As you may have noticed, the forum was offline for a period. We identified a security incident to Sportsbook Review Forum and took the site offline as a containment step while we investigated.
We wanted to make sure the system and site were restored and secured before bringing things back online and you will see that we are requiring all forum users to reset their password as a precautionary step.
If you have any questions, our moderators are around and happy to help where they can.
Optional have you ever heard some Euro book had problem like that,or Aussie facing book? Only some Costarican books.
My opinion is they cant be A+ with so many security breaches...
Comment
lonnie55
SBR MVP
04-08-16
2689
#212
Originally posted by moojoo
Optional have you ever heard some Euro book had problem like that
tipico has a massive problem with hacked accounts. You can find out when you google in German "tipico gehackt"
I'm not sure how big tipico in other countries is but in Germany it's THE sportsbook right now with big TV campaign and around 1,000 shops
Comment
sweep
SBR Posting Legend
10-09-10
16755
#213
Not sure why SBR is pulling the sheets over this issue.....not like its the first time or the 5th for that matter. Address it, solve it, move on
Comment
Optional
Moderator
06-10-10
64453
#214
Originally posted by moojoo
Optional have you ever heard some Euro book had problem like that,or Aussie facing book? Only some Costarican books.
My opinion is they cant be A+ with so many security breaches...
We've had complaints about hacked accounts at many books. It's usually the players device/email compromised though, so not really a book-centric problem generally. But it happens everywhere to some extent.
There does seem to have been more instances of this with BOL this year than we'd expect from one book. That could simply mean one determined 'hacker' chases around for info on people with BOL accounts and targets them though. It's not automatically a security problem or an inside job or anything nefarious or slack on the book's side.
If you had to deal with books who don't act fairly when this comes up you'd also appreciate it like I do when you see a book act fairly and without fear of looking bad for it.
I have another case right now for a similar amount gone missing at another book. The player had arranged additional account security which the book did not follow and that book is simply saying it's not our problem. This is the more common position of books when this comes up.
Comment
jjgold
SBR Aristocracy
07-20-05
388201
#215
at the betonline complaints
seems like bonus whores with multiple accounts or scammers
Comment
moojoo
SBR Wise Guy
09-02-16
938
#216
Originally posted by Optional
We've had complaints about hacked accounts at many books. It's usually the players device/email compromised though, so not really a book-centric problem generally. But it happens everywhere to some extent.
There does seem to have been more instances of this with BOL this year than we'd expect from one book. That could simply mean one determined 'hacker' chases around for info on people with BOL accounts and targets them though. It's not automatically a security problem or an inside job or anything nefarious or slack on the book's side.
If you had to deal with books who don't act fairly when this comes up you'd also appreciate it like I do when you see a book act fairly and without fear of looking bad for it.
I have another case right now for a similar amount gone missing at another book. The player had arranged additional account security which the book did not follow and that book is simply saying it's not our problem. This is the more common position of books when this comes up.
I appreciate your respons. But 1 thing is bugging me,wouldnt hacker try to steal his money especially with btc transfers that cant be reversed. I cant think of that people spending time just to penetrate you up and not take your money.
Lonnie i didnt know about Tipico problems. Can you tell us more what they are about,because to be honest im only at SBR forum, not even local in my country if there is any.
Comment
ki dice
SBR MVP
10-31-14
1182
#217
These books need to be held accountable just like the players when shit like this happen
Comment
ki dice
SBR MVP
10-31-14
1182
#218
How about an apology from them.The poor poster wanted to give out donations of his own money that got taken away.How about the book being held accountable and say you know what can we do to make you’re experience here more pleasant in the future.Cater to the player no one should have to go through 50 grand of there money just disappearing like that
Comment
qsgsg
SBR High Roller
07-14-18
106
#219
Originally posted by moojoo
I appreciate your respons. But 1 thing is bugging me,wouldnt hacker try to steal his money especially with btc transfers that cant be reversed. I cant think of that people spending time just to penetrate you up and not take your money.
Lonnie i didnt know about Tipico problems. Can you tell us more what they are about,because to be honest im only at SBR forum, not even local in my country if there is any.
1. Hacker hired by other books to tarnish reputation of other books.
2. Or hacker hired by the company itself to hack into their own system (probably with some help of course) to clean up the account.
Although the 2nd may sound ridiculous, it could absolve any staff or prevent whistleblowing.
Comment
qsgsg
SBR High Roller
07-14-18
106
#220
Originally posted by timdog12
New update On my account. The 36k was fully issued back to my account. Much respect to betonline man. I got to say didn’t know what to expect at all. I appreciate all the hard work the betonline team put in during this investigation.
Glad to hear you got your winnings back. Also great job on the SBR mediators end.
Comment
lonnie55
SBR MVP
04-08-16
2689
#221
Originally posted by moojoo
Lonnie i didnt know about Tipico problems. Can you tell us more what they are about
Actually all the cases are pretty similar to those at Betonline. People complained about their funds being transferred to the Casino and gambled away. Some reports were about withdrawals to foreign bank accounts. In the end most of the cases got resolved AFAIK.
Comment
shari91
BARRELED IN @ SBR!
02-23-10
32661
#222
Everyone - including myself - needs to be extremely careful with the information we post online anywhere, especially on a forum dedicated to sports and gambling. Even after dealing with hacking complaints for many years, I still have had alerts from a couple of sportsbooks that someone is attempting to access my account and they're wanting to verify if it's me. Lou wrote a very helpful article that after re-reading it just now let me know that I've been a bit complacent with passwords, etc so I'll be off to correct that immediately. If you get a chance, have a look... it's not a long one. https://www.sportsbookreview.com/spo...hackers-75308/
Oh and please don't blast all the personal info that timdog and many of us have on here in the future. When new accounts attempt to sign up here we look at each one to prevent fraud/multi-accounting/etc and it's astonishing how much information that pops up even if you select a username that's nothing like your real one. And I'm nowhere near a techie so imagine what a determined hacker could do! At our core we're creatures of habit with usernames and such and there'll always be at least one giveaway to find out who you are if someone really wanted to so stay alert and be as careful as possible especially with your passwords.
Comment
icon
SBR MVP
01-09-18
3477
#223
Originally posted by shari91
I've been a bit complacent with passwords, etc
Nobody should be using passwords. What I mean is that no password should be made entirely of any words. Best thing to do is use a password manager such as Lastpass or Roboform and use them to create passwords, they will create strong passwords that cannot be cracked with a dictionary hack or brute force attack. They will also store your passwords and autofill when you visit a login page.
Something like
L9@TmwE4YuErh^HQ19^R9$fa
would be almost impossible to crack.
Comment
shari91
BARRELED IN @ SBR!
02-23-10
32661
#224
Originally posted by icon
Nobody should be using passwords. What I mean is that no password should be made entirely of any words. Best thing to do is use a password manager such as Lastpass or Roboform and use them to create passwords, they will create strong passwords that cannot be cracked with a dictionary hack or brute force attack. They will also store your passwords and autofill when you visit a login page.
Something like
L9@TmwE4YuErh^HQ19^R9$fa
would be almost impossible to crack.
Thanks for this. I remember thinking one day that I had to look for a way to get an auto-generated password and I guess I just forgot about it. Will definitely do it tonight
Comment
euronet
SBR Hustler
05-25-18
71
#225
My advice is that using only one browser for all betting sites + ewallets, crypto exchanges, emails gmail/yahoo (and ofcours sbr ) In that browser do not open facebook, news portals, anything with agressive ads, JavaScripts - popups, etc.
Comment
shari91
BARRELED IN @ SBR!
02-23-10
32661
#226
Originally posted by euronet
My advice is that using only one browser for all betting sites + ewallets, crypto exchanges, emails gmail/yahoo (and ofcours sbr ) In that browser do not open facebook, news portals, anything with agressive ads, JavaScripts - popups, etc.
Wow that's great advice too! I seriously would never have thought of that. Thank you
Comment
Shutup
SBR MVP
12-15-17
2435
#227
Looks like the doggy is gone. If I made 500 k a year I would just build my bankroll to a ridiculous level. You can spread it out over a few books just in case one screws you. But, I guess he took his money and is going home
Comment
Optional
Moderator
06-10-10
64453
#228
Originally posted by icon
Nobody should be using passwords. What I mean is that no password should be made entirely of any words. Best thing to do is use a password manager such as Lastpass or Roboform and use them to create passwords, they will create strong passwords that cannot be cracked with a dictionary hack or brute force attack. They will also store your passwords and autofill when you visit a login page.
Something like
L9@TmwE4YuErh^HQ19^R9$fa
would be almost impossible to crack.
I agree and use Roboform myself.
But an easier way which is just about as effective is to use a phrase with proper nouns and slang (non dictionary words) that is easy for you to remember.
"Hilary is the worst Clinton and I'd get all gobbly gook eating jello with Trump". is a good phrase for example.
This doesnt help you having different passwords for each site. But it is just as hard to brute force crack as random characters. Gives you 50% of the vlaue of Roboform.
Comment
icon
SBR MVP
01-09-18
3477
#229
Originally posted by Optional
I agree and use Roboform myself.
But an easier way which is just about as effective is to use a phrase with proper nouns and slang (non dictionary words) that is easy for you to remember.
"Hilary is the worst Clinton and I'd get all gobbly gook eating jello with Trump". is a good phrase for example.
This doesnt help you having different passwords for each site. But it is just as hard to brute force crack as random characters. Gives you 50% of the vlaue of Roboform.
The main reason I use a password manager/form filler Roboform or Lastpass is because they fill in the username and password fields. I can't imagine having to type in a phrase everytime I want to log in to a book.
BTW I used to be a huge Roboform fanboy, used it for years waaay back at version 4 and all the way up to version 7. Roboform pissed off a lot of their customers when they reneged on their "free upgrades for life" after version 6.
Right now I use and prefer Lastpass, first off its free for personal use on a PC and secondly it seems to be more intuitive than Roboform. Both are excellent though.
Comment
Optional
Moderator
06-10-10
64453
#230
Originally posted by icon
The main reason I use a password manager/form filler Roboform or Lastpass is because they fill in the username and password fields. I can't imagine having to type in a phrase everytime I want to log in to a book.
BTW I used to be a huge Roboform fanboy, used it for years waaay back at version 4 and all the way up to version 7. Roboform pissed off a lot of their customers when they reneged on their "free upgrades for life" after version 6.
Right now I use and prefer Lastpass, first off its free for personal use on a PC and secondly it seems to be more intuitive than Roboform. Both are excellent though.
I might try lastpass. The recent upgrades to Roboform make it not only less useful, and it hangs Firefox sometimes too.
Hope I can import from roboform.
I do like that I can lose my laptop and be able to go buy a brand new one and have my roboform passwords available easily though. Does last pass do that?
Comment
icon
SBR MVP
01-09-18
3477
#231
Originally posted by Optional
I might try lastpass. The recent upgrades to Roboform make it not only less useful, and it hangs Firefox sometimes too.
Hope I can import from roboform.
I do like that I can lose my laptop and be able to go buy a brand new one and have my roboform passwords available easily though. Does last pass do that?
You can import from Roboform, FYI using Firefox is recommended when performing the import.
Also a BIG heads up. When importing into Lastpass there is a bug where passwords containing the character "&" will be copied as "&" and will make logins containing the & character fail.
Yes, Lastpass does that.
Comment
milwaukee mike
BARRELED IN @ SBR!
08-22-07
27261
#232
i wouldn't use a computer-generated password, that gives one more site access to your password
like the people who use "life-lock" and then give EVEN MORE people their personal info thinking that gives them protection... or the people that were shocked when equifax data was breached
Comment
lonnie55
SBR MVP
04-08-16
2689
#233
Originally posted by milwaukee mike
i wouldn't use a computer-generated password, that gives one more site access to your password
like the people who use "life-lock" and then give EVEN MORE people their personal info thinking that gives them protection... or the people that were shocked when equifax data was breached
Exactly my thoughts. I don't see why I should give all my passwords to one provider. I'm not a techie though so I can not really say if this or that is safe or not. It just feels wrong.
Comment
Optional
Moderator
06-10-10
64453
#234
Originally posted by milwaukee mike
i wouldn't use a computer-generated password, that gives one more site access to your password
like the people who use "life-lock" and then give EVEN MORE people their personal info thinking that gives them protection... or the people that were shocked when equifax data was breached
Data is encrypted. It can't be read on their end even if it was hacked.
Anything you choose is a compromise though.
Remembering your logins/passwords is convenient but without an identic memory it's not really possible to mix things up too much.
If you want to use different and complex passwords as well as differing login name styles you have to keep a record somewhere.
So it's a piece of paper and lots of typing, or a well known password manager as the only realistic options.
You don't have to keep a backup on their servers btw. But i like that option when I have so many and quite a few I might only use once every year or two.
Comment
semibluff
SBR MVP
04-12-16
1517
#235
Originally posted by icon
Nobody should be using passwords. What I mean is that no password should be made entirely of any words. Best thing to do is use a password manager such as Lastpass or Roboform and use them to create passwords, they will create strong passwords that cannot be cracked with a dictionary hack or brute force attack. They will also store your passwords and autofill when you visit a login page.
Something like
L9@TmwE4YuErh^HQ19^R9$fa
would be almost impossible to crack.
From a security standpoint information is, (or at least was), stored in blocks of 7 characters. If you're using only lower case letters each block has 26^7 possibilities. If you have more than 1 block then they're added rather than multiplied. So a 14 digit password would be 26^7 plus 26^7 rather than multiplying the 2. If you use upper and lower case letter then obviously each 26 becomes 52. If you add numbers and punctuation that 52^7 becomes 72^7. A minimum of 3 blocks, (15 characters), is recommended but it's also why 8 is normally the minimum. The problem with passwords such as you suggest is that they're almost impossible to remember. If you're going to go down that route, and it's a good solid route, then you're probably better off creating multiple complex passwords and saving them on a simple notepad or wordpad file that is put inside a simple .rar, .zip or .7z file with a password on your device rather than using a password manager. Obviously you keep a back-up of that encrypted file on another device or flash drive. At a push save the encrypted file to a site like 4shared so you can retrieve it using a different device. Encrypting a file is easy. winRAR is effectively free. b1 IS free but takes up more space. Personally I use b1 because it isn't limited to standard unicode characters. L9@TmwE4YuErh^HQ19^R9$fa would take an eternity to crack, but it would still be cracked before ♙-K4.
Comment
sweep
SBR Posting Legend
10-09-10
16755
#236
Originally posted by Optional
Data is encrypted. It can't be read on their end even if it was hacked.
Anything you choose is a compromise though.
Remembering your logins/passwords is convenient but without an identic memory it's not really possible to mix things up too much.
If you want to use different and complex passwords as well as differing login name styles you have to keep a record somewhere.
So it's a piece of paper and lots of typing, or a well known password manager as the only realistic options.
You don't have to keep a backup on their servers btw. But i like that option when I have so many and quite a few I might only use once every year or two.
forward this to the head bloke at betonline
Comment
milwaukee mike
BARRELED IN @ SBR!
08-22-07
27261
#237
Originally posted by Optional
Data is encrypted. It can't be read on their end even if it was hacked.
Anything you choose is a compromise though.
Remembering your logins/passwords is convenient but without an identic memory it's not really possible to mix things up too much.
If you want to use different and complex passwords as well as differing login name styles you have to keep a record somewhere.
So it's a piece of paper and lots of typing, or a well known password manager as the only realistic options.
You don't have to keep a backup on their servers btw. But i like that option when I have so many and quite a few I might only use once every year or two.
oh really? then how can someone show me how to get roboform information in 2 minutes on youtube?
simply by deleting a specific line (pref_pincode) in the RoboForm’s preferences file placed in a folder on the device file system, It was possible for Moore to access confidential data and bypass authentication process on an Android device
Comment
milwaukee mike
BARRELED IN @ SBR!
08-22-07
27261
#238
also nobody finds it strange that roboform/lastpass/etc are all headquartered right down the road from the cia?
Comment
Optional
Moderator
06-10-10
64453
#239
Originally posted by milwaukee mike
oh really? then how can someone show me how to get roboform information in 2 minutes on youtube?
simply by deleting a specific line (pref_pincode) in the RoboForm’s preferences file placed in a folder on the device file system, It was possible for Moore to access confidential data and bypass authentication process on an Android device
Not good, but thats a 4 year old public report of a fault in an initial Android version.
Thye update the software a lot. I trust their security personally.
But if being too close to a CIA building is enough to scare you off, I don't think you will
Whilst I agree using the most popular security program like this is often not a good choice, as it will be a popular target, I think it's still smarter than any alternative.
Seriously, how else do you use unique/tough passwords for every site you use otherwise?
Comment
milwaukee mike
BARRELED IN @ SBR!
08-22-07
27261
#240
Originally posted by Optional
Not good, but thats a 4 year old public report of a fault in an initial Android version.
Thye update the software a lot. I trust their security personally.
But if being too close to a CIA building is enough to scare you off, I don't think you will
Whilst I agree using the most popular security program like this is often not a good choice, as it will be a popular target, I think it's still smarter than any alternative.
Seriously, how else do you use unique/tough passwords for every site you use otherwise?
just make up something random that would be difficult to copy/find
don't need a piece of software to come up with "jamala020202@!" and nobody would ever guess that, yet it is easy enough to remember
Comment
Optional
Moderator
06-10-10
64453
#241
Originally posted by milwaukee mike
just make up something random that would be difficult to copy/find
don't need a piece of software to come up with "jamala020202@!" and nobody would ever guess that, yet it is easy enough to remember
They dont guess your passwords most of the time. They break into your email and get all the info from there.
And that's why using the same password at multiple sites is dangerous, as once they have one, they will often try it on your other accounts, as they know people have no choice of they want to remember them.
Comment
milwaukee mike
BARRELED IN @ SBR!
08-22-07
27261
#242
Originally posted by Optional
They dont guess your passwords most of the time. They break into your email and get all the info from there.
And that's why using the same password at multiple sites is dangerous, as once they have one, they will often try it on your other accounts, as they know people have no choice of they want to remember them.
oh absolutely, that's terrific advice, and don't even share account numbers let alone use similar passwords
forgetting a password is less of a deal than having one stolen
How does LastPass work? Our secure password manager saves, stores, and organizes all your passwords and logins in a vault encrypted to your device. Easily access and autofill account information all over the web.
GoTo Support is here for all your GoTo products. Download, install, test, read popular topics, user guides, and find resources that will help you use your product.
Comment
milwaukee mike
BARRELED IN @ SBR!
08-22-07
27261
#245
i will have to defer to you guys then and apologize, tech is not my strong suit
i just see the end result where people have to use a pin number for irs, since they have had their identity stolen, and almost every time it's been someone anal that uses lifelock or similar stuff... so in my head it's often the guardians/protectors who are also the thieves