2010-01-21, 05:44 PM
LemonLimes Wrote:All anyone needs to take full control of an account is the email and the birthday, assuming the email can be cracked. Correct me if I'm wrong, but isnt it possible to hack a player knowing only his user name? Regardless, peoples' accounts can be hacked with very little information revealed about them and that is a serious problem to begin with.
(for all those easily offended - you refers to the hacker - not anyone in particular)
If you want to brute fource an account then you can because nexon made it easy for you. They tell you when you get a login vrs pw - "incorrect password" vrs "invalid login" then they tell you when you get the password or pin wrong, "incorrect password" and "incorrect pin." Naturally it's a waste to try this on accounts where you just guessed the login ID becaue there's a good chance it will be a waste of your time (no valuables on the account), but if you get the login ID for an account that you know is worth it then after a few weeks (not that I would even know how long it would take to run a computerized program on nexon's website doing a login + pw) you can log into the account and loot it. Hopefully I'm wrong and that would just take too long, but it seems very inscure to me. Nexon should let you enter the whole thing and then just say, "nope, doesn't match our records."