Discussion Forum: Thread 217183

 Author: ALegoBrick View Messages Posted By ALegoBrick
 Posted: Feb 23, 2017 14:20
 Subject: Security suggestion re scammers
 Viewed: 154 times
 Topic: Suggestions
 Status:Discarded
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

ALegoBrick (3)

Location:  Netherlands, Gelderland
Member Since Contact Type Status
Feb 20, 2017 Contact Member Buyer
Buying Privileges - OK
I posted this a few hours ago here: https://www.bricklink.com/messageThread.asp?ID=217172&nID=1028587


but i thought it might be better to do so here.

Since i have some experience in infosec, i thought i vent an idea here.

I just signed up a few days ago, (great to be here so far!) and noticed the same,
i have had 2 haunted houses mails of under 150€, in the last 3 days.
Yesterday Susan, day before Anthony.

Anthony actually send me a very small, low res. pic, without ANY exif data...
If you think i am crazy to check these things, well wake up and welcome to the
interweb: The biggest darkest alley, filled with criminals, where you would normally
never come! (and yes my friend call me internet-paranoid).
Before i could answer it was sold. Never got that answer.
It is a sad thing scammers...

so my solution, kind off.
Maybe give new sign-ups a week or so a status of "aspiring member" for an x period
(week/2 weeks).
In this period a new member can only buy NOT sell. (maybe even have to buy before
you can sell? although that's a biggie)
It is no fool proof solution, but a big hurdle for scammers looking for a quick
buck.

This will stop most if not all quick scammers, i take it IP addresses are already
logged and banned? Maybe analyse those, is there a trend?
Although i think this will help a lot, even asking for copy of ID, what i do
NOT propose is no really watertight solution.
(who is going to check all those, and securely safe the data of those offsite?,
complience etc)

my 2 cents...

Kas