grats Asiasoft, hacked once again after Episode 2

Content wise, they have the hand, but for the hacker threat level detection/prevention, it seems we take the cake, tho the "max meso hack" that might be out is a pretty painful hack to let slip and stay X_X

It's not that our anti-hack detection system whatsoever isn't good. It's just that for some reason, China hackers tend to target us. (It's always been suspected that the hackers are Chinese) And China hackers are real 1337, so there.

It's not that our anti-hack detection system whatsoever isn't good. It's just that for some reason, China hackers tend to target us. (It's always been suspected that the hackers are Chinese) And China hackers are real 1337, so there.

most of us speak chinese here, so there.

Content wise, they have the hand, but for the hacker threat level detection/prevention, it seems we take the cake, tho the "max meso hack" that might be out is a pretty painful hack to let slip and stay X_X

It seems we have the same? Hackshield, nexon and all those.

Apparently it seems that China hackers just like to "attack" those few players.

But I do not know why, the commotion isnt as big as last year, and how is like 5 getting hacked alot O.o. I always though it is a part and parcel of almost every MMORPG ?



This is from an Asiasoft event on the official webpage


Aran soon for MSEA?

I believe this is the third time they got a mass account hacking wave. Two occured before Episode 2 came out.

Yes. And I must admit that I am very disappointed with Asiasoft's alleged QUALITY SERVICE. :/

So much for hack prevention. Well if you imagine the SQL tables as a cube protected by layers of cladding (firewalls)....

what Asiasoft most likely did was to find out where the intrusion took place. They probably filled up the 'hole' with extra cladding....

... but not making the cladding thicker for the 5 other surfaces of the cube.

It's pathetic isn't it? And as I have promised on the forums, if the saga continues I am definitely going to write in to the press.

I don't know too much about SQL injection other than how it works (lol unescaped quotes), but Style's funny post got me thinking, is it possible to actually change values with it? Assuming complete incompetence on the programmer's part and allowing the user to access the database as a DBA for some reason. Shouldn't be possible with just select statements, right? Can't do a select * from maplestoryaccounts where user = ...DROP TABLE MAPLESTORYACCOUNTS... or anything like that, can you?

This is from an Asiasoft event on the official webpage


Aran soon for MSEA?

No thread hijack, please.

It's not that our anti-hack detection system whatsoever isn't good. It's just that for some reason, China hackers tend to target us. (It's always been suspected that the hackers are Chinese) And China hackers are real 1337, so there.

I think they just see no point in hacking CMS, so they move on to the next closest target. You have to admit, MapleSEA players are srs bizniz about MS.

I don't know too much about SQL injection other than how it works (lol unescaped quotes), but Style's funny post got me thinking, is it possible to actually change values with it? Assuming complete incompetence on the programmer's part and allowing the user to access the database as a DBA for some reason. Shouldn't be possible with just select statements, right? Can't do a select * from maplestoryaccounts where user = ...DROP TABLE MAPLESTORYACCOUNTS... or anything like that, can you?

escaping quotes does not fully block SQL injections. you need to escape all the SQL commands, typically with mysql_real_escape_string.
And yes, ofcourse you can drop the database. But what profit will it bring to you? they will just load a backup of the database in an hour or two.

This is from an Asiasoft event on the official webpage


Aran soon for MSEA?

You're taking that completely out of context, rumors get started that way.
No Aran for you.

This is worse than any other time I've clicked a link towards playpark. The average IQ over there is about 50. Seriously.

pomegranate LE I QUIT ASIASOFT GAME-LE LELELELELELE.

Side-note: Dusk, you don't need to call a selection from tables to drop them.

This is worse than any other time I've clicked a link towards playpark. The average IQ over there is about 50. Seriously.

pomegranate LE I QUIT ASIASOFT GAME-LE LELELELELELE.

Side-note: Dusk, you don't need to call a selection from tables to drop them.

I know that, but most of the SQL statements in the website would be select statements I think.

It's not that our anti-hack detection system whatsoever isn't good. It's just that for some reason, China hackers tend to target us. (It's always been suspected that the hackers are Chinese) And China hackers are real 1337, so there.

^ This
GMS' security is not much better than MSEA's. It's pure luck that GMS didn't get hacked yet, but luck doesnt always work. Unless nexon seriously do something with their site, GMS will get hacked eventually. If the chinese want, the chinese can.

This is worse than any other time I've clicked a link towards playpark. The average IQ over there is about 50. Seriously.

pomegranate LE I QUIT ASIASOFT GAME-LE LELELELELELE.

Side-note: Dusk, you don't need to call a selection from tables to drop them.

How is that linking to IQ?

Its not like we do that for our exam or official stuff anyway.

People with IQ of about 50 would assume that "leeeeee" = IQ with about 50.

^ This
GMS' security is not much better than MSEA's. It's pure luck that GMS didn't get hacked yet, but luck doesnt always work. Unless nexon seriously do something with their site, GMS will get hacked eventually. If the chinese want, the chinese can.

Nop.

They're built completely different on the websites. They appear not to be identicial at all, I mean, even look at the programming languages they use, complete opposites:

GlobalMS (ASP):
http://maplestory.nexon.net/WZ.ASPX?PART...ageIndex=1

And looking at the forum...

MapleSEA (PHP):
http://forums.asiasoftsea.net/showthread...714&page=3

So it really seems to just be them, if it's really another database hack. It couldn't be done within game, rather website.

EDIT: If it's an inside job, then they got corruption up the ass. But hmm... doesn't seem like that does it?

Nop.

They're built completely different on the websites. They appear not to be identicial at all, I mean, even look at the programming languages they use, complete opposites:

GlobalMS (ASP):
http://maplestory.nexon.net/WZ.ASPX?PART...ageIndex=1

And looking at the forum...

MapleSEA (PHP):
http://forums.asiasoftsea.net/showthread...714&page=3

So it really seems to just be them, if it's really another database hack. It couldn't be done within game, rather website.

EDIT: If it's an inside job, then they got corruption up the ass. But hmm... doesn't seem like that does it?

Since I do not seem to get the point in this post, do you mind explaining me how does ASP provide better security than PHP?

most of us speak chinese here, so there.

Here? On SP? :f6:

This is worse than any other time I've clicked a link towards playpark. The average IQ over there is about 50. Seriously.

pomegranate LE I QUIT ASIASOFT GAME-LE LELELELELELE.

Side-note: Dusk, you don't need to call a selection from tables to drop them.

It's not IQ, mind you. It's just culture. For some reason Singaporeans like to mix Chinese and English, which is practically impossible to understand for non-locals.

It's also the reason I quit Playpark to join SP For some reason, I can't seem to stand seeing Singlish typed out.

You're taking that completely out of context, rumors get started that way.
No Aran for you.

This is not a rumour.
But a possibility.

Here? On SP? :f6:

Singapore DOH

anyway i dont like to singlish my language on the internet. lolol

Feels weird loh. Very sian see all those ang mohs racist with asians.

Since I do not seem to get the point in this post, do you mind explaining me how does ASP provide better security than PHP?

Depends on how you program the website.

But obviously they don't seem to have the same security. It really depends on the developers.

This hasn't happened in Global, I believe if there was a hole, it would have already happened.

This is not a rumour.
But a possibility.

You're not getting Aran.

This is not a rumour.
But a possibility.

Off-topic:
This is like showa all over again. Just because they use an image from that area (in this case a movie) doesn't mean they'll get it anytime soon. I mean WE can find those images, but that doesn't mean we know exactly when Aran comes out for every version of the game. Heck, Aran was just only released in KMS. If SEA was able to translate all the data from maps, quests, skills, etc. and put them in the game in one of their coming patches then they are seriously miracle workers. Also there was no way for Aran data to be put in one of the patches Episode 2 already had or else we would've definitely known.

Wait a year, seriously.

On topic:
Maybe they're attacking SEA cause they know that there are some crazies there that actually buy from Asiasofts official item auctions and are willing to pay big bucks on pixels.