Everything points to this person being a hacker:

        Account 402402 (Banana Gold)
History Page 1 of 1
(GMT)   Type    Batch   e-metal Weight
(troy oz.)      To/From
Account Entered
Amount  Rate
per oz.
3/29/02
    01:01       Payment Received        5793706 Gold    +0.000033 
        496303  0.01 USD        303.20
From: Martins    Merchant Reference #: gfhfgh fghfgh


REMOTE_HOST
REMOTE_ADDR      63.240.230.5


&city=boca raton&state=fl&zip=33434&country=USA&phone-number=561-323-3253

(obviously, that city/state/phone could be bogus .. no street address given)

The hacker was aiming to "buy" this book .. go figure

http://www.amazon.com/exec/obidos/ASIN/0312278586



I suggest that e-gold should monitor the account # 496303 .

This poor hacker has been knocking himself out on Banana and, indeed, 
literally every other site I am aware of that has SCIs or robots on 
it.

I suspect it could be the same moron that was annoying Eric;

In fact, this egn appears in the list Jim Davidson sent out about his troubles.

It could well be the same person who Graham Kelly etc reported 
endlessly trying to ingratiate their PCs with trojans.

The hacker's already cost me $thousands to have our security blokes 
quadruple-check all our own sites.  (I'll sue for this, and win of 
course, once the hacker is discovered; and of course, in time, he 
will be.)

Read -- you have to understand this is a SERIOUS HACKER (you're 
talking Grand Theft) who has OUTSTANDING TECHNIQUES and SERIOUS 
TECHNOLOGY.

The hacker uses CLEVER AND SOPHISTICATED methodology to obfuscate, 
just like in a spy movie, or exactly like in a hacker book.

For example you may say "why hack banana, you can hardly have the 
book delivered"  It's dumb.  In fact, all of the above from IP to egn 
may be a ploy -- obviously, a hack on Banana would be noticed 
immediately, so all the info above could just be a deliberate false 
trail to waste the time of those investigating.

This is *not* just some bumbling idiot. It's a hacker or group out to 
actually *do crime* carefully.



egold and GoldMoney have to SERIOUSLY look into their security right now.

All market makers that handle big volumes of gold have to SERIOUSLY 
think about security.


You'll never know how bad it feels to be hacked until it happens to 
you.  Ask someone who's been hacked and lost $.


Hope it helps, JP


-- 

---
You are currently subscribed to e-gold-list as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.

Reply via email to