+- Southperry.net (https://www.southperry.net)
+-- Forum: Maplestory (https://www.southperry.net/forumdisplay.php?fid=15)
+--- Forum: Maplestory Discussion (https://www.southperry.net/forumdisplay.php?fid=31)
+--- Thread: Any recent hacked accounts from Southperry users? (/showthread.php?tid=20977)
Any recent hacked accounts from Southperry users? - Fumni - 2010-01-26
Retalion Wrote:@Combattente: Roxstarzzz pretty much said it: if this thread's accomplished anything, it's that it's confirmed that the hackings are in no way related to the players, that it isnt any of the player's faults that they got hit. Then again, I guess that's what happens when you dont read. You really SHOULD try reading sometime...its really fun, and it'll do you good!
I'm sure if the headline were called "Tespia is coming back, read for details," he would have combed through all 36 pages.
Any recent hacked accounts from Southperry users? - SethElite - 2010-01-26
Retalion Wrote:"Its your own fault for not changing your password regularly"
If Nexon let the hackers get the info from the database, like its looking like they probably did, changing your password regularly would have had no effect. They get current password, they strip, they, they hack you again unless Nexon fixes hole in database even if you change your password to some random ass pomegranate like fdbuoj123o
Any recent hacked accounts from Southperry users? - Stereo - 2010-01-26
Retalion Wrote:(I mean, who hasnt shared their personal info in game with "strangers"),
I haven't, but I'm special. And hey I've never been hacked.. knock on wood.
I also used a 6 letter dictionary word as my password for most of 4 years... changed it last month (for the first time) because of this issue.
Any recent hacked accounts from Southperry users? - Combattente - 2010-01-26
Retalion Wrote:Out of curiosity, is there a maple tip that tells you to change your info every x amount of time, every month? I remember seeing <some> mapletips about chainging your info, but only after using public computers or some crap like that. Reason I bring this up is because if there is, they can just point to it and go "Its your own fault for not changing your password regularly", as 90-95% of the people who posted in those info threads have indicated they have not changed their password in...well, forever, if not a few months.
Its a definite low blow, considering no one reads or follows the mapletips (I mean, who hasnt shared their personal info in game with "strangers"), but hey, at this point, what can Nexon do that will NOT leave you surprised?
@Combattente: Roxstarzzz pretty much said it: if this thread's accomplished anything, it's that it's confirmed that the hackings are in no way related to the players, that it isnt any of the player's faults that they got hit. Then again, I guess that's what happens when you dont read. You really SHOULD try reading sometime...its really fun, and it'll do you good!
Are you telling me I should spend one entire hour just reading all the 36 pages of this post? I don't think that would have really been worth the time.
Fumni Wrote:I'm sure if the headline were called "Tespia is coming back, read for details," he would have combed through all 36 pages.
Trust me, I wouldn't have. Nor would I have if the thread was called "GM exploit, everyone can become GM, read for details". I don't have all this free time, sadly.
Also, again, the hackers must be using a way to access the database without leaving traces. That's the only option left. They must be REALLY expert and what-so-ever.
And I agree with the people who said that putting free item locks in the Cash Shop would help. They aren't going to do it, obviously, because they think that it'd hurt their business, but, as you also said, they'll lose more money from the hacked people than they would have from putting free item locks in the Cash Shop. It wouldn't be so hard for them to do it, yet they refuse to. With this, they just proved how much of a bad company they are. They haven't changed a little bit, even if their patches started to be better than they used to.
Any recent hacked accounts from Southperry users? - Will - 2010-01-26
Combattente Wrote:And I agree with the people who said that putting free item locks in the Cash Shop would help. They aren't going to do it, obviously, because they think that it'd hurt their business, but, as you also said, they'll lose more money from the hacked people than they would have from putting free item locks in the Cash Shop. It wouldn't be so hard for them to do it, yet they refuse to. With this, they just proved how much of a bad company they are. They haven't changed a little bit, even if their patches started to be better than they used to.
I know I would buy more NX to train and do pomegranate again if I was able to lock all my equips for free.
Any recent hacked accounts from Southperry users? - Phoenix - 2010-01-26
This shit sucks. One more notch on the hackers stick.
Though the trend is accounts that have not changed passwords in a long time, it sucks because the latest victim close to me had lost his email access as well. Honestly, I know it's common safety practice to change your pass. But you don't expect to get hacked without doing something stupid. Too bad this effects mainly players who've been playing since the beginning and have invested time and money in accounts that are no longer safe.
Any recent hacked accounts from Southperry users? - Loose - 2010-01-26
Is there any place where there's a list of all the people recently hacked?
Any recent hacked accounts from Southperry users? - CarrionCrow - 2010-01-26
Combattente Wrote:Are you telling me I should spend one entire hour just reading all the 36 pages of this post? I don't think that would have really been worth the time.
Reading up on what's been said before you voice an educated opinion? No that would have been horrible and utterly unheard of. Can't have people doing research before they butt in now can we?
I can't help but to be speechless about how Nexon through -Hime- acts as if they are somehow the victim in this. "Boohoo unfair that you blame us boohooo". Can they really point the finger at how people use their e-mails and computers for other stuff than Maple and draw the conclusion that if its not secret to all but Nexon its automatically unsafe? With good security on their part and a little wit they wouldn't need to be making absurd claims about our info and how we are "sloppy" with it.
Any recent hacked accounts from Southperry users? - twy123 - 2010-01-26
It seems that some people want to boycott maple until this bullpomengrate is fixed.
http://www.basilmarket.com/forum/1364810/0/The_MapleStrike_for_Account_Security.html#
So BombsAway is now creating a Ruckus and more at the nexon forums, that guy above is asking people to take a stand and strike and at sleepywood.... nothing much, just the usual threads regarding hackings. Wow, this is more then action what MapleSEA can muster
On the other hand, MapleSEA, is .... untouched for now, although it is a matter of when and not if the hacking wave will hit us. Time to use the internet for what it was and spread the info around. AT least when the hacks come, there won't be much fallout, although right now, half the threads are full of idiots
.
Any recent hacked accounts from Southperry users? - Retalion - 2010-01-26
Combattente Wrote:Are you telling me I should spend one entire hour just reading all the 36 pages of this post? I don't think that would have really been worth the time.
Trust me, I wouldn't have. Nor would I have if the thread was called "GM exploit, everyone can become GM, read for details". I don't have all this free time, sadly.
You wouldnt even have to read all 36 pages (18 in my case)...taking a few minutes to skim a few of the most recent pages would've gotten you the same info that reading all 35 pages would have...other than the fact that you would know what's happening, and how silly your comment sounded.
Any recent hacked accounts from Southperry users? - Sarah - 2010-01-26
twy123 Wrote:So BombsAway is now creating a Ruckus and more at the nexon forums, that guy above is asking people to take a stand and strike and at sleepywood.... nothing much, just the usual threads regarding hackings. Wow, this is more then action what MapleSEA can muster
My forum actions have been restricted twice so I have moved away from such a petty one-sided platform. No voice is loud enough to reach Nexon directly, which means sending tickets and posting on their forums will not work regardless of what stance you're taking or movement you are a part of.
Any recent hacked accounts from Southperry users? - bored4ever86 - 2010-01-26
I cheer on those that want to cause a ruckus, if we were all this proactive we could get something done. I feel mixed about throwing my hat in the ring to further the movement as the only evidence i have is that one of my accounts is empty. I haven't changed passwords in a long time, never shared any info (only reason I know i was hacked), use my ids/passwords/emails for things other than maple. I know i'm not the most secure person (in terms of making my passwords hard etc) but i'm thuroughly sure it wasn't my fault.
I feel that my account, although i'm pissed about it, wasn't of worth, it had no nx, i spend/spent nothing on nx ever, never used MTS other than storage, and effectively have lost nothing other than time and pixels. I have no right to complain other than being pissed that i did nothing but still lost out in the end.
also a list of users on the list was mentioned to be posted by eosian though i haven't found it (interested to see if my name was on it) anyone have a link to it?
Any recent hacked accounts from Southperry users? - rualyn - 2010-01-26
Not only was my untradables touched... but they got almost everything off my character. Even things that shouldn't be able to be gotten off. For example the Relaxer chair and the Warrior throne, both items that cannot be traded or dropped are both gone. They wiped out everything shy of a few medals and a few silly untradables like the Ludi medal. But even the CWK things that were in Set Up... gone. Wiped out my MTS storage on all three characters on my account and that was mostly etc garbage and monster drops for Maker quests.
Its almost like they had some.. "Get All" thing going on with me. The only thing I was left was that useless 120 lunchbox (I'm a thief that's useless). I lost several billion meso worth of equips on all of my characters and pure meso. So yes... they can and will and have.
They got me last Sat morning. And from the timing that my guild leader who was unfortunate to witness it... was a mere two and a half hours before I got on. Just to let you know in case you all are looking for any clues, that was the same day I also charged NX with the cards. The last time I was ever logged onto the Nexon website before that date was the 17th of Jan.
Any recent hacked accounts from Southperry users? - Loose - 2010-01-26
bored4ever86 Wrote:I cheer on those that want to cause a ruckus...It ain't ruckus, it's awareness. : )
I'm currently a Buccaneer, don't want to change jobs to a Hackedaneer. Fight the good fight, people!
Any recent hacked accounts from Southperry users? - Eos - 2010-01-26
rualyn Wrote:Even things that shouldn't be able to be gotten off. For example the Relaxer chair and the Warrior throne, both items that cannot be traded or dropped are both gone.
The "NoDrop" flag on those doesn't mean they can't be dropped - It means they vaporize when dropped.
A guildmate of mine found that out when her 4 year old dropped hers along with her CWK quest items.
Any recent hacked accounts from Southperry users? - Jellyflower - 2010-01-26
Skeptics or not, everyone's welcome of their opinions. I too understand where Hime stands and why, most of you just need to put yourself in their shoes. Security improvement wise, someone needs to send Stereo's list over to Nexon so they know. I'm an advocate for IP logs of some sort as well, maybe even an option where you can log in only from designated IP(s), with expiration dates of course. NX shouldn't be that easily accessible. What I mean is, at least it should prompt you for your password/birthday code when you first enter MTS. Or better yet, a complete separate password for NX related things, including cash shop.
Any recent hacked accounts from Southperry users? - Amnesia - 2010-01-26
This just makes me "wow"...All the chaos...I mean, when MSEA was hacked, it was at least known who did it (Chinese hackers), But, who is hacking us (GMS people)?
Any recent hacked accounts from Southperry users? - Xiyuuna - 2010-01-26
Amnesia Wrote:But, who is hacking us (GMS people)?
A hacker...
Any recent hacked accounts from Southperry users? - MysticHLE - 2010-01-26
Has it occurred to any of you that possibly a MWLB member/or GM who is related to all these hackings somehow got access to the database from within Nexon's headquarters while working there? The most penetrable aspect of computer security is from within, and not without. If -Hime- is so sure that it is not Nexon's security being bypassed, and assuming that she is speaking the un-ignorant truth, then it may very well point to the possibility of the security being infiltrated.
But then again, even with this theory, it can only go so far without evidence since we don't know how Nexon manages their in-company security. Are the database computers locked somewhere in the company? Do they require special admin priviledges that are only open to 1 person? How about GMs? They will never ask for our passwords. Why? Because they have access to foresee all that is about our account? Could it be possible that one GM slipped up and didn't lock his/her screen during a bathroom/lunch break and someone took that chance and stole some information? That person may also very well be connected to some other players? Possible, no?
When they hired the MWLB, for sure, it was from the player base itself. How certain are they that these players aren't after something else? How certain are they and what precautions have they taken to ensure that those players, upon joining the MWLB, will have no possible dealings with such data? And mind you, MWLB must be local to work in Nexon's offices. So it's not just a remote job.
As for GMs, there is no real possible conviction against any GM that verifies that s/he has no affiliation with the database outside of the work place. i.e. if a GM can view player info and have access, there is no real guarantee at all that the GM will not reveal/sell that info.
Anyway, hopefully this post raises more thoughts on this issue than just SQL injections, hash-table key collissions, and other sorts of concrete system bypasses.
Any recent hacked accounts from Southperry users? - MissingLink - 2010-01-26
As far as i know, the MWLB are just regular players given a special account with a few extra skills and a way to contact GMs. They don't work at Nexon offices, and would have no more chance to obtain data than you or I.
I'm sticking to thinking that hackers are using hacking, not inside job stuff, and not CDs raided from trash cans or whatever.