Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password
Once in a while, I get a "friend request" too. I just ignore those on Discord.
What did "the link" do? Was clicking it enough to compromise your system? If that's the case, it's time for a safer browser (and OS)!
I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).
Why wait 30 days after someone has signed a message from an old staked address to remove a tag?
A signed message is enough IMO.
My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.
You should assume that the person making such a request may be in desperate need of a loan.
I disagree. If someone made the explicit statement that he'll never take a loan, you should assume
someone else is asking for it, no matter what evidence he shows. The account holder shouldn't be held liable for any loans, that's why he made this explicit statement.
I'm not even sure if 30 days is enough: it's not impossible for the account owner to not even notice a new neutral tag during those 30 days. It might be better if someone else adds said tag in that case, so at least the counter goes up by +1. Or maybe I should just leave new neutral feedback permanently, including the dates of start and "end" of the promise not to take loans.
Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.
I've left him neutral feedback, asking to respond here.