Quote from: Cricktor on Today at 09:34:35 PM

Would someone buy an account where they don't change the email address and password, even when they know that the seller has those credentials?

People who understand how the forum works. The email and password with a new 2FA will not work with a new 2FA. Email and password are basically meaningless without the 2FA.

Quote from: Cricktor on Today at 09:34:35 PM

Who would be so stupid to then only enable or alter 2FA alone to hide and not trigger some markers?

I'd not be too quick to call it stupid. Though to answer who would do it - account traders and account farmers. That's the point of this thread.

Quote from: Cricktor on Today at 09:34:35 PM

Also, there are perfectly valid reasons to alter 2FA, e.g. when you didn't backup the 2FA secret and you change your mobile phone, assuming you have the authenticator only on your mobile phone and can't sync secrets from old to new phone.

I'm not saying that if the information is recorded, that anyone changing their 2FA is suspected of trading their account thereafter. Instead, I'm saying that it's a piece of information that currently doesn't exist, and if it did, it could assist in identifying account trades.

Quote from: KingsDen on Today at 11:52:43 PM

Quote from: BenCodie on May 05, 2025, 10:42:02 PM

If possible, theymos should grant the ability for bpip.org to detect changes to 2FA/OTP on an account, to eliminate this new possibility for account traders.

2FA is a security function, it might not be easy and advisable playing around it.

It's not playing around with it. It's logging changes.

Quote from: KingsDen on Today at 11:52:43 PM

Quote from: BenCodie on May 05, 2025, 10:42:02 PM

If possible, theymos should grant the ability for bpip.org to detect changes to 2FA/OTP on an account, to eliminate this new possibility for account traders.

Anyone who is buying an account without changing the email or changing the password, it is already a big risk on the side of the person if you ask me. So, there'll be no need trying to stress ourselves.

No, to people who trust one another or groups who are farming accounts, the risk is little to none...and this is a problem that very likely exists.

Quote from: KingsDen on Today at 11:52:43 PM

Quote from: BenCodie on May 05, 2025, 10:42:02 PM

If possible, theymos should grant the ability for bpip.org to detect changes to 2FA/OTP on an account, to eliminate this new possibility for account traders.

Besides, account sell is not illegal, so theymos is not going to stress himself because he wants to prevent account selling.

While not illegal, people should know when accounts change hands and it shouldn't go undetected. Those found doing account trades also receive negative trust, so while not illegal it's still an untrustworthy thing to do.