What's new
By:

FS Account hacked, be smart

For Sale
I completely agree with the F&F angle to protect the seller... that being said, if I pay via F&F I am ready to lose that money, every single time, period.

I also would not send F&F to someone who is qustionable or a deal that is too good to be true. Battle Garegga for $500? Battle Bakraid for $500? Come on...

Still, I'm not trying to rub salt in wounds here, these are fellow hobbyist that got ripped off. I feel anger for them.

I'm just vocalizing this for the future. Let's limit the chances of this happening again.
 
astro_zombie138 said:
This is probably stupid and way too complicated but would there be a way to introduce a system where the forum could verify paypal accounts and associate that account with users?
Click to expand...

I think a quick and easy way to get this started is through the marketplace and feedback threads. Members already document and describe transactions on the forum. Let's start making a habit of posting the Paypal/Venmo/Zelle/etc account usernames we used for our transactions. I think both the buyer and seller should make posts on their sales and feedback threads with this information.

With both buyer and seller documenting transaction usernames, it might decrease the chance of losing the documented information or "poisoning the well" if one compromised account tampers with their old posts or begins to make false posts. If a member indicates a new transaction username, they buyer at least has a chance to identify the change and either back out or roll the dice with the transaction.

There could be potential issues if multiple accounts are compromised and start poisoning the well with false info. Additionally, new accounts created by scammers might do the same. Finally, established members might get disgruntled and post false information.

Despite the potential flaws with this method, members could at least search marketplace and feedback threads to make a more informed decision about their transactions.

If people think this is a good idea, maybe the mods can add this as a suggestion/recommendation in the marketplace rules post?
 
Mageta the Lion said:
Just for protocol, a vpn does actual jack shit in cases like this. Your traffic is basically always securely encrypted with httpS (unless you intentionally don't use it) so the owner of the WiFi has no clue what Data you send or receive from a server. All you’re doing by using a vpn in those cases is hiding with whom you communicate. Essentially the only time when https is not enough is when:

A. Your device has been compromised

or

B. It isn’t your device to begin with (don’t use work devices for private stuff, they can and doe break https security)

But in both cases using a vpn won’t save you either and honestly your fighting a lost battle regarding security then anyway.

VPN’s have use cases, for example getting past Geo-blocking or hiding your activity from the State and other big players (regarding with “whom” you communicate) but the so called security they try to sell you in those countless YouTube ads is total bogus.
Click to expand...
Not to get too off topic, but you can still get plenty of information about what a person is doing just by looking at their web traffic, even if you aren't decrypting it. And unless you're using DNS over HTTPS, again, plenty of info to be gathered there, too.

And although you may be connected via HTTPS, sites may still serve you part of the page via HTTP.

Anyway, nobody is saying VPN is the end all be all, but it's not a bad idea when using public wifi.
 
meybarra said:
I think a quick and easy way to get this started is through the marketplace and feedback threads. Members already document and describe transactions on the forum. Let's start making a habit of posting the Paypal/Venmo/Zelle/etc account usernames we used for our transactions. I think both the buyer and seller should make posts on their sales and feedback threads with this information.

With both buyer and seller documenting transaction usernames, it might decrease the chance of losing the documented information or "poisoning the well" if one compromised account tampers with their old posts or begins to make false posts. If a member indicates a new transaction username, they buyer at least has a chance to identify the change and either back out or roll the dice with the transaction.

There could be potential issues if multiple accounts are compromised and start poisoning the well with false info. Additionally, new accounts created by scammers might do the same. Finally, established members might get disgruntled and post false information.

Despite the potential flaws with this method, members could at least search marketplace and feedback threads to make a more informed decision about their transactions.

If people think this is a good idea, maybe the mods can add this as a suggestion/recommendation in the marketplace rules post?
Click to expand...
I think you're on the same page as me but I don't think it would be good for anyone to access that information other than the mods. What I was suggesting is more like the mods have a secret database and you can type in a user and what paypal account is given to you for payment and it checks if they are the same. Just an association with no real info accessible to the users here.

If you submit to the database you get a verified "check, gold star, barcode tattoo "whatever on your profile.
 
Also worth noting not to share any sensitive information over DM like bank details, addresses, phone number, dick pics, cave serial numbers, etc.

The forum has disabled the ability for users to delete or edit info on private messages. An oversight which could give hackers an extra way to abuse compromised accounts, by gathering intel from conversation history and possibly extra points of entry to other places, opening the floodgates for more severe identity theft.

For people you already know here, it’s wise to build relationships with them over email, IM, social media, etc. — All my closest friends on here we communicate via other means already.

Anyhows, food for thought.
 
djsheep said:
Also worth noting not to share any sensitive information over DM like bank details, addresses, phone number, dick pics, cave serial numbers, etc.

The forum has disabled the ability for users to delete or edit info on private messages. An oversight which could give hackers an extra way to abuse compromised accounts, by gathering intel from conversation history and possibly extra points of entry to other places, opening the floodgates for more severe identity theft.

For people you already know here, it’s wise to build relationships with them over email, IM, social media, etc. — All my closest friends on here we communicate via other means already.

Anyhows, food for thought.
Click to expand...
If you use Paypal you can message people you've done transactions with. Could be a viable way to share shipping info instead of through the forum. Shoot that's exactly how I got a hold of Darksoft when shit hit the fan.
 
Also wanted to say that I have dealt with both @astro_zombie138 and @statix138 numerous times. This unfortunate incident shouldn’t be a gateway to lose support and trust in either of those two going forward.

It’s just a very unfortunate wake up call / general internetz security PSA… I just wanted to give my strongest feedbacks for them both. It could have happened to any of us really. Give those guys sales threads some love today if you’re hunting their wares.
 
I don't think you guys should overindex on the misfits icons. It is highly unlikely they both came from the same source.

Regarding reasons for using F&F... 100% agree on trying to avoid issues with dishonest buyers and issues where something stops working in transit. This is the main reason I use it; I'm personally less concerned about tax implications (I don't mind paying taxes, and you're only paying on the gains anyway, of which I personally tend to make very little of when I move on from things).

Lastly, 100% agree w/ sheep on private info in PM... take it to email whenever possible, but bear in mind that email is also questionably insecure (but perhaps moreso than the typical forum db). This is not the fault of the admins, but rather the authors/maintainers of the forum software. And a big -1 to posting people's PayPal info in public threads - please don't do this. Perhaps paypal.me URLs are fine, provided the other party agrees, but big no on email addresses.

Relatedly, would there be any possibility of allowing users to delete PM convos? (@Darksoft?). I'd personally prefer not to have a bunch of PII just lingering in people's inboxes if possible.
 
Well currently you can leave a conversation and it will disappear from your box but won't be deleted unless all parties leave the convo.
 
Arthrimus said:
@astro_zombie138 @statix138, you guys wouldn't happen to be on a Misfits themed fan website that got hacked would you? I can't help but notice you both have Crimson Ghost profile pics and 138 in your usernames.
Click to expand...
Personally, I am not a part of any themed fan club or visit any themed fan site or anything like that.
 
kazuo said:
...

Regarding reasons for using F&F... 100% agree on trying to avoid issues with dishonest buyers and issues where something stops working in transit. This is the main reason I use it; I'm personally less concerned about tax implications (I don't mind paying taxes, and you're only paying on the gains anyway, of which I personally tend to make very little of when I move on from things).
...
Click to expand...
This is true regarding the capital gains, the problem is that if you do not have a disclosure filed with the IRS substantiating your acquisition cost (i.e., the price you paid to initially acquire the asset) then you could be deemed to have acquired it for zero. Further capital gains have different liabilities depending on how long the asset was held (less than 1 year vs. longer). So for instance, if you bought a board for 600 initially and sold that same board later that same year for 1,000 you have a short term capital gain of 400, and would be taxed at your federal income tax rate, which is higher than the long-term capital gains tax rate. If the IRS disregards your acquisition cost by not disclosing the original acquisition then you have a short term gain of 1,000 instead of 400. I guess the IRS will look for Form 8949 filings for each time you buy a new board? I honestly don't know, but I see why folks are going to pivot to G&S or some other payment system to avoid this compliance.

As an aside, it sucks that you guys were targeted in a scam in this community. Even our little pocket of the world isnt exempt from assholes it seems.
 
Ive changed passwords and added 2 point verification. Not that i can be bothered to spend a whole day finding and packaging stuff to sell. Dont mind making someones day by selling them something they been looking for a while though. But some very good points said in this thread. 👏
 
Would it make sense (and be technically possible) to show some type of badge for users using 2-step authentication? Not that it'll 100% solve the problem, but will give a bit of extra reassurance that you're talking to the person you're supposed to be talking to?
 
gamezer0 said:
Would it make sense (and be technically possible) to show some type of badge for users using 2-step authentication? Not that it'll 100% solve the problem, but will give a bit of extra reassurance that you're talking to the person you're supposed to be talking to?
Click to expand...
unfortunately this would also lead to providing an indicator to hackers as to who is NOT using it and would be good targets for compromise.
 
Plymelk said:
This is true regarding the capital gains, the problem is that if you do not have a disclosure filed with the IRS substantiating your acquisition cost (i.e., the price you paid to initially acquire the asset) then you could be deemed to have acquired it for zero. Further capital gains have different liabilities depending on how long the asset was held (less than 1 year vs. longer). So for instance, if you bought a board for 600 initially and sold that same board later that same year for 1,000 you have a short term capital gain of 400, and would be taxed at your federal income tax rate, which is higher than the long-term capital gains tax rate. If the IRS disregards your acquisition cost by not disclosing the original acquisition then you have a short term gain of 1,000 instead of 400. I guess the IRS will look for Form 8949 filings for each time you buy a new board? I honestly don't know, but I see why folks are going to pivot to G&S or some other payment system to avoid this compliance.

As an aside, it sucks that you guys were targeted in a scam in this community. Even our little pocket of the world isnt exempt from assholes it seems.
Click to expand...
I don't know about everyone else, but I most certainly don't have the receipts for game stuff I bought 10+ years ago lol.

This kind of situation will make taxes fun:
Say my mom sells a now in style again dinner table set on Craigslist for $650 that she bought in 1980 for an original price of $500. Does she have to adjust the original 1980 $500 price to 2024's money ($1849)? I mean, she most certainly doesn't make an actual $150 profit on it. Does the IRS expect her to keep the receipt for 44 years? The whole thing is a mess and $600 is much too low considering how much everything costs these days.

If I sell anything locally when I go back home I'm going back to the good old cash deal in the parking lot. If it's something of value, many police departments have an area at their station for just this these days. If they can't meet me there then I'd probably not want to deal with them anyway.
 
Last edited:
To all: @ArcSys101 PM me Thursday and i bought him an object (A yoke and Rings). The same day the accounts were hacked...

I think i was scammed too... Since i paid, no more answer at my PM for the tracking number.

Hope he is just busy.
Be careful
 
Enskynet said:
To all: @ArcSys101 PM me Thursday and i bought him an object (A yoke and Rings). The same day the accounts were hacked...

I think i was scammed too... Since i paid, no more answer at my PM for the tracking number.

Hope he is just busy.
Be careful
Click to expand...
If you pm me, give me the paypal address and I can check it against one I paid to him a year or so ago.
 
You must log in or register to reply here.
Back
Top