Warning if you get hacked GGG will do nothing to fix it!!!

"
Xapti написал:
or your internet communication may have been monitored, such as if you were using a wireless internet connection (even if it was password-protected).


Yep, some bro from China is gonna camp out in his drive way to WPA2 aircrack/dump his AP stream so he can brute force/rainbow table his WiFi key, to then go through literally gigabytes of protocol gibberish to fish out a PoE password...so he can make a massive 6 dollars and 34 cents.



"
bigpieceofchicken написал:
"
Xapti написал:
or your internet communication may have been monitored, such as if you were using a wireless internet connection (even if it was password-protected).


Yep, some bro from China is gonna camp out in his drive way to WPA2 aircrack/dump his AP stream so he can brute force/rainbow table his WiFi key, to then go through literally gigabytes of protocol gibberish to fish out a PoE password...so he can make a massive 6 dollars and 34 cents.
You're assuming he's using a WPA2 connection. If it's WPA2 then there's probably no issue, but he didn't specify so I'm covering all bases.
You're also assuming the person would be outside his house which isn't necessarily the case. He never specified that he only surfs this website and/or plays the game at his home. He could have been gaming/surfing in a public area (school, restaurant, workplace, etc.) which is where a predator is more likely to be.
Lastly, as far as I know he did not answer how he knows the person is from China, so I personally have insufficient reason to believe that the invader was from China. They could have either used a proxy, or they could have sold the password information to someone in China who then used it.
"
AintCare написал:
"
Xapti написал:
"
Whitechapel85 написал:
I came back from a break from the game to find someone from China trying to log into my account.
Your game account? How did you know the person was from China?
"
Whitechapel85 написал:
Yes, I went through my computer multiple times and found nothing. It wasn't on my end.

Doesn't have to be on your computer. You could have possibly visited a fishing webpage, your password for your e-mail and/or account could have been easy to guess or bruteforce, or your internet communication may have been monitored, such as if you were using a wireless internet connection (even if it was password-protected).


lol such horseshit... I've been playing tons of online games and complains about hacking were not even remotely close in volume to this game...
What the heck does your comment have to do with mine? Are you saying that GGG are stealing player accounts and selling them to others? That's pretty much the only thing I can infer from your statement if it was actually directed at my comment.
Fresh cakes for all occasions.
Delivery in 30 eons or less
Call 1-800-DOMINUS
Remember - 'Dominus Delivers'
Последняя редакция: Xapti#6455. Время: 21 мая 2013 г., 01:19:28
"
bigpieceofchicken написал:


What's the biggest thread in this forum? Hacked accounts. Isn't that kind of a bad sign?


Well do note that it's a stickied thread so that anyone who's issue is related to the matter goes there. Most other issues have their posts drop off after a few days which means any new forumers will end up making a new post.


And I've seen a LOT of repeat subjects here.



And btw, the problem with restoring hacked accounts isn't the lack of data: it's the items that were stolen still being out there. If someone stole my wand then sold it to you then GGG realized I was hacked, if they just restore my wand, not only does the hacker get the full benefit but I would have no reason to try to stop further hacks since Ill just get my stuff back. BAH, why not just have a friend 'hack' my account so that we both have good wands?


Now they can try to deal with the stolen items, but how? It's easy if the hacker keeps the items on his account: delete it all and done. If the hacker sells the items, though, then what? What if he sold that nice wand to his alt and that ok shield to a legit player? Should GGG ban both (I've seen that tried btw.. not fun results)? Should they try to 'reverse' the exchange (which can get ugly fast if it's been alittle while and multiple trades occurred)?

It's not just a simple issue with a simple solution, despite some companies pretending it is.
There's a fraction of players who like consistency and predictability: killing boss X will yield item Y.

This game really isn't for people like that.

This game is for people who'll do the same area over and again because they know..., a Mirror can drop anywhere, anytime. - CharanJaydemyr
"
Dakarian написал:
What if he sold that nice wand to his alt and that ok shield to a legit player? Should GGG ban both (I've seen that tried btw.. not fun results)? Should they try to 'reverse' the exchange (which can get ugly fast if it's been alittle while and multiple trades occurred)?
I would agree it can be messy. The biggest issue is if the trade was to a legit player AND the item was modified/destroyed.

Thing is, I could be wrong, but I'd assume that 95% or more of account theft is for commercial gain, hence there is no legit buyers. Everyone who bought the stuff would have likely been RMT.

I guess one could argue that some things would sell to legit players though, such as mediocre (or even great?) items that the sellers would want to 'liquidate' into currency instead of selling it directly on a website.

The good news is, even if that was the case, the RMT seller would almost certainly not expend all their currencies, so the trade could still probably be reversed (the only issue then being things like if the sockets were re-rolled or exalted was added or something). That case would probably be not too common —especially when caught early— but it would still suck.
Fresh cakes for all occasions.
Delivery in 30 eons or less
Call 1-800-DOMINUS
Remember - 'Dominus Delivers'
"
Dakarian написал:

It's not just a simple issue with a simple solution, despite some companies pretending it is.


Oh, no. I am not inferring that this is a problem w/ a simple solution. If that were the case, it would not exist and we'd not be discussing it for the ump-teenth time.

But pretending not to see the 400 lbs. gorilla in the room is not a fix either. Alot of peeps spend more time in this game, longer then some Africans live, and GGG saying "doat! we don't do backups, sorry." That's well and fine till you just lost 700 hours of grinding.

The fix right now. Pointing fingers and saying stuff like, don't install map hacks or go to phishing sites. Your fault! Your fault! Put on this pointy hat and sit in the corner. I have a feeling the scope is much bigger then that. Time will tell.



"
Firecrest5 написал:

I mean jeeze. If you were one of these account thieves, how much more likely would you be to engage in this behavior knowing that no one cares? How much more brazen would a burglar be if after every time he robbed a store, the cops showed up, told the shopkeeper he should have had a better lock and then left?


I need to requote this.......because this sums up the problem going on pretty clearly.

I'm afraid to log into this game every day...if I do get hacked, I WILL NOT come back to this game. Also the fact that I know that nothing will be done about hacked accounts, makes me less willing to play every day.
Quoting myself from another thread. Do the below if you plan to restart playing the game. Even people that are still playing you can go for it and feel at least a bit more secure:


"
kiorull написал:
It's heartbreaking when these things happen :/

I want to raise some awareness about what can be done to be at least more secure online. I am not claiming these are hack proof, or that I am a security expert, but all of the below worked good for me so far.

First and foremost, don't use Internet Explorer... for anything. If you particularly like it, please try to use Google Chrome or Firefox only for your game related activities (accessing emails, logging in to game sites, etc).

Second don't visit any hack/exploit/strategies sites. Those will try to collect all information about you. Nothing is free in this world, they don't keep the sites out there just for fun. For example once they log your IPs they will be able to find a proxy in your city to try to bypass the location filter.

Phishing:
1. Download & Install Chrome (I am sure the same can be done in Firefox, but have no knowledge on it).
2. Type in your address bar: chrome://net-internals
3. Click HSTS on the left bar (HSTS = HTTPS Strict Transport Security)
4. Add Domain pathofexile.com and check the subdomnains checkbox (do this for all online games that you play)
5. Click Add
6. Restart Chrome (I don't know if this is really necessary, but whatever)

And that's it. Now every time chrome will try to access pathofexile.com it will be forced to https and you can clearly see the certificate as in the image below. If there is no certificate there, then just close the tab (or better yet, report the site for phising using this form: http://www.google.com/safebrowsing/report_phish/ ).



Java:
Unless you need it for work, uninstall it. If you do need it for work, disable it completely in chrome (via chrome://plugins/).

Flash:
Disable it in Google Chrome (via chrome://plugins/). You can live without Flash.

Silverlight:
Disable it in Google Chrome (via chrome://plugins/). You can live without Silverlight.

Email:
1. For each game you play make a new gmail account
2. Enable your two step authentication either by using your phone or, as I do, Google Authenticator on my Android phone.
3. Don't use this mail for anything else.

Passwords:
These days none will try to bruteforce your password, but nevertheless, make a password with good bit entropy (anything above 60). You can use this site to test your potential passwords (to make it really secure just replace the letters in your passwords with other letters just for testing purposes):

http://rumkin.com/tools/password/passchk.php

Needless to say, you should make a unique password for every game that you play (you already have a separate mail for each, so the user part is covered).

Keylogging:
Install an antikeylogging/antispyware software or an integrated antivirus/firewall/blabla. I use Kaspersky Internet Security since 2007, never had issues so far.

Outbound connections:
If all the above fail and some keylogger makes it's way in, it's time you cut it's outbound communication:
Use your firewall software to block all outbound internet connections unless the site is on the whitelist. This can be a pain in the ass in the beginning till you set all the rules, but afterwards there's nothing going out of your computer without you knowing (hopefully:P) These can also be done at router level, but it's way more painful and time consuming.

And that's about it so far. Stay safe and enjoy gaming.
"
I mean jeeze. If you were one of these account thieves, how much more likely would you be to engage in this behavior knowing that no one cares? How much more brazen would a burglar be if after every time he robbed a store, the cops showed up, told the shopkeeper he should have had a better lock and then left?


Actually, what happens is that the cops gather information on the theft, then go after the thief. However, in most cases, the shopkeeper will not recover the goods as the goods are sold/turned into scraps/rendered unsellable. Shopkeepers carry insurance and/or file taxes to help cover the losses of that very situation.

So it's basically just like PoE, except that when the shopkeeper starts yelling at a crowd that the cops should get their stuff back, the public then says "go get a better lock."

...which can happen often IRL as well. I was told a story about a walmart that placed their cash for the day into an ordinary box within easy reach of all of the employees before it goes into the vault. They then noticed one day that all of the money was gone. The folks with me spent a good while mocking the walmart for being so horrible with taking care of their own money.


Note that the complaints here ISN'T that the thieves are going free. The complaints is that GGG isn't resetting their accounts so that they get their stuff back. If what as said earlier is right, that most account break ins are RMT related, GGG striking at their sites is exactly what the cops would do. It still means you don't get your stuff, though.


There's a fraction of players who like consistency and predictability: killing boss X will yield item Y.

This game really isn't for people like that.

This game is for people who'll do the same area over and again because they know..., a Mirror can drop anywhere, anytime. - CharanJaydemyr
I have never seen such a high volume of hacks than in this game.

A month ago I posted that their lack of restore would kill their game once it "launches". Who wants to invest time in a GRINDING GAME and lose it all due to GGG being compromised, or other misfortune.

The reality is, flooded duped items in a small scale won't kill the economy, but players leaving the game will kill the game.
"
Dakilula написал:
I have never seen such a high volume of hacks than in this game.

A month ago I posted that their lack of restore would kill their game once it "launches". Who wants to invest time in a GRINDING GAME and lose it all due to GGG being compromised, or other misfortune.

The reality is, flooded duped items in a small scale won't kill the economy, but players leaving the game will kill the game.


So you didn't play any Blizzard or Sony game in the last years? Also in those games is sort of forbidden to report hacks on forums, you need to do it to support, and by no means you have a sticky on forums. GGG is honest and open about it though.

"
AintCare написал:

lol, hell why stop there... Disable our computer, spill a cup of water on it or something, you can live without it.... go outside, take a hike


Well, these softwares are really crap. I am not going to go through the history, since it's more or less known even if you are not up to date. Here are the latest incidents which were patched less than 2 month ago:

http://arstechnica.com/security/2013/04/java-users-beware-exploit-circulating-for-just-patched-critical-flaw/

http://msisac.cisecurity.org/advisories/2013/2013-031.cfm

Just to give you a quick made up scenario: the site that should not be named was sold to a RMT site. They put up a commercial containing malicious code. Till people caught up with news they already visited it few times. Those without protection are "magically" hacked.

It's not that it didn't happen before to much bigger games:
http://www.destructoid.com/world-of-warcraft-hacked-through-adobe-flash-flaw-161439.phtml

What the developer can do in these cases? Nothing. "But wait, you can use an authenticator!". You can and for sure it's a bit more secure, but not 100%:
http://www.cinemablend.com/games/Blizzard-Admits-Accounts-With-Authenticators-Have-Been-Hacked-42909.html

As well as leading "authenticator" provider, RSA:
http://arstechnica.com/security/2011/06/rsa-finally-comes-clean-securid-is-compromised/

and again

http://arstechnica.com/security/2012/06/securid-crypto-attack-steals-keys/


People need to understand that everything is hackable given enough time. Also people need to understand that hackers are all about volume. They will not bother with you if you take even the basic security measures, they will move on to the next guy.

I am just here to inform people, you can do whatever you want with this info. Just know that your security is in your hands.
Последняя редакция: kiorull#3026. Время: 21 мая 2013 г., 03:28:04

Пожаловаться на запись форума

Пожаловаться на учетную запись:

Тип жалобы

Дополнительная информация