Account Hackings - The Source

12 pages Page 9
Lishy
Lishy
Forge Runner
#161
Damn it NCSoft =(

If only Anet had a better parent company....
Honestly, I don't blame the Guild Wars team for this =/
Angel Kiss
Angel Kiss
Ascalonian Squire
#162
Hello dears, Bunny here (author of the icky sticky thread on Aion Source).

I just wanted to stop by and thank Erys for taking the time to make this thread. To be honest I think you summed it up quite nicely. I particularly like the bit about NCSoft having us "believe that after four years, suddenly thousands of people became infected by a real life stupidity virus and stated dealing with RMT or being keylogged simultaneously". That really sums it up from my perspective. I know for a fact that the past two weeks really has been the highest on record for complaints received about Aion players being hacked. Sure, the first few complaints come in and you think "yeah yeah...serves you right you gold buying scumbag", but after the 100th genuine sounding story you do start to doubt and raise questions.

The thing that bothers me most is the fact that the past two weeks have coincidentally (or not) followed the emergence of the NCSoft Master Account website issue and we haven't recieved a response about this from anyone. I don't think people have appreciated yet that Tamat's first response to the issue was completely out of context. There just so happen to be two issues with NCSoft websites and our Tamat rushed forth assuming we were talking about a different problem (one that actually IS cosmetic).

From reading Gaile's comments it seems to me that she has latched on to Tamat's response and arrived at the same wrong conclusion. In a meek effort to try to steer people in the right direction, I have posted the following on her talk page:
Quote:
Originally Posted by Bunny
In the interest of being helpful, allow me to clarify something for the benefit of Gaile and others.

Originally, via this thread, the player community of Aion were raising an issue regarding the NCSoft Master Account Login Page, where it was discovered that the page has the tendancy to log people into other people's NCSoft Master Accounts at random. When this happens, players are able to assume full control of another persons NCSoft Master Account, and any game accounts they happen to hold. This is not a cosmetic issue, it is a genuine issue that appears to be causing many people to loose control of their NCSoft Master account and game accounts alike.

Initially, when Tamat (Aion Community Manager) saw the complaint thread, in his haste Tamat replied assuming that the complaint referred to another known problem involving the Aion Online website and forums (a different website). The known problem Tamat is referring to is a separate issue. I cannot stress this enough. Players use their Aion Game Account information to login to the Aion Online website in order to check their broker status or their mailbox. This website has a caching issue, which sometimes causes the wrong Aion Game Account name to appear in the greeting at the top of the page. This in fact IS a cosmetic issue, so if tamat had been replying to the correct problem...his reply would have been correct.

What the player community needs is a reply to the original complaint because it will indeed affect Guild Wars and Aion players alike.
Aside from the known issue with the NCSoft Master Account page (as if that isn't enough) much worse accusations have been emerging from the Aion community over the last few days...however I couldn't say how accurate these are first hand (or how long it will be before NCSoft delete posts from the official forums of that nature).

In the meantime all I can do is say keep talking about the issue! Don't stand for this sort of nonesense and don't let it get pushed under the rug. I have it on good authority that there is rather solid evidence of a serious problem here and we all deserve to know what steps are being taken to correct it.
F
Fay Vert
Desert Nomad
#163
Quote:
Originally Posted by jiggles View Post
I would just like to throw the idea out there that telling every single person possible how to potentially hack GW accounts does not seem like the smartest plan ever...
Except that the predators already know! This is about telling the prey.

How about they switch off completely the whole ability to change passwords, from anywhere, if you want to change your password then go through support.
Anka Yirannes
Anka Yirannes
Ascalonian Squire
#164
Thanks Bunny. Nice to see some input.

I, for one, will not rest until the cold hand of justice has laid the smackdown.

(Oh dear, I believe I got a bit ninja'd there.)
K
Kate Monster
Ascalonian Squire
#165
I took a bigger step, not screwing around with this account security bs. I crossed this over to the G4TV forums under the MMO report in an effort to find a link to submit an inquiry & request to do a story on this issue. If Anet doesn't want to listen to us..maybe they'll listen to them.
Jaythen Tyradel
Jaythen Tyradel
Jungle Guide
#166
Happy New Years indeed. :/
Jensy
Jensy
Site Contributor
#167
This is freaking me out. It's like someone has a million key keychain, and is standing outside your door trying each key >___<

What I would like to see:

1. Ability to unlink accounts. (I'm not holding my breath)
2. Ability to delete old/solved support tickets.
3. Prompt asking for old PW before GW pw can be changed.

It's... really not a lot to ask, right?
T
Tom Swift
Jungle Guide
#168
Quote:
It's quite easy. Get GW2...don't link it to anything...never let anyone outside of GW2 know your character names and practice the good habit of strong passwords mixed with never using that email or password anywhere else but GW2...unfortunately us GW 1 players only WISH we hadn't made that mistake. We get a fresh start on GW2.
not necessarily - I suspect there will have to be some kind of link if you want your HoM accomplishments to transfer over.

Thankfully I never linked to a master account, never had to file a support ticket and never planned on getting GW2 anyway.
Kerwyn Nasilan
Kerwyn Nasilan
Forge Runner
#169
Quote:
Originally Posted by Jensy View Post
This is freaking me out. It's like someone has a million key keychain, and is standing outside your door trying each key >___<

What I would like to see:

1. Ability to unlink accounts. (I'm not holding my breath)
2. Ability to delete old/solved support tickets.
3. Prompt asking for old PW before GW pw can be changed.

It's... really not a lot to ask, right?
To much for NCSoft I bet, (I am not going to blame ANet until it is certain that they could/can do something, I will assume their hands are tied.)
Arduin
Arduin
Grotto Attendant
#170
http://wiki.guildwars.com/wiki/Feedb...ity_Issue.3 F

Quote:
Originally Posted by Gaile @ Wiki
Thank you for sharing the synopsis, Angel, and for the link, Cress Arvein. I have been working on the MHE (Missing Hat Experience) for Wintersday 2010, and so I was not able to devote my attention to the question as fully as I might have done on a normal day (and certainly on a normal work day). I am discussing this issue with Regina so that we can learn more about the concerns and, of course, address them as quickly as possible. -- Gaile 21:11, 1 January 2010 (UTC)
A confirmation of Anet being aware of the issue.
zelgadissan
zelgadissan
Forge Runner
#171
Quote:
Originally Posted by Lishy View Post
If only Anet had a better parent company....
Honestly, I don't blame the Guild Wars team for this =/
Sums up my opinions quite well, in my eyes this is mainly NCSoft. The only blame I lay on the Guild Wars team for this is the complete shutdown that Gaile and Co. have been giving the players, but I'll be honest and say that I have no idea how much connection the ArenaNet support has with NCSoft support. For all I know, her responses might have been forced from the top.

I wonder if ArenaNet could support themselves on their own?
Michael805
Michael805
Frost Gate Guardian
#172
Quote:
Originally Posted by zwei2stein View Post
Anyhow:

If you manage to steal session or to recover session by accident, it means that target account was logged to plaync recently.

So, your protection would be *not* to log in to plaync.
In my case, I hadn't logged into my plaync account for (likely) a year or more, and hadn't logged into gw on any account in at least 6 months, yet my account was hacked. It's not sessions being stolen, it's likely the account ID being altered in some way under server stress (which would explain why it only works by logging in/out several times).
E
Emperor Bush
Frost Gate Guardian
#174
I hope everyone who got a festival hat gets their accounts hacked, and the hacker destroys their precious little useless hats.
G
Gargantuan Midget
Ascalonian Squire
#175
Can someone re-name this thread 'How to hack' I know its an issue that requires discussion but seriously just telling everyone how to do it, unwise in my mind, I'm certain there are some people out there who will take advantage of the information.
g
gone
Guest
#176
Quote:
Originally Posted by Gargantuan Midget View Post
Can someone re-name this thread 'How to hack' I know its an issue that requires discussion but seriously just telling everyone how to do it, unwise in my mind, I'm certain there are some people out there who will take advantage of the information.
this is far from hacking. FAR from hacking.
H
HellScreamS
Krytan Explorer
#177
erm, the ncsoft offi page is lagging like mad atm for me, and I can barely log in to MY account. That makes me think there's a bazilion chinese bots logging in and off already... *takes a painkiller overdose*
f
fishy go moo
Frost Gate Guardian
#178
I'm semi-pissed. I logged on and was like wtf is this shit. :/ i got a pw reset but they havent given me a freaking email yet
G
Gargantuan Midget
Ascalonian Squire
#179
Fine it may not be hacking name it 'How to get free accounts' or judging by Gaile's response 'Hats are more important than you account'
Juhanah
Juhanah
Lion's Arch Merchant
#180
Quote:
Originally Posted by Gargantuan Midget View Post
Can someone re-name this thread 'How to hack' I know its an issue that requires discussion but seriously just telling everyone how to do it, unwise in my mind, I'm certain there are some people out there who will take advantage of the information.
There's no "how to do it". The NCSoft website do it by it self for you or anyone.

If no one know how the bug works, most people wont care. NCSoft will continue deny it, Anet will follow NCSoft judgment, People will still get their account stolen and nothing will ever be done.

Now if the majority of people know it. Yes more account may be stolen but this also mean more people will voice their frustration toward this issue, less people will want to spend their money on NCSoft product and to get it stolen, and NCSoft will look extremely stupid for not fixing it and will loose any bits of credibility and revenue they have left.