Many New Users Are Falling Into A Trap
Here is the mistake:
When users want to send funds from bittrex to their steemit account, they are met with this window:
Unknowingly, people will read this, and in the field that says "MEMO", they are entering their steemit account passwords or keys.
NEVER share your passwords or keys with ANYONE.
NEVER send your passwords or keys to ANY SITE.
DO NOT TRUST ANY WEBSITES OR PEOPLE WHO ARE ASKING FOR THESE THINGS.
Anything in the permissions and password tabs of your wallet should be kept PRIVATE.
So how would you fill out the bittrex window?
Here's How:
If you post your keys or password into that memo field, it is open and visible for ANYONE to see. Once it is on the blockchain, it cannot be hidden or removed.
Should you accidentally post your keys or password anywhere, you should IMMEDIATELY change your password.
This is what it would look like:
By having access to your keys and or password, your account is susceptible to theft.
Unfortunately, a friend of ours by the name of @fredrikaa was not aware of this and has gotten his account and funds stolen.
He sent funds from bittrex to steemit, and inserted the wrong thing into the memo.... within MINUTES someone had taken complete control of his account, stole his liquid steem (worth about $1000) and has proceeded to power down the remaining steempower he has (worth about $2000).
Just look at how quickly things can go south...
This is truly a tragic misfortune, I would be furious should this have happened to me.
For this reason, we as a community are OBLIGATED to spread awareness and prioritize security, otherwise we are no better than the scammers we allow to ROB OUR FRIENDS.
Any and all proceeds gained from this post will be sent to @fredrikaa once he is re-acclimated.
@Fredrikaa has regained control of his account, but the steem that was stolen is gone for good.
Please, Please, Please be aware of what you are doing, and what you are posting.
DO NOT SHARE YOUR PRIVATE INFORMATION WITH ANYONE OR ANYTHING.
IF A WEBSITE IS ASKING FOR PRIVATE INFORMATION, DOUBLE CHECK WITH SOMEONE ELSE, AND IF YOU ARE SKEPTICAL, DO NOT DO BUSINESS WITH THEM.
Be sure to read this article pertaining to security with your account:
https://steemit.com/security/@noisy/public-and-private-keys-how-to-generate-all-steem-user-s-keys-from-master-password-without-a-steemit-website-being-offline
Stay Awesome
-Zey