Please enable 2FA on your OcUK forum account

Semple · 22 Oct 2021 at 09:26

Rainmaker said:
There are loads of such examples on YouTube, for example. They get into one account (say, OcUK). From there, they find your mobile number and call your provider and blag your email address and/or home address. Then they link those to find your social networks, then (maybe using dumped data or known exploits or social engineering) get into those and your email accounts... and it's all downhill from there.

Here's one quick demo. Once you have a mobile number, and an email address, or a single account login that has some personal info (such as an email address in the profile/settings) it's game over. It's possible to basically ruin your life and get access to almost anything. Enable. MFA. Everywhere.

I would hope that most of the frequent posters on this forum wouldn't fall for most of those tricks. You'd have to be really lacking in any security practices to fall for all of those.

Either way it's very interesting / eye opening. I'm pretty confident everything i use online is heavily locked down, so would be interested to see how far someone would get trying to get access to my data.

ThundyCat · 22 Oct 2021 at 09:49

Jeez, my 30 days just kicked in. I had to grab my phone and input a 6 digit code that took me like 10 seconds to do. It's such and inconvenience that I have to do this again in 30 days. :rolleyes:

Deleted member 77746 · 22 Oct 2021 at 10:10

ThundyCat said:
Jeez, my 30 days just kicked in. I had to grab my phone and input a 6 digit code that took me like 10 seconds to do. It's such and inconvenience that I have to do this again in 30 days.

Stop winging! :cry:

dlockers · 22 Oct 2021 at 10:17

Semple said:
I would hope that most of the frequent posters on this forum wouldn't fall for most of those tricks. You'd have to be really lacking in any security practices to fall for all of those.

Either way it's very interesting / eye opening. I'm pretty confident everything i use online is heavily locked down, so would be interested to see how far someone would get trying to get access to my data.

Post this on 4chan and see

[FnG]magnolia · 22 Oct 2021 at 10:56

ThundyCat said:
Jeez, my 30 days just kicked in. I had to grab my phone and input a 6 digit code that took me like 10 seconds to do. It's such and inconvenience that I have to do this again in 30 days.

Indeed. Who would have thunk we had so many OCUK Karens?

Semple · 22 Oct 2021 at 11:40

dLockers said:
Post this on 4chan and see

It'll be like a new version of that fad that was going around on reddit/twitter etc where people would post up a picture of themselves, and the public would absolutely rip into them about their appearance.

V F · 22 Oct 2021 at 12:35

Semple said:
It'll be like a new version of that fad that was going around on reddit/twitter etc where people would post up a picture of themselves, and the public would absolutely rip into them about their appearance.

Sounds like @Psycho Sonny he's the fashion sense around here.

bulldog147 · 23 Oct 2021 at 06:57

What the point of 2FA on forum for? I can understand if you using it for shopping account online but seriously do u really need it for forum?

Rroff · 23 Oct 2021 at 07:07

dLockers said:
Post this on 4chan and see

There was a thread in here awhile back - think it got deleted due to what happened - where a couple of people thought they were anonymous online and challenging people to doxx them - it didn't end well.

TheSwede · 23 Oct 2021 at 07:08

bulldog147 said:
What the point of 2FA on forum for? I can understand if you using it for shopping account online but seriously do u really need it for forum?

As been said before in the thread. It is needed to protect those that using the Members Market, but since it can't be separated at the moment, the whole of the forum is needing the 2FA function.

deuse · 23 Oct 2021 at 08:22

ThundyCat said:
Jeez, my 30 days just kicked in. I had to grab my phone and input a 6 digit code that took me like 10 seconds to do. It's such and inconvenience that I have to do this again in 30 days.

I have to do it every time I sign in.
I make sure the 30 box is ticked.

Could it be I clear out my browser cookies?

dlockers · 23 Oct 2021 at 08:27

deuse said:
I have to do it every time I sign in.
I make sure the 30 box is ticked.

Could it be I clear out my browser cookies?

Take the hint

ThundyCat · 23 Oct 2021 at 13:19

deuse said:
I have to do it every time I sign in.
I make sure the 30 box is ticked.

Could it be I clear out my browser cookies?

Yes 100%, if you're clearing cookies every time, then I suspect that's the issue.

Deleted member 77746 · 23 Oct 2021 at 17:45

Rroff said:
There was a thread in here awhile back - think it got deleted due to what happened - where a couple of people thought they were anonymous online and challenging people to doxx them - it didn't end well.

I would have loved to see that.

Feek · 23 Oct 2021 at 18:11

bulldog147 said:
What the point of 2FA on forum for? I can understand if you using it for shopping account online but seriously do u really need it for forum?

How would you feel if someone managed to compromise your account, posted an MM thread and actually managed to get a member to pay them for some non existent items?

If that happened, we’d basically close the MM. There would be no trust in the system whatsoever.

Deleted member 77746 · 23 Oct 2021 at 18:23

Feek said:
How would you feel if someone managed to compromise your account, posted an MM thread and actually managed to get a member to pay them for some non existent items?

If that happened, we’d basically close the MM. There would be no trust in the system whatsoever.

On a worse scale scenrio if it was the other way around and @bulldog147 was the one who got scammed, with no money to return from another user with a compromised account. Ouch!

byeo · 26 Oct 2021 at 17:44

Saw this post a week or so ago and activated 2FA as advised. Just checked my emails and received an email saying my login activation code is XXXXXX (bearing in mind I'd already activated it) I've now updated my password as suggested in the email as it looks like whoever got the info is definitely trying to get into accounts.

Thanks for the heads up OCUK.

elrasho · 31 Oct 2021 at 21:03

My phone has packed up and it had my MFA app on it. Luckily I have one PC that I clicked "remember for 30 days". However how can I "reset" my MFA to this forum so I can contribute from my new mobile?

Deleted member 77746 · 31 Oct 2021 at 21:13

elrasho said:
My phone has packed up and it had my MFA app on it. Luckily I have one PC that I clicked "remember for 30 days". However how can I "reset" my MFA to this forum so I can contribute from my new mobile?

What MFA app was it? If you used Authy then you could have logged into a PC with it and then also restore on a new mobile if you can no longer get into your current mobile.

MFA on here can be reset yeh, same way you set it up.

Feek · 31 Oct 2021 at 21:15

elrasho said:
My phone has packed up and it had my MFA app on it. Luckily I have one PC that I clicked "remember for 30 days". However how can I "reset" my MFA to this forum so I can contribute from my new mobile?

I believe that you can go into your account and disable MFA then re-enable it. If you have an issue doing that, please start a thread in FCD and we’ll help you through it.

**** Please enable 2FA on your OcUK forum account ****

Please enable 2FA on your OcUK forum account