Another Nexon Mistake

The way I see it, with everyone knowing about this issue, many rookies in the hack world will try to attempt to get many peoples ID's, while others will focus on those with 200 on their accounts. Hope nexon doesn't takes too long for action, since this is an actual security risk. I have never touch mts, new in Gali, and well, not interested in it.

*Goes back to minding his own bussiness*

The way I see it, with everyone knowing about this issue, many rookies in the hack world will try to attempt to get many peoples ID's, while others will focus on those with 200 on their accounts. Hope nexon doesn't takes too long for action, since this is an actual security risk. I have never touch mts, new in Gali, and well, not interested in it.

*Goes back to minding his own bussiness*

Nah it's the weekend. We just need to survive at least another 24 hours unless Nexon gets ticket spammed up the wazoo about people getting their crap taken

All those idiots who smega 24/7 in windia are gonna be screwed now lol.
I'm happy that I'm just a random that barely anyone knows :p

So, this issue gets reported to Nexon in their bug forum, and it gets locked, GG.

So, this issue gets reported to Nexon in their bug forum, and it gets locked, GG.

Nexon: "Maybe if we pretend we don't know about it, it'll go away "

Nope.
According to the BMS schema when it leaked they use a userid, just like anyone else would, not the username.
The rest of their structure is pretty idiotic though.

Good thing that's the case, else I would bet we'd see characters themselves being duplicated with the same stats/items/mesos/NX/etc LMAO. As far as items though, it looks like items themselves do not use a GUID and/or a timestamp for their items because of how prevalent item duping has gotten now. Either the code/db is too vulnerable or the hackers are just too smart (Nexon's excuse?). LOL

It might seem like "it's just your ID" right now. Remember, you can easily lock someone's account by typing in the wrong pass 5 times. Hell, even some people get permabanned for typing in the wrong passwords, or so I heard. Next thing you know, hackers will somehow trace and link the email account registered to the login ID on the website. You won't be saying "it's just your email" next. There's been some weird database errors going on in Dragon Nest too. People claim to have their characters all wiped out, even though there hasn't been any rollback, except for a small one which the majority hasn't noticed. Remember that short period of time when people were logging onto other people's characters. Nexon's database is just full of loopholes. But then again, you expect a big company like this to become targeted, especially when there are millions worth of virtual gold to be raided off players. MSEA has so many problems; GMS is already lucky.

When hackers have the ability to track ID from rankings like MSEA, it'll be chaos. Maple taught me so much about internet security than I would have ever learned otherwise. Seems like Blizzard is the only good company that knows how to compensate and give players their peace of mind.

It seems there's a direct correlation with how MS popularity grew feature-wise with how increasingly insecure and loophole-riddled it became. We wonder why no hacker was able to add slots to an item (ex. letting an overall have 13+ slots instead of the normal limit of 12) (maybe there was a hack to do this but it definitely was patched/non-widespread). But then, when EEs came out, it was like you see a shitload of 100+ enhanced items everywhere. Even worse, I think, is the persistence of non-accountability and half-assed solutions.

Can someone confirm if having items in the MTS, but not selling them still puts your account in danger?
I've had stuff in the xfer inventory for months.

Odang.
Game over man. GAME OVER.

They're coming out of the walls! They're coming out of the damn walls!

If you leave your account logged in 24/7, you can't get hacked. I've been doing that for the past month to rack up GP for the guild.
Who knows, maybe someone does have my info and just hasn't been able to find me offline so that they could log in.

If you leave your account logged in 24/7, you can't get hacked. I've been doing that for the past month to rack up GP for the guild.
Who knows, maybe someone does have my info and just hasn't been able to find me offline so that they could log in.

I'd love to see your hourly update things LOL.
"You have been logged in for 245 hours, we suggest you take a break from mapling."

If you leave your account logged in 24/7, you can't get hacked. I've been doing that for the past month to rack up GP for the guild.
Who knows, maybe someone does have my info and just hasn't been able to find me offline so that they could log in.

Although now that I think about it, releasing this publicly now makes sense. Weekend + Hurricane Irene pounding on the east coast = Nexon likely not doing anything for a while + a lot of people who aren't in the position to even think about Maple, let alone log in to get their stuff out of the MTS immediately...

Although now that I think about it, releasing this publicly now makes sense. Weekend + Hurricane Irene pounding on the east coast = Nexon likely not doing anything for a while + a lot of people who aren't in the position to even think about Maple, let alone log in to get their stuff out of the MTS immediately...

Hurricane Irene seems overhyped to me. All my friends on the east coast say it's just some heavy rain and wind. Nobody's going to be going outside, but it's not exactly tearing houses down and killing people.

I'd love to see your hourly update things LOL.
"You have been logged in for 245 hours, we suggest you take a break from mapling."

I reboot my laptop twice a day (once in the morning after waking up, once before bed) and relog/restart ms to go to different characters on the same account several times throughout the day, so it never gets above 5 hours, usually.

Hurricane Irene seems overhyped to me. All my friends on the east coast say it's just some heavy rain and wind. Nobody's going to be going outside, but it's not exactly tearing houses down and killing people.

A few people were killed due to downed trees and crashing due to slippery roads.

If you leave your account logged in 24/7, you can't get hacked. I've been doing that for the past month to rack up GP for the guild.
Who knows, maybe someone does have my info and just hasn't been able to find me offline so that they could log in.

They need to find you offline? Are all disconnect hacks dead?
I've heard of people afk'ing in MTS/CS to avoid dc hacks, but I discovered yesterday that you also don't recover fatigue while in there. Also no GP and no willpower, I think. So that's a bad solution for me.

If it matters, it seems the thread got deleted from the hacking sites.
I have no idea how long it was up.

They need to find you offline? Are all disconnect hacks dead?
I've heard of people afk'ing in MTS/CS to avoid dc hacks, but I discovered yesterday that you also don't recover fatigue while in there. Also no GP and no willpower, I think. So that's a bad solution for me.

I don't know how dc hacks work, but if you have to be on the same map as the hacker, then you could always just afk in a boss instance. You'll still get all your gp and trait xp gains, plus a few herb/mineral spawns.

Great another exploit...if anything happens to my account I really will be done with Maple and anything Nexon.

For a company that makes so much money they really have no equal in regard to deplorable customer service or weak account security.

Can someone confirm if having items in the MTS, but not selling them still puts your account in danger?
I've had stuff in the xfer inventory for months.

No I think it's only if you have something listed.
Sigh, I hope Nexon improves login security after this.
For all we know they could already have some of our usernames before we take items down....

No I think it's only if you have something listed.
Sigh, I hope Nexon improves login security after this.
For all we know they could already have some of our usernames before we take items down....

I hope they offer us the chance to change our ID's
Im lucky i think, I havent put anything in mts for a few weeks