FORUM NOTICE Check If Your Forum Password Has Been Exposed

[Forum Boss]

UPDATE and CHANGE Your Password NOW if you use it ANYWHERE else.

Check your Password NOW! See: https://nordpass.com/secure-password/
That site can show if the password has been breached.

We checked the password for an account hacked last night, and NordPass reported that password had been exposed in 33 data breaches!!

People please read this carefully.

Last night a hacker got into an older account with a breached password used on multiple sites.

The hacker then made a fake Garmin Chron advert and it appears that one viewer paid via PayPal Friends and Family and lost $400.00.

People -- Understand that with a breached password (in this case a PW shared on multiple other Forums) -- an account can be hacked in seconds.

NEVER EVER Pay with PayPal or Venmo Friends and Family!

How many times do we have to tell people this. F&F = Fraud and Fakery!! Got that?
You have NO protection, and any seller using F&F or Zelle is breaking Forum Rules.

NEVER EVER Do a Deal without Voice Confirmation and Custom Photo.

Another member was hacked two weeks ago. His password was his dog's 5-letter first name plus three sequential numbers. This is what Nord reported for that password. It had been breached 276 times:

 

[Rocketvapor]

Pretty cool site.
Hope using it doesn't leak.
Strong/4 months/no breaches

 

[Forum Boss]

Again... if your password for this Forum is used on any other site you should change your password now.

The scammers look at multiple forums using AI. If they find a password on another forum or content website they will attempt to use that password here.

For your security, NEVER use a shared password here.

For Buyers... you must protect yourself! ALWAYS insist on a voice call, custom photos and never ever use Zelle, Venmo F&F, PayPal F&F, or CashApp.

 

[C.E.Smith043]

What does it take to set up a secondary authentication? Something similar to how my bank requires me to send back a code that it sends me via text message.

 

[Forum Boss]

To set up two-step verification go to your profile page, click on "Password and Security". On the window that opens, upper left, you can enable two factor authentication.

 

[Bc'z]

UPDATE and CHANGE Your Password NOW if you use it ANYWHERE else.

Check your Password NOW! See: https://nordpass.com/secure-password/
That site can show if the password has been breached.

We checked the password for an account hacked last night, and NordPass reported that password had been exposed in 33 data breaches!!

People please read this carefully.

Last night a hacker got into an older account with a breached password used on multiple sites.

The hacker then made a fake Garmin Chron advert and it appears that one viewer paid via PayPal Friends and Family and lost $400.00.

People -- Understand that with a breached password (in this case a PW shared on multiple other Forums) -- an account can be hacked in seconds.

NEVER EVER Pay with PayPal or Venmo Friends and Family!

How many times do we have to tell people this. F&F -- Fraud and Fakery!! Got that?
You have NO protection, and any seller using F&F or Zelle is breaking Forum Rules.

NEVER EVER Do a Deal without Voice Confirmation and Custom Photo.

Another member was hacked two weeks ago. His password was his dog's 5-letter first name plus three sequential numbers. This is what Nord reported for that password. It had been breached 276 times:

View attachment 1636326

Did the buyer of the chronograph make a phone call, inquiring minds want to know???

I've said it before, folks need to use thier head for something other than keeping thier ears evenly spaced when making any purchases.

 

[Forum Boss]

No the buyer did NOT make a voice phone call and did not request custom photos.

 

[Bc'z]

No the buyer did NOT make a voice phone call and did not request custom photos.

Then it's his own damn fault!!
Sorry to sound so harsh and less than sympathetic, but all the warnings are posted everywhere on this site.

Scammers are relentless and it's entirely up to individuals to protect themselves.
If a deal sounds to good to be true, it's probably cuz it is.

 

[Just Dave]

my passwords so darn secure, even I dont remember it ,, :-(
If your on here even once in awhile, ya gotta know any instant money transfer service is bad news.
It's the same deal when I hear of local people getting scammed out of 10''s of thousands of dollars when they were asked to send the number off the back of gift cards to "help" a stranger over the phone secure their money from fraud,
I mean c'mon.

 

[Blind Squirrel]

Thanks for the tip, Boss. Updated mine.

 

[dryhumor]

Complicated passwords aren’t hard to come up with. Nor are they hard to remember.

As long as you write them down and keep them safe.

 

[tred1956]

Not being computer savvy, I pay for Norton security. Part of my security plan is a Password manager. My security VAULT. My vault password is the only one I have to remember and is UNIQUE. This is the only way I can keep up with all my different passwords. It rates and remembers every password I enter. The password I use here is rated as follows

Strength: Strong

Time needed to crack the password
467 thousand years

Costs me around $150 a year but sure does help give me peace of mind. Not saying this is for everyone but it works for this old fat bald man. LOL
Safe shooting and safe SURFING
Doug

 

[hoz53]

Not being computer savvy, I pay for Norton security. Part of my security plan is a Password manager. My security VAULT. My vault password is the only one I have to remember and is UNIQUE. This is the only way I can keep up with all my different passwords. It rates and remembers every password I enter. The password I use here is rated as follows

Strength: Strong

Time needed to crack the password
467 thousand years

Costs me around $150 a year but sure does help give me peace of mind. Not saying this is for everyone but it works for this old fat bald man. LOL
Safe shooting and safe SURFING
Doug

i have all my passwords in a journal book. i put tabs on many of the pages — nobody but me has ever seen this book. i would never use one of the password vaults because if someone hacks that they have all your passwords.

 

[hoz53]

No the buyer did NOT make a voice phone call and did not request custom photos.

every one of the sites i need to create a user name and password for i use different usernames and passwords. i keep them in a book nobody has seen but me. no password vaults that could be hacked for me. its a little more effort but worth it. even at this i have had a few charges on my cards i didnt make. what i dont like these days is some browsers store your info without your permission. getting very hard these days to keep anything private.

 

[Ranger188]

I seen that exact add, thought it looked fishy at the time.
Price was too good to be true.
$400 for a slightly used Garmin is way under priced.
They are getting smarter. A cheaper item and folks don't check like they would
for a $2000 scope.
Don't EVER take an add for granted.
If someone wants a phone call, don't take it to mean your the problem.
Cover your as$

FORUM BOSS: And for a Custom Photo -- Demand a physical object touching and a completely different location. The scammers are using AI to create fake "paper notes".

 

[Raydee]

I just saw a suspicious Garmin for around the same price show up in the air gun forum I am in. What are the chances it’s the same guy?

 

[muddy72]

I just saw a suspicious Garmin for around the same price show up in the air gun forum I am in. What are the chances it’s the same guy?

Probably a good chance! Hit all the relevant forums, make their money and disappear!

 

[B y r o n]

I find it odd that they say your password has been exposed XXX times but they don't supply any documentation as to which sites or IP address are involved. So what is the possibility that someone else has used the same password on sites you've never been to or from IP's that don't relate back to you?

 

[rijndael]

I find it odd that they say your password has been exposed XXX times but they don't supply any documentation as to which sites or IP address are involved. So what is the possibility that someone else has used the same password on sites you've never been to or from IP's that don't relate back to you?

They're just showing you if that password has been exposed before, not necessarily tied to you. These hacked passwords lists are used as seed files for a brute force attacks.

FWIW: Nordpass is just acting like a middleman for the search.




Use this instead:

Have I Been Pwned: Pwned Passwords

Pwned Passwords is a huge corpus of previously breached passwords made freely available to help services block them from being used again.

haveibeenpwned.com

 

[Forum Boss]

Some guy tried to register today. He put his password in the LOCATION field where it would be visible to anyone. Oh and the password was the name of this forum plus "#1".

Beyond belief.

This is why I personally background check ALL new sign-ups.

Folks, that background checking is sometimes taking 2 hours or more per day. That’s 700+ hours per year, not counting dealing with actual security breaches… I wouldn’t be surprised if I’m spending 1000 hours a year or more on security stuff — all without pay.


People, make sure you have a unique password that is NOT used on any other site, check your PMs every time you visit, check your post history.