Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

A LOT of Hacked Accounts

13»

Comments

  • TheFarseerTheFarseer Member Posts: 97

    Originally posted by Deathofsage

    9.) Don't torrent. Just don't. You're asking for it when you download one of those files.

    Is it weird that I have more trust for a random seeder on Pirate Bay than I do for the average MMO player? I don't usually use Pirate Bay, of course, and I always can it whenever I torrent something, but it's bullshit when people tell you not to torrent.

  • ThekandyThekandy Member Posts: 621

    Originally posted by TheFarseer

    Originally posted by Deathofsage



    9.) Don't torrent. Just don't. You're asking for it when you download one of those files.

    Is it weird that I have more trust for a random seeder on Pirate Bay than I do for the average MMO player? I don't usually use Pirate Bay, of course, and I always can it whenever I torrent something, but it's bullshit when people tell you not to torrent.

    One thing that has always bogled my mind is that people seem to have no sense of critical thinking when it comes to the internet, it's like some people just go "herp derp, oh look free stuff better download the first torrent i come across" you would assume they would at least have the common sense to check if the uploader just signed up or at the very minimum read the comments.

    I simply cannot understand how people can be that ham-fisted with their clicks.

  • DeathofsageDeathofsage Member UncommonPosts: 1,102

    Originally posted by Thekandy

    Originally posted by TheFarseer


    Originally posted by Deathofsage



    9.) Don't torrent. Just don't. You're asking for it when you download one of those files.

    Is it weird that I have more trust for a random seeder on Pirate Bay than I do for the average MMO player? I don't usually use Pirate Bay, of course, and I always can it whenever I torrent something, but it's bullshit when people tell you not to torrent.

    One thing that has always bogled my mind is that people seem to have no sense of critical thinking when it comes to the internet, it's like some people just go "herp derp, oh look free stuff better download the first torrent i come across" you would assume they would at least have the common sense to check if the uploader just signed up or at the very minimum read the comments.

    I simply cannot understand how people can be that ham-fisted with their clicks.

    ^.

    I hardly frequent those sites, but I can use torrent sites and have never gotten a virus. My antivirus is nothing special because in truth, if you're smart with a basic line of defense, you'll surf so much smoother than a clicking idiot with 3 computer security experts on personal staff for daily review of content downloaded.

    lol.

    Often, experts, or "experts" advise certain rules like "never do [x]" that they themselves can confidently break themselves. Warez and stolen media aside, torrenting is an awesome platform.

    But yes, if you must torrent.. check the author, check the file size, check for number of reviews/rate-ups, look up the size of the actual file.. If you're trying to download say World of Warcraft - FULL and it's 350 mb, move along.

    Spec'ing properly is a gateway drug.
    12 Million People have been meter spammed in heroics.

  • xephonicsxephonics Member UncommonPosts: 672

    Trion seems to be reacting quickly, and with a pretty good plan in my opinion:

    http://forums.riftgame.com/showthread.php?122396-Update-on-Hacked-Accounts&p=1658711#post1658711

    My god has horns.... nah, I don't think he is real either.

  • DeathofsageDeathofsage Member UncommonPosts: 1,102

    Originally posted by xephonics

    Trion seems to be reacting quickly, and with a pretty good plan in my opinion:

    http://forums.riftgame.com/showthread.php?122396-Update-on-Hacked-Accounts&p=1658711#post1658711

    Wow, that's a nice approach. Really. Most people will never be negatively affected by it besides logging in after a hack attempt and yeah, it in no way affects grouping or raiding so even if you didn't notice the buff, the only conceivable negative side effect would be if your inventory was full and you won loot in a raid and for some crazy reason couldn't access your email address.

    The thread also makes a mention that they're developing a software authenticator, though they don't use that term.

    Spec'ing properly is a gateway drug.
    12 Million People have been meter spammed in heroics.

  • ScotScot Member LegendaryPosts: 24,445

    A lot of this is people buying gold. Get yourself involved with a disputable site and that sort of thing will happen.

  • TreekodarTreekodar Member Posts: 524

    Originally posted by Scot

    A lot of this is people buying gold. Get yourself involved with a disputable site and that sort of thing will happen.

    Source?

    Eleanor Rigby.

  • LisaUberfrauLisaUberfrau Member Posts: 32

    Both players in my Rift guild that were hacked did not buy gold anywhere, nor register on zam's site.  One guy's wife plays with him and she was not hacked, however, she was using a unique email address and he was not.  I have since changed my email to a work-related one and made a unique password only used with Trion and nowhere else.

    Trion told them they would roll back their accounts to the date and time they specified.  Luckily both guys had played the night before and knew within 5-10 minutes of when they logged off.  I say KUDOS to Trion for jumping on this and protecting their customers!  I've had several friends with hacked WoW and LotRO accounts that got SQUAT back after being hacked.  Trion is already a far superior company in my book.

    I suggest everyone ditch their yahoo, msn, gmail, hotmail, rocketmail, etc addresses that you use for mmos and switch to one more unique!  And your password should be as long with mixed characters as you can possibly remember.  And don't forget that if you use an actual word in your password, misspell it!  You want a mix of upper and lower case letters + numbers and characters if they are allowed.  Example:  934meeetBallz350

    One person in LotRO I knew with a hacked account was using the same email address EVERYWHERE on the web and using the same password on all those sites too!  We all KNOW that popular mmos are huge targets.  Take some time to protect your computer, use a unique email address and be creative with your password, and don't forget to change that password VERY OFTEN as well.

  • majimaji Member UncommonPosts: 2,091

    Playing MMOs since nearly a decade. Never got hacked anywhere. It's just about knowing what you do. Those who do stay safe, the others get hacked.

    Let's play Fallen Earth (blind, 300 episodes)

    Let's play Guild Wars 2 (blind, 45 episodes)

  • RiftFanRiftFan Member Posts: 239

    My theory is it goes back to the Beta keys. There were probably hundreds of sites that popped up asking for your e-mail info to send you a Beta key. That is just my theory or the gold sites have kept a list for one veryyyyyy long time and just started going through the names.

  • tomincetomince Member Posts: 39

    I was hacked.

    I never bought gold, downloads anything for the game (people have asked if I downloaded a DPS meter and I haven't). The only 2 sites I've gone to are riftgame.com (the official rift website) and the character builder on zam.com. I never created an account on zam.com. I was using Google Chrome as my browser, but have since changed back to Internet Explorer since I can control more about the security (disable scripting and other things).

    I have no idea how I was hacked. This happened some time between 12:30AM and 4:30AM Saturday monring. I put in a ticket at 5AM on Saturday. Even this morning, I still heard nothing from Trion. I called Customer Service and they were completely useless and told me to be patient and wait for a GM. I just 10 minutes ago got an email from a GM and said, "we'll look into it".

    I find it hard to believe this is a #1 priority of Trion. I did nothing to be compromised (I will run the programs tonight that people have mentioned to try and find key loggers or any other spyware/trojans on my PC). Regardless of how it happened, it did and Trion has been just plain terrible with their response. I actually decided last night not to even bother waiting for their response and to just start playing again and start foraging/getting new gear with some help from some guildies.

    Trion made a good game, but their security sucks balls.

    EDIT: Just tried to login to game to see what the GM said and I can't even connect to the authentication servers. Also their website is unavailable...wonder if they are being DOS'd now and can't handle it.

  • RiftFanRiftFan Member Posts: 239

    ^ They are basically going to roll your account back to a time you choose. The response time has been between 2-4 days due to the volume of people getting their info leaked and brute forced.

    Best advice is to pick a e-mail only you know and use it only for Rift. Make sure you have ad and script blockers if you are going to use various fan sites.

    Question: Did you play in Beta and if so did you get a Beta key from somewhere?

    That time they hacked you tells me foreign IP so you will benefit GREATLYYYY from the new "lock out" procedure they are putting into place soon.

  • CeridithCeridith Member UncommonPosts: 2,980

    Originally posted by spintz

    I was hacked.

    I never bought gold, downloads anything for the game (people have asked if I downloaded a DPS meter and I haven't). The only 2 sites I've gone to are riftgame.com (the official rift website) and the character builder on zam.com. I never created an account on zam.com. I was using Google Chrome as my browser, but have since changed back to Internet Explorer since I can control more about the security (disable scripting and other things).

    I have no idea how I was hacked. This happened some time between 12:30AM and 4:30AM Saturday monring. I put in a ticket at 5AM on Saturday. Even this morning, I still heard nothing from Trion. I called Customer Service and they were completely useless and told me to be patient and wait for a GM. I just 10 minutes ago got an email from a GM and said, "we'll look into it".

    I find it hard to believe this is a #1 priority of Trion. I did nothing to be compromised (I will run the programs tonight that people have mentioned to try and find key loggers or any other spyware/trojans on my PC). Regardless of how it happened, it did and Trion has been just plain terrible with their response. I actually decided last night not to even bother waiting for their response and to just start playing again and start foraging/getting new gear with some help from some guildies.

    Trion made a good game, but their security sucks balls.

    EDIT: Just tried to login to game to see what the GM said and I can't even connect to the authentication servers. Also their website is unavailable...wonder if they are being DOS'd now and can't handle it.

    You were probably hit with an infected banner ad on the Zam site.

    Trion is doing the best they can, but are obviously not staffed enough to respond to the vast number of people affected.

    Don't blame Trion. You can blame yourself for not running a no-script and/or addon plugin for your browser, but you're best bet is to blame the idiots that buy gold who give these 'hackers' a reason to ransack your account.

  • ScotScot Member LegendaryPosts: 24,445

    I was asked for a source? Goldsellers have been hacking accounts since before WoW came out, I see no reson to think that has changed. If anything they are doing it far more than in the old days.

  • XasapisXasapis Member RarePosts: 6,337

    From the official forums:

    We are aware that there are still issues with some of you being hacked. This is a top priority for us here at Trion and the team has been working to address the situation. As we posted last week, there have already been a number of updates put in place. We are also introducing another function that should make it into the game early this week.



    Coin Lock



    Users will be coin locked if they log in from a significantly different location or computer.* When their account is coin locked, they will be sent an email to the address that they have on their account (their login email) with a code to enter into the game.



    Users will see the Coin Locked icon in the spot where their tutorial button shows up. Deactivating the tutorial tips will not turn off the Coin Locked button.



    While in a Coin Locked status, users will have the following limitations:

    • No access to the auction house

    • No ability to SEND mail. Users can still receive and view mail as well as remove items from mail

    • No ability to SELL to vendors. Users can still purchase items from vendors

    • No ability to salvage, runebreak or destroy items

    • No ability to trade

    • Users can continue to play and gain coin and items, but cannot get rid of them.



    If you are Coin Locked, simply click on the Coin Locked icon and enter the code found in your email from Trion.



    *You will only have to enter the code once for each computer at a given location. If you play from multiple locations, or on multiple computers, you will have to enter your code the first time you log in from each new location or computer.



    If you log in and your account is coin locked, check your email! Someone may have logged in from another location with your account.



    If you do not receive the email, please click on the Coin Locked icon and click the “Resend” button to have the email resent to you.



    If you cannot access your email or you are otherwise unable to change your Coin Locked status, please contact Customer Service.



    We're also working on the addition of two-factor authentication at the login level, which will let you use an app or a cell phone as a way to ensure that you're the one logging on. (You may have heard of this in other products as a SecurID or an Authenticator.) We'll be sharing specifics on that as soon as we can as well.



    If you have been hacked:



    Contact Customer Support immediately. The CS Team is responding as quickly as possible to restore accounts for those who have been hit.



    We assure you this matter is very important to us and we are doing everything we can to resolve your issues and safeguard your account.

     

    http://forums.riftgame.com/showthread.php?122396-Update-on-Hacked-Accounts

  • Brunte81Brunte81 Member Posts: 28

    Well Rift is a clone of WoW so? =)

     

    Please don't take this as trolling, more like a joke. If this is against the rules then remove this post.

  • ThrennieThrennie Member UncommonPosts: 107

    I don't know if you had, but if you use google the best thing is to also install notscripts, flash block, and adblock. Also I find WOT to be useful to give me an idea of reports by other users if a site may be compromised when googling.

     

    Also having four email addresses, one I use for normal correspondance, one for games, and another for random fan sites, etc, does help with the protection, as does using multi-tiered random digit alpha-numerical passwords.

     

    Yes I'm a bit paranoid about such things, and I've not been compromised yet (touch wood).

  • RobsolfRobsolf Member RarePosts: 4,607

    Originally posted by Xasapis

    From the official forums:

    http://forums.riftgame.com/showthread.php?122396-Update-on-Hacked-Accounts

     

    Very cool idea!  However, this may not protect the unfortunate and uninformed souls who use online email, and use the same password for that email as their Trion account.

  • CeridithCeridith Member UncommonPosts: 2,980

    Originally posted by Robsolf

    Originally posted by Xasapis

    From the official forums:

    http://forums.riftgame.com/showthread.php?122396-Update-on-Hacked-Accounts

     

    Very cool idea!  However, this may not protect the unfortunate and uninformed souls who use online email, and use the same password for that email as their Trion account.

    Trion has already stated several times that players should ensure to update their email password if it is not already unique from their Rift password. If some people continue to ignore the warnings, there's not much else that can be done.

  • KhrymsonKhrymson Member UncommonPosts: 3,090

    Khrymson

    If I read that correctly, the two-factor authentication is for cell-phones only?  {Not everyone has a cell-phone...me!}  The only other feature would be coin locking that puts annoyance on the legit player after they've been hacked, why not prevent it from happening entirely with an authenticator.  I would much rather purchase an authenticator as I have for FFXI, FFXIV, and WoW ~ its not like they're expensive.

    Joeri123

    Why is coin lock an annoyance? You log in from your regular IP location and nothing happens. Some dude from china logs in and you get locked.

    I would rather get an e-mail with a reset code when I get hacked instead of losing everything I have and waiting hours/days to get it restored.

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

     

    Because, if my account was just hacked & locked, then I'd have to go through the process of checking my email, dealing with the reset code, verifying its me, or in worst cases have to contact Trion for them to unlock it {which could take hours or days depending on how busy they are}.  Sure the latter may only take 3-5min or even less, but why should I even have to deal with my account being hacked to begin with.   

     

    With an actual autheticator it would not have happened...period, thus I can log in and immediately start playing, and not have to deal with verifying that my account is my account!

Sign In or Register to comment.