Quote from: greatwolf_ on November 14, 2014, 09:39:41 PM

Quote from: bayuo on October 07, 2014, 01:11:52 AM

One thing for sure.. a couple people have been dead on the mark and their perspective lets me know that im not going crazy and that i am getting through to not only the mods but everyone reading this thread too!

I was re-reading this thread and it seems $username has been calling it how he sees it the whole time! He has been money and i will use him and another member as an example to show that im not coming out of left field when i say there is a huge flaw in the forum and i have been taken advantage of because of it.

There is no 2factor, no email verification when a users email is changed .. nothing. That in combination with the allowing of accounts to be bought and sold (WITHOUT A SIGNED MSG FROM PREVIOUS OWNER) i believe creates and environment perfect for the manipulation of the flaw.

Just posting here to let you know I'm in a similar boat so this is no means an isolated case. My account got hacked which could have been prevented had email confirmation been enabled on this forum to begin with. The only difference is no one has stepped up to dispute my claim to my account yet. Unfortunately, I haven't received so much as a peep from theymos and I've been sending him weekly PM's since Sept. in the required signed format outlined.

Frankly, I don't understand how a forum so lax in security can be used to conduct any serious business or money related matters -- this is just ludicrous. Your forum password is the only line of defense and should that be compromised -- whether your fault or not -- then it's basically game over. There's no other recourse then to keep PM'ing forum admin until they respond.

If it were up to me, this is clearly an open-and-shut case: byou provided a signed message proving ownship of said account -- the current person in control of your account cannot provide a signed message proving he bought the account legitimately. Ergo, account access should be restored back to you.

There are several problems with this.

First it would make it extremely easy to scam account buyers who do not think to ask for a signed message and would make any buyer vulnerable to having their account taken back in the event they lose such signed message. It overwhelmingly appears that the OP is almost certainly trying to scam the person that he sold his account to. The OP proved his account ownership by signing a message contained in an other person's post (but not his own) so anyone buying his account would likely not be able to easily find such address to request such signed message.

You need to remember that the person who is in control of the account at one point somehow controlled the password so the burden should be on the person claiming ownership not on the person who controls the account presently. Being as liberal as you are suggesting for account recoveries would encourage both the kind of scamming that the OP is attempting and would encourage people to be reckless with their account passwords. If you are reckless with your private key then the miners are not going to reverse a transaction back to an address that you control. There is no reason why forum accounts should be significantly different.

As I mentioned above, theymos has said that most accounts are "hacked" due to user error; if the administrators were to be as liberal with account recoveries as you are suggesting then theymos would be overwhelmed with requests for account recoveries and this would take his time away for more important work.