Well, what an adventure Costa Rica was! Amazing country!
I've not been on here for well over a week, since I discovered that someone was trying to gain access to various accounts of mine. Still not exactly sure what happened but somehow someone got hold of a whole load of my data, I wasn't able to deal with it properly while travelling but the data that was accessed suggests a physical access of one my machines, so I remote shut down my home server, and didn't load up my laptop again until back home.
So far as I can tell whoever it was has now given up, all of their attempts thwarted. They managed to get in to my Amazon and make some orders but the payments were blocked. They also managed to change my OTP method on Amazon, and had made a request to Amazon for all my data (which I think means they had some copy of my ID, perhaps passport). Again this was all reverted and blocked before any damage was done.
They also attempted to access various other accounts and the strange thing was that these accounts use different emails. This is why I think there was probably a physical access of one of my machines, probably my laptop while travelling, as the accounts they went after are ones that would be likely to have been open and logged in to in my browser. The other options I can think of where someone could have discovered various different emails are someone gaining remote access to one of my machines, or someone compromising my password manager, in both cases I suspect the damage would've been far worse.
There does also appear to be some possibility that someone has unsuccessfully tried to open a bank account using my details, so I need to deal with that tomorrow. And it does obviously beg the question of what else they may have attempted, or gotten away with.
Anyway, I'm back home now and am actually fairly optimistic that the most this has cost me is a waste of my time, as well as their own.
Here's to a new, more privacy focussed, world being built where things like this are harder for people to get away with! 🍻
Pura Vida!
CarlosAutonomous / Carlito
npub1qq…mctgs
2023-04-16 22:24:58
Author Public Key
npub1qqqqqqqut3z3jeuxu70c85slaqq4f87unr3vymukmnhsdzjahntsfmctgsPublished at
2023-04-16 22:24:58Event JSON
{
"id": "0000581fdf69776d4b0ee82539a9c407fad17101e3c5fb854ef8698a6c3e5b46",
"pubkey": "000000001c5c45196786e79f83d21fe801549fdc98e2c26f96dcef068a5dbcd7",
"created_at": 1681676698,
"kind": 1,
"tags": [
[
"nonce",
"78604",
"16"
],
[
"client",
"BIJA"
]
],
"content": "Well, what an adventure Costa Rica was! Amazing country!\n\nI've not been on here for well over a week, since I discovered that someone was trying to gain access to various accounts of mine. Still not exactly sure what happened but somehow someone got hold of a whole load of my data, I wasn't able to deal with it properly while travelling but the data that was accessed suggests a physical access of one my machines, so I remote shut down my home server, and didn't load up my laptop again until back home.\n\nSo far as I can tell whoever it was has now given up, all of their attempts thwarted. They managed to get in to my Amazon and make some orders but the payments were blocked. They also managed to change my OTP method on Amazon, and had made a request to Amazon for all my data (which I think means they had some copy of my ID, perhaps passport). Again this was all reverted and blocked before any damage was done.\n\nThey also attempted to access various other accounts and the strange thing was that these accounts use different emails. This is why I think there was probably a physical access of one of my machines, probably my laptop while travelling, as the accounts they went after are ones that would be likely to have been open and logged in to in my browser. The other options I can think of where someone could have discovered various different emails are someone gaining remote access to one of my machines, or someone compromising my password manager, in both cases I suspect the damage would've been far worse.\n\nThere does also appear to be some possibility that someone has unsuccessfully tried to open a bank account using my details, so I need to deal with that tomorrow. And it does obviously beg the question of what else they may have attempted, or gotten away with.\n\nAnyway, I'm back home now and am actually fairly optimistic that the most this has cost me is a waste of my time, as well as their own.\n\nHere's to a new, more privacy focussed, world being built where things like this are harder for people to get away with! 🍻\n\nPura Vida!",
"sig": "c6f7b2680666ca080cca885514787dbacb579e6d681c97ba02492d685e74cd219722dd55678fda97e17442cbbd6cda7f0a35ed562dfc2c6a0e8a03a64e3357ae"
}