Howdy, Stranger!
It looks like you're new here. If you want to get involved, click one of these buttons!
Quick Links
GamebreakerTV: ArenaNet confirms: Guild Wars 2 Players are Finding Themselves Hacked
Karteli
Member CommonPosts: 2,646
ref:
http://www.gamebreaker.tv/mmorpg/guild-wars-2-anet-hacked/
The exact cause for the breach is up to speculation for people claiming ArenaNet is at fault, to others saying it's the players fault.
Phishing emails are being sent out constantly, perhaps thanks to various known gaming sites having their data centers breached, thus losing control of emails which players use for accounts, such as for games. Other reasons may exist.
What it comes down to, is that Anet needs to have more security features installed (they are working on them, no ETA though). A physical authenticator would be bliss, but there are other measures to be taken also. I would pay $10 surely for an authenticator, especially if it were implemented like Blizzard, where multiple successive codes would need to be entered in order to change personal account info (like emails), so stealing a transmit of one code won't do a thief much good other than to access your account one time, assuming they use it before you do.
Sure an authenticator won't make anyone completely immune to having info stolen, but if you do get hacked, at least you would be able to say you got hacked by a professional, and not just by some 2nd rate crook..
Authenticator! Every major game should have one ...
btw: ArenaNet is able to verify if an account was hacked, so the best thing to do if that happened to you would be to just call them directly.
ps: Even if you think you are above network security and would never use an authenticator, just remember you don't represent everyone, and nobody would be forcing you to buy one or to use an app ....
Want a nice understanding of life? Try Spirit Science: "The Human History"
http://www.youtube.com/watch?v=U8NNHmV3QPw&feature=plcp
Recognize the voice? Yep sounds like Penny Arcade's Extra Credits.
Comments
If it were on Arena Net's side, wouldn't they target level 80 characters for their gold?
Yet to be hacked, not my problem.
Most games with authenticators also have a smart phone version of the authenticator. Those are almost always free. Generally what you are paying for is shipping + manufacturing and what ever other fee is associated with sending you a physical unit.
No a physical authentication cost money, but the digital versions are free. Both WoW and Rift has them free on mobile devices.
Philosophy of MMO Game Design
Smartphone authenticators are usually free. I don't think anyone would expect any company to give out 3 million authenticators at $10 a piece, that is $30 million. Just think of it as buying insurance for your car. It's not your fault if someone steals your car, however you can't expect Ford or whoever to be responsible for your vehicle.
No, it doesn't work like that. Ifs it's Anet side, it's likely the hackers are getting access to certain variables of accounts, and taking what they can from them. They don't just get access to a list of names of which accounts have 80s.
Philosophy of MMO Game Design
That's faulty logic, since unlike cars, we the players own none of the content we play. Which is why you can be banned from playing even if you brought the produce. Car companies can't do that. That would be a civil lawsuit.
Philosophy of MMO Game Design
All of my posts are either intelligent, thought provoking, funny, satirical, sarcastic or intentionally disrespectful. Take your pick.
I get banned in the forums for games I love, so lets see if I do better in the forums for games I hate.
I enjoy the serenity of not caring what your opinion is.
I don't hate much, but I hate Apple© with a passion. If Steve Jobs was alive, I would punch him in the face.
Well you know, you can eventually convince yourself that hitting yourself in the head with a hammer is good therapy...
That Guild Wars 2 login screen knocked up my wife. Must be the second coming!
Yes, it is your responsibility. It is very very unlikely that ANET is at fault for this. The authenticator isn't needed, people just need to not use the same password for everything and know how to surf safely.
Games:
Currently playing:Nothing
Will play: Darkfall: Unholy Wars
Past games:
Guild Wars 2 - Xpiher Duminous
Xpiher's GW2
GW 1 - Xpiher Duminous
Darkfall - Xpiher Duminous (NA) retired
AoC - Xpiher (Tyranny) retired
Warhammer - Xpiher
Loo whatever.
lets not forget a few years ago, people could randomly log into NC accounts of other players.
Philosophy of MMO Game Design
/sigh..
You would think people would be smart enough not to re-use email addresses and passwords for stuff they actually care about.
I guarantee every single person that has had their account logged into by someone else has either been keylogged or has had their details obtained from another avenue such as a forum. If you don't want to take the risk go make a new email address on gmail or something and give it a unique password and then change your account info on the gw2 website. Problem solved.
/sigh..
You would think people would be smart enough to know by now, that most of the recent hacks in the gaming industry lately have been on the big corps, not just players, so what would make these people continue to believe these hacks are only players fault?
Philosophy of MMO Game Design
I have friends who's had computers/internet for a decade, and got their MMO' accounts banned several times, and still click links in emails. Like, "oh, this email is from *@ArenaNet.com" and they are asking for my password.. I guess I better give it to them".
Some people never learn. I'm pretty sure that there is always a good reason why someone gets hacked. I never got hacked ever, and im pretty sure its because I dont re-use passwords, or click random lnks.
Nothing you said invalidated my post in any way at all. Did you even read it? What would Sony or anyone else have to do with ArenaNet, nothing. Absolutely nothing. The only way for a unique email and password for this game to be compromised would be either a keylogger or a phishing attack, both of which are the end users fault.
People can pretend that it's not their fault if they want, they say ignorance is bliss afterall.
I'm not a huge GW2 fan , but Anet is not at fault , and not by a long shot. If the players are stupid enough to answer such lame e-mails and then find themselves getting hacked , it's their problem , not Anet's. For Diablo 3 I use a 16 alpha-numerical password with some caps lock. I'm not that stupid on buying a authenticator. Never got hacked on any games since 1993 and never will. Those that get hacked is because they use a lame password , ie : GW2FTW , or did something stupid like clicking on something they shouldn't.
I might be a critic most of the time , but I know where to cut Devs some slack , and this is it.
NCsoft the parent company of Anet had account breach. What makes you thing hackers couldn't get GW2 accounts? Get real.
Philosophy of MMO Game Design
Most of the email addresses they are spamming are from compromised gaming sites. I have 3 email address I use. 1 is for everyday billing (electric, banking, etc). #2 is used for gaming accounts and contacts only and the 3rd is my everything else email address (which is used for forum sites and what little social networking crap I may do). This is the email that gets all the gaming spam - at least 15 WoW related emails a day, a few Runscape emails (never played the game) and now GW2 email spam.
Now I am not saying its not something on Anets end, just saying I have yet to see any phishing emails sent to my gaming address for any of the games I play/played. People just need to learn to signup for forum accounts using a 'catch-all' email address and keep gaming/billing account info separated to another email used just for that. They would quickly see which email is spammed.
There are 3 types of people in the world.
1.) Those who make things happen
2.) Those who watch things happen
3.) And those who wonder "What the %#*& just happened?!"
Blizzard's BattleNet was compromised not too long again, just in case you didn't know. Account info for those in North America were lost, even answers to security questions. People with a physical authenticator were immune to the data breach, and just were able to change the password at their leisure.
People without a physical authenticator had to hustle to change their password, assuming they knew Blizzard was hacked. They also had to update their authenticator app, if they were using one. They did get some fair warning even if it was a few days late - hackers couldn't hijack everyones account in the time available.
http://www.forbes.com/sites/erikkain/2012/08/09/its-official-blizzard-hacked-account-information-stolen/
So it doesn't always rest solely on the users hands. Is ArenaNet exempt from future data loss? Not likely.
Safe surfing is just about impossible these days, and not everyone uses 3rd party web security apps, or knows how to enable only specific website scrips and such. Even an ordinarily safe website can be comprised to inject malicious code onto an otherwise trusting user, who has used the service for a long time without incident. In another extreme, other sites like Photobucket were allowing advertisements which contained malware, inserted without a computer users knowledge.
It's not about if it can happen, it's more about when it will happen, as long as a computer is used for stuff other than gaming, or even a single game.
Want a nice understanding of life? Try Spirit Science: "The Human History"
http://www.youtube.com/watch?v=U8NNHmV3QPw&feature=plcp
Recognize the voice? Yep sounds like Penny Arcade's Extra Credits.
That was a long time ago and had no bearing on GW2 since everyone was required to reset their password, if i remember correctly.
Do you just like scaremongering for the sake of it or do you actually have a point to make?
i had the same email saying password requested blah blah. i deleted it,
~The only opinion that matters is your own.Everything else is just advice,~
The Bnet breach did not reveal passwords and those with authenticators (physical/smartphone) were fine also. It still doesn't change the fact that everyone should be using a unique email address and password for each game and not be using it for any forums etc.
Of course it has had no bearing on the current situation with GW2 at all, unless of course people are using the same details for stuff..
As for the probability it might be ArenaNet directly.. well.. that's not very likely given the game is just out.
[Edit]
Did you also know that the bnet account passwords are not case-sensitive? GG Blizzard