2010-01-19, 11:39 AM
(This post was last modified: 2010-01-19, 05:09 PM by LittlePrincess.)
Eosian Wrote:If they've already been on the account once they know all the characters on it and who to DC if they want to retake it. It would be more practical to add a new character to the account and idle on it.
They have not been on the accounts I'm leaving logged in. They account they were on has nothing on it (I removed what the hacker found unworthy the first time) and as there is nothing to take, I don't bother leaving it logged in.
Also I don't leave a main character logged in, I leave someone on the account logged in. It's only a main character when I'm present.
I'm still a little confused about the login info the hackers obtained. Did they obtain a list from a set point in time, or are they continusly retreving data from the nexon servers? So do they have all our old pw & pin, or are they able to obtain new ones as well? Or do they just make notes of valuable accounts and try to brute fource a pw later in case the person tries to recover?
Eosian Wrote:No, it's rather neutral. If your hash isn't found it means you've got a password that can't immediately be looked up, which is positive, but it also implies that some other method was used to bypass your pass/pin, which is somewhat bad for us, but honestly if you've already been hacked zeroing in on the how isn't going to be good or bad - it's already too late.
I looked up the hash for the old pw on the account that was broken into and checked the hash using the links you provided. Mine was not listed. So that means bad news for us?
It's not too late for me, I have over 15 accounts, so far they got one that I valued at 500m. My accounts that have probably 10-20b in items or nx are now left logged in 24/7 to minimize the probablity of anyone being able to get in. But naturally I'm interested in futher security methods.
Well, I hope the hackers get a GM account. That would be great (and nexon would finally notice). Though probably GM accounts are limited to log in only at nexon's ip, but since nexon doesn't do anything else right why would they bother to get this one right?