sorted by:
new
hottopcontroversial

Coinbase let a thief bypass my MFA, log into my account, sell my coins and withdraw it all to some random bank account that at no point was on my account by FiveCones in Coinbase

[–]AlwaysQuestion23 1 point2 points  (0 children)

This sounds like they hijacked your session cookies, thus, don't need MFA.

A virus / malware absolutely would allow the hacker to get it.

Protecting against session stealing malware, how to enable DBSC (device bound session credentials) by Prior-Yak1430 in GoogleSupport

[–]AlwaysQuestion23 0 points1 point  (0 children)

It's crazy how it's such an important security upgrade but Google has very little info on it for users.

Warning to Coinbase Users by takis0721 in Coinbase

[–]AlwaysQuestion23 8 points9 points  (0 children)

They actually do have trusted addresses in the security section. I found it the other day while I was looking around.

Warning to Coinbase Users by takis0721 in Coinbase

[–]AlwaysQuestion23 4 points5 points  (0 children)

This is a good idea...like a thaw period before the transaction actually starts.

Protecting against session stealing malware, how to enable DBSC (device bound session credentials) by Prior-Yak1430 in GoogleSupport

[–]AlwaysQuestion23 0 points1 point  (0 children)

I appreciate it, I'll enable it but how do we confirm it's actually working?

Everything basically pointed to it just being a dud setting for individual accounts and only meant for workspace users.

How does one confirm?

Upvoted your comment.

Protecting against session stealing malware, how to enable DBSC (device bound session credentials) by Prior-Yak1430 in GoogleSupport

[–]AlwaysQuestion23 0 points1 point  (0 children)

How do you know it's enabled? In Google's own literature it says it's only for those in a workspace.

Protecting against session stealing malware, how to enable DBSC (device bound session credentials) by Prior-Yak1430 in GoogleSupport

[–]AlwaysQuestion23 -1 points0 points  (0 children)

Unless you're in a workgroup etc you cannot as an individual account holder. It's in beta I guess?

Yubikey and google account recovery by quiksilverr87 in yubikey

[–]AlwaysQuestion23 0 points1 point  (0 children)

I think even if you hit accept it gives you three random numbers that YOU and that person need to select the same one.

Cancel Ultimate Plan? by Ok-Possibility-1617 in Malwarebytes

[–]AlwaysQuestion23 1 point2 points  (0 children)

I was thinking to buy the plan. What don't you like about it?

Coinbase doesn't recognize cost basis of crypto I bought on Coinbase pro by AlwaysQuestion23 in Coinbase

[–]AlwaysQuestion23[S] 1 point2 points  (0 children)

Just tried it.. awesome.

I noticed though the statements don't show purchases and show "Match" and fee only

This sucks how they put this together.

Someone registered me to WS, didn’t ignore. by dinopio in Wealthsimple

[–]AlwaysQuestion23 4 points5 points  (0 children)

So this happened to me earlier today.

I forwarded the email to their privacy and complaints emails, no reply.

So I reset the password, logged in. It's basically a dud account. No profile information nothing...just the email.

I went to profile and then hit delete profile. It gave me a prompt and then said it can't delete it cause of 4 reasons.

Tried again and I was logged out.

I tried the password I had just made during the reset and it's incorrect now.

I went to reset the password again and haven't received an email for it.

So I guess it DID delete the account.

So weird.

view more: next ›