Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Hacking MMOs for credit card numbers.

2»

Comments

  • grouchomarxgrouchomarx Member Posts: 19

    Discover/Citibank/BoA lets you create virtual credit card numbers and you can set how long they are good for and what amount.  They also can be setup as recurring and that number can only be used by one vendor.

    Been using them for years on the Internet and never once got hacked or have to worry about it.  Takes like 3 minutes or less to create one and you can copy and paste the number too.  Also prevents said company from charging your credit card on a whim.

  • Crunchy221Crunchy221 Member Posts: 489

    Sigh...another one of these threads.

     

    Your CC info is stolen.  Your CC info  is used to buy crap in eastern russia, you are not held accountable since you live in the eastern united states.  Problem is ended with the issuance of a new card.

    Getting your CC info stolen isnt a huge deal anymore, they typically dont even let charges go through if they are boing made in some shady part of the world known for CC fraud.  If the CC fraud is comitted in the united states or near where you live they they have someone they can arrest.

    Its really not a huge deal anymore.

    Want to play it safe?  Request a new CC often.  Problem solved. 

    You want to be ultra paranoid?  Go buy a prepaid visa card at walmart and go through the hassle of heading to walmart every so often to refill with money.

  • QuizzicalQuizzical Member LegendaryPosts: 25,507

    We hear a lot of stories of how a company got hacked and credit card information was stolen.  We don't hear so many of, my credit card got stolen when a game got hacked, some fraudulent characters were made on it, and my credit card company wouldn't do anything about it other than insist that I pay.  The latter is the real worry, and until that becomes more common, I'm not concerned.

    The mathematics used in encryption is actually pretty secure, to the degree that criminals don't even try to attack it.  The problem is that if a company has your credit card number so they can charge it, then other criminals could conceivably get it and charge it the same way the company does.  There's no real way around that.

    Passwords can (and should!) be hashed, so that even if the whole database gets stolen and the thieves have all the information the company did, there's no way to recover the password.  But that can't be done with credit card information, as a company needs to know your credit card number, not just a hash of it, in order to use it.

  • JayBirdzJayBirdz Member Posts: 1,017

    Originally posted by Quizzical

    We hear a lot of stories of how a company got hacked and credit card information was stolen.  We don't hear so many of, my credit card got stolen when a game got hacked, some fraudulent characters were made on it, and my credit card company wouldn't do anything about it other than insist that I pay.  The latter is the real worry, and until that becomes more common, I'm not concerned.

    The mathematics used in encryption is actually pretty secure, to the degree that criminals don't even try to attack it.  The problem is that if a company has your credit card number so they can charge it, then other criminals could conceivably get it and charge it the same way the company does.  There's no real way around that.

    Passwords can (and should!) be hashed, so that even if the whole database gets stolen and the thieves have all the information the company did, there's no way to recover the password.  But that can't be done with credit card information, as a company needs to know your credit card number, not just a hash of it, in order to use it.

    How many of those people are not the primary card holders or have any clue about the card?  These guys don't want to max a persons card out and then leave.  They take a small amount like $5-$10 from each card then throw it away.  Maxing a card is a dead giveaway. So 1999 so to speak..   However seeing a $5 - 10 dollar charge doesn't raise nearly as many red flags.  "Oh, I'll sort it out tomorrow."

    While you got a decent point as you usually do. I think it neglects to take certain things into account.  Idenity theft IS a multi billion dollar industry. Not all companies have strong counter measures or even basic counter measures.

    Let's not forget that it seems drug cartels and major gangs are definitely moving into the virtual world as well.  Some anonymous members found this out the hard way. They spoke out against those cartels thinking they were anonymous and ended up gutted and hung from a bridge.  They've got the wallets and man power if needed to recruit skilled hackers.  Hell in some cases money isn't needed just challenge these kids / teens ego's.

     

  • CeridithCeridith Member UncommonPosts: 2,980

    Originally posted by Quizzical

    We hear a lot of stories of how a company got hacked and credit card information was stolen.  We don't hear so many of, my credit card got stolen when a game got hacked, some fraudulent characters were made on it, and my credit card company wouldn't do anything about it other than insist that I pay.  The latter is the real worry, and until that becomes more common, I'm not concerned.

    The mathematics used in encryption is actually pretty secure, to the degree that criminals don't even try to attack it.  The problem is that if a company has your credit card number so they can charge it, then other criminals could conceivably get it and charge it the same way the company does.  There's no real way around that.

    Passwords can (and should!) be hashed, so that even if the whole database gets stolen and the thieves have all the information the company did, there's no way to recover the password.  But that can't be done with credit card information, as a company needs to know your credit card number, not just a hash of it, in order to use it.

    You can't hash CC info and still use it, but you can still store it in an encrypted database. It really isn't that difficult to setup an encrypted database, with only the systems that need to access it having the decrption key. The sad thing is that most companies just don't take advantage of this very simple method of protecting data.

    The main problem in the IT industry is that there are a lot of very clueless people in positions where they have no business being. There are people in charge of developing and maintaining networks and websites that don't fully understand proper IT security. They get their microsoft certification and act like they know what they're talking about, but they really just don't get it -- microsoft certifications are a joke. The sad thing is that so many companies believe that these guys actually know what they're doing.

    Thankfully most credit card companies have a policy for full online protection against fraudulant charges. Of course, that's also part of why there are ridiculous interest rates on most credit cards these days.

  • VigilianceVigiliance Member UncommonPosts: 213

    Originally posted by Lobotomist

    This is gone far enough!

    There is obviously a vulnerability well known to certain hacker groups. And something most companies can do nothing about.

    I mean , if they hacked Steam. After there was previous attempt. And there was a warning.

    If they managed to do that. I doubt anything connected to internet is really safe.

    Which in fact makes me really really worried about my money, and infact future of internet subscriptions in general….

    Sorry to create this image of the world for you... but for every 100 people trying to make the internet safe and enjoyable for everyone there are 10,000 douchebags who are creating malware to line their own pockets or just fuck with people and get off on it. 

    That is why all Anti-virus software is basically an Illusion of security, it works in the hopes that you aren't the first one hit by the new effective malware, after that it updates definitions and enforces whatever new security protocol used to combat it.

     

    Plainly said most of this security is all reactive, people can take steps to protect themselves and their accounts but I'd agree the majority of people who get their accounts hacked have alot to be responsible for letting that happen.

  • JoeyMMOJoeyMMO Member UncommonPosts: 1,326

    If you're going to use it online, then I guess you'd better go for a prepaid "credit card". Better to err on the side of safety. I'm going to check out the options available here, but prepaid VISA cards exist and those should be widely accepted. Using your "real" credit card for online transactions is just too risky.

    imageimage
  • ForTheCityForTheCity Member Posts: 307

    thingsl ike these make me skeptical of using my credit card too many times online. besides buying from amazon or clothing websites, all my game payments will be in the form of prepaid game cards. I know its a hassle sometimes but i'm always near a location that sells UGC so why not buy them instead. plus i always thought gaming sites look a little sketchy. 

  • dikkydikky Member CommonPosts: 261

    i wonder the credit card movement where you can get one time use credit card numbers died out. It was neat you could go to your issuers website, have a CC# instantly generated that was linked to your real CC but it would only allow $X at every Y interval and it will only work at 1 merchant.

    so you could go to your bank's website and instantly generate a credit card that only allows a charge with these specific conditions:  only $15 once per month to the merchant Blizzard

    it gets hacked? no big deal since they wont be able to charge to any other merchant

  • maplestonemaplestone Member UncommonPosts: 3,099

    Originally posted by teiohFromSWG

    i wonder the credit card movement where you can get one time use credit card numbers died out.

    If the customer has to take two steps instead of one, the one-step process will be favoured until the cost of fraud liability outweighs the sales lost to the added complexity.

    I do worry that archives of billing information that never get deleted are lingering time bombs - think of all the services you have ever subscribed to and imagine all of them that might let their security go lax or auction off a copy of their databases in liquidation.  I have to admit that worrying about proliferation of copies of my billing information is a barrier in keeping me from experimenting with subscriptions to more startups.

  • Squal'ZellSqual'Zell Member Posts: 1,803

    i usually go to walmart or any other similar store and buy a prepaid visa for 25$ (its like a gift card but visa money, they also have all major CC if  you have a preference)

    so i pay my monthly 15$ (which comes up to aprox 20$ with conversion and tx) and i have5$ to spendon itunes music or an ingame perk if i absolutely need it (or a meal at McDonnalds :)image

    the only downside is that you have to re-enter your payment info every month / 3 months / 6 months depending on how long you paid for your sub

    image
    image

Sign In or Register to comment.