Poe.xyz.is; suspected cause for compromised accounts?

Where is the packet capture? Without the packet capture you have nothing.

"

dzordzo wrote:

Javascript can't really do much, hijack your poe session at most. Java and flash can upload files from your PC ( config file, with hashed PW ). I am a daily user of the site and was not hacked so far, hope it stays that way.

For your safety, and my sanity. Get off the internet.

http://www.cvedetails.com/cve/CVE-2012-0777/
http://www.cvedetails.com/cve/CVE-2007-2381/
http://www.cvedetails.com/cve/CVE-2011-4682/
http://www.cvedetails.com/cve/CVE-2010-5071/
http://www.cvedetails.com/cve/CVE-2005-2705/

"

Udja wrote:

If you have any questions in reference to cyber security, just ask and I will try to answer as best I can.

My computer keeps opening messages telling me I have unpaid police tickets. I've already paid them and they keep showing.
I've given my credit card credentials and I've already spent like 5000€ with that and the messages keep showing.
What should I do? I don't want the police knocking at my door because I have a meth lab in my basement and they might suspect.

"

NCPereira wrote:

"

Udja wrote:

If you have any questions in reference to cyber security, just ask and I will try to answer as best I can.

My computer keeps opening messages telling me I have unpaid police tickets. I've already paid them and they keep showing.
I've given my credit card credentials and I've already spent like 5000€ with that and the messages keep showing.
What should I do? I don't want the police knocking at my door because I have a meth lab in my basement and they might suspect.

do all of the meth imo

Well, I got hacked twice before taking draconian measures to secure my account, and the only sites I ever went to were poe.xyz.is and a couple times to poeex.info which I stopped doing well before getting hacked.

I was told it was "my fault" that I was hacked, so if that's really the case, one of those sites did it.

dear OP, you just went full paranoid. never go full paranoid.

Seriously though, its impossible to keylog a sandbox. Tabs in Google chrome are sandboxed, so other programs cannot gain access to cached data. Most modern browsers do something similar.

I doubt its possible poe.xyz can get any information at all regarding your password or login e-mail, as all they get is hashed information from your poe.com cache. This could possibly give them access to the lost password form while you are logged in, but this is kind of meaningless if they don't know the old password, which they can't learn!



as a result, this just seems like a non-issue to me.

A bit obv compromised accounts are a result of piracy (of other games, with malware) and also maphacks loaded with keyloggers etc.

My dog died right after I used that site.

Using this side every day. Downloading a lot of things from internet. Never got hacked.
What is my secret? Logging to my gmail only from phone and get key.

Hack me now.

"

Sebash6 wrote:

Using this side every day. Downloading a lot of things from internet. Never got hacked.
What is my secret? Logging to my gmail only from phone and get key.

Hack me now.

/facepalm

yah i know i had a bad feeling about that site

i used it a few months ago accidentally and just got hacked, definitely the cause of it

GGG please help us