MapleSEA SQL DATABASE HACKED AGAIN! 22th March 2009!

This seriously sucks...

And just after (before?) their new patch too =/

Hope the peoples get their accounts back and stuff too...

Either Asiasoft sux more than Nexon NA, or they hackers are more skilled that ours...
lolz

what's so hard to believe about someone's SQL database being hacked?

pomegranate, they hacked WPA with 300 PS3's, this shouldn't be that hard. I mean, especially considering the fact that THE CHANGE PASSWORD FUNCTION IS NOT FUCKING WORKING!!!
Seriously, just sit down, and think about that for a second. Those kinda things don't "break". It's an algorithm, that links to a database, so I don't know why the fact that that alone has been comprimised should point to anything else but the fact that SEA is done for. (slightly overdramatic, please cut me down to size so i learn how to better post on these forums)

It could happen to gMS to, it's just that the rivalty SEA/China keep the chinese hacker too busy : those are the teens, and when they grow up they do the same against Taiwan for political reason. Those guys can hack pretty much what they want where they want. It's always just a matter of "is it worth investing the time?".

MSEA really needs to upgrade their security. Its more than likely that they can afford better security than this.

Why not just get a shopping mule, buy the item, go to a random FM, drop the item, and then pick it up with your main?

Why not just get a shopping mule, buy the item, go to a random FM, drop the item, and then pick it up with your main?

why not just "not profit from hacker thinking this item was probably the result of a hard labour from a legit player"


It's amazing with you that every glitch/hack discussion (poisonable BF/ clean slate/ you name it) turns out to be for you "how can I turn this into a profit for me"

It's amazing with you that every glitch/hack discussion (poisonable BF/ clean slate/ you name it) turns out to be for you "how can I turn this into a profit for me"

I'm not so much profit oriented as you think.

1) For poisonable BF, I argued on the side that until Nexon declared it a glitch that it wasn't, as I hold firmly to the belief that it's always innocent until proven guilty.
2) Clean slate glitch is the same. In fact, I even submitted a TICKET to Nexon telling them of my capes, including a full detail summary of the glitch, screenshots, links to threads on both sleepywood and here on southperry. Guess what they did. They auto-replied it. That alone implies that it is NOT a glitch.

Now, I don't see how I profited off either scenario. I didn't even gain one full level off Bigfoot, and I definitely did not sell toes like many of the hermits were. The extent to which I poisoned bigfoot was to gather toes for those on my BL.

For second scenario, I wouldn't call using 450m to gain 1 INT on my cape profit at all. In fact, it was a major loss money-wise for me.

Do not make accusations of me based on misled presumptions. Whatever other "you name it" scenario you can think of, I have good explanations/rationalizations for them.

why not just "not profit from hacker thinking this item was probably the result of a hard labour from a legit player"

Yea, guess what. If you don't get the items, other people will. Then they'll get hacked. Even without buying the items, you honestly think that the hacker will just hand them back to their original owners? That ownership was already lost when the person lost his item.

There's one thing most maplers do not get and that is that "time and scenarios cannot be reversed". Since time can't be reversed, you might as well go forward and make use of these deals. If you really don't want to "profit" off of them, go be a non-profit organization and buy them and resell them for the same price so that when people buy them they know that they're buying clean items.

http://maple.asiasoftsea.net/intro/event...aspx?id=79

Dear Maplers,

Here's a chance for you to get @cash for FREE!
Join the "Win as you CHANGE Event" from 23rd to 30th March 2009 to stand a chance to be one of our 50 lucky winners and walk away with 10,000@cash each.

Follow 3 simple steps & you'll get enrolled into the lucky draw automatically!
1. First, Log onto AsiaSoft Passport https://passport.asiasoft.net/logon/login.aspx
2. Key in your Passport ID & password, you will get a prompt to enter new password & PIN.
3. Lastly, create a new password & PIN!

For users who experience trouble with his/her Asiasoft Passport Account, please send your enquiry to APmatter@asiasoftsea.net, under subject header [APmatter]

THe result of this contest will be announced on 3rd Apr 2009

- Customer Service Manager

Promoting Asiasoft Passport password change? o.O

Promoting Asiasoft Passport password change? o.O

It seems like that they realized this hacking incident earlier than the last one. However, it still amazes me how their DBs got hacked again.

And has anyone recalled if any lost items/mesos were restored to victims of the first hacking wave there?

Either Asiasoft sux more than Nexon NA, or they hackers are more skilled that ours...
lolz

the hackers are from China

this was stopped awhile since AsiaSoft ban China's IP totally from website and game

but now it started again?:f6:anyway,sure is because of HackShield removing of IP Ban and more easier to hack etc......

It seems like that they realized this hacking incident earlier than the last one. However, it still amazes me how their DBs got hacked again.

And has anyone recalled if any lost items/mesos were restored to victims of the first hacking wave there?

none have been restored, just massive 2x EXP given.

What good is 2x exp when you have no equipment to train with =S

Was HackShield Pro improperly set up? That could kind of really help them >_>

That or they actually hacked the database VIA website.... again....

Seeing how it would be a lot harder to hack the database within the game, they would have pin pointed to the website more.

Why? It's easier, A LOT easier. If you can find a weak point in the website to perform SQL Injection (which is what they did it seems), such as URL Query String or input fields, then boom, you can grab everyone information. Hacking the Login/Password Field could be the source of where they got it from, because that field is hooked up to the database of accounts.

Do note, in MMO structures, login information is separated from character information, but brought together by a (Primary) Key. So "hacking" in the shop, which isn't possible, won't do squat.

I don't think it's the HackShield Pro's fault here, people, but rather Asiasoft's Web Developers.

I was skimming a few posts on the AsiaSoft forums.. seems like only the people who had recently changed their passwords got hacked.
Tell me more.

I also wanted to note that I'm quite sure the login server itself takes the job to block regional IPs, not the Client software, then that would be too easy/stupid. It seems more they really did hack VIA the website in a form of SQL injection.

Oh no not the Chinese hackers from china! I like how they turn botched up security into an event. A bit like last time I guess.

2) Clean slate glitch is the same. In fact, I even submitted a TICKET to Nexon telling them of my capes, including a full detail summary of the glitch, screenshots, links to threads on both sleepywood and here on southperry. Guess what they did. They auto-replied it. That alone implies that it is NOT a glitch.

http://www.southperry.net/forums/showthread.php?t=8350

Hacking in MS is now legal

http://www.southperry.net/forums/showthread.php?t=8350

Hacking in MS is now legal

That screenshot was confirmed as false. Sorry~

lol I got owned.

Ah well, my point still stands. I don't think that is a very good way to assume that something is allowed