User:STOLE MY COOKIES

How I know my account was hijacked

A few hours after I added a POV tag to, what was at the time a heavily one sided, Free Syrian Army article I was suddenly greeted with 3 notifications on my screen:

1. Wikipedia itself notified me that my session has been lost two different times.
   1. first I was notified that:"we could not process your edit due to a loss of session data. Please try again......." hmmm strange?
   2. Then on the log in screen: "There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Go back to the previous page..." Funny?
2. I have the browser add on SLL everywhere with the observatory feature enabled. This feature is designed to detect man in the middle attacks, it did.
3. I have other software installed on my machine which can detect if my in/out traffic is being subverted, it was.
4. Lastly, that's not all there is to it folks, I checked some log data and other things all which indicate very clearly that someone did, in fact, steal my cookies and hijack my original Wikipedia account which I had been using without an issue for over half a decade.

This stuff isn't imposable or even difficult too do, any skid with the right tools could have pulled it off. Last thing I wanted to point out is that I checked activities log data on several Wikipedia accounts (suspects) all of whom were strangely inactive on the site in the immediate time frame before and after the attack took place. Then they became active again after a reasonable amount of time has passed. If these people or person was involved in the attack on me it would make perfect sense/be correlative with the time they would need to plan such actions and then let the smoke settle before returning again.

I have a strong interest in computer security, I know damn well what happened and I have all the screen shots, log data, etc to prove it. I might or might not upload some of that data here for everyone to see.

Its my own damn fault for not creating and using a checksum to verify my identify here. But really? Is that necessary for something so seemingly innocuous as fucking wikipedia. Fuck that, if I have to use a checksum to secure my account then fuck it, I'm out.