2011-09-28, 10:52 AM
Logs are only useful if
A) It logs relevant information
B) It gets read.
C) The reader is capable of recognizing something wrong is occurring.
Next point; Even if all of the above occur, the violations have already happened (Case in point; http://www.southperry.net/showthread.php?t=48014). None of those prevented the breach. At best they get forwarded to someone else to fix on some time line and Nexon in particular never admits it happened, just like they haven't touched the tickets from my entire guild from last year that still send follow up notices every week.
Also, again, the only reason I caught on that an intrusion occurred is because it triggered errors in the log, had it not specifically created errors that raised flags and been perfectly executed I would likely have never known because it ran under the context of the forum itself doing normal operations. If Nexon's database thinks the client is doing what the clients designed to do, it's not going to flag it as anything. In many cases you have to know exactly what you're designing a system to look for in order to catch it.
I don't think you honestly grasp the concept of a vulnerability.
As one of the people who had it happen last year, I do in fact know what I did and I was every bit as skeptical as you until someone logged into my account and changed my costume just to prove they could (all my possessions are perma locked because I have never had any trust in Nexon's security, and rightly so by all accounts).
Skepticism is healthy. Denial is not. Believe what you will, if it happens to you you can try to rationalize how. Until then, insisting it's not possible and everyone who's had it happen is entirely to blame and there could be no possible way it's the companies fault is just insulting the intelligence of every single person who's been victimized. It benefits nothing but your own sense of superiority so if you don't believe this is really happening, ignore it and go about your businesses, you have no contribution to this thread if you're just here to insult everyone.
A) It logs relevant information
B) It gets read.
C) The reader is capable of recognizing something wrong is occurring.
Next point; Even if all of the above occur, the violations have already happened (Case in point; http://www.southperry.net/showthread.php?t=48014). None of those prevented the breach. At best they get forwarded to someone else to fix on some time line and Nexon in particular never admits it happened, just like they haven't touched the tickets from my entire guild from last year that still send follow up notices every week.
Also, again, the only reason I caught on that an intrusion occurred is because it triggered errors in the log, had it not specifically created errors that raised flags and been perfectly executed I would likely have never known because it ran under the context of the forum itself doing normal operations. If Nexon's database thinks the client is doing what the clients designed to do, it's not going to flag it as anything. In many cases you have to know exactly what you're designing a system to look for in order to catch it.
I don't think you honestly grasp the concept of a vulnerability.
Okiesmokie Wrote:Just because they aren't playing Maplestory doesn't mean they're not visiting Maplestory related websites, or downloading programs. As for the common sense thing: People never admit to downloading keyloggers. Every person who's been hacked is a saint and has never touched any "bad websites" or malicious programs in their lives. The truth is that is a load of bullpomegranate and everyone knows it.
As one of the people who had it happen last year, I do in fact know what I did and I was every bit as skeptical as you until someone logged into my account and changed my costume just to prove they could (all my possessions are perma locked because I have never had any trust in Nexon's security, and rightly so by all accounts).
Skepticism is healthy. Denial is not. Believe what you will, if it happens to you you can try to rationalize how. Until then, insisting it's not possible and everyone who's had it happen is entirely to blame and there could be no possible way it's the companies fault is just insulting the intelligence of every single person who's been victimized. It benefits nothing but your own sense of superiority so if you don't believe this is really happening, ignore it and go about your businesses, you have no contribution to this thread if you're just here to insult everyone.
It's not having what you want - It's wanting what you've got.