Moneybookers Fraud thread

[chriso]

One other thing you can do with Keypass is to have your password database ONLY open if a specific portable device is present - ie the database will only open if you enter the correct master password AND have a specific USB stick plugged into the PC.

That sounds interesting. Might have a look at it. To be honest nothing is 100% secure and there is always going to be some trade off between security and usability.

[ChrisS]

Thanks Munk, and all you guys!!

What a minefield I have entered....

The fact that no mail has been received confirming the withdrawl was one of the facts mentioned to the MB agent for what its worth. Also no computers were on at home at the time of the incident, I use Firefox, scan daily with AVG and use Lavasoft's Ad-Aware every couple of days. Never even used a public PC to log on!

Looks like I will have to change passwords on a monthly basis

[munk]

Thanks Munk, and all you guys!!

What a minefield I have entered....

The fact that no mail has been received confirming the withdrawl was one of the facts mentioned to the MB agent for what its worth. Also no computers were on at home at the time of the incident, I use Firefox, scan daily with AVG and use Lavasoft's Ad-Aware every couple of days. Never even used a public PC to log on!

Looks like I will have to change passwords on a monthly basis

That's all very odd then, hope you manage to get it sorted out and get the money back. Let us know how it gets on, very interested to know.

Cheers.

[AmeliesDad]

I certainly hope you get the money back and get to the bottom of how it went missing, sadly I doubt the second will happen unless you have an epiphany about handing out your password while drunk or something!

The closest I've come was when betfair said my account had been blocked for security reasons as they suspected someone had been attempting to access it. Most likely is my usage pattern triggered something in their systems but I did spend an anxious hour or so getting it sorted with them and then trawling through all my online accounts changing the passwords!! Luckily I do use keepass (an absolutely amazing piece of software) which made it easier.

As long as you use a good, non-dictionary master password then something like keypass is great. I love the ctrl-alt-a feature too, which matches the title of the window you're in to an entry in the database and fills in the username and password for you. And if you don't have to remember all your passwords or jot them down on a piece of paper (I hope whoever suggested that doesn't post-it his logon password to the monitor - I've seen it done!) you can have them very random, very long and different at every place without a problem.

Good luck getting it sorted and let us know so we can hopefully avoid it!

[ChrisS]

Looks like I will be investigating Keypass, might be a PITA, but whole lot better than worrying over losing X£'s to some internet scum bag

I have not heard anything back yet from MB security team, but when I spoke to their CS yesterday they implied 2-3 days - presumably in a an attempt to trace the monies in the depths of Outer Mongolia or wherever the latest poker game is taking place

By the sounds of your posts it looks hopeful that I will get the monies refunded eventually, but will of course keep you updated with progress!

Thanks again, it keeps my spirits up!!!!

[Human123]

Just wondering, does everyone use the same password for all bookie accounts too?

Not sure if it was mentioned above but if you have the same password at a dodgy bookie which can view users passwords then they will probably use your email and try that same password.

[Thanatos]

Just wondering, does everyone use the same password for all bookie accounts too?

Not sure if it was mentioned above but if you have the same password at a dodgy bookie which can view users passwords then they will probably use your email and try that same password.

*goes to change all passwords*

Ok, I feel like a right tit now!

[munk]

Just wondering, does everyone use the same password for all bookie accounts too?

Not sure if it was mentioned above but if you have the same password at a dodgy bookie which can view users passwords then they will probably use your email and try that same password.

I thought I posted that above but I didn't! That's the good thing about using keepass, whenever you create a new account in keepass it automatically generates a new password anyway so every new entry is unique.

The way I register at a new site is to have keepass open at same time with a new entry box and then I use the default auto generated random password as the username for the new site and then generate a password using the password generator in keepass. That way I've got something like:

username: 87HPgnqfa9eodji
password: A8CH6tedXKYG4EiRjvQs

then as well as that I create a unique email address like:

firstname.lastname-3w3sitename2o6@eample.com

which is automatically forwarded to my main email address. So that way with the unique / random username it's pretty much impossible for anyone to even guess the username, let alone the password. And with the email address being unique you can also tell who's sold your details on to spammers!

Of course all of this probably explains why I don't register at many sites...

Seriously though it doesn't take that long to set up and once you've done it all you have to do to login at the site is hit 'ctrl-alt-a' and it fills everything out for you. You have to tweak some entries so the auto-type sequence works - ie on moneybookers the default autotype sequence is no good because you have to stop on the turing text box, but you can adjust it no problem so it will stop there and let you enter the turing number and hit submit yourself - but mostly it works out of the box.

There's only a couple of places it doesn't work for me and they're flash applications (tradefair I think it is and partymarkets), other than that it works fine.

[maddog]

I thought I posted that above but I didn't! That's the good thing about using keepass, whenever you create a new account in keepass it automatically generates a new password anyway so every new entry is unique.

The way I register at a new site is to have keepass open at same time with a new entry box and then I use the default auto generated random password as the username for the new site and then generate a password using the password generator in keepass. That way I've got something like:

username: 87HPgnqfa9eodji
password: A8CH6tedXKYG4EiRjvQs

then as well as that I create a unique email address like:

firstname.lastname-3w3sitename2o6@eample.com

which is automatically forwarded to my main email address. So that way with the unique / random username it's pretty much impossible for anyone to even guess the username, let alone the password. And with the email address being unique you can also tell who's sold your details on to spammers!

Of course all of this probably explains why I don't register at many sites...

Seriously though it doesn't take that long to set up and once you've done it all you have to do to login at the site is hit 'ctrl-alt-a' and it fills everything out for you. You have to tweak some entries so the auto-type sequence works - ie on moneybookers the default autotype sequence is no good because you have to stop on the turing text box, but you can adjust it no problem so it will stop there and let you enter the turing number and hit submit yourself - but mostly it works out of the box.

There's only a couple of places it doesn't work for me and they're flash applications (tradefair I think it is and partymarkets), other than that it works fine.

lol placing bets over the phone must be a nightmare

[AmeliesDad]

lol placing bets over the phone must be a nightmare

lol. I'd forgotten about that. I use slightly more readable usernames but when you do have to call CS it can be a bit of a nightmare