[WARNING: Scam site]Found a site which is looks just like SF site, and we are also its members??
- Thread starter sweetpea
- Start date
... how so, unless the intent was to test whether or not that site could inject data into our database? My intent was the exact opposite - is that site able to read our database.
I have registered a second account here...
Going to try and sign in on that spoof site and see if it works - that should tell me if they are somehow able to get account information (it obviously won't tell me if they have been able to get it in the past, but it's the best I got). If that account works over there... well, we'll know we have a problem
Aparently krash661 has alredy signed in to the spoof site usin Sciforums log in information.!!!
An after changin his PW "here"... his prevous PW will no longer work at the spoof site.!!!
So accordin to Kitt... based on krash661 log in/log in atempts... it apears that "we have a prollem".!!!
Last edited:
All I know is that I tried to login there with a bogus password and it wouldn't let me. I'm not going to try the real password in case they are set up to trap that sort of thing.
Meanwhile, the larger problem. I have made the mistake of using a standard password here. Which means that if someone has access to a decoded version of said password they could use it to compromise my login on dozens of sites.
Do any of the local gurus (James, T, etc.) happen to know what the likelihood of the sarahdream people being able to read an unencrypted password? Or did they somehow "clone" the site in the sense that the passwords, while valid, are still encrypted?
That, to me, seems to be the $64k question...
they do not have to(they already have your password(s), it is simply transferred within moments(like as in seconds)--i already experimented and everything--just go back and re-read what i stated.
I did read what you wrote and was amazed. You of all people...
Many (probably most) customer DB's are set up so that the password is only stored in an encrypted format. Such that no one can read them - not the moderators, not admin, nobody. If they have a copy of the database it doesn't imply that they can read the password and be able to use it to access an account on another site.
Unless someone is stupid enough to login in to the fake site using their real password - allowing it to be captured in unencrypted format. I can't imagine who might do such a thing though... LIM
except i can access an account on another site(that site). and also, you labeled me as stupid, but what you are clueless of is that i have protection on the systems that i am on. so anyone or anything from that site, cannot effect me like it could for an average person, i also have software from my career that can get deeper in that site than what this site can do. again-- i explained what is clearly happening--no one believes me--which is fine-- i have nothing that can effect me in a hampering way on here. so overall, i appreciate you calling me stupid for attempting to help everyone. again, LIM --carrry on.
You just don't get it, do you? If you use the same password here as you do for your bank they couldn't access your bank records with an encrypted version - now could they? However, if you go to sarahdream and type in your password then they have access to it in an unencrypted form. That puts them halfway to your bank account. You can have all the protection you want on your computer system but no one in their right mind would freely share their passwords with the world, now would they?
If you're so unconcerned because you are "protected" then just post your password here. I'm sure it will be alright.
As to "labeled me as stupid", that is a reaction to your general attitude on this site as I perceive it. You're always denigrating the members with that superior attitude you display - you are so much smarter than everyone else that you have become a legend in your own mind.
But yet you can't seem to figure this one out - how strange...
comical--there were reasons of why i stated to re-read what i typed--which are not because i do not get it.
but overall, that is fine--it is not like your pathetic opinion is significant too anything.
(shrugs)--carry on.
fuckyou0008(no joke, i am serious--that is my password)--but i must warn you, any attempt may come with government will since it will be the government's system that you are attempting to reach through my password..
but overall, your comment of this was simply a pathetic, feeble tactic--i never said this password on this site pertains to my personal life like you are pretending like i did.
(shakes head)--carry on.
ahh-- simply as i recognize you as the pathetic, narcissistic, ignoramus that you truly are. so what? is your pathetic opinion significant too anything besides to the rest of the idiots around here and you?--
comical. but overall, please continue with your low-level minded, pathetic, shenanigans.that is strange, i could have sworn most here presume themselves intelligent, but yet when intelligence is displayed to them, they whine--which includes you,which also includes the post i am quoting.--
odd.i am not accountable/responsible for your own insignificant, pathetic, thoughts.
(shrugs)--carry on.i have already addressed this with my previous post.
okay--thank you for your approval--since you seem to think your approval is necessary or significant..
B
bilboflaggins
Guest
Testing... Testing... 1, 2, 3, 4
Anyhoo, as said, I went through the process of creating an account on Sarahdream with a new email account, and the confirmation email I was sent was from Sciforums, not Sarahdream.
Once I clicked on the link to confirm registration, it sent me to Sciforums and not Sarahdream.com.
And I can access both sites with it.
I made a post in Sarahdream.com in this thread, and lo and behold it turns up on this site... Yep, the one above.
Not sure what that means with regard the legitimacy of the other site or not... Could it simply be a mirror address, with a robot that has changed all mention of the word Sciforums for Sarahdream, but otherwise IS this site?
Once I clicked on the link to confirm registration, it sent me to Sciforums and not Sarahdream.com.
And I can access both sites with it.
I made a post in Sarahdream.com in this thread, and lo and behold it turns up on this site... Yep, the one above.
Not sure what that means with regard the legitimacy of the other site or not... Could it simply be a mirror address, with a robot that has changed all mention of the word Sciforums for Sarahdream, but otherwise IS this site?
exchemist
Valued Senior Member
I do not like the smell of all this.
I would hope the site managers are talking to XenForo about it and will be able to reassure members that we are not at risk by being on the SciForums site itself.
i gave this some thought-- you refer to it as "churlish behavior, " as i refer to it as " tough love. "
Do you now, is that how you rationalize it?