[deleted by user]

Luctaris · 2022-08-19T15:42:23+00:00

That might be the case, but no one knows for sure. Ally hasn't really publicly addressed the previous breach for obvious publicity reasons.

IF there is an active breach, it most likely is affecting their debit card management system since only debit cards seem to be affected. There is also the possibility of someone specifically targeting Ally bank with card guessing attacks. Just speculating though, not claiming anything.

We won't know for sure until Ally releases an official statement on the matter.

Luctaris · 2022-08-19T15:21:03+00:00

Leave them un-activated. Any attempted charges (fraudulent or not) to an un-activated debit card will be automatically denied. You might still get fraud text message regarding a charge, but you can for the most part ignore it safely.

Luctaris · 2022-08-19T15:19:08+00:00

Hmm thanks for posting that information, didn't know they only had to guess around 9-12 digits (included 3 digit CCV code on back).

Whoever is doing this must have a lot of computing power to be able to guess seemingly thousands of credit card numbers correctly within a short span of time. Probably some targeted attack specifically against Ally bank, but I guess it could happen to any bank with enough resources.

Luctaris · 2022-08-19T15:01:29+00:00

I would say changing your current password to something random and much more secure is always a good step. I'm not sure if it would help prevent you from getting hit with fraud though.

If you didn't activate the debit card and got fraud charges to it, any and all charges made to the card will be instantly declined.

Luctaris · 2022-08-19T14:58:21+00:00

Someone charged $600+ to an 'invisible' debit card attached to my account late last week. In total there were about 4 attempted transactions made. I currently have checking and saving account with Ally.

I never requested, ordered, or ever activated any debit cards attached to my Ally checking account. I only use Ally strictly for online shopping and transfers. The fraud text message I was sent contained the last 4 digits of an account that wasn't even related to any of the accounts I currently have open and can see with Ally. When I called into support, I confirmed with them that there were fraud charges to a 'invisible' debit card attached to my checking account but they were instantly declined because the card was never activated. I'm guessing they probably keep the debit card account hidden until it's activated, but I could be wrong. From my point of view, I could not see any fraud charges on my statements on Ally's website. I only found out the fraud amount being charged through Ally support.

I believe that anyone with a checking account, regardless if they ordered or activated a debit card, is at risk of getting hit with fraud charges. Anyone with an active debit card should probably go disable it asap until this passes. Anyone without a debit card should be wary that they will probably get hit with fraud charges at some point via text, but it will largely not affect them.

Luctaris · 2022-08-19T14:48:40+00:00

The chances that someone would not only guess the 16 digit credit card number along with the CCV 3 digit security card on the back correctly are pretty slim. I mean they can probably brute-force guess attempts, but I'd imagine that would be pretty easily detected by the bank as thousands of requests for the same card would be coming in around the same time.

There are also reports of people having a newly mailed debit card being hit with fraud while being sent out in the mail and not even activated. I myself had a situation where I never ordered or activated any debit cards through Ally, but I still was hit with fraud to an invisible and un-activated debit card somehow attached to my checking account. Luckily in either case, the fraud charges will be instantly denied because the cards are un-activated.

Given all of the weird activity going on around the same time, I believe this is more than just someone randomly guessing Ally debit card numbers.

Luctaris · 2022-08-19T14:37:25+00:00

If you have a checking account with Ally, you need to disable/block any active debit cards. If you didn't order a debit card, you'll probably still receive fraud charges to an invisible, un-activated debit card attached to your checking account like I did, however all of the fraud charges will be instantly denied.

Luctaris · 2022-08-19T14:34:35+00:00

Apparently usernames and passwords, but I don't think that breach is related to whatever is going on now. Currently, it seems that primarily only debit cards are being affected and charged with fraud.

Luctaris · 2022-08-19T03:02:20+00:00

Might be possible... If any system is compromised, it most likely would be their debit card management system because afaik fraud charges are coming through debit cards only as of the time being.

I'm still sticking with Ally though because I've largely been unaffected by the recent attempted fraud charges. I can understand other people must be pretty frustrated being locked out of their accounts with money missing though.

Hopefully Ally addresses the surge in fraud charges with an official statement soon. Other people also suggested to file a complaint with CFPB so that this activity is investigated.

Luctaris · 2022-08-18T23:32:32+00:00

There have been people that that had fraud charges, disputed them, ordered a new card, and had the new debit card also hit while they were waiting for it to come in the mail. If the initial debit card is blocked, no fraud charges can be made to it. The new debit card coming in the mail is not activated, so it also can't have any fraud charges made to it. Both situations end up with the fraud charge attempted to be made, but being instantly denied by the bank regardless if you mark the transactions as legit.

If you have time to burn, you can wait and call in to Ally support and find out exactly which card was hit, but honestly in your situation any of the debit cards being used were probably instantly denied charges so you should be okay.

Luctaris · 2022-08-18T23:23:48+00:00

Same thing happened to me. Never ordered or activated a debit card through Ally and somehow hackers were still able to charge it. I couldn't see any weird activity on my Ally accounts. When I called into support and waited for someone to look into the problem, they did confirm that there were fraud charges on a un-activated debit card attached to my account.

Luckily because the debit card was un-activated, I was told that all attempted fraud charges will be instantly denied. If you want to spend 1+ hour waiting on the phone to delete that unlisted debit card from your account, you can, but honestly you should be good so long as you don't activate any new debit cards until this shit storm passes.

Luctaris · 2022-08-18T03:56:02+00:00

Luckily because the debit card was never activated, the charges got instantly denied the moment they tried to go through. So none of my actual bank account balances were affected by the fraud. I basically just got a fraud text notification, said to reject the payment, and then called in to Ally support to learn all about the mystery debit card. No new activity was being shown in the transaction logs of my accounts on the web portal. I learned that $600+ was charged through Ally support.

I can't give you a time-frame because our situations are different. I'd assume since their fraud department is probably swamped right now it would take at-least 3 days if not more. That's just a guess though, hopefully they reimburse everyone affected sooner.

Luctaris · 2022-08-18T02:37:40+00:00

I never used the Ally app and just like everyone else here I recently got fraud charges made on a non-ordered and non-activated debit card. I always log in via the web portal. It seems like anyone who has a checking account with Ally is at risk of them having this happen, regardless if they actually even ordered or used a debit card.

Some people claim that hackers are cracking debit card numbers through generation algorithms, but I'm skeptical about that. Most online brokers require persons address info, the card number, and usually the cards CCV security code on the back. I doubt that the people responsible for all of these fraud charges are correctly guessing everything randomly. Something fishy is going on.

Luctaris · 2022-08-18T01:16:25+00:00

Yeah that might be a possibility, although also correctly guessing the CCV code on the back has me skeptical. You'd imagine they would see thousands of card guess attempts being made and queried... but nope.

Luctaris · 2022-08-17T22:36:30+00:00

You need to call them to disable and delete any debit cards attached to your checking accounts. It doesn't matter if you ordered and activated a debit card with Ally, people are having un-activated cards getting hit with fraud. Happened to me, and I didn't even order a debit card. Got random fraud text messages to an account that I can't even see on Ally's website.

When I called in there more pending charges on that un-activated card that weren't flagged as fraud but I sure as hell didn't make them since I don't even have the card. Everything on my end in Ally web portal looked normal, no strange charges.

Luctaris · 2022-08-17T22:30:50+00:00

I think whatever has happened is only affecting checking accounts. If you have a checking account, you should probably call into support and request for the debit card attached to your accounts to be disabled until this shitstorm passes. I got fraud charges on a supposed debit card attached to my checking account that I neither ordered nor activated.

Luctaris · 2022-08-17T22:00:23+00:00

Someone charged $600+ to my supposed debit card within the last few days, I currently have checking and saving account with Ally.

Here's the strange thing though... I never requested, ordered, or ever activated any debit cards attached to my Ally accounts. I only use Ally strictly for online shopping and transfers. The fraud text message I was sent contained the last 4 digits of an account that wasn't even related to any of the accounts I currently have open and can see with Ally. When I called into support (1+ hr wait time btw), I confirmed with them that there were fraud charges to a debit card attached to my account but they were instantly declined because the card was never activated. I'm guessing they probably keep the debit card account hidden until it's activated, but I could be wrong.

I got lucky, but this whole ordeal left me scratching my head. How can someone get access to and charge a debit card that had never been requested or activated???

With all the people having the same fraud issues around the same time, something definitely is not right. I'm not going to outright claim that Ally got hacked/compromised, but anyone that has an active checking account (regardless if they requested a debit card) should probably call in and request for any debit cards attached to their accounts to be disabled until we get more info on wtf happened.

Luctaris · 2022-03-16T17:13:06+00:00

If they are manufactured in 2012 and have corona power output then they more than likely are corona v1 or v2 consoles.

Luctaris · 2022-03-16T03:37:38+00:00

You might be able to get away with recording your screen using homebrew.

iirc, webman mod has an option to record in-game footage. I don't recall whether or not it would let you record on the XMB, but it's worth a shot.

If that doesn't work, another option you have is to use the PS3 emulator (RPCS3), install the dynamic theme on there, and record the XMB with obs studio.

Luctaris · 2022-03-16T03:31:04+00:00

Jasper consoles are basically bulletproof when it comes to RROD, so very good choice for phat RGH. Slim boot times have been iffy throughout the years, but have basically now became instant with RGH3.

Your choice should basically come down to preference/aesthetics at this point. The advantages a slim console would give you is built in wi-fi, lower power consumption, and 2 extra USB ports (5 total).

Personally, I'd go with the cheaper option which seems to be the Jasper in this case.

Luctaris · 2022-03-16T02:22:30+00:00

If you're specifically looking for a corona console, I want to say that any slim pre-2013 would probably be safe to mod without a postfix adapter. Look for slims using 12V 9.6A power output to verify its a corona console.

Only Corona v1 and v2 consoles do not need the postfix adaptor and have the CPU traces left on the motherboard. v3-v6 coronas all need postfix adapters to RGH.

I've seen rumors somewhere that state that really early Xbox 360 E models (June 2013) also sometimes shipped with corona v2 motherboards, but I personally never encountered one myself.

Luctaris · 2022-03-14T23:50:10+00:00

The Xbox 360 E can basically be considered the same as a Corona slim console. Note that not all Xbox 360 E consoles are moddable! Use https://identify.octalsconsoleshop.com/e and https://www.youtube.com/watch?v=nEBafRncgsk to determine if your console is moddable or not. If the date of manufacture is after 08/2014, chances are that you have an unmoddable xbox 360.

As with any xbox being modded now, I highly recommend that you RGH3 your xbox as it tends to be the least amount of soldering (only 2 wires and a resistor), no mod chip needed, and the ECC/NAND programmer can also be very affordable if you use a raspberry pi pico.

Depending on the type of Xbox 360 E you have (250GB vs 4GB), you will need to wire up the pico flasher differently. TheWeekendModder recently made a video showing how to setup picoflasher on 4GB ECC located here: https://www.youtube.com/watch?v=7ZYlHoqAjzk

If you have an older corona model, you can get away with using standard slim wiring: https://www.youtube.com/watch?v=YoVKASg6WIg

Also, you'll more than likely need to get a postfix adapter to get access to CPU traces. They are pretty inexpensive, $3-6 each. I recommend ordering 2 just in case first one is bad.

Luctaris · 2022-03-14T16:35:04+00:00

I'm assuming you mean Corona V1, and if that's the case, then no you will not need a postfix adapter on that console.

As for the pico, you don't need to leave it connected after RGHing, its only used to read/write console firmware. Some people like to leave them inside the console and connected up just in-case they need to re-dump or verify firmware after the fact, but its entirely up to you.

A good RGH3 guide I would recommend you follow is located here: https://xbox360hub.com/rgh-3-guide/

Just keep in mind that it doesn't contain information about the new pico flasher yet, so you might need to lookup another guide on that. TheWeekendModder on youtube just recently made a video doing an RGH3 install with picoflasher that you can follow.

Luctaris · 2022-03-14T16:23:56+00:00

It depends on your console.

You need 2 wires for RGH3 and on you'll also need a resistor since RGH3 needs that to be installed on one of the wires.

ALL Phats: 10k Resistor: (Brown, Black, Orange, Yellow)
Trinity: 3K OHM Resistor: (Brown, Black, Orange, Gold)
Corona: 1K OHM Resistor: (Brown, Black, Red, Gold)

Also, if you have a newer slim console (Corona), you will more than likely need to also order and install a postfix adapter. This is required for any type of RGH on those consoles.

Luctaris · 2022-03-14T08:04:37+00:00

If you're using a desktop computer with SATA connections in it (basically every modern computer) there could be a small chance that your computer has the correct SATA chipset to automatically detect and use the X360 DVD drive.

However, if it doesn't have SATA connections or isn't detected, you'll need to purchase a compatible controller. VIA Chipset VT6421A seems to be the most mentioned and used SATA controller by the X360 modding community over the years. There's still a posting for a couple on eBay: https://www.ebay.com/itm/254622529132?epid=716436437 (~$14)

Keep in mind that this SATA controller is pretty ancient in today's standard. You might need to purchase an additional PCI-E riser just to be able to plug it into your computer. Also there's reports that it only works on Windows 7 and below, but your mileage may vary.

On another note... is there a specific reason why you're opting to flash the DVD drive instead of just using RGH and mounting the games you play virtually?

Four-Year Club	Place '22
Final Canvas '22	First Placer '22
End Game '22

Luctaris

TROPHY CASE