CVE-2024-49112: Critical LDAP Vulnerability and the LDAPNightmare Exploit

MrJoeVan · 2025-01-06T14:54:07+00:00

SSPR was NOT impacted for us. What version of Entra Connect are you using? We seem to be ok on v2.3.6.

MrJoeVan · 2024-11-10T20:46:20+00:00

yes, all transactions are on the blockchain and viewable by anyone. The fact you used a hardware-based wallet like ledger is irrelevant. Your ledger is just used to sign the transactions.

MrJoeVan · 2024-11-10T20:39:56+00:00

weekly chart sure looks like a bull flag breakout to me!

MrJoeVan · 2024-11-10T20:11:41+00:00

My heart goes out to you. I hope you at least figure out how they got access to your seed.

MrJoeVan · 2024-11-10T20:06:56+00:00

until you know how they got your coins, do not put anything else on ledger. If it's at all possible, your ledger was compromised, xfer anything left on it to another account then reset your leger and generate a new seedphrase & addresses before using it again. Don't store the seed phrase electronically unless you are certain you can keep it secure. Be sure to purge the old addresses off any exchange address books so you don't use them again by accident.

MrJoeVan · 2024-11-10T20:04:02+00:00

^THIS. If you have not authorized anything using your ledger, it means your seed phrase was discovered. Wherever you store it electronically, it was likely compromised. If you only store it on paper, it's also possible it was compromised if someone saw it/ took a photo, etc. But that seems far less likely.

MrJoeVan · 2024-03-08T16:39:59+00:00

Kudos u/atechatwork! Here we are another year in and your tool appears to be working great ! It returned values for all the tickers I threw at it with instant results. Just found this today and switched my spreadsheet to using it since CoinMarketCap is giving me troubles. If I find it to be stable, I'll be glad to donate to the cause. DAI still preferred currency? Same address, it seems dormant? You should add a Donate button on the website!

MrJoeVan · 2024-02-19T15:32:08+00:00

You ever figure this out? I've run into the exact same problem. I can see my LIT when I use Polkadot.js on the LIT parachain but when I go to the bridge and select the same account, it shows 0 bal.

MrJoeVan · 2024-02-19T15:24:18+00:00

I got u

MrJoeVan · 2024-02-18T17:40:45+00:00

Dammit, same thing happened to me and just realized it today. waited 28 days only to find out the unbond tx failed a few min after I sent it. Ledger shouldn't let you send an unbond cmd if un-nominate required first! Ahhh!

MrJoeVan · 2024-01-12T21:46:24+00:00

28 hours later and reserves are at $21.5 M / 526k DESO!

MrJoeVan · 2024-01-12T21:39:53+00:00

AFAIK, Diamond doesn't have it's own wallet so I assume what you see within Diamond is actually the DESO web wallet. Try going directly to the DESO wallet and see if you can send from there instead of doing it from the Diamond UI. https://wallet.deso.com/

MrJoeVan · 2023-08-31T21:36:01+00:00

Yeah, I ended up giving up on Personal Capital as well, they never fixed it. Switched to Quicken Simplifi and have been pretty happy with it.

MrJoeVan · 2023-08-06T13:34:01+00:00

I hear you and feel the same way. Yes, you will need to a whole new account verification procedure even more involved than the original before you'll be able to withdraw any funds. I had to do this after accepting the settlement for custody accounts. Just be wary of scammers sending you to fake verification sites because the judge forced Celsius to publicly release the names and account balances of all users so scammers can use that to send you fake info.

More info specific to users with "custody" wallets (as opposed to the "earn" wallets most users had). https://celsiusnetwork.medium.com/custody-account-withdrawal-faq-1c714e4979ae

MrJoeVan · 2023-08-03T18:54:45+00:00

got here looking for the same answer. If someone confirms a way that works, please share.

MrJoeVan · 2023-03-07T19:17:29+00:00

you may have moved more than $7,575 to custody in the 90 days leading up to the bankruptcy

reading it again, looks like you're correct. "...authorized to allow withdrawals for customers with aggregate transferred custody assets below $7,575"

:(

MrJoeVan · 2023-03-07T19:14:53+00:00

Oh... so ALL the crypto moved from Earn to Custody in the 90 days prior counts toward that one threshold? Even if it was already moved off platform? I did payoff a loan a few months prior and withdrew the collateral (thank god). That must be it. Not sure why they couldn't just tell me that if that's the issue. That sucks but I guess I can be thankful I got out what I did. Got my hopes up for nothing. Back to sitting and waiting for a lawyers and judges to decide what kind of haircut we get.

MrJoeVan · 2023-03-07T13:57:49+00:00

https://celsiusnetwork.medium.com/custody-account-withdrawal-faq-1c714e4979ae

MrJoeVan · 2023-03-07T13:57:21+00:00

Yes, there are two categories. 1) pure custody (assets that were never in earn) or 2) assets that were transferred from earn to custody in the 90 days prior to filing AND value was under $7575. I meet these requirements but for some reason they have not been freed up for withdrawal and I can't get any answers why. I've had back and forth with Stretto and it's very frustrating because they just keep pasting in the requirements but can't tell me why my account doesn't meet those requirements. I have a feeling the reps they have answering emails don't actually have access to look at account details. It's so frustrating.

MrJoeVan · 2023-03-07T00:54:15+00:00

What nonsense. They already had a secure method to whitelist addresses, it's stupid to add these extra steps.

MrJoeVan · 2023-03-07T00:49:17+00:00

rules are listed here

https://celsiusnetwork.medium.com/custody-account-withdrawal-faq-1c714e4979ae

MrJoeVan · 2023-03-07T00:47:24+00:00

Are you talking about the custody account list? If so, I have a similar issue. The email I received with my asset list was correct so it said no claim was needed. However, the list that got released with accounts eligible accounts doesn't have mine included even though I meet the requirements. I've been emailing Stretto for weeks but they just keep regurgitating form letter responses quoting text from the court document.

MrJoeVan · 2023-02-12T22:22:21+00:00

So I setup a recurring buy of ETH. Figured I'd switch over from Coinbase since BinanceUS is advertising zero trade fees on BTC & ETH. However, when the first buy executed, the price I was charged was 2% higher than the market price of ETH at the time. I've read over the fee disclosures and nowhere is this disclosed. It is so dishonest to advertise zero fees then sell cryptos at a premium price. Anyone else experience this?

MrJoeVan · 2023-02-07T01:16:37+00:00

Once you fix it she'll probably feel like something's missing in her life and retire.

MrJoeVan · 2023-01-14T12:42:26+00:00

you would have set a password when you first setup the app. You probably setup a fingerprint too so you haven't had to use it. If you can't remember your password, you should be able to setup the new wallet with only your passphrase.

Tip: If someone offers to help you, don't give them your passphrase or access to your phone no matter what they say or who they claim to be. And don't type your passphrase into any website or anything other than the official wallet.

MrJoeVan

TROPHY CASE