Wow they really screwed up. Many accounts lost due to hacking

Loke666

Originally posted by Mothanos

Hmm its the Arenanets faulth now you got hacked ?
Stay away from site's who pose a risk.
Make a good pasword.
Dont click links in email.

Account safe !

Dont blame a company for your own mistakes.

It is partly NC softs fault, their policy of using email as account name is a bad idea.

But if you are careful you wont get hacked. I use a Pop3 server mail account only used for GW2. You should all do the same.

dbgager

These hackers cannot do anything with your account unless they have your password. It does not matter on how many levels of security there is. SO people shut up about NCSoft. If you have a problem it is your fault in all cases. You are using passwords you have used before. You are answering phishing emails, and giving data to the hackers. You have malware on your computer ( keylogger ). It is your fault in 100% of the cases. These dumb complaints about hackers changing your email..Well they had to have your password to access your account in the first place.

Make sure you have a complex password composed of lowercase, uppercase, and numerals. and one that you have never used before on any account. Don't blame NCSoft for your lack of security.

spankybus

Originally posted by Yaos
Some of the people getting the email do not have GW2 accounts.

Yep, that's why it's called phishing....

 

In fairness, why doesn't NCSoft offer a universal account authenticator for all of their games. Sure it's not fool-proof but I have never been hacked since I started using them for battlenet and rift ( I was hacked once for WoW, which is why I got the app). Lord knows they have enough games to protect.

Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

VirusDancer

Originally posted by dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

So why are you against companies improving their security?  Hrmmmm...

Distopia

Originally posted by dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

People need to assume some responisbility yes, but when offering a service of this type, it's also not out of the question to expect a company to use the latest in security features, to add that extra layer of protection.

dbgager

Originally posted by VirusDancer

Originally posted by dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

So why are you against companies improving their security?  Hrmmmm...

Not against it. I am against people putting all the blame on NCSoft..when the simple fact of the matter is its their  fault. A PW is needed to get into your account plain and simple. There is no getting around that, no matter how much people want to point fingers.NCSOft did not give these hackers those passwords. I have never been hacked. I am very careful with my security.

Kaynos1972

I received a phishing email saying someone tried to change my password on my guild wars 2 account.  Only problems that email was received on the email account NOT registred with my Gw2 account.  Mosf of these messages are fake, if you click that link it's pretty much like giving your account away.  I'm wondering how many peoples fell for that.

VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

Felheart5

I find myself fairly annoyed at the people who blindely defend Anet in this matter. While it is true that the user is often to blame when it comes to stuff like this, Anet still dropped the ball by making hackers able to change e-mails and effectivly steal accounts without any additional secuirty steps in place to at least limit a hackers potential.

I am one of the people now unable to play because hackers changed the e-mail for the account. As I posted in the hack-sticky the password in question has probably been stolen as part of a hacked database. It's only used a couple of other places I have thought safe. Fair enough, I could have used a unique password for GW2 so thats on me. But like most people I don't have hundreds of unique passwords for every thinkable thing. I still take care and keep seperate "tiers" of passwords for different purposes and change them regularly, coupled with good anti-viral routines. Still, things get stolen and shit can happen.  I'm plenty internet savvy enough to know whats safe and what's malicious to poke around on the internet. So don't go there either.

Where Anet made it easy for the hackers, as other have pointed out, is(or was?) the complete lack of need for any verification to change e-mail adresses for an account. All the warning I got in my e-mail was after the account was stolen, no need for the hackers to verify anything. No additional security, which is real poor compared to many of GW2's peers.

Orphes

Originally posted by VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

 

That is correct isn't it?

Arena Net can improve on this, and noone can be blamed for asking or even demanding it.

 

But apperantly they shouldn't have to, because it is my fault if I loose my password... that's internet.

dbgager

I would suggest anyone who is using a PW they have used before , change it now. That PW is in some DB, ANd you have no guarantee that it is safe their. DO it now.

dbgager

Originally posted by VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

They can be secure as they want. But it comes down to the fact that if your careless with your login information. It really does not matter.

dbgager

Also don't ever click a link in an email. You can be redirected even though the address seems legitimate. You can actually be going somewhere else. Always login directly to ArenaNet on you own if you want to check it out.

Justsomenoob

It would be nice if we could get authenticators of some sort.   Surprised they don't have those.

That's one thing every mmo should "steal from WoW"

SanHor

After reading this tread its NCsoft fault I'd say. That's some horrible user protection protocol and you bet it will attract hackers from all over the internet.

bonzoso21

Of course people need to take some level of responsibility for their account security, but I don't see how anybody could argue against ANet's responsibility to provide the same level of security for its customers as all the other developers running major AAA MMOs in 2012. You can rant all you want about how you've never been hacked in 15 years or how all the blame rests squarely on the shoulders of careless people, but those people who use 3 or 4 variations of the same password and the same e-mail address for their entire digital life make up the majority of the online population, and your game of choice would have a pathetically low population without them.

 

Whether or not they were prepared for it, ANet made a very appealing game that has catapulted them into the ranks of MMO developers with 4x the staff and budget, and its customers are going to expect the same level of professional service from them as those other guys or take their gaming hours (and dollars) elsewhere. Most people will give a new MMO a respectable amount of time to dig out from under its pile of problems, but the clock is ticking on them expanding and putting on a new face for the company. They can't continue to operate GW2 like the cool, "one-of-us" indie developers that only maintain a single 200k subscriber game.

Connmacart

Originally posted by VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

Sure but if a person has the most advanced lock, but uses the same key for all. On top of that has lost about ten keys around town than don't be surprised if you get robbed. Anet is not responsible for peoples stupidity

Orphes

Originally posted by dbgager

Originally posted by VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

They can be secure as they want. But it comes down to the fact that if your careless with your login information. It really does not matter.

Of course it matters.

There so many easy steps to take to hinder further annoyances. 

To look at this OP it would have been enough if they had a verification sent before allowing to change email adress.

To regain access to the account the OP would only had needed to reset the password.

 

Which would be the most easy option availble to make everything right again, after the fact that the password was known to others.

 

 

TyvolusNext

I will just say this, there are way too many people who get hacked when a game launches for it to be 100% exclusively limited to the end users.  Do I think there are a lot of ignorant people out there who use the internet ? of course I do.  But still, we saw this with AION, RIFT, SOE, now GW 2 -- there has to be something more to this than just ignorant end users.  The game companies have to be doing something wrong as well.  I just cant accept 100% of alll these people who get hacked are solely to blame.  this is coming from a guy who has never had one of his game accounts hacked and I started MMOs in '99.

vort3x

Originally posted by Yaos
Some of the people getting the email do not have GW2 accounts.

Yeah, this does actually happen. Happened to me with Diablo 3. I don't even own the game, and look at the e-mail I got:

 

"Greetings!

 
It has come to our attention that you are trying to sell your personal Diablo III account(s).
As you may not be aware of, this conflicts with the EULA and Terms of Agreement.
If this proves to be true, your account can and will be disabled. 
It will be ongoing for further investigation by Blizzard Entertainment's employees.
If you wish to not get your account suspended you should immediately verify your account ownership. 
 
You can confirm that you are the original owner of the account to this secure website with:

*"there was a link"*
 
Login to your account, In accordance following template to verify your account.
 
* First and Surname
* Secret Question and Answer
Show * Please enter the correct information
 
If you ignore this mail your account can and will be closed permanently.

Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.
 
Regards,
 
Account Administration Team
Blizzard Entertainment 
http://www.blizzard.com/support/
Diablo III , Blizzard Entertainment 2012"

Orphes

Originally posted by Connmacart

Originally posted by VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

Sure but if a person has the most advanced lock, but uses the same key for all. On top of that has lost about ten keys around town than don't be surprised if you get robbed. Anet is not responsible for peoples stupidity

 

Stupidity is to blame the victim.

 

Besides in one of the games I played over the years I have 99ers as a login, go steal the account. There you have the key, go find the adress.

dbgager

Originally posted by Orphes

Originally posted by dbgager

Originally posted by VirusDancer

It's like locking the front door.  Doors have improved.  The locking mechanisms for doors have improved.  The frames for doors have improved.  Etc, etc, etc.

Yes, it's still the person's responsibility to lock their door - but that doesn't mean that the doors & locks have not also improved.

The technology companies can use has improved - if they choose not to improve what they are using (when other companies have) - you cannot blame the user for that...outside of the user still doing business with that company.

They can be secure as they want. But it comes down to the fact that if your careless with your login information. It really does not matter.

Of course it matters.

There so many easy steps to take to hinder further annoyances. 

To look at this OP it would have been enough if they had a verification sent before allowing to change email adress.

To regain access to the account the OP would only had needed to reset the password.

 

Which would be the most easy option availble to make everything right again, after the fact that the password was known to others.

 

 

It was the users fault that hackers gained his PW in the first place. Don't expect NCSoft to protect you from your own stupidity.

Istavaan

Originally posted by Dranny

Originally posted by WizGamer

 

http://www.guildwars2forum.com/threads/9418-Error-3002-email-not-found

http://www.gamefaqs.com/boards/938738-/63906420

 

Thousands of accounts (apparently it's a problem growing at a very quick pace) have been hacked in the last couple of days. Apparently these hackers were able to change the e-mails registered to each account so it appears as if you never had an account. I have barely played in the past week (maybe 20 minutes total) because of real life obligations. I attempted to login tonight to give myself a break and I am somehow no longer affiliated with Guild Wars 2 in any way, as the e-mail address I entered was not found. Logging into the website, no luck. Logging in with my username, doesn't exist.  At least I didn't sink much time into any character so it's okay if my data is lost, but I feel for others who have already spent days in this game.

 

I've played nearly every launch for the last decade and never have I seen this chaos or mishandling of player security. Really, their priority is banning instead of stabilizing their infrastructure during the first week?  It wasn't even a problem on the player end. Players are registering, BUYING the game, and finding they are not able able to login at all. 

I received an e-mail from ArenaNet:

 

Someone -hopefully you!- has requested to change the email address associated with your Guild Wars account.

Need help or have questions about your Guild Wars account? Visit our support site: http://support.guildwars2.com/.

Thanks!

-The ArenaNet Team

 

They didn't even bother checking with me before changing my password. How did that happen? 

This is really unfortunate for ArenaNet, but I really feel like they should have had better security systems in place. This is ridiculous.

 

TL; DR GO CHANGE YOUR E-MAIL and PASSWORD NOW 

The email was no doubt a phising scam.

And as for thousands the links you provided so a few posts not the thousands you claim.

 

P.S. Do they not send out validation emails to the current email inorder for you to change to the new one .?

it's not a phishing scam because when you change your password on their site you get the same email.