People being hacked since the last Server Check.

Unless we have everyone who has been hacked so far step forward and tell us what their passwords were when they were hacked, we have no way of knowing how complex their passwords were and, by extension, no idea how difficult they would be to brute-force.

I can help with this.

tEswAth8nutH was my password when I was hacked. Granted, it didn't happen recently and was probably due to the first leak that Nexon did/did not acknowledge. I also realize that I am only a part of the minority when it comes to randomly generating 12+ character passwords.

 Spoiler

With all this hullabaloo going about, I've transferred anything that is worth something to new mule accounts since college will get in the way of me actually AFKing for extended periods of time. Whether that will come in handy has yet to be seen.

I am more interested on the order of being hacked... because if it is in some sorts of order to the date being hacked, that means we are 100% sure that database have been compromised... For example, the hack is happened in order of?
- date of account being registered
- login name (I know there are at least three sorts of login, normal login, email login and the 12 digits login Nexon assigned us)
- last time password updated

I was using a 9 digits alphanumeric password, an ISP e-mail and the only computer where I played maple was clean of any kind of malware and a hijackthis log was examined by some of my computer literate friends and was clean too.

I am more interested on the order of being hacked... because if it is in some sorts of order to the date being hacked, that means we are 100% sure that database have been compromised... For example, the hack is happened in order of?
- date of account being registered
- login name (I know there are at least three sorts of login, normal login, email login and the 12 digits login Nexon assigned us)
- last time password updated

- Created October 26th 2008
- Starts with Sc
- 8 days prior to hacking

Was hacked on 9/4/2011 if that's needed.

It costs 36.4k NX to lock all usable character slots (minus rings, medal, mount) for 30 days.
If you take away Hat, Belt, Glove, Face Accessory, and Pendant due to tradelock you have 26k NX left.

Is that even worth it? Nexon's last resort seems silly for something that shouldn't happen.

Date of Registration	Login	Last Password Update	Hacked on
May 2007	Hy	Jun 2010	17th Aug
Oct 2008	Sc	Aug 2011	4th Sep

PS. is there anyway to know the 12 digits ID? I know it was shown on CS before, but it is no longer there

It costs 36.4k NX to lock all usable character slots (minus rings, medal, mount) for 30 days.
If you take away Hat, Belt, Glove, Face Accessory, and Pendant due to tradelock you have 26k NX left.

Is that even worth it? Nexon's last resort seems silly for something that shouldn't happen.

The inconvenience of that is more the fact that the item becomes untradeable than the cost of locks. 36k NX is what, 1.4b? A trifle compared to the potential worth of your equips if you get hacked.
But the fact that you can't trade your items for one year, especially with nexon always releasing new items that render old ones obsolete, is a pimento. They should make you have to assign a Pic for your locked items, and you only have one try to enter the pin per day or something. After unlocking it you have the option of relocking it at any time until the lock expires. that's what the locking system SHOULD be like.

The inconvenience of that is more the fact that the item becomes untradeable than the cost of locks. 36k NX is what, 1.4b? A trifle compared to the potential worth of your equips if you get hacked.
But the fact that you can't trade your items for one year, especially with nexon always releasing new items that render old ones obsolete, is a pimento. They should make you have to assign a Pic for your Locked items, and you onlu have once try to enter the pin per day or something. After unlocking it you have the option of relocking it at any time until the lock expires. that's what the locking system SHOULD be like.

It'd only work if the PIC was different than the one used to log in. Otherwise once they get in the PIC is rendered useless.

Date of Registration	Login	Last Password Update	Hacked on
May 2007	Hy	Jun 2010	17th Aug
Oct 2008	Sc	Aug 2011	4th Sep

PS. is there anyway to know the 12 digits ID? I know it was shown on CS before, but it is no longer there

Dont think the id is needed for gathering information regarding this issue. What you have is good enough. Also should include if they were on the leaked list and if they go to the nexon site does it show as an unsecured session while using goolge chrome.

It'd only work if the PIC was different than the one used to log in. Otherwise once they get in the PIC is rendered useless.

Yea, they could make it similar to the store remote controller, in that you assign a PIC on the first use.

Dont think the id is needed for gathering information regarding this issue. What you have is good enough. Also should include if they were on the leaked list and if they go to the nexon site does it show as an unsecured session while using goolge chrome.

In my opinion, Nexon is more likely to sort their database in terms of the 12 digits ID they assigned (which is more likely to be related to the date of registration) because the recently created account won't have a normal login, just the email login and the 12 digits ID.
I don't know when the 12 digits ID were created... Is it created a long long time ago or recently (like after email login is enabled).
No and no for me on the next two questions...

- Created October 26th 2008
- Starts with Sc
- 8 days prior to hacking

Was hacked on 9/4/2011 if that's needed.

I'm not hacked and my accnt is older then yours. The hacking is possibly not the scenario Tam made unless I'm excluded from it for reasons unknown. Must be something else? Was a good theory though.

I'm not hacked and my accnt is older then yours. The hacking is possibly not the scenario Tam made unless I'm excluded from it for reasons unknown. Must be something else? Was a good theory though.

May very well be that if you're online when "your turn" comes, or login fails for whatever other reason, they just skip you and move on.

But, the guild "clusters" do seem to indicate that there's something else involved.

O-o Wow can't believe everyone is getting hacked x.x... Uhmmm does anyone know if u can use symbols (such as chinese) in ur password? o.o

This might also ended up with no pattern at all even the database really compromised... Because there might be some other things that we don't know of and also, the list might partitioned into several ones, for several people to hack our accounts. (You know, it might be a team of people are hacking us instead of one person.)

I think all the hacked people must played DFO... or recharged NX personally..

For me I only used MTS to get NX... but even hackers did pass throught it lol.

O-o Wow can't believe everyone is getting hacked x.x... Uhmmm does anyone know if u can use symbols (such as chinese) in ur password? o.o

http://www.southperry.net/showthread.php?t=23056

In short, yes you can, but it basically locks your account.

Based on what I know, the hacker here in Windia who matches these stories seems to do this:
-Run multiple clients.
-Leave everything untradeable, untouched
-Smega "18-1 shopping gogogogogogo", in a similar fashion of the smegas of kMS
-Sells these items really cheap.

Yep, this seems to be the case. I decided to stake out one of these shops on a mule for my 1 hour today. The shop owner, a Level 16 Evan with a Clover Corsage, came by twice. After he edited the store the first time, I suddenly noticed 8 sets of Balanced Furies and a 110 ATK VIP Claw in the shop. The VIP claw sold for max meso. After the second time, I saw various % LUK gear, one of which was a 12% LUK Purple Giles Cape priced at 200 mil (obviously a mistake since the other % LUK gear were priced at 1-2 billion), but the vultures nearby couldn't take advantage of this because the shop owner obviously still had the max meso from the VIP claw. And so it remained the case until I left.

This was an hour ago.

This is quite depressing stuff...

Yep, this seems to be the case. I decided to stake out one of these shops on a mule for my 1 hour today. The shop owner, a Level 16 Evan with a Clover Corsage, came by twice. After he edited the store the first time, I suddenly noticed 8 sets of Balanced Furies and a 110 ATK VIP Claw in the shop. The VIP claw sold for max meso. After the second time, I saw various % LUK gear, one of which was a 12% LUK Purple Giles Cape priced at 200 mil (obviously a mistake since the other % LUK gear were priced at 1-2 billion), but the vultures nearby couldn't take advantage of this because the shop owner obviously still had the max meso from the VIP claw. And so it remained the case until I left.

This was an hour ago.

This is quite depressing stuff...

Interesting... The person who I found one of my items in was a level 17 Evan..

According to basil, this still works. So, I guess it could be a good way of doing it.