Junior Member
Posts: 49
Threads: 0
Joined: 2009-10
I know 27 pages is alot but its all in there. No not everyone uses myspace/fb I dont. Im pretty sure everone has a different password on their email account than their ms account. People are getting hacked who use none of the three and have quit for a year.
Just because several of your mentioned targets have not been hit doesnt mean they are vunerable. is Herotex's nexon id Herotex?
Member
Posts: 117
Threads: 4
Joined: 2009-06
Chirdaki Wrote:I know 27 pages is alot but its all in there. No not everyone uses myspace/fb I dont. Im pretty sure everone has a different password on their email account than their ms account. People are getting hacked who use none of the three and have quit for a year.
Just because several of your mentioned targets have not been hit doesnt mean they are vunerable. is Herotex's nexon id Herotex?
Don't know.
People know it though, he got hacked before in the summer I believe.
Posting Freak
Posts: 1,569
Threads: 81
Joined: 2008-07
My Facebook has nothing to do with my account that got hacked. Different email, different personal info, different password.
Posting Freak
Posts: 1,518
Threads: 40
Joined: 2008-08
xgunedx Wrote:Is there any chance that this isn't Nexon's fault?
Hear me out.
Many people claim that they have not given out their personal infos, etc.
But nearly everyone that got hacked seemed to use either facebook or myspace or some other social networking site as far as I can tell.
This hacking epidemic started around December am I correct?
Well, RockYou had their passwords stolen in December 2009.
RockYou stored many of the email addresses and passwords for many social networking sites, in december a hacker somehow stole the passwords and posted 32 Million of the Passwords & Emails Online.
They could be downloaded by anyone. "The list was briefly posted on the Web, and hackers and security researchers downloaded it. "
For the people that got hacked, did you use the same password for your myspace/email/facebook or any other sort of networking site?
Source Here: http://www.nytimes.com/2010/01/21/techno...rd.html?em
I personally think that this is way more plausible than the fact that Nexon's database got hacked into.
Many of the most famous people in Maplestory, Hefferheffer, Herotex, Lachyrmus still have their items, and have not been hacked into.
That's the reason I don't think its a database hack.
Two questions:
1) Do you use facebook/myspace or any other social networking site?
2) Did you use your Maplestory Pass for any other site?
So are you saying that someone saved all those info's from that website 'RockYou' and tried all of them on a game called MapleStory? I highly doubt that.
As for certain people still having their items, it's clear that these hackers don't know who they're hacking which only proves the 'database leak' theory even more. Most people who are still active and have expensive items frequently change their passwords and PIN's. I haven't heard of a SINGLE person who has changed their password in the past 7-10days being hacked. If this was a targeted hack, random hb/hs mules wouldn't be getting hit.
Member
Posts: 117
Threads: 4
Joined: 2009-06
2010-01-22, 01:36 AM
(This post was last modified: 2010-01-22, 01:40 AM by xgunedx.)
sicnarf Wrote:My Facebook has nothing to do with my account that got hacked. Different email, different personal info, different password.
I could be completely wrong, but unless you used a different birthday when you made your MS account in 7/31/07 and another account in 9/01/07, I'm pretty sure I know the birthday to your hacked MS account.
August (I know the date and year too, don't want to post it. 20 years +, Cali person, Like Manga (Naruto), Neopets)
-------------------------------------------------------
"So are you saying that someone saved all those info's from that website 'RockYou' and tried all of them on a game called MapleStory? I highly doubt that.
As for certain people still having their items, it's clear that these hackers don't know who they're hacking which only proves the 'database leak' theory even more. Most people who are still active and have expensive items frequently change their passwords and PIN's. I haven't heard of a SINGLE person who has changed their password in the past 7-10days being hacked. If this was a targeted hack, random hb/hs mules wouldn't be getting hit."
I don't think that they went around trying to look specifically for Maplestory.
They got onto the email account and checked out the Newsletters to see what games people played and simply hacked those games.
The RockYou password list was avaliable to the public, thats why I think that its important.
Posting Freak
Posts: 1,518
Threads: 40
Joined: 2008-08
xgunedx Wrote:I don't think that they went around trying to look specifically for Maplestory.
They got onto the email account and checked out the Newsletters to see what games people played and simply hacked those games.
The RockYou password list was avaliable to the public, thats why I think that its important.
That would probably still be tens of thousands, if not more (I'm not familiar with RockYou), who's going to go through each email account searching for newsletters from MMOs so they can hack them.
Member
Posts: 117
Threads: 4
Joined: 2009-06
2010-01-22, 01:51 AM
(This post was last modified: 2010-01-22, 01:58 AM by xgunedx.)
Typhoon Wrote:That would probably still be tens of thousands, if not more (I'm not familiar with RockYou), who's going to go through each email account searching for newsletters from MMOs so they can hack them.
I highly doubt they are after Virtual Games.
It's like the production of Plastic, no one goes hunting for plastic, but plastic is extremely cheap since its a byproduct of oil.
No one hunts for virtual game info, but they hunt for credit cards, bank accounts, if they find virtual goods, its a byproduct.
Virtual goods were over $2 Bil in China alone last year.
[SIZE="3"]I'm not saying Nexon is definitely not responsible. I'm just trying to offer another possible reason[/SIZE].
Junior Member
Posts: 14
Threads: 0
Joined: 2009-07
Okay so i thought it was a keylogger that got me hacked but well it wasn't i found a "Themida" which apparently is some sort of virus that comes with MS if you google it you'll see, i have AVG free and thats what detected the themida so they theory of getting hacked with a keylogger just doesn't fit anymore, in 3 years i've never given away my info to anyone, i never went to sites that'd put me in risk or anything like that, so honestly i don't see a way of getting hacked. GMs won't respond my tickets, they just get closed right away.
I just wish i'd get rolled back to december 26th the day before i got fucked over.
Posting Freak
Posts: 18,970
Threads: 319
Joined: 2008-07
PervyMat Wrote:"Themida" which apparently is some sort of virus that comes with MS.
Themida is Nexon's encryption system.
Posting Freak
Posts: 1,569
Threads: 81
Joined: 2008-07
xgunedx Wrote:I could be completely wrong, but unless you used a different birthday when you made your MS account in 7/31/07 and another account in 9/01/07, I'm pretty sure I know the birthday to your hacked MS account.
August (I know the date and year too, don't want to post it. 20 years +, Cali person, Like Manga (Naruto), Neopets)
Yes, I'm aware you can google for my birthday. Like I said before, I used different personal info since the account was initially shared. Even if it was the same birthday, I somehow doubt that social-networking sites or RockYou (I never even heard of it until reading some news article about it) would be the link to all these hacked accounts. I think we've already established a while back that most of these accounts have been compromised at no fault of the owner.
Member
Posts: 80
Threads: 1
Joined: 2008-07
xgunedx Wrote:Many of the most famous people in Maplestory, Hefferheffer, Herotex, Lachyrmus still have their items, and have not been hacked into.
[/B]
F5 @ making me log in so i could post and say that the TS is lachrymus...dunno which account was hit, but yeah, just wanted to fix that for ya
Posting Freak
Posts: 9,129
Threads: 484
Joined: 2009-03
Gender: Female
2010-01-22, 06:20 AM
(This post was last modified: 2010-01-22, 06:25 AM by Sarah.)
Fumni Wrote:Hi Sarah,
I'm going to break the 4th wall for a bit (which, believe me, is something I rarely do,) and give you advice as someone who works in the media industry and knows how it functions first hand. Gamespot and IGN are good starts. Don't forget ComputerWorld and CNET. But don't waste your time even going as far as CNN/HLN/Fox etc. They won't care. Trust me on this.
Frankly, the first options probably won't care either, but if you reach the right person and tell it to him or her in a way he or she could understand the ramifications, it might make them interested in researching it. You would have to change the focus to Internet security, which is a more talked about and buzzworthy topic on computer related sites, rather than Nexon's negligence and pomegranatety customer service in the past.
The real best options is to keep lobbying Nexon, and use the BBB and other customer service rating sites as a crucial instrument. You can either trust me on this or not, but I have no reason to steer you wrong, and I can't see TPTB in the media world taking interest in what's essential a virtual reality issue with an arcane audience.
-F-
Of course I hardly expect any major news network to pick up such a minor story but it's worth a try, and I am confident that given time and care I could write a thoroughly convincing piece that, hopefully, someone would pick up and run with. A single publication spreads like wildfire so that's all we need.
Also, StillTheKing/Knocturne/NotKnocturne/FinalBragade (here) was being his normal annoying self on their forums. God I hate him. Feeling pretty good about my response though.
Junior Member
Posts: 18
Threads: 1
Joined: 2010-01
BombsAway Wrote:Also, StillTheKing/Knocturne/NotKnocturne/FinalBragade (here) was being his normal annoying self on their forums. God I hate him. Feeling pretty good about my response though.
Knoc hates king. Well i guess you were being sarcastic, but as I recall Knoc left a little while ago. Did he come back now? I know he won't be able to stay gone for long, he needs those forums to make himself feel important..
Administrator
Posts: 17,190
Threads: 2,153
Joined: 2008-09
Gender: Male
Sexual Orientation: Gay
IGN: Aesilyn
Server: Mardia
Level: 200
Job: I/L ArchMage
Guild: Animus
xgunedx Wrote:They got onto the email account and checked out the Newsletters to see what games people played and simply hacked those games.
There are so many flaws with this it's hard to even begin, but let's start here:
1) My email was never broken into, just Maple. I can say this with absolute certainty thanks to it's login audit feature.
2) My password and pin were never changed by the hacker, and aren't sitting in a handy little cheat sheet in my email.
3) My info for social sites isn't related to my Maple info, either account-wise or password-wise.
It's not having what you want - It's wanting what you've got.
Posting Freak
Posts: 3,119
Threads: 271
Joined: 2008-11
God, this is ridiculous. People are losing everything they worked for, losing real money in the process, and Nexon are sitting there going LALALA NOT OUR FAULT. I wonder how long their 'investigation' will take. One thing they could do is possibly swallow their pride and ask Eos (and any of our other tech-savvy forum goers) to work with them on this. Provided he takes pity on their pathetic asses, he can bring knowledge that clearly none of them possess. I read over those threads on the Nexon forums. Everyone brings up truthful flaws and concerns with how Nexon handles everything, and how things are run, and how useless and money hungry they are, and I just see -Hime- give her trademark "we're looking in to it" response. It's awful. Even though I don't play that much, I'm just sitting back waiting for my Shadower (whom I spent a whole lot of time and effort building) and my Arch Mage (whom I had almost finished building for a SECOND time because of a previous hacking) disappear before my eyes. I don't really play but I would still like something to show for the 4 years I spent on the game. On a side note, didn't they add item locks in the same patch they removed the secret questions?
Junior Member
Posts: 42
Threads: 0
Joined: 2010-01
I don't think RockYou is the issue here. I would guess that its a relatively unknown site seeing as a number of us have'nt heard of it. Besides I hardly think there are many maplers dumb enough to post information that can be linked right back to their account on such a site. It still doesn't explain how Eos and hundreds like him we're hacked out of the blue.
Posting Freak
Posts: 9,129
Threads: 484
Joined: 2009-03
Gender: Female
2010-01-22, 01:08 PM
(This post was last modified: 2010-01-22, 01:10 PM by Sarah.)
Wedges Wrote:Knoc hates king. Well i guess you were being sarcastic, but as I recall Knoc left a little while ago. Did he come back now? I know he won't be able to stay gone for long, he needs those forums to make himself feel important..
They're all the same person aren't they?
Posting Freak
Posts: 1,746
Threads: 68
Joined: 2008-07
It seem that you can request an email change( source) I was always under the impression that you could never change your email. Also this is kinda double edge sword if someone is hacked and their account was locked they can gain access easily.
Is hime showing favoritism towards this bobbart guy? I think she is, because i guarantee their are many users who have gotten hacked and they cant figure out their email and are probably doing the same thing bobart is doing and getting their tickets closed.
Posting Freak
Posts: 1,824
Threads: 47
Joined: 2008-07
street Wrote:It seem that you can request an email change(source) I was always under the impression that you could never change your email. Also this is kinda double edge sword if someone is hacked and their account was locked they can gain access easily.
Is hime showing favoritism towards this bobbart guy? I think she is, because i guarantee their are many users who have gotten hacked and they cant figure out their email and are probably doing the same thing bobart is doing and getting their tickets closed.
Happened to me, their reply always was "though pomegranate, we don't care"
Senior Member
Posts: 644
Threads: 17
Joined: 2008-07
Gender: Female
Country Flag: usa
IGN: LiIIPrincess
Server: Bellocan
Level: 200
Job: Bishop
Guild: Nobility
2010-01-22, 03:32 PM
(This post was last modified: 2010-01-22, 03:38 PM by LittlePrincess.)
xgunedx Wrote:Is there any chance that this isn't Nexon's fault?
Two questions:
1) Do you use facebook/myspace or any other social networking site?
2) Did you use your Maplestory Pass for any other site?
1) No
2) No
I don't use msn, aim, facebook, myspace, etc. The Photobucket account name I use does not have my name on it. No maple forum has my DOB or name except Nexon. E-mail pw, nexon pw, and forum pw are all different. No one who plays maple except my real life husband knows my real name, dob, age, or exact location.
I never visit hacking sites, I don't watch random You-Tube videos, I've never gone to that "down load a keylogger here" web site they post in your store, etc. I have never given any login information to anyone (except my real life husband) for any reason. (If they msising atackers and I'm at work it's too bad, they can make their own alternate characters, I did and I see no reason to allow anyone else to use my accounts. I never bought a helm from anyone who required VIP buyer process.) Anyone who thinks my real life husband stold my maple stuff has to explain why he left the $15,000 in my bank account.
My e-mail has not been compromised, my pw was not changed, only a PIN change. That means they obtained my login + pw form someplace and the only feasable place I see is Nexon.
Now the other facts, the account they got did not have my main characters on it. Who would target an account that logges in once a day to do the huckle quest with the highest lvl at 60? I have over 15 maple accounts and only one of them was broken into - therefore I was not keylogged. I log into at least 5 accounts per day on my computers, a keylogger would have got at least 5 and likely more like 10.
My account was compromised Dec 22, 2009 and since then I changed all my pw + pin on all my accounts. I leave main accounts that have over 10b worth of items logged in 24/7. Since then no other acount of mine has been comprimised.
I hope Nexon was dumb enough to store GM accounts in the same file as everyone else and not limit IP address on them. It would make it all worth while if I could tell them to quit visiting phishing sites themselves.
|