New hacking epidemic

Im pretty sure nexon doesn't use any form of version control at all. And im sure they have different groups working on different projects. And they don't say to themselves, hey group A fixed this bug last patch, we need to make sure we pull in the fix.

Version control's a pain in the ass to get working properly, but seriously, a company that makes this much money should have had it effectively in place long ago.

How many times has a new patch rolled back over old bugs. It's downright embarassing for a "professional" company to be making these kind of mistakes. If it were anything other than a Game, Nexon would have been sued sucessfully many times over.

Makes me wonder what their QA system is like. Back when I was testing, we kept a database of all bugs ever reported on the title throughout the testing phase; from alpha to final. Depending on the time between revs, we would not only look through the new implements and existing bugs, but look into bugs that were closed in prior versions as well, just in case something came back. And we would ABSOLUTELY look through every bug ever reported in the final version just prior to release. I mean, I remember finding a bug in final on the last day of testing that came back because it was put into the final retail format. And it wasn't just a "his hair isn't rendering" bug. It was a "press start before the first development company logo appears and the title hangs" bug. They seemed to have a handle on it though since they still let the testing staff go on that day.

I really wonder if they even keep a database of bugs to begin with. Something can be said about learning from your past mistakes.

Im pretty sure nexon doesn't use any form of version control at all. And im sure they have different groups working on different projects. And they don't say to themselves, hey group A fixed this bug last patch, we need to make sure we pull in the fix.

Version control's a pain in the ass to get working properly, but seriously, a company that makes this much money should have had it effectively in place long ago.

How many times has a new patch rolled back over old bugs. It's downright embarassing for a "professional" company to be making these kind of mistakes. If it were anything other than a Game, Nexon would have been sued sucessfully many times over.

Forget a tool being a pain to set up. Without a good configuration management plan and solid underlying SCM practices, the tool will not really do you a bit of good.

Use your head ... then your tool

I hope it is okay to discuss my own situation.
Anyways, I own the account elchin which is also my first name. I logged on it and overheard some guy talkin about hacking people. So i went up to him and i told him to hack me. He said "What gear do i get from your account if i do?" I tried to taunt him and he just said " Once i hack you, i will smega on your account by cursing". So he told me to go to an fm and then had me cc. The instant i CC'd i got disconnected. After being disconnected i couldnt enter my account, i was stuck in the world selection area and the farthest i could get was to see the channel page. Then i log on another account and see myself on and smegaing :



I personally am a HUGE skeptic of hackers, most of them dont/wouldnt waste their time on maplestory and the ones that do cannot destroy your account unless you give out info or get keylogged, you know, simple things. My guild and i have been attacked many times buy people who are full of bullcrap and threats saying we will go down. But this guy exists and i just felt you guys should be warned. Believe me or not but its true and i wouldnt need to waste my time typing this otherwise.
Edit: Just to ease your minds, my info is in tact and from what i noticed the hacker just gets on the character within the instant you disconnect. So it is safe to say he doesnt have access to your information.
Thank you for reading
~EL

http://www.sleepywood.net/forum/showthre...st10048874

Wow, that SW thread now makes the 4th report of this now... hard to deny that it's real now.

-sigh- im about ready to give up on this game for good now.... Ever since i got one of my accounts breached in january i had been following forums waiting for "brighter days" so i could start up on my shadower again.

So much for those brighter days...Nexon keeps letting magnitude 8.8 earthquakes hit the game. =_=

Seems this remote hack spawned with this wondefully new login system. I am wondering if the ease of this comes from the logins now stemming from the website itself instead of the client, perhaps some of the more technically savvy people here can answer that question?

On another note, how many are still showing IP Banned/Blocked? My MS hubby and I are STILL flipping IP Banned/Blocked!! We've been that way since the 24th, managing to reactivate our accounts from other internet sources we logged tickets with no replies at this point......*facepalm*

Just dont cc in maplestory. Don't go cs. Don't go mts. B/c when you come back you get d/c by the person and you will be hacked. If you really have to cc. Just log off and log on the channel you want to go to. Do this and no one can hack you. =)

^ That'd be basically no more freedom in maplestory imo.
Not sure if this could work as a temporary solution, but would it be possible for Nexon to implement a force log out button on the website and when you sign in? Basically what I had in mind was, when you click it, it forces you to log off the game/site if you're on, anyone that's on it or if your account is stuck from logging in would be forced to be in the offline state. This remote hack thing would seem you have to be online for it to work anyway from what I've got so far.

^ That'd be basically no more freedom in maplestory imo.
Not sure if this could work as a temporary solution, but would it be possible for Nexon to implement a force log out button on the website and when you sign in? Basically what I had in mind was, when you click it, it forces you to log off the game/site if you're on, anyone that's on it or if your account is stuck from logging in would be forced to be in the offline state. This remote hack thing would seem you have to be online for it to work anyway from what I've got so far.

Assuming nexon ever actually implemented anything suggested on random forums - Maybe.
But that'd also be an easily exploitable duping mechanism.

Assuming nexon ever actually implemented anything suggested on random forums - Maybe.
But that'd also be an easily exploitable duping mechanism.

I would think of ways it could be implemented without too much hassle:

By clicking the button, the servers:

Code:

Check if the account is online.
If the account is online:
  Find the character online
  "Emulate" that the character presses the log-out button.

In that way, the servers would not do anything they haven't done before, correct? The only way to abuse this would be if something out of the ordinary happens if you somehow manage to drop an item and log out at the same time, but I would suppose there are synchronized threads working with the characters at Nexon's office, and not asynchronized ones.

Then again, it's not really worth it. Nexon should rather fix the exploits instead of having an emergency-button somewhere for the users.

I would think of ways it could be implemented without too much hassle:

It's easy to do but we've already seen numerous times they can't really handle things very well.

Just creating it opens another hole to DC hack people through and as you already agreed it shouldn't be bothered with in the first place - the existing problems should just be fixed.

@Sarah too slow, nyah.

The problem with a killswitch like that is that anyone who manages to get your information could use it just to piss you off. It's like a Nexon approved DC hack.

http://www.sleepywood.net/forum/showthre...st10048874

he say nDEUU, the same dude that hacked YTMS in broa, and he smegaed things like: NDEUU HACKED YTMS, BERA OWNS blah blah blah

Sorry if these are kind of a noobish questions, but I understand the hack works when you cc, but is it confirmed that it works when you MTS/CS? (I read that one account where it seems that way, but I haven't heard that anywhere else, so I'm just double checking).

And also, are you vulnerable when you change maps as well (via portal)? What about Mini Dungeons? If I go in a mini dungeon and cc out, am I vulnerable at that moment? Does the hacker have to be on the same map/channel as you before or after you cc? (As in, are you ccing TO him only?) If I MTS out of a mini dungeon, will that be safe?

So I guess, in a word, how safe are Mini Dungeons, or are they safe at all?

And as a side note, if you get into a situation where you lag and you think someone might be trying to hack you, if you terminate MS before you actually "lag out" will that prevent the hacker from being able to continue as you, if you're fast enough? (Kind of a forcible d/c). I'm guessing no, but I was just wondering >_>

Lol, sorry if I ask too many questions. o.o

Thanks for the info ^_^

-Lilac

Some guy was bugging me to CC to his channel today when I was on my mule. I almost did because he made a good offer on my earrings but I got a tip off from someone that this remote hack exists. Thank god I didn't trust him or else my NX would be gone (The hacker can't access other characters right? My mule is on the same account as my main).

I've actually heard some reports that the hacker can't CC or enter MTS/CS once they've hijacked your connection without it disconnecting them.
Has anyone else heard/seen anything related to this, or proof that contradicts it?

I've actually heard some reports that the hacker can't CC or enter MTS/CS once they've hijacked your connection without it disconnecting them.
Has anyone else heard/seen anything related to this, or proof that contradicts it?

All the other untradeables were karma'd away.

Makes one for, one against. Inconclusive.

I really want to see what happens when one of these guys whispers you and you either a) log off and log back in to their channel, or b) tell them to come to your channel.

A side question I've had on the subject: What happens if you were to terminate MS?

Your connection closes. Can't hijack something that isn't there.

Your connection closes. Can't hijack something that isn't there.

So theoretically, if you were to act quick enough and terminate MS, you wouldn't get hacked?
This would be good for those who unwillingly fall victim to this.