up to over $645! I asked why I didn’t see this reflected in my account? He said they were micro transactions only visible on his side, which already seemed suspicious.He sent me a verification code which I typed back to him. Big mistake.Then I tried to log into my PayPal account, but couldn’t. I quickly changed my password while still on the phone with the scammer trying to convince me I had to put money in a Google Play Card to expedite resolving the hacker issue. By then I realized HE was the hacker and heard a bunch of other Indians in the background talking about Google Play cards. I quickly called PayPal again, got an American, told the whole story and they said they were aware of the situation and trying to stop it. My account had in fact been hacked into by somone somewhere in India. Now I have to wipe my phone because I don’t know what that code did... Concerned about all my devices actually. So be very careful with your PayPal accounts and change your password often! Do not accept any phone calls claiming they are PayPal, even if you just called PayPal. They are hijacking phone numbers. End of public service announcement...

     

  • TSasha SmithTSasha Smith Posts: 27,267

    How many ways can a password be done?  YummyCake  or yummycake or Yummycake or yummyCake or NotInMyDietCake

  • Lissa_xyzLissa_xyz Posts: 6,116
    edited April 2019
    marble said:
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I use LastPass which automatically pastes my credentials and several sites don't allow it.

    I use LastPass too.  I recommend LastPass.

    I ditched LastPass ages ago as it was purchased by LogMeIn, the same people who run the Hamachi VPN client, which has a history of getting breached.
    I switched to Enpass. It's a local password manager with autofill/pw generation capabilities and I sync the database between my devices.

    The safest though I've heard is another offline one, which is also open source, which allows it's code to be scrutinized.  It's called KeePass.

    Post edited by Lissa_xyz on
  • edited April 2019
    Pixolygon said:
    marble said:
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I use LastPass which automatically pastes my credentials and several sites don't allow it.

    I use LastPass too.  I recommend LastPass.

    I ditched LastPass ages ago as it was purchased by LogMeIn, the same people who run the Hamachi VPN client, which has a history of getting breached.
    I switched to Enpass. It's a local password manager with autofill/pw generation capabilities and I sync the database between my devices.

    The safest though I've heard is another offline one, which is also open source, which allows it's code to be scrutinized.  It's called KeePass.

    Actually, the safest method is making up your own passwords from random digits, and writing them down on a piece of paper.  I know, what a pain to actually type in characters!  Archaic, I understand, but anything you use software for, and then sync between devices is vulnerable unless it's generating completely random characters..

    Post edited by davidwski_16294691f0 on
  • Lissa_xyzLissa_xyz Posts: 6,116
    edited April 2019
    Pixolygon said:
    marble said:
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I use LastPass which automatically pastes my credentials and several sites don't allow it.

    I use LastPass too.  I recommend LastPass.

    I ditched LastPass ages ago as it was purchased by LogMeIn, the same people who run the Hamachi VPN client, which has a history of getting breached.
    I switched to Enpass. It's a local password manager with autofill/pw generation capabilities and I sync the database between my devices.

    The safest though I've heard is another offline one, which is also open source, which allows it's code to be scrutinized.  It's called KeePass.

    Actually, the safest method is making up your own passwords from random digits, and writing them down on a piece of paper.  I know, what a pain to actually type in characters!  Archaic, I understand, but anything you use software for, and then sync between devices is vulnerable unless it's generating completely random characters..

    From what I've read, the random characters isn't really the problem, it's the length of the password. The longer it is, the longer it takes to crack. Once you're in the 30-35+ character range I believe, you're looking at years upon years of cracking. You could use full words, but the trick is to make each word have nothing to do with each other. For instance, donkeycrackerswimmingtriangle is better than iliketoeatapplepie, but you still want to throw in random capitals, numbers, and symbols.

    Post edited by Lissa_xyz on
  • TaozTaoz Posts: 10,260
    marble said:

    There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out:  hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.

    Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.

    I haven't had any problems with pasting either, and I'm on a lot of sites too.

    I also use Zemana Antilogger to avoid anyone picking up anything I type. 

Sign In or Register to comment.