Many Pokerstars accounts hacked recently, Stars accepts no liability - Page 35 - Poker News

Pwalls I got a smilar email from stars a few years ago when heaps of ppl got hacked at the same time.
But stars replied that they stopped someone making a withdrawal from my account because I have made 100’s of logins for my Country & never logged in or asked for a withdrawal from Russia were the person was trying to make the withdrawal & stars stopped it.

Stars should make it mandatory that everyone uses the keypad to login.

Quote

10-09-2018 , 08:30 AM

#852

SalmoTrutta

grinder

Join Date: Nov 2016 Posts: 673

Quote:

Originally Posted by I_C_YA_KARDZ

Stars should make it mandatory that everyone uses the keypad to login.

Bad idea. You want people to be able to login from wherever without carrying a token and waiting for it to be mailed out before getting in on the action etc. The day hopping onto the table isn't a casual matter the site dies.

Being able to connect a new neteller account just like that as a thief is the absurd part in this. Many other sites will only allow you to withdraw to the same card/account you deposited with, otherwise you have to go through a verification process with support etc.

Quote

10-09-2018 , 02:38 PM

#853

Husker

Carpal \'Tunnel

Join Date: Feb 2007 Posts: 12,891

That's pretty gross. Would be interesting to know how the linked the new netteller account.

I've gotta admit, if I'd received that email about the $10 withdrawal I'd probably have logged in and withdrawn everything till I found out what was going on.

Quote

10-09-2018 , 09:01 PM

#854

wowsooooted

Pooh-Bah

Join Date: Jan 2013 Posts: 5,077

Quote:

Originally Posted by Stroggoz

yeah, yeah. expected this reply about it being crazy not to have rsa token. TBH i had one for about 7-8 years and then got comfortable, after losing it i wasn't really playing poker at the time so i kinda forgot it when i started playing again. Still, stars should be crucified for how they handled this so far. They said the person withdrew from a different IP address, I don't get how they let someone withdraw from a different country from where i was playing 10 minutes earlier, 3 times. There isn't any sort of auto alert for this?

I duno how the hacker managed to bypass this, as far as I know any suspicious activity such as logging in and withdrawing from different IPs should snap lock your account until you send an email proving your identity. Very interested to hear what PS says about this security step failing.

Quote

10-09-2018 , 11:05 PM

#855

david negus

grinder

Join Date: Jan 2014 Posts: 612

how about a security measury that allows you to pick your country of withdrawal, with a 24 hour waiting period to change it.

eh i guess if stars wont respond to emails in time, it wont matter

Quote

10-10-2018 , 02:04 AM

#856

Barry Urinstein

veteran

Join Date: Dec 2012 Posts: 2,445

You are a (winning?) regular. Stars doesn't want you playing on the site, they are probably happy you lost the money. I've previously been put under massive scrutiny when trying to withdraw. The way you lost this money stinks to the high heavens and really shouldn't be possible.

Quote

10-10-2018 , 02:16 AM

#857

anuj22

veteran

Join Date: Feb 2014 Posts: 2,171

"How poker accounts are stolen: an anonymous interview with a hacker"

http://www.pokeroff.ru/kak-kradut-po...m-post-2908977

Quote

10-10-2018 , 02:38 AM

#858

KossuKukkula

veteran

Join Date: Jul 2011 Posts: 2,805

Quote:

Originally Posted by anuj22

"How poker accounts are stolen: an anonymous interview with a hacker"

http://www.pokeroff.ru/kak-kradut-po...m-post-2908977

https://translate.google.com/transla...977&edit-text=

If you don't read russian. It was interesting read for sure thx.

Quote

10-10-2018 , 06:26 AM

#859

Josem

human chemical weapon

Join Date: Jan 2007 Posts: 18,190

Quote:

Originally Posted by david negus

how about a security measury that allows you to pick your country of withdrawal, with a 24 hour waiting period to change it.

eh i guess if stars wont respond to emails in time, it wont matter

Because geo-location using IP addresses is very weak, and there isn't really any such thing as a "country" of an IP address.

Of course, better geo-location is available on mobile devices, where this might be plausible.

Rather than worrying about countries, there's very secure options around securing devices.

For example, withdrawing from a new device should be an obvious red flag for big financial transactions.

Quote

10-10-2018 , 06:43 AM

#860

obviousTROLL

journeyman

Join Date: Dec 2011 Posts: 387

Meanwhile if i travel and play using same hardware pokerstars finds it suspicious and freezes cash outs to bank account I've used since first deposit.

Same time they don't give a **** if i continue gambling, so chip dumping is still an option for hackers.

And I disabled my RSA security token by sending them e-mail about losing token. Hacker has probably access to victim e-mail also.

Quote

10-10-2018 , 08:52 AM

#861

Josem

human chemical weapon

Join Date: Jan 2007 Posts: 18,190

Quote:

Originally Posted by obviousTROLL

And I disabled my RSA security token by sending them e-mail about losing token. Hacker has probably access to victim e-mail also.

IF (and this is a very big "if") this is true, then you've described a huge security flaw at PokerStars which undermines their whole multi-factor authentication system. I don't think this is true.

Quote

10-10-2018 , 10:22 AM

#862

FlipMaster08

journeyman

Join Date: Feb 2014 Posts: 359

Quote:

Originally Posted by Josem

IF (and this is a very big "if") this is true, then you've described a huge security flaw at PokerStars which undermines their whole multi-factor authentication system. I don't think this is true.

When i lost my token, i sent a email to stars, then they call me and asked a lot of questions to be sure that i own the account.

ps: Sorry for my broken english.

Quote

10-10-2018 , 10:25 AM

#863

Josem

human chemical weapon

Join Date: Jan 2007 Posts: 18,190

Quote:

Originally Posted by FlipMaster08

When i lost my token, i sent a email to stars, then they call me and asked a lot of questions to be sure that i own the account.

ps: Sorry for my broken english.

Yes - this is as it should be. The phone call is important.

Quote

10-10-2018 , 11:09 AM

#864

BackingDonk

journeyman

Join Date: Aug 2011 Posts: 318

Quote:

Originally Posted by obviousTROLL

Quote:

Originally Posted by FlipMaster08

When i lost my token, i sent a email to stars, then they call me and asked a lot of questions to be sure that i own the account.

ps: Sorry for my broken english.

obviousTROLL is obvious

-BD

Quote

10-10-2018 , 11:33 AM

#865

isunkurbttlship

Carpal \'Tunnel

Join Date: Mar 2010 Posts: 7,659

Yeah, I recently had my RSA token expire and was unable to log in. To gain access to account again I had to answer some questions as well as send photos with ID next to my face

Quote

10-10-2018 , 11:45 AM

#866

obviousTROLL

journeyman

Join Date: Dec 2011 Posts: 387

Quote:

Originally Posted by FlipMaster08

When i lost my token, i sent a email to stars, then they call me and asked a lot of questions to be sure that i own the account.

ps: Sorry for my broken english.

I was abroad, so I didn't have same number. Maybe they were in "**** it" mood.

I was surprised. Already thought were i put that 30 one time password sheet that came with token, but didn't need it or any additional document or whatever.

Quote

10-10-2018 , 11:49 AM

#867

obviousTROLL

journeyman

Join Date: Dec 2011 Posts: 387

@josem

Btw how is it okay to allow gambling after freezing cash outs for suspicious activity?

Quote:

Originally Posted by obviousTROLL

Quote

10-10-2018 , 11:52 AM

#868

Josem

human chemical weapon

Join Date: Jan 2007 Posts: 18,190

Quote:

Originally Posted by obviousTROLL

@josem

Btw how is it okay to allow gambling after freezing cash outs for suspicious activity?

Well, you wouldn't want to be prevented from playing in tournaments you've already registered for - but it should be reasonable to stop you from starting new stuff.

That's why I designed the 'Restricted Access' mode at PokerStars about ten years ago - for exactly these sorts of situations.

Quote

10-10-2018 , 12:11 PM

#869

buffyslayer1

Coach MTT

Join Date: Jun 2008 Posts: 5,553

I had the same thing when mine ran out. My account was locked until I could verify myself.

I think I contacted josem at the time because it was difficult to actually get unlocked. Although it was a pain I am thankful for it

Quote:

Originally Posted by FlipMaster08

When i lost my token, i sent a email to stars, then they call me and asked a lot of questions to be sure that i own the account.

ps: Sorry for my broken english.

Quote

10-10-2018 , 03:00 PM

#870

pucmo

adept

Join Date: Mar 2016 Posts: 1,187

Quote:

Originally Posted by SalmoTrutta

Being able to connect a new neteller account just like that as a thief is the absurd part in this. Many other sites will only allow you to withdraw to the same card/account you deposited with, otherwise you have to go through a verification process with support etc.

The deposit amount goes to the deposit account/method. Maybe you have already cashed out your deposit amount and if not, the rest might still go to the new account. One can make a Skrill or whatever account also. Pokerstars doesn't ask IDs and so but in cases.

Quote

10-11-2018 , 02:40 AM

#871

KossuKukkula

veteran

Join Date: Jul 2011 Posts: 2,805

Quote:

Originally Posted by pucmo

You shouldn't be able to withdraw using an account you have never deposited with. Just like any other legit site atleast I have ever played with.

Quote

10-11-2018 , 07:50 AM

#872

jayme87

veteran

Join Date: Apr 2010 Posts: 3,496

Hoping stroggoz gets reply about method of cashing out being allowed and what is their reponse ?

I assume stroggoz has used netteller before?

Quote

10-11-2018 , 10:09 AM

#873

pucmo

adept

Join Date: Mar 2016 Posts: 1,187

Quote:

Originally Posted by KossuKukkula

You shouldn't be able to withdraw using an account you have never deposited with. Just like any other legit site atleast I have ever played with.

One creates a new deposit/withdrawal method and makes a small deposit (the trivial part that might get questions only if it has been used to fund another account).

Quote

10-11-2018 , 10:18 AM

#874

KossuKukkula

veteran

Join Date: Jul 2011 Posts: 2,805

Quote:

Originally Posted by pucmo

One creates a new deposit/withdrawal method and makes a small deposit (the trivial part that might get questions only if it has been used to fund another account).

And by doing that he can't make a withdrawal in 72hrs and most likely the accounts true owner sees that and doesn't lose anything. Or was it 48hrs can't remember but the point is the same with stars. And let's mention that with most sites you need to rake x ammount before you can withdraw after depositing.

Last edited by KossuKukkula; 10-11-2018 at 10:26 AM.