Viaje Wrote:I found another laughable hole in Nexon's security.

To change your account email address, you need to enter the answer to both security questions.
Fair enough.

Problem is you can change one security question by knowing the answer to the other question.
So, basically, that means that having two security questions actually weakens account security.

EDIT: I also really wish Nexon would suck it up and make Item Locks free.
I'm fairly sure that the lost revenue from those items would be surpassed by people buying NX because they feel secure enough to do so.

What's more, they should change the system.
While I like some suggestions I read, it'd also be rather nice if an item being locked would allow it to be account-tradeable.
I don't mind certain items being unsellable for up to a year, but I do mind being limited to one character when things like Evo Rings can't be moved.

I'm sorry, but item locking is useless since there are scrolls that destroy items... so if your pomegranate is locked, I'm sure the person wouldn't want you to have your pomegranate either so they will just destroy it... you talk about loopholes in Nexons attempt at general account security... but it seems like you're not looking at other obvious loopholes...

And why hasn't anyone mentioned other potential failiures in security... such as your email provider? (I haven't read the entire thread, but everyone seems to be assaulting nexon). And another thing: IPB and vBulletin exploits are out there too... using the same email from your nexon account on a fansite is also a security risk.

Can't scroll locked items anymore.

Locked Wrote:Can't scroll locked items anymore.

Hmmm... since when?

Big Bang or Chaos.

Locked Wrote:Big Bang or Chaos.

New information to me. Thanks for correcting me or whatever.

ViaTheStars Wrote:I'm sorry, but item locking is useless since there are scrolls that destroy items... so if your pomegranate is locked, I'm sure the person wouldn't want you to have your pomegranate either so they will just destroy it... you talk about loopholes in Nexons attempt at general account security... but it seems like you're not looking at other obvious loopholes..

Word of advice:
Before you try to mock someone, you may want to make sure the words that you write are accurate.

First of all, as Locked said, you can no longer scroll locked items. It is quite impossible to destroy a locked item without destroying the character entirely.

Now, if you'd at all payed attention to this thread, you'd be very much aware that the hackers in this instance don't give a pomegranate about destroying people's accounts. If they did, it'd be as easy as deleting characters.
As it stands, however, any untradeable items are left completely untouched.
The hackers are only interested in personal profit.

ViaTheStars Wrote:And why hasn't anyone mentioned other potential failiures in security... such as your email provider? (I haven't read the entire thread, but everyone seems to be assaulting nexon). And another thing: IPB and vBulletin exploits are out there too... using the same email from your nexon account on a fansite is also a security risk.

It has been mentioned as well as ruled out. Several times.

Seriously, read a thread before trying to contribute.

"IGN: Aphienai"
Oh, well look at that!
That pretty much explains everything.

ViaTheStars Wrote:New information to me. Thanks for correcting me or whatever.

Don't worry, it's pretty recent too.
Eos stated that he had to use a Tim's Secret Lab to potential his locked stuff.

Viaje Wrote:Word of advice:
Before you try to mock someone, you may want to make sure the words that your write are accurate.

First of all, as Locked said, you can no longer scroll locked items. It is quite impossible to destroy a locked item without destroying the character entirely.

Now, if you'd at all payed attention to this thread, you'd be very much aware that the hackers in this instance don't give a pomegranate about destroying people's accounts. If they did, it'd be as easy as deleting characters.
As it stands, however, any untradeable items are left completely untouched.
The hackers are only interested in personal profit.


It has been mentioned as well as ruled out. Several times.

Seriously, read a thread before trying to contribute.

"IGN: Aphienai"
Oh, well look at that!
That pretty much explains everything.


Not "whatever". You were corrected.

I don't understand how my IGN means absolutely anything to you or to anyone else since I rarely talk to anyone enough to give a pomegranate. Explains everything? What might that explain? Mock? I'm simply trying to regurgitate information that I know/knew. I don't go around wasting my time locking my crap to care wether it can destroy items or not. Please try harder.

ViaTheStars Wrote:I don't understand how my IGN means absolutely anything to you or to anyone else since I rarely talk to anyone enough to give a pomegranate. Explains everything? What might that explain? Mock? I'm simply trying to regurgitate information that I know/knew. I don't go around wasting my time locking my crap to care wether it can destroy items or not. Please try harder.

The rules of this forum prevent me from elaborating or responding to the majority of your questions.

On-topic, regurgitation is not helpful.
Again, please read a topic before posting because, in all likelihood, what you believe to be an ingenious thought has already been said several times.

Viaje Wrote:The rules of this forum prevent me from elaborating.

Then why don't you PM it? I want to know...

ViaTheStars Wrote:I'm sorry, but item locking is useless since there are scrolls that destroy items... so if your pomegranate is locked, I'm sure the person wouldn't want you to have your pomegranate either so they will just destroy it... you talk about loopholes in Nexons attempt at general account security... but it seems like you're not looking at other obvious loopholes...

And why hasn't anyone mentioned other potential failiures in security... such as your email provider? (I haven't read the entire thread, but everyone seems to be assaulting nexon). And another thing: IPB and vBulletin exploits are out there too... using the same email from your nexon account on a fansite is also a security risk.

didn't eos confirm locked items can't be enhanced/blown up anyway anymore?

Viaje Wrote:What's more, they should change the system.
While I like some suggestions I read, it'd also be rather nice if an item being locked would allow it to be account-tradeable.
I don't mind certain items being unsellable for up to a year, but I do mind being limited to one character when things like Evo Rings can't be moved.

I haven't item locked anything, but last time I asked, someone said that the locks made stuff account-tradeable rather than completely untradeable.

Stereo Wrote:I haven't item locked anything, but last time I asked, someone said that the locks made stuff account-tradeable rather than completely untradeable.

Yeah that's true.
I want to lock my stuff but I kinda want to enhance some first. L> return of shielding wards
Also if an item is locked does that mean they cannot be cubed as well? I'm sure when my pants was locked when i used a cube the message stating that an item could be destroyed using certain scrolls popped up.

Adding my two cents: You cannot use a p/sok on an untradable item (helm, pend) while its locked to transfer through storage, i assume you have to scissor them first. Although items that dont require scissors can be transferred through storage while it is locked.

Trying to use a scissor on a locked item was tested before chaos though :/

Well if you lock something coundnt the hacker just delete your char if he wanted to cause of the PIC delete....

I doubt they would delete characters, they will just take anything of value from your characters.

There are some hackers who delete your characters and replace then with a level 1 citizen.

I heard this happen to three different people so far.

ResistGreen Wrote:There are some hackers who delete your characters and replace then with a level 1 citizen.

I heard this happen to three different people so far.

This leaves me wondering how difficult it would be for Nexon to implement some sort of character / item recovery system.

RandomZodiac Wrote:Well if you lock something coundnt the hacker just delete your char if he wanted to cause of the PIC delete....

get married, kaboom rings, unable to delete

Liteness Wrote:get married, kaboom rings, unable to delete

Does locking items similarly block deletion?