Been robbed

rds

@haitch I disagree !!

I know you have trouble with Adam, but receiving free burst and even giving 3 burst per transaction sent helps everyone, those that receive rain, the pools, and even find problems with the servers with the many transactions.

Paying court ? People are receiving FREE burst FFS!!

Millions sent!! Millions!!

Stressing the system uncovers weakness hopefully resulting in a more robust Burst network. I don't believe there is anything malicious about what the rain people are doing.

haitch

@rds Abusing the system allows their pool to win a lot more blocks than they would have under normal operating situations. They're abusing the system to benefit from the system

rds

@haitch , I defer to your higher knowledge of the big picture here. Hopefully it will not break the system, only bend it.

vExact

Problem with all this is that people usually pay 1 Burst per transaction, now when the rain comes the network gives it the priority as the fees paid are usually 2, 5, 6, etc.. so someone doing a normal transaction, buying or selling asset, etc. paying only 1 Burst will have to wait quite a time until the network gets eased...

crutsy

@vExact I would hate to be a new adopter of Burst and wondering why it takes so long to set my reward assignment right now

vExact

@crutsy right now I have been waiting for an eternity to receive a payment from poloniex, buy assets and also even to transfer from one account to another... and is not a problem of online wallets as I am using my local wallet. I don't know what's actually going on... But in the crypto world if you have to wait two hours to transfer or receive some coins I don't think we going too far.

rds

@haitch,

As a free marketer, I would say if you want your transaction to go through, then you need to pay a higher fee. That's how Bitcoin works. You can add the extra fee amount from the rain you receive on a periodic basis. Higher fees incentivize miners, create a larger network, provide a more decentralized system.

Lexicon

hi guys,

whats going on in here? its quite off topic to be talking about the rains of free burst in the thread i got robbed of all my burst.

anyway thanks @Rorepme the surfbar was a utility where users could leave a browser window open that visited adds and generated burst however some of these adds installed backdoor's and rootkits that caused my theft

vExact

@Lexicon apologies.

westcity

@Lexicon I just sent You a postcard from Ireland... :)

Lexicon

@westcity thanks for the postcard buddy i just noticed it!

yeah you could say my jaw dropped as well. just wish i could break the guys jaw who did this

BSquared

Hi gang,

Sorry, old thread but;
I'm BURST-EYZ9-2NHP-VN4T-72RU4 who was one of the accounts robbed.

I just noticed recently that it was emptied of BURST and an asset taken in February. I googled the thief's BURST address of BURST-9HTR-WSSF-XY9H-7HUNW and found this thread.

I figured I could fill in some info at least from another person who got hacked if it helps anyone in the future.
His take off of me was only 37'683 Burst but he also got my 1,687 shares of ByteEnt asset which honestly was my best performing asset since I bought into it in its opening days way back when. It was worth roughly 60,000 Burst when he liquidated it but it was generating about 200 Burst a month for me which was a nice little stream working over the span of two plus years. He didn't mess with old or nonperforming assets I had so this makes me believe he is knowledgeable of BURST wallets and workings. So in all I lost about 100,000 BURST.

I believe this was either brute force or from a pool long ago when i mined with this account. I had a fairly simple password as this was the first BURST account I opened and used exclusively when I discovered BURST and solo mined. I mined on at least five different pools after solo mining for a few months. I realized eventually that BURST was going to be larger and that I needed an account with a complex password so I transferred most all my BURST to my new holding account. What I didn't do or know at the time is that I could transfer my assets over also.

Moral of the story, If you don't have an account with a complex password please make a new account with one and transfer your BURST AND ASSETS over now. I was able to save the majority of "my bag" even though I got hacked in my nostalgic original BURST account with lots of mined blocks back in the day. You can rest easier!

Keep up the great work community, Love where BURST was and IS going.......

Zap6uzZ

since 26th April, like 2014, wallet lighter personal effects fleeced im like wtf same person came and went.

Burstde

Please lets think about using a second means to protect our wallets. I like the android wallet 4 pin or the burstcasino 2fa and that I can turn it off and on

Zap6uzZ

they didnt get it this time :)

gpedro

@BSquared If your passphrase is very weak its is most likely than you were bruteforced yes, although what happened with many persons like lexicon, was that there was a surfbar and one of the ads that were in there during a phase of the time infected their PC with a keylogger wich then the attacker used to clean their accounts... This ad in the surfbar happened somewhere in December 2016... Since that the surfbar was putted down in order to not make anyone else get infected with this kind of things and it was shown at that time how to solve this issue for the ones that got infected. I don't remember exactly the name of the folder but it was a key logger that could be found inside the %AppData% Folder and that was recording and sharing every key stroke you pressed...

But if you have a non secure passphrase it should have been brute-force and i recommend you and everyone else to create a passphrase with at least 12 words in it... ;D

Zap6uzZ

precautions i shall setup a combined Active system and mark the old with account names like donations welcome please do not spam. Oh and with the keys safely off premises now, new accounts were made with @luxe app. Unique to me. Anyone can follow my twitter account btw :)

yohanip

I really do sorry for your lost Lexicon, i know that you are also a programer, and have much better skill, experience, and knowleedge than me, this really made me think about the security of my own wallet and passphrase

regarding the pasphrase, have you use it anywhere outside your safe environment?
have you made any connection to a public wifi?
did you store the pasphrase on your smartphone?
which OS are you using to login to your main account?

as you said earlier, i think it would take centuries to bruteforce that 222 characters..

can we trace the ip of that stolen funds?
can we involve the authority/police/cyber crime investigators into this?

let's add another functionality for Burst, let's called it "safe", the funds/tokens/assets inside this safe is locked for minimal n blocks, which could not be spent, i think a smart contract should be adequate here.

Lexicon

@BSquared said in Been robbed:

Hi gang,

Sorry, old thread but;
I'm BURST-EYZ9-2NHP-VN4T-72RU4 who was one of the accounts robbed.

I just noticed recently that it was emptied of BURST and an asset taken in February. I googled the thief's BURST address of BURST-9HTR-WSSF-XY9H-7HUNW and found this thread.

I figured I could fill in some info at least from another person who got hacked if it helps anyone in the future.
His take off of me was only 37'683 Burst but he also got my 1,687 shares of ByteEnt asset which honestly was my best performing asset since I bought into it in its opening days way back when. It was worth roughly 60,000 Burst when he liquidated it but it was generating about 200 Burst a month for me which was a nice little stream working over the span of two plus years. He didn't mess with old or nonperforming assets I had so this makes me believe he is knowledgeable of BURST wallets and workings. So in all I lost about 100,000 BURST.

I believe this was either brute force or from a pool long ago when i mined with this account. I had a fairly simple password as this was the first BURST account I opened and used exclusively when I discovered BURST and solo mined. I mined on at least five different pools after solo mining for a few months. I realized eventually that BURST was going to be larger and that I needed an account with a complex password so I transferred most all my BURST to my new holding account. What I didn't do or know at the time is that I could transfer my assets over also.

Moral of the story, If you don't have an account with a complex password please make a new account with one and transfer your BURST AND ASSETS over now. I was able to save the majority of "my bag" even though I got hacked in my nostalgic original BURST account with lots of mined blocks back in the day. You can rest easier!

Keep up the great work community, Love where BURST was and IS going.......

@yohanip said in Been robbed:

I really do sorry for your lost Lexicon, i know that you are also a programer, and have much better skill, experience, and knowleedge than me, this really made me think about the security of my own wallet and passphrase

regarding the pasphrase, have you use it anywhere outside your safe environment?
have you made any connection to a public wifi?
did you store the pasphrase on your smartphone?
which OS are you using to login to your main account?

as you said earlier, i think it would take centuries to bruteforce that 222 characters..

can we trace the ip of that stolen funds?
can we involve the authority/police/cyber crime investigators into this?

let's add another functionality for Burst, let's called it "safe", the funds/tokens/assets inside this safe is locked for minimal n blocks, which could not be spent, i think a smart contract should be adequate here.

mine was defo not a bruteforce. i identified malware on my computer that sniffed my password from my clipboard.

the malware also recorded all keystrokes what tabs i was on at the time and what applications i switched to.

now if he got me with malware makes me wonder how he got you considering the circumstances.

it recorded this data for almost a full month. and i got infected the day i got paid out from the surf bar. which i had messages from members prior warning about the fact it can install malware. i even emailed the company that did the surf bar a few months prior to address the issues where they said it was removed.

obviously this wasnt the case as i got infected after they said they removed the ads with the malicious content

burst is decentralised as with most crypto and doesnt store any sort of ip information regarding wallet accounts or who accesses what wallet from where. its sudo anonymous.

the only way you can get these theifs is by getting them when they cash out at an exchange.

but looking at the account its still sat there with my 5 burst coins (some in assets) and this happened in feb.

BSquared

I honestly had not even logged into this wallet for nearly a year and a half. So my thoughts are brute force in the case of my wallet.

But the more interesting question is how with all the different methods of hacking wallet passwords that multiple wallets were hit near the same time and then no other activity. Kind of a one moment in time hack fest and now their wallet just sits there high on the rich list...