BEWARE of Betfair Security!

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • yukomon
    SBR Rookie
    • 09-23-14
    • 17

    #1
    BEWARE of Betfair Security!
    For a site that trades multi millions their security is crap. If someone knows your username and date of birth, they can hijack your account. Before you login in, all you need to do is click lost password/username, then enter your username, then date of birth and it will allow you to reset the password without any other verification...not even an email. You can simply enter the new password and hijack the account. I wanted another out on top of pinnacle and looked into betfair but once finding this out, there is no way i am opening an account. those of you with big money there, becareful.
    Last edited by yukomon; 09-29-14, 12:31 PM.
  • Russian Rocket
    SBR Aristocracy
    • 09-02-12
    • 43910

    #2
    sharp post
    Comment
    • jjgold
      SBR Aristocracy
      • 07-20-05
      • 388189

      #3
      Good report
      Comment
      • yukomon
        SBR Rookie
        • 09-23-14
        • 17

        #4
        how is this happening? Doesn't betfair have many big traders with account balances over million dollars? How can they let you change the password without even sending a resent password link to the registered email address? has there been any hijacking reports? maybe no body knew...but i doubt it. Well if you know friends username/date of birth, please change their password and hijack their accounts for shits and giggles so that the lazy betfair tech people will change improve the security.
        Comment
        • Russian Rocket
          SBR Aristocracy
          • 09-02-12
          • 43910

          #5
          Originally posted by yukomon
          how is this happening? Doesn't betfair have many big traders with account balances over million dollars? How can they let you change the password without even sending a resent password link to the registered email address? has there been any hijacking reports? maybe no body knew...but i doubt it. Well if you know friends username/date of birth, please change their password and hijack their accounts for shits and giggles so that the lazy betfair tech people will change improve the security.
          highjacking someone's acct is one thing...transferring money out of it is a whole different ball game
          Comment
          • jackbauerkim
            SBR Rookie
            • 09-29-14
            • 2

            #6
            I am a betfair user for almost 2 years now and I had no idea it was like this to change password. I just tried what the yukomon said and it is true that you can change the password of an account with just username and password.

            I have made withdrawals to my neteller account via betfair that was processed with in 24 hours. Someone who hijacks the account can change the betfair registered email to their own email address that is registered to their neteller or moneybookers and still request a withdrawal. If the accoutn qualifies for withdrawals with those methods, its vulnerable to getting money stolen if the actual account holder does not report the suspicious activity. If the withdrawal is processed to the wrong party~s netteller or withdrawal, wouldnt~it be too late to reverse it???
            Comment
            • Russian Rocket
              SBR Aristocracy
              • 09-02-12
              • 43910

              #7
              Originally posted by jackbauerkim
              I am a betfair user for almost 2 years now and I had no idea it was like this to change password. I just tried what the yukomon said and it is true that you can change the password of an account with just username and password.

              I have made withdrawals to my neteller account via betfair that was processed with in 24 hours. Someone who hijacks the account can change the betfair registered email to their own email address that is registered to their neteller or moneybookers and still request a withdrawal. If the accoutn qualifies for withdrawals with those methods, its vulnerable to getting money stolen if the actual account holder does not report the suspicious activity. If the withdrawal is processed to the wrong party~s netteller or withdrawal, wouldnt~it be too late to reverse it???
              yukomon creating a ghost acct is prohibited on this site...nice try though
              Comment
              • jjgold
                SBR Aristocracy
                • 07-20-05
                • 388189

                #8
                I'm on Rockets Acer computer right now

                Not much on it though because most of it's in Russian

                There's like 20 videos of that fukken drummer

                Rocket must be in a band
                Comment
                • Russian Rocket
                  SBR Aristocracy
                  • 09-02-12
                  • 43910

                  #9
                  Originally posted by jjgold
                  I'm on Rockets Acer computer right now

                  Not much on it though because most of it's in Russian

                  There's like 20 videos of that fukken drummer

                  Rocket must be in a band
                  coach I only use Sony for my hardware
                  coach I wish I could be in a band - I do have the talent
                  coach I'm just waiting on the offer
                  Comment
                  • jjgold
                    SBR Aristocracy
                    • 07-20-05
                    • 388189

                    #10
                    Where is that video of that girl playing pool?
                    Comment
                    • shaunovery
                      SBR Posting Legend
                      • 11-15-07
                      • 18143

                      #11
                      If you don't have an account why post this stuff
                      Comment
                      • Russian Rocket
                        SBR Aristocracy
                        • 09-02-12
                        • 43910

                        #12
                        Originally posted by jjgold
                        Where is that video of that girl playing pool?
                        playing pool with me?
                        I can make that vid public for a day if you want
                        Comment
                        • Russian Rocket
                          SBR Aristocracy
                          • 09-02-12
                          • 43910

                          #13
                          Originally posted by jjgold
                          Where is that video of that girl playing pool?
                          Comment
                          • jjgold
                            SBR Aristocracy
                            • 07-20-05
                            • 388189

                            #14
                            Rocket is your nickname Sasha??

                            Sasquatch?? Wtf??🎌

                            Video looks like it was shot in Russia
                            Comment
                            • Russian Rocket
                              SBR Aristocracy
                              • 09-02-12
                              • 43910

                              #15
                              Originally posted by jjgold
                              Rocket is your nickname Sasha??

                              Sasquatch?? Wtf??

                              Video looks like it was shot in Russia
                              Sasha is short for Alexander in Russia...and it's my name

                              Alex is short for Alexey in Europe
                              Comment
                              • Optional
                                Administrator
                                • 06-10-10
                                • 60683

                                #16
                                Confirmed that you can change password with the account name plus DOB

                                But an email is sent to alert you it has happened.
                                .
                                Comment
                                • sourtwist
                                  SBR Hall of Famer
                                  • 11-10-12
                                  • 9364

                                  #17
                                  Rocket she would def be good at pocket pool, def not good at table pool
                                  Comment
                                  • jjgold
                                    SBR Aristocracy
                                    • 07-20-05
                                    • 388189

                                    #18
                                    I like that name Sasha
                                    Comment
                                    • Russian Rocket
                                      SBR Aristocracy
                                      • 09-02-12
                                      • 43910

                                      #19
                                      Originally posted by sourtwist
                                      Rocket she would def be good at pocket pool, def not good at table pool
                                      we both suck at pool twister...but you always let the girl win
                                      Comment
                                      SBR Contests
                                      Collapse
                                      Top-Rated US Sportsbooks
                                      Collapse
                                      Working...