2011-12-15, 03:01 PM
SwordStaker Wrote:Hm because so far it seems like everyone being hacked hasn't changed their passwords often. Thus back to my theory, people with passwords who did not change them at all, back when the breach happened, are the ones getting hacked. That's not to say you can't just get hacked because it happens. A bout 3 months ago before I changed my password someone was trying to get into my e-mail. I'm happy gmail enabled the double log in thing though. Anyway so far the only ones I see getting hacked around here, my bl, and my guild are the ones who've been gone for a while and haven't changed their passwords. That's just my theory from the evidence here.
This does seem reasonable to explain some of the hackings, especially those where the player has found their account hacked after a long break.
Nexon's admitted leak in April (and maybe later undisclosed or unknown leaks) plus advanced password hash cracking techniques:
http://www.pcpro.co.uk/blogs/2011/06/01/...-a-second/
are making people with previously good-enough passwords who rarely change them vulnerable.