Delete my account
-
Hi,
I was a bit spooked by my account details being available for hackers to buy.
I know this stuff happens.
However how do I completely delete this account and get it removed from your user database.
If there are any admins out there could you do this and confirm to me that this is done.
I have still a vested interest in FTC but I don’t want my details on your database - please remove them.
Sorry - no offence.
-
Where did you see them available to buy?
-
The only personal info on your account is your email address, I can lock your account and change the email addy, but deleting accounts causes issues with orphan posts and this is not normally done.
If you want me to lock the account and change any personal info, please let me know.
Regards,
Stefan -
On some Runeschape-forum.
/edit I just posted fully false info to I deleted it.
-
I don’t want to start invoking data protection act on people but you are by not deleting my account breaking the ‘not kept for longer than is necessary’ part of the act.
Look admin and fellow feathercoiners - your a nice bunch - and I don’t want to kick up a massive fuss - but the hack was not acceptable and the ‘oh these things happen’ is not acceptable either - from my perspective - this is the first time I have had details leaked like this - even an e-mail address is not acceptable - who knows which breed of weirdo is going to have access - couple this with the map info and you can pretty much locate anyone - it’s not hard.
If one of the admin’s could update the e-mail address and change my username to something else and then lock the account - then I would be happy.
If I can’t get in and my posts have a different username then I will know that it has worked.
-
[quote name=“Pryderi” post=“54308” timestamp=“1390485187”]
On some Runeschape-forum. Although Bushstar made the file public already before he offered this ‘‘FTC-database’’ for sale.
[/quote]Wait, run this by me again? I’m not following.
Edit: Well I found it: https://www.bugabuse.net/98-hacking-resources/51140-selling-feathercoin-forum-database-15-6k-members.html
But what’s this your saying about Bushstar making the file public?
-
[quote name=“Kevlar” post=“54328” timestamp=“1390488612”]
[quote author=Pryderi link=topic=7136.msg54308#msg54308 date=1390485187]
On some Runeschape-forum. Although Bushstar made the file public already before he offered this ‘‘FTC-database’’ for sale.
[/quote]Wait, run this by me again? I’m not following.
Edit: Well I found it: https://www.bugabuse.net/98-hacking-resources/51140-selling-feathercoin-forum-database-15-6k-members.html
But what’s this your saying about Bushstar making the file public?
[/quote]I was totally wrong, was talking about the index.tar of the SMF php. Sorry!
-
By all means change your details including password but it seems a little late to have your account deleted as the attackers already have the DB. We are now running vanilla SMF which is as secure as it can get.
Soon after the attack I put out the SMF files which included the attack files as people wanted to analyse the attack. They got some pretty scary tools on the server which really meant that we needed to move server entirely.
Looking forward to a more secure forum Invision comes highly recommended. It seems to be actively developed and has excellent documentation which is a good sign. I’m adding this to ones to consider. I was pondering vBulletin but it has not had the best security track record.
-
[quote name=“FeatherWeightBoxer” post=“54319” timestamp=“1390486206”]
I don’t want to start invoking data protection act on people but you are by not deleting my account breaking the ‘not kept for longer than is necessary’ part of the act.
If one of the admin’s could update the e-mail address and change my username to something else and then lock the account - then I would be happy.
If I can’t get in and my posts have a different username then I will know that it has worked.
[/quote]If you just want it inaccessible:
You can change your email yourself [email protected]. for example [email protected]
You can also open a text editor, bang the keyboard like this wiujdhfe8q74ghlqjuwegflajdfh, paste that as your password, and never save that file.If you want your account deleted:
I’m sure someone can do that for you.
BUT IT WILL NOT SOLVE YOUR PROBLEM.
The info is already out.DELETING YOUR ACCOUNT WILL NOT HELP YOU.
Your best bet is to use a new account.
-
[quote name=“Bushstar” post=“54346” timestamp=“1390491903”]
By all means change your details including password but it seems a little late to have your account deleted as the attackers already have the DB. We are now running vanilla SMF which is as secure as it can get.Soon after the attack I put out the SMF files which included the attack files as people wanted to analyse the attack. They got some pretty scary tools on the server which really meant that we needed to move server entirely.
Looking forward to a more secure forum Invision comes highly recommended. It seems to be actively developed and has excellent documentation which is a good sign. I’m adding this to ones to consider. I was pondering vBulletin but it has not had the best security track record.
[/quote]Vanillaforums looks hot.
-
do they have our emails?
-
yes I guess lots of people have our email addresses and not just from this attack.
But an email address the public part of your email account anyway so who cares who has it.I guess its the password part you should be worried about and my guess / hope is that the DB never really held the password it simply held a hash of the password which can be compared to a hash of what you type into the password box. (I could be wrong but this is standard practice)
-
[quote name=“kris_davison” post=“55658” timestamp=“1390916836”]
yes I guess lots of people have our email addresses and not just from this attack.
But an email address the public part of your email account anyway so who cares who has it.[b]I guess its the password part you should be worried about[/b] and my guess / hope is that the DB never really held the password it simply held a hash of the password which can be compared to a hash of what you type into the password box. (I could be wrong but this is standard practice)
[/quote]well in my case the password was unique to this forum (don’t use it anywhere else).
I don’t like them having my email because it can help identify me, I prefer to remain anonymous, and it’s getting harder all the time. -
[quote name=“mharrison” post=“55676” timestamp=“1390922010”]
The issue with the e-mail addresses are they know that you have an interest in Crypto Currency. They could send you phishing e-mails that you are more likely to fall victim for.
[/quote]All someone needs to do is come to the forum and click on the email button next to your name. There, they now have your [email protected] and the knowledge that your into crypto’s because they found it on a crypto forum…
-
[quote name=“Calem” post=“56180” timestamp=“1391133853”]
[quote author=mharrison link=topic=7136.msg55676#msg55676 date=1390922010]
The issue with the e-mail addresses are they know that you have an interest in Crypto Currency. They could send you phishing e-mails that you are more likely to fall victim for.
[/quote]All someone needs to do is come to the forum and click on the email button next to your name. There, they now have your [email protected] and the knowledge that your into crypto’s because they found it on a crypto forum…
[/quote]I clicked on the email icon by your name and I still don’t know your email address? Am I missing something?
~//~ -
Time for everyone to move to bitmessage ;)
I like the bitmessage.ch Mail Gateway also.
