Quote from: joker_josue on May 01, 2023, 09:58:07 AM

But, back to the same thing, to start this type of attack, the user will need to have at some point something that exposed him to the situation.

This is not entirely true with reverse shell attacks. In fact, all it takes is to visit or load a resource from a website (as this requires the user to establish an outgoing connection to it) and the vulnerability becomes opened. For those who browse and visit new websites immensely from their Windows environment, they are exposed to the vulnerability. The only way to stop reverse shell attacks is to monitor all outgoing connections, which means screening each and every website that you visit before you visit it. This is next to impossible for the average user. The vulnerability is also open to anyone using Windows, whether they are using pirated software or not (though of course from a general standpoint, pirated software is by default more vulnerable than what licensed software is)

Quote from: joker_josue on May 01, 2023, 09:58:07 AM

Many still continue to use pirated OS, continue not to perform updates, not to mention using pirated software. If the person does not meet the basic requirements, no matter what OS he uses, he will be exposed to the same kind of problems.

I definitely agree that using pirated software opens the end user up to a wide array of additional vulnerabilities. Pirated software used to be great, however the tables have definitely turned in the past few years. Unless it's for a very temporary and insensitive usage, there's little to no upside for using pirated software other than the cost savings.

Quote from: vapourminer on May 01, 2023, 10:53:12 AM

Quote from: joker_josue on May 01, 2023, 09:58:07 AM

But, back to the same thing, to start this type of attack, the user will need to have at some point something that exposed him to the situation. Many still continue to use pirated OS, continue not to perform updates, not to mention using pirated software. If the person does not meet the basic requirements, no matter what OS he uses, he will be exposed to the same kind of problems.

basically, this. i am truly amazed at how many people run pirated software, and no matter what the OS you will get compromised doing that.

as for the OS yeah linux etc. ive run it. but i still run windows for 90% of my daily driver stuff. as it generally does what i want it.

consider: i have run windows and the same btc wallet (core) since literally 2011 and its run 24/7. winxp, win7, win10. all running 24/7 with wallet.dat and core and connected to the net 24/7 also. i just move the 2011 wallet.dat to the new install/upgrade when they happen.

AND guess how much ive lost to malware/virus/ransomware: IN 12 YEARS OF A HOT CORE WALLET IN WINDOWS,. ZERO NOTHING NADA ZILCH NEGATIVE

so yeah linux is inherently "safer" but even windows can be configured to be pretty close.

security all comes down to the person. rarely is it ONLY the OS thats the security problem..

just my observations over 12 years in the space, and certainly not to be taken as The Only Way To Do It., so have fun tearing my "security" apart.

btw i use hardware wallets and paper wallets for my main stash, core and my phone have spending amounts.

You are definitely on the lucky end of the spectrum and it makes me curious as to the details of your usage. It has been reported that XP, Vista and Windows 7 are vulnerable almost as soon as they are deployed. The more you browse, the more you download, the more you are susceptible to vulnerability.

It should be noted that being infected does not necessarily mean that you lose your crypto. Some infections are limited to accumulating data about your usage, activity, etc. They might not actually have capability to take your clipboard, track your keystrokes, grab your files, etc.

Since you've mentioned that you only keep spending amounts in core and on your phone, do keep it that way. It is possible that there is simply not enough value for anything to be executed at the moment....though as soon as you receive a large amount in core, that will be another story.

Stay safe and congratulations that you're still able to use XP and 7 without issues. I loved both of those pieces of software in their hayday!

Quote from: dkbit98 on May 01, 2023, 07:07:46 PM

Quote from: BenCodie on May 01, 2023, 12:40:10 AM

If the Cybersecurity and Privacy board was added any time in the last 3 months after the situation with julerz12, maybe a post there (such as one explaining and emphasizing that all users should be using Linux over Windows) may have prevented the OP from being hacked.

Highly unlikely that creating a board in forum would prevented anyone from getting scammed (unless he is actually active in that board).
I saw multiple posts explaining how to protect against stupid scams like this, and I have been advocating switching to Linux OS everywhere in forum.

Firstly, It should be noted as well that Avirunes was not scammed. He was hacked. These are two entirely different things. Cybersecurity and Privacy can't help you in a scam, as being scammed is more to do with your own personal judgement than anything else. Being hacked is more to do with cybersecurity & privacy than it is to do with judgement (judgement is still a factor, but not the primary factor).

Secondly, how can you assume someones activity in a board or whether or not someone will read the content within a board before it is even created? Let me put a scenario out for you to validate what I had said earlier about if the board were added, it may have possibly prevented Avirunes situation:
- theymos announces "Cybersecurity & Privacy" board opened.
- People view this thread not just because of the title but also because theymos made the post.
* This alone would not be enough for active users even to view the board and the content within? Furthermore,
- This board is already full of ways to improve your security and privacy, prompting many users to learn, ask questions and implement strategies to increase their 'digital armor'

I am sure that Avirunes, like many other members of the forum, would read the board and the content within if it were created and theymos announced it. Whether or not they implement the security strategies are both up to how well the content within it is written, how easy it is to follow and how much the user values their security and privacy. That is something that neither you or I can assume.

Quote from: dkbit98 on May 01, 2023, 07:07:46 PM

Quote from: BenCodie on May 01, 2023, 12:40:10 AM

If the Cybersecurity and Privacy board was added any time in the last 3 months after the situation with julerz12, maybe a post there (such as one explaining and emphasizing that all users should be using Linux over Windows) may have prevented the OP from being hacked.

After taking a quick look at Avirunes post history I can see that he is writing majority of his posts in Gambling section, so new Cybersecurity and Privacy board would have literally zero effect on him.

Since there is no Cybersecurity and Privacy board, how can anyone measure whether anyone would participate in that board, or read the undoubtedly valuable content within it? Saying that it would have literally zero effect on him is an unrealistic assumption.

Quote from: dkbit98 on May 01, 2023, 07:07:46 PM

Quote from: BenCodie on May 01, 2023, 12:40:10 AM

If the Cybersecurity and Privacy board was added any time in the last 3 months after the situation with julerz12, maybe a post there (such as one explaining and emphasizing that all users should be using Linux over Windows) may have prevented the OP from being hacked.

I am not against creating this board, and I would probably be active there, but let's try to be more realistic with your assumptions.

I maintain that the creation of the board would increase the chances of Avirunes being able to prevent what had happened to him.

Quote from: Dr.Bitcoin_Strange on May 01, 2023, 08:59:31 PM

I said yes to this idea. Already, Bitcoin is facing a lot of attacks by scammers and those who are against it. Considering the fact that this is a more effective Bitcoin discussion community in which Bitcoiners and all newbies can still be guided without falling victim to some scams, I think this board is really necessary to be added because if it's created, it will contain all the other threads about security that you have listed out instead of being scattered across different threads. If not for how you listed all of them out, I really could not find anything up to the level of the helpful thread you provided (thanks for that).

As said above, being scammed and being hacked are two different scenarios. It is unlikely that your cybersecurity or privacy level will prevent you from being scammed if your judgement is poor. Judgement is the primary factor as to whether you are scammed or not.

Quote from: WatChe on May 02, 2023, 05:53:40 PM

Quote from: BenCodie on April 23, 2023, 06:16:15 AM

...especially when you think about how many users still use flawed Microsoft and Apple products over how many people know about let alone use Linux.

The only reason why people still are inclined towards Microsoft and Apple is because they don't wanna leave there comfort zone (everyone is comfortable with Next, Next and Finish). Though Linux flavors like Ubuntu are as easy to use as any other Operating system like Microsoft or MAC, there is lack of awareness among people about Linux ease of use and what additional features it is offering. I have Ubuntu 22.04 installed on my laptop for almost a year and it offers everything one can do on Microsoft or MAC and really cool thing is I don't have to install any anti virus here.

You are totally right. The general assumption is that "Linux is unknown and therefore I will not know how to use it" however this is far from the case. Most distributions are entirely usable and their layout is quite similar to that of Windows. There are some distributions that are even designed just like Mac and Windows to make the transition easier. This is something I'd love to highlight if the board were to be added.

Quote from: n0nce on Today at 02:33:59 AM

It amuses me a bit to read about the various N=1 anecdotes, misconceptions and semi-truths in the last few pages alone.. Wink

Only strengthens the argument for a 'Cybersecurity and Privacy' board on the front page, though.

OS choice would definitely be a fun first topic. Just a short TL;DR: it's not as clear-cut as 'Linux > Windows' or 'Everyone should use Linux on the Desktop'; neither is 'Linux unhackable and does not require antivirus' nor are you 'guaranteed to lose your BTC on a Windows / Mac machine'.

Anyways; any progress on the board? Changes / suggestions? Feedback from @theymos?

In a normal world, or pre-2020 I'd agree with you. The Windows software itself is the swiss cheese of software. I have experimented with securing Windows deployments and no matter what you do, it is not possible to achieve complete cybersecurity and privacy with this software. You can achieve an adequate level of cybersecurity, however at a severe cost of functionality and usability. Not to mention that this is a task that is not for the beginner.

Unless you are staying within the mainstream confines of the web, using a vpn, have taken basic firewall measures, using licensed software and not trying a range of new software/visiting a large amount of websites, then Windows only becomes more vulnerable the longer you use it. Linux on the other hand allows you to take less measures to increase your security further than Windows ever can quickly, and the attack surface is much lower.

Of course I admit that my bias is from my experience, as someone who has played around with securing and pentesting Windows. Maybe people have different experience. Maybe my definition of being secure is at a different standard to others. Maybe I know more, or maybe I know less. Either way, I will end this reply that in my opinion, Windows is inherently insecure and almost impossible to make secure and private, Linux can be made secure and private with ease, therefore it is as clear-cut (from a cybersecurity and privacy standpoint) that Linux > Windows Tongue

Quote from: n0nce on Today at 02:33:59 AM

Anyways; any progress on the board? Changes / suggestions? Feedback from @theymos?

I've sent two PM's, no feedback. NotATether has sent a PM or more also I believe, no feedback. No feedback on this thread either unfortunately. Hopefully one day there will be! I will be the first to report back if I ever receive feedback about this request.