1. #1
    yukomon
    yukomon's Avatar Become A Pro!
    Join Date: 09-23-14
    Posts: 17

    BEWARE of Betfair Security!

    For a site that trades multi millions their security is crap. If someone knows your username and date of birth, they can hijack your account. Before you login in, all you need to do is click lost password/username, then enter your username, then date of birth and it will allow you to reset the password without any other verification...not even an email. You can simply enter the new password and hijack the account. I wanted another out on top of pinnacle and looked into betfair but once finding this out, there is no way i am opening an account. those of you with big money there, becareful.
    Last edited by yukomon; 09-29-14 at 12:31 PM.
    Nomination(s):
    This post was nominated 1 time . To view the nominated thread please click here. People who nominated: Russian Rocket

  2. #2
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    sharp post

  3. #3
    jjgold
    jjgold's Avatar Become A Pro!
    Join Date: 07-20-05
    Posts: 388,190
    Betpoints: 10

    Good report

  4. #4
    yukomon
    yukomon's Avatar Become A Pro!
    Join Date: 09-23-14
    Posts: 17

    how is this happening? Doesn't betfair have many big traders with account balances over million dollars? How can they let you change the password without even sending a resent password link to the registered email address? has there been any hijacking reports? maybe no body knew...but i doubt it. Well if you know friends username/date of birth, please change their password and hijack their accounts for shits and giggles so that the lazy betfair tech people will change improve the security.

  5. #5
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by yukomon View Post
    how is this happening? Doesn't betfair have many big traders with account balances over million dollars? How can they let you change the password without even sending a resent password link to the registered email address? has there been any hijacking reports? maybe no body knew...but i doubt it. Well if you know friends username/date of birth, please change their password and hijack their accounts for shits and giggles so that the lazy betfair tech people will change improve the security.
    highjacking someone's acct is one thing...transferring money out of it is a whole different ball game

  6. #6
    jackbauerkim
    jackbauerkim's Avatar Become A Pro!
    Join Date: 09-29-14
    Posts: 2

    I am a betfair user for almost 2 years now and I had no idea it was like this to change password. I just tried what the yukomon said and it is true that you can change the password of an account with just username and password.

    I have made withdrawals to my neteller account via betfair that was processed with in 24 hours. Someone who hijacks the account can change the betfair registered email to their own email address that is registered to their neteller or moneybookers and still request a withdrawal. If the accoutn qualifies for withdrawals with those methods, its vulnerable to getting money stolen if the actual account holder does not report the suspicious activity. If the withdrawal is processed to the wrong party~s netteller or withdrawal, wouldnt~it be too late to reverse it???

  7. #7
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by jackbauerkim View Post
    I am a betfair user for almost 2 years now and I had no idea it was like this to change password. I just tried what the yukomon said and it is true that you can change the password of an account with just username and password.

    I have made withdrawals to my neteller account via betfair that was processed with in 24 hours. Someone who hijacks the account can change the betfair registered email to their own email address that is registered to their neteller or moneybookers and still request a withdrawal. If the accoutn qualifies for withdrawals with those methods, its vulnerable to getting money stolen if the actual account holder does not report the suspicious activity. If the withdrawal is processed to the wrong party~s netteller or withdrawal, wouldnt~it be too late to reverse it???
    yukomon creating a ghost acct is prohibited on this site...nice try though

  8. #8
    jjgold
    jjgold's Avatar Become A Pro!
    Join Date: 07-20-05
    Posts: 388,190
    Betpoints: 10

    I'm on Rockets Acer computer right now

    Not much on it though because most of it's in Russian

    There's like 20 videos of that fukken drummer

    Rocket must be in a band

  9. #9
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by jjgold View Post
    I'm on Rockets Acer computer right now

    Not much on it though because most of it's in Russian

    There's like 20 videos of that fukken drummer

    Rocket must be in a band
    coach I only use Sony for my hardware
    coach I wish I could be in a band - I do have the talent
    coach I'm just waiting on the offer

  10. #10
    jjgold
    jjgold's Avatar Become A Pro!
    Join Date: 07-20-05
    Posts: 388,190
    Betpoints: 10

    Where is that video of that girl playing pool?

  11. #11
    shaunovery
    shaunovery's Avatar Become A Pro!
    Join Date: 11-15-07
    Posts: 18,143
    Betpoints: 103

    If you don't have an account why post this stuff

  12. #12
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by jjgold View Post
    Where is that video of that girl playing pool?
    playing pool with me?
    I can make that vid public for a day if you want

  13. #13
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by jjgold View Post
    Where is that video of that girl playing pool?

  14. #14
    jjgold
    jjgold's Avatar Become A Pro!
    Join Date: 07-20-05
    Posts: 388,190
    Betpoints: 10

    Rocket is your nickname Sasha??

    Sasquatch?? Wtf??🎌

    Video looks like it was shot in Russia

  15. #15
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by jjgold View Post
    Rocket is your nickname Sasha??

    Sasquatch?? Wtf??

    Video looks like it was shot in Russia
    Sasha is short for Alexander in Russia...and it's my name

    Alex is short for Alexey in Europe

  16. #16
    Optional
    Optional's Avatar Moderator
    Join Date: 06-10-10
    Posts: 57,792
    Betpoints: 9193

    Confirmed that you can change password with the account name plus DOB

    But an email is sent to alert you it has happened.

  17. #17
    sourtwist
    not a non pro
    sourtwist's Avatar Become A Pro!
    Join Date: 11-09-12
    Posts: 9,364
    Betpoints: 548

    Rocket she would def be good at pocket pool, def not good at table pool

  18. #18
    jjgold
    jjgold's Avatar Become A Pro!
    Join Date: 07-20-05
    Posts: 388,190
    Betpoints: 10

    I like that name Sasha

  19. #19
    Russian Rocket
    Kleptoman
    Russian Rocket's Avatar Become A Pro!
    Join Date: 09-02-12
    Posts: 43,910
    Betpoints: 533

    Quote Originally Posted by sourtwist View Post
    Rocket she would def be good at pocket pool, def not good at table pool
    we both suck at pool twister...but you always let the girl win

Top