2010-02-16, 01:10 PM
(This post was last modified: 2010-02-16, 01:23 PM by MissingLink.)
Kawasari Mimoto Wrote:I know for a fact they do not have direct access to servers. Do you know why I think this is? It's because if that was the case, they would have targeted all lv 200's immediately.
This argument has been used many times and shot down many times. Here we go again.
Think about it. Maybe only one account in 1000 is that of a super-rich high level player. If the hackers have a stolen list of many thousands of ID's, hashed passwords, and PINs, do you think they can tell at a glance which accounts are the rich ones just from the account names, so that they can raid those first? I don't see how.
And even if rich accounts are on their list, that doesn't mean that they happen to be the ones with weak passwords. In fact I would imagine high level players would in general have stronger passwords than average.
All the hackers can do is work down their list, trying each account in turn. Many will have un-crackable passwords. Most of the rest will be poor and low-level. Only occasionally will they catch a big fish.
Edit: Note, I'm not saying the PICs are not helping. If the hackers cannot access the PICs in the same way that they apparently could get PINs etc., then this method of hacking will be stopped at least for a while.