IE Hack to Gain GW Passwords?

Grunntar

Grunntar

Lion's Arch Merchant

Join Date: Apr 2005

I found a blog post on Yahoo! Tech about a security flaw in IE, which has been exploited to gain passwords in online games, such as Guild Wars.

http://tech.yahoo.com/blogs/null/111811

While it's not surprising that there is a security flaw in Internet Explorer, (nor any Microsoft product), I'm wondering how this affects the Guild Wars community. Thoughts?

Zodiac Meteor

Zodiac Meteor

Imma Firin Mah Rojway!

Join Date: Aug 2008

At the Mac Store laughing at people that walk out with anything.

E/Mo

OH NO! My Runescape Password.

Guild Wars has it's own "IE". You play Guild Wars on the internet for sure. But it's the internet program that matters. WoW, Lord of the rings, Final Fantasy are unaffected as well.

Runescape and many other MMORPG's that you HAVE to play on IE are effected. Stealing passwords for items to sell to players /illegal.

deluxe

deluxe

Desert Nomad

Join Date: Feb 2006

Monkeyball Z

S.K.A.T. [Ban]

Mo/

could not find the text games in there tbh..
then again, who still uses IE these days?

Siirius Black

Siirius Black

Krytan Explorer

Join Date: Aug 2007

The Dragon's Lair

La Legion Del Dragon

E/

this also applies to passwords you save for websites/ forums/ bank accounts. etc.

So if I was you, I would clear them

Rhamia Darigaz

Desert Nomad

Join Date: Apr 2008

use firefox, problem solved.

dilan155

dilan155

Desert Nomad

Join Date: May 2007

living room

N/

i prefer safari myself, better looking imho.

jackinthe

Krytan Explorer

Join Date: Jan 2007

saw this awhile ago.
my favorite part is where microsoft won't encourage people to switch just because of this "one" problem. rofl.

lilraceangel3

lilraceangel3

Lion's Arch Merchant

Join Date: Jan 2008

Western Mass

Passionate Kiss of the cats [Kiss]

W/N

such a "small", insignificant problem, why would you need to fix it?

MStarfire

MStarfire

Krytan Explorer

Join Date: Nov 2007

[SOS]

Rt/

Quote:
Originally Posted by deluxe View Post
could not find the text games in there tbh..
then again, who still uses IE these days?
Sadly, IE still commands about 70% of market share.

Clicky.

king swift

Krytan Explorer

Join Date: Jan 2007

Kamadan AD1

Zealots Of Shiverpeak [ZoS]

D/A

I use firefox...too many hackers on IE. Too many hackers=scenarios like this one. Thank god my 5 stacks are still safe. You had me going with the thread title.

Mammoth

Mammoth

Lion's Arch Merchant

Join Date: Dec 2005

The Yakslappers

Mo/Me

It doesn't matter which browser is your default, run your windows update or get the patch manually: http://www.microsoft.com/protect/com...00812_oob.mspx

always good to have any problems fixed regardless of whether or not they pose any immediate threat to you

DarkFlame

Desert Nomad

Join Date: Feb 2005

Ascalon

E/

From the article

Quote:
the malicious code can be placed on any website and can be adapted to steal any password stored or entered using the browser
Unless its to steal your NCsoft Master account, it doesn't affect GW users one bit, as you don't log in via IE.

theonetheonlybruce

theonetheonlybruce

Krytan Explorer

Join Date: Nov 2007

Fuzzies Anonymous [Fuzy]

Mo/

go use Google Chrome lol jk but fire fox does fix all your problems
ok in seriousness who still uses ie?

Martin Alvito

Martin Alvito

Older Than God (1)

Join Date: Aug 2006

Clan Dethryche [dth]

The less sophisticated tend to use IE. Additionally, the lazy use it because it comes preinstalled.

One plug here for Opera. Good product, and unlike Firefox its market footprint is small enough that no one in their right mind would waste their time hacking it

kvndoom

kvndoom

Forge Runner

Join Date: Jul 2005

Communistwealth of Virginia

Uninstalled

W/Mo

Quote:
Originally Posted by theonetheonlybruce View Post
go use Google Chrome lol jk but fire fox does fix all your problems
ok in seriousness who still uses ie?
Hey, somebody has to fill the botnet quota, right?

Grunntar

Grunntar

Lion's Arch Merchant

Join Date: Apr 2005

Quote:
Originally Posted by DarkFlame View Post
Unless its to steal your NCsoft Master account, it doesn't affect GW users one bit, as you don't log in via IE.
I guess that depends on the nature of the hack, (the details of which, I admit, I know nothing about). For example, if you browse a web site with IE, and it installs a keylogger on your system, can't it keylog anything you do, such as typing in your login and password for Guild Wars? (Or get your bank account info if you bank online, or....)

The linked BBC article specifically mentions gaining access to your computer via this exploit. But if the hack is limited to just games that you use a web browser to log into, then that hypothesis doesn't make sense.

It still seems to me that this could be a real reason for concern for GW players (that use IE...)

Lydeck

Ascalonian Squire

Join Date: Dec 2008

United States.

FEAR

E/Me

People still use Internet Explorer?

cataphract

cataphract

Forge Runner

Join Date: Aug 2005

Ashford Abbey

Hey Mallyx [icU]

Mo/Me

JFTR: http://blogs.zdnet.com/security/?p=2304

fenix

fenix

Major-General Awesome

Join Date: Aug 2005

Aussie Trolling Crew HQ - Event Organiser and IRC Tiger

Ex Talionis [Law], Trinity of the Ascended [ToA] ????????????????&#

W/

If you use Internet Explorer, you both deserve to be hacked, and deserve to have all your GW stuff stolen.

EPO Bot

EPO Bot

Desert Nomad

Join Date: Aug 2006

Mo/N

All the cool people use Firefox, so i make shure i keep using IE.

Amy Awien

Amy Awien

Forge Runner

Join Date: Jul 2006

R/

Quote:
Originally Posted by Grunntar View Post
I guess that depends on the nature of the hack ...
The Yahoo! link explicitly says it is about "... any password stored or entered using the browser..."

But the MS advisory talks about Remote Code Execution.

See also: http://www.securityfocus.com/brief/871 -- http://blogs.technet.com/mmpc/archiv...phy-sites.aspx -- http://www.microsoft.com/technet/sec.../MS08-078.mspx

Or just switch to another browser.

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

What's really bad about Microsoft is the "monoculture". IE is not so good, Firefox is much better. Yet I hate when people speak as if Firefox should be the new "monoculture". It shouldn't, the same way Microsoft shouldn't. There are lots of reasons why you'd prefer IE to Firefox in a business environment (bug-free is in the top5 but not always in position 1; and Firefox is not bug-free, heard of click-jacking? first tab-hacks were on Firefox!).

There's a difference between strongly advising people to use Firefox, including taking the time to show them how to do it (I did a lot of that personally), and promoting Firefox by bashing Microsoft/IE and ridiculising its users. You don't run a program because it's "cool", and you can't be demonstrated how good Firefox by just reading arguments on a piece of paper. Somer users won't jump ship because they're not tech-savvy, so help them instead of pointing to the obvious.

And use Automatic Update in Windows, a patch was sent this night.

Lykan

Lykan

Forge Runner

Join Date: May 2005

StP

R/

Quote:
Originally Posted by fenix View Post
If you use Internet Explorer, you both deserve to be hacked, and deserve to have all your GW stuff stolen.
This, and if your dumb enough to use the same passwords and email for GW as you do for forums as well.

BabyJ

BabyJ

Frost Gate Guardian

Join Date: Jul 2006

Illinois

SFG

Mo/

Quote:
Originally Posted by Martin Alvito View Post

One plug here for Opera. Good product, and unlike Firefox its market footprint is small enough that no one in their right mind would waste their time hacking it
Another Opera user here!

Although I still have IE and use it for school to check grades, just because other browsers aren't compatible. But during the holiday break they are adding firefox as a compatible browser in which case the IE will get the boot.

cataphract

cataphract

Forge Runner

Join Date: Aug 2005

Ashford Abbey

Hey Mallyx [icU]

Mo/Me

Fril's right. IE in business enviroment > all other browsers.

As far as home use is concerned, it's basically "whatever browser you want + AntiVirus + common sense". Or you can choose to be a FF fanboy and bash people using IE. At least you'll be providing me some laughs.

thelessa

thelessa

Jungle Guide

Join Date: Jun 2005

Texas

Purple Puzycats

R/Mo

The problem is there are still sites out there that require IE only. The only reason IE still lives on my computer is that there is just one site that we do business with that requires IE. So I have the firewall block it until it is needed and then I reblock it when I finish using it.

I usually use Opera, Firefox and Safari when surfing

thelessa

thelessa

Jungle Guide

Join Date: Jun 2005

Texas

Purple Puzycats

R/Mo

Sorry for the double post, lag!

FireFox

FireFox

Krytan Explorer

Join Date: Jun 2005

Texas

We Wear Sombreros [文文文], Ugly Ducklings [ugly]

el oh el....

auch

auch

Krytan Explorer

Join Date: Aug 2005

My Chair

P/W

if you use internet explorer anything is possible probably the worst browser you will find.
ur like "omg i accidently clicked a gw gold purchasing link" then you got a trojan keylogging on your computer
then your like "yay im gonna go play guild wars"
and your account info is stolen.

to answer previous post:
yes it is possible to get a trojan, trojans keylogging for guild wars will most likely be on guild wars sites. So i suggest using firefox as IE is very unsafe.
you can't be 100% safe to trojans but alot safer with firefox then you are with IE i'd also suggest using Noscript for firefox to make it extremely safe.

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

Quote:
Originally Posted by auch View Post
IE is very unsafe.
This used to be very true, and I personally advocated everyone around me to use FF until roughly one year ago (including in the security guides I wrote). Now that Microsoft's new security policy has been full-on for a year (it started in January 2003 when everyone in the company had to stop developping and pass a security training which probably cost several dozens millions to the company, but it was about time), they're not doing too bad a job (but obviously FF has an edge in terms of flexibility, configurability and user-friendlyness), as can be seen from yesterday's patch which broke the cycle of monthly patches. FF's automatic browser update is brilliant and, believe me, FF is my browser of preference by far (NoScript is also perfect but makes browsing utterly impossible to the average user, I had also a lot of these experiences with colleagues and friends). But there are both technical and business reasons not to close the door to any program. Monoculture is not good in computing, even if it means "free" as for FF. Security is not a "product", it's not in a particular program. It's rather a process and it needs to be constantly assessed (and Free/Open Source Software doesn't buy you that automatically, ask IBM about it ...).

And tbh most people think of IE in terms of all the bad press it got until a year ago (Vista changed a lot of the security problem, so it's not only about IE). Or worse, they label each Microsoft product "bad". IE is not brilliant, but it's nothing like the "uncool" thing that people say it is. Of course now that makes me uncool to say that, but I don't care.

Shadow Kurd

Shadow Kurd

Wilds Pathfinder

Join Date: May 2006

Netherlands

Scouts of Tyria

P/

Quote:
Originally Posted by Fril Estelin View Post
IE is not brilliant, but it's nothing like the "uncool" thing that people say it is. Of course now that makes me uncool to say that, but I don't care.
I now hate you for saying that. HATE YOU. HHH-AAA-TTT--EEE

Regina Buenaobra

Regina Buenaobra

ArenaNet

Join Date: Apr 2008

Me/

Pretty much agreed on the advice of people here regarding browser security and safe browsing habits. If you must use Internet Explorer, keep it updated to the latest version. But strongly consider using another browser like Firefox, Opera, Chrome, or Safari. Here at work, we use Firefox.

Age

Age

Hall Hero

Join Date: Jul 2005

California Canada/BC

STG Administrator

Mo/

I use IE and I do have FF installed but I use IE as I use it at work.I find with FF you need to install all the plug ins like no script and ad block plus iof not you will get possible spyware on your system as I installed FF amnd found spyware by using spybot search and destroy.

The best thing always clear browser history and immunise using spybot s&d.

You don't have to install plug ins for IE.It is all set up for you.The smart thing is never keep your browser open all the time when playing GW.

Smile Like Umean It

Smile Like Umean It

Desert Nomad

Join Date: Jul 2006

E/Rt

Quote:
Originally Posted by thelessa View Post
The problem is there are still sites out there that require IE only.
This doesn't help?

thelessa

thelessa

Jungle Guide

Join Date: Jun 2005

Texas

Purple Puzycats

R/Mo

Hmmm have not seen this before, we don't have to use IE very often at this one site, just when we have to upload pictures, but this is worth a try if it will work. Thanks

Apoc

Apoc

Lion's Arch Merchant

Join Date: Jun 2005

Montreal, Canada

Quebekers Alliance [QKA]

W/

Quote:
Originally Posted by cataphract View Post
As far as home use is concerned, it's basically "whatever browser you want + AntiVirus + common sense". Or you can choose to be a FF fanboy and bash people using IE. At least you'll be providing me some laughs.
Same thoughts.

Oh and another Opera user here.

fenix

fenix

Major-General Awesome

Join Date: Aug 2005

Aussie Trolling Crew HQ - Event Organiser and IRC Tiger

Ex Talionis [Law], Trinity of the Ascended [ToA] ????????????????&#

W/

Quote:
Originally Posted by Regina Buenaobra View Post
Pretty much agreed on the advice of people here regarding browser security and safe browsing habits. If you must use Internet Explorer, keep it updated to the latest version. But strongly consider using another browser like Firefox, Opera, Chrome, or Safari. Here at work, we use Firefox.
This just made my entire day. <3

AKB48

AKB48

Jungle Guide

Join Date: Jul 2008

みやき町

Mo/A

Conclusion: Never use IE unless you absolutely 100% need to. Otherwise explorers like firefox are much better.

In before close

the_jos

the_jos

Forge Runner

Join Date: Jun 2006

Hard Mode Legion [HML]

N/

My *cough* advise would be that players should use a Mac for browsing and a PC for playing GW.
It would be hard to develop a password stealer that downloads on the Mac and magically transfers itself to the PC to steal passwords. But for some reason this isn't practical.

You won't be 100% secure, not if you use IE, Chrome, Safari or Firefox (which also has a not that good track-record security wise, something many aren't aware of).

thelessa

thelessa

Jungle Guide

Join Date: Jun 2005

Texas

Purple Puzycats

R/Mo

Well getting a second computer is not always cost effective and very few macs are cheap enough to just buy for browsing.