[weak]

Originally Posted by shadesofgrey

How freaking dumb do you have to be to think you can get away with Raymers money... I mean, how many people are online tracking raymer? What an idiot.

from a security point of view i wouldn't say it was that dumb. Raymer probably has a lot of money in his account and you know the username, which makes bruteforcing the account a piece of cake.

of course it was stupid to start playing instead of just getting the money out.

[Wooderson]

From the chat logs:

FossilMan: All is fine here
StaffMikeJ [Support]: May I call you on the phone Greg?
FossilMan: wat kinda person needs to call me?

[Chipmunk]

Originally Posted by weak

from a security point of view i wouldn't say it was that dumb. Raymer probably has a lot of money in his account and you know the username, which makes bruteforcing the account a piece of cake.

Uhh.. with a decent password it would still take million of attempts and I think P* would notice. With an IP from a different continent they should be suspectful enough. I think an acquaintance of mine got a call from PayPal when there were several unsuccessful logins from India or something like that, so they should be able to notice.

Brute forcing a ZIP-file or some other thing which you can hack on your computer is a different story.

[weak]

Originally Posted by Chipmunk

Uhh.. with a decent password it would still take million of attempts and I think P* would notice. With an IP from a different continent they should be suspectful enough. I think an acquaintance of mine got a call from PayPal when there were several unsuccessful logins from India or something like that, so they should be able to notice.

from my experience that's wishfull thinking at best. security costs money and most companies won't spend that money unless they absolutely have to.

ip address is no problem at all, just go through an open box on the continent of choice.

[shadesofgrey]

Originally Posted by weak

from my experience that's wishfull thinking at best. security costs money and most companies won't spend that money unless they absolutely have to.

ip address is no problem at all, just go through an open box on the continent of choice.

Yeah, IP addresses are a joke. that said, I doubt they brute forced it. I would like to believe that after 50k (which hugely underestimates the # of attempts required for a bruteforce attack) of failed logins, p*'s would shut the account down. I suspect they phished it out or key logged it. there are so many other more efficient ways to go about this hack than bruteforce. Heck, it could be an inside job @ p*s. someone local to raymer who hacks into his home network and sells the P*s account info on IRC.

that said, why target raymer? why not watch a high stakes game and nab some random person there with $500,000 or more on the table. no one notices, and the money goes away like jambys did.

we're not talking about a rocket scientist here, the guy didnt have enough brains to take the money and run.

[yeltzen]

Originally Posted by shadesofgrey

Yeah, IP addresses are a joke. that said, I doubt
that said, why target raymer? why not watch a high stakes game and nab some random person there with $500,000 or more on the table.

The story doesn't end up on 50 internet blogs if it's just some random person.

[shadesofgrey]

Originally Posted by yeltzen

The story doesn't end up on 50 internet blogs if it's just some random person.

50 blogs or not... I doubt this guys l337 hax0r skillz are going to be enough to save him from playing catcher in prison.

[Chipmunk]

Originally Posted by Greg “Fossilman” Raymer

My password wasn't 100% obvious, but it was pretty weak. If you were guessing, I would think it would take you at least 100 tries, on average, to guess it.

pokersourceonline.com/news/greg-raymer-online-poker-account-hacked.asp" target="_blank">http://www. pokersourceonline.com/new...unt-hacked.asp

The article also says that some sites, like bodog, have different login names than screen names. Seems like a smart idea, that way even if you know a famous players screen name it would be much harder to hack their accounts.