Curse

Pillz_veritas · Apr 02, 2006, 06:52 PM // 18:52

Quote:

Originally Posted by Juno Onuj

What I don't understand is how people do this. How the hell can they get so much information just by knowing your ign, to be able to hack e-mail and gw. Maybe I'm missing something, but I just don't understand how this happens.

Possibility 1: Program with a Keylogger Was used to get your passwords to Both email and GW (Or you used the SAME password for both)

Possibility 2: Person made a website that you need to sign up to view, and email and a password. You then sign up with the Same Email and Same Password as Your Guildwars account.

Narada · Apr 02, 2006, 07:17 PM // 19:17

Quote:

Originally Posted by Juno Onuj

What I don't understand is how people do this. How the hell can they get so much information just by knowing your ign, to be able to hack e-mail and gw. Maybe I'm missing something, but I just don't understand how this happens.

Well think about when you're in game with someone. You create your "own little world" between all the players. In order for this to work each computer has to send data to those of the other people who are sharing the game with you. Just being able to look at the various sources of data you have flowing in could enable you to ID whatever target(s) you wanted... Hell, I bet you'd be able to root their box if you did enough work... possibly even from Guild Wars if you coded yourself a nice little exploit that nobody knew about.

/speculation

-edit-
I didn't see the post above mine- those are some pretty workable possibilities. I myself would probably use #2 if it was up to me.

Loviatar · Apr 02, 2006, 07:25 PM // 19:25

Quote:

Originally Posted by Narada

Well think about when you're in game with someone. You create your "own little world" between all the players. In order for this to work each computer has to send data to those of the other people who are sharing the game with you. Just being able to look at the various sources of data you have flowing in could enable you to ID whatever target(s) you wanted... Hell, I bet you'd be able to root their box if you did enough work... possibly even from Guild Wars if you coded yourself a nice little exploit that nobody knew about.

/speculation

-edit-
I didn't see the post above mine- those are some pretty workable possibilities. I myself would probably use #2 if it was up to me.

OMG

EVERYTHING IS SERVER SIDE AND YOU DONT SEE ANYTHING BUT THE RESULTS OF YOUR MOVES.

IF ANYBODY CRACKED IT IT WOULD NOT BE IN GAME BUT CRACKING THE ACCOUNT DATABASE

EDIT TO BE CLEAR.

THERE IS NO REPEAT NO COMPUTER TO COMPUTER CONTACT ON ANY REPEAT ANY LEVEL.

Narada · Apr 02, 2006, 07:28 PM // 19:28

Quote:

Originally Posted by Loviatar

OMG

EVERYTHING IS SERVER SIDE AND YOU DONT SEE ANYTHING BUT THE RESULTS OF YOUR MOVES.

IF ANYBODY CRACKED IT IT WOULD NOT BE IN GAME BUT CRACKING THE ACCOUNT DATABASE

oh... good thing I said speculation then.

schutz · Apr 02, 2006, 08:23 PM // 20:23

Send pictures of your cd key + game to anet and ask them to reset email and password to your choice

Wretchman Drake · Apr 02, 2006, 08:29 PM // 20:29

People who hack like that deserved to get hacked back, possibly their personal info and really screw them up and leave a message saying "Payback" : p That'll show 'em.

I almost got hacked long ago in July. Someone logged on my acct so I quickly switched passwords and logged back in. Nothing ever since.

Alias_X · Apr 03, 2006, 01:03 AM // 01:03

Oh, here it is!

Only thing that could help you is an email to support. We can't do jack about this other than tell you good luck, which you have heard so many times already in this post I'm sure it would be worthless for me to say it.

Str0b0 · Apr 03, 2006, 01:06 AM // 01:06

Secure passwords people. I can't stress it enough. Secure passwords and do not download skill calculators or bots or anything like that. A secure password does not mean your best friend in third grade's middle name. A secure password will be between ten and thirteen digits long mostly random numbers along with at least one lowercase and one uppsercase letter. I know this doesn't help your current situation but hopefully you can protect yourself in the future.

The Ice Master · Apr 03, 2006, 04:29 PM // 16:29

I have no idea how I even remember my password, but I do.

I actually have to have my hands on the keyboard to remember it, and even then its just a sequence of my fingers. Wierd eh?

Loviatar · Apr 03, 2006, 05:00 PM // 17:00

Quote:

Originally Posted by Str0b0

Secure passwords people.
A secure password will be between ten and thirteen digits long mostly random numbers along with at least one lowercase and one uppsercase letter..

you are on the right track but woefully short.

EXAMPLE

me email is a separate one from any other use (my ISP allows 10 ) it allows 18 characters/numerals per email name and i use them all.

use something that means something to you to generate the characters.

use the first letter of the words of a poem, speech, lymrick, or anything odd and obscure that the net people dont know at all.

substitute a number for the words to, for,forth, ate eight etc to mix it up more.

your email is now an easy (for you) to remember password.

GW password allows 16 characters so use them all.

if your pc is SECURE you can put the pass in the target line for auto instant log in on the shortcut.

you can ctrlc/ ctrlv for copy from word or notebook so a keylogger wont see it.

get a firewall better than winxp like zonealarm free home edition

Narada · Apr 03, 2006, 09:04 PM // 21:04

Quote:

Originally Posted by Loviatar

get a firewall better than winxp like zonealarm free home edition

I read somewhere that one of the latest versions of ZA was supposedly backdoored, though I find it hard to believe. Would you happen to be able to assess the validity of that statement? (Assuming that you've used it or are using it.) I used ZA a long time ago and it worked great, but I'm still curious about that rumor.

Str0b0 · Apr 03, 2006, 09:10 PM // 21:10

Firewall schmirewall. Buy a Router. A Software Firewall by itself is like putting the condom only half way on.

Defendpeace Necros · Apr 03, 2006, 09:20 PM // 21:20

yo para its Taint This Noob , u got hacked omg, that is unbelivable, have u sorted it out somehow ?

Loviatar · Apr 03, 2006, 09:59 PM // 21:59

Quote:

Originally Posted by Str0b0

Firewall schmirewall. Buy a Router. A Software Firewall by itself is like putting the condom only half way on.

will my Linksys NON WIRELESS router suffice?

Narada

false rumor.

Josh · Apr 03, 2006, 10:01 PM // 22:01

Quote:

Originally Posted by Defendpeace Necros

yo para its Taint This Noob , u got hacked omg, that is unbelivable, have u sorted it out somehow ?

It was you.

Str0b0 · Apr 03, 2006, 10:07 PM // 22:07

Quote:

Originally Posted by Loviatar

will my Linksys NON WIRELESS router suffice?

Narada

false rumor.

Yes so long as it's a NAT router with port stealthing. that's the really important part. NAT routers are fairly inexpensive and are really the best bet for home network security.

Teklord · Apr 03, 2006, 10:21 PM // 22:21

Hardware Router/Firewall for the win! I get spinal shivers everytime I think of a software firewall being the only defense... especially when it's 'free'.

A little bit on passwords. I don't remember the exact source of this, save for the fact I was at NAIT at the time, but the best password lengths to use are multiples of 7. (7, 14, 21...) Also never base a password on any dictionary word, even if you are using character replacement. (password = [email protected]) One of my favorite tricks is to take a phrase or word I know well and would like to use, and convert it to a fictional language like Quenya. Using symbols (ex. !#@%) where allowed is always nice for added complexity as well.

Addition: I do remember now that the length thing had to do with brute force attack effectiveness. As it stands to reason if a keylogger is used then it really doesn't matter how long it is in the end.

Loviatar · Apr 03, 2006, 11:35 PM // 23:35

Quote:

Originally Posted by Teklord

Hardware Router/Firewall for the win! I get spinal shivers everytime I think of a software firewall being the only defense... especially when it's 'free'.

.

in this case free is for home personal use only and has been the top rated software firewall for years.

do you ever go by SHIELDS UP for a port scan to see if you are actually stealthed and secure?

Str0b0 · Apr 03, 2006, 11:46 PM // 23:46

Yup I'm 100% airtight behind a 4 port Belkin and a behavioral monitoring program I use. It keeps my computer from doing strange things like accessing websites and sending keystroke logs out LoL. Any behavior in a program that deivates from the program baseline is caught, restricted and, unless I ok it, terminated.

Bloodied Blade · Apr 03, 2006, 11:51 PM // 23:51

Quote:

Originally Posted by Josh

It was you.

How do you deduce that it was "Taint This Noob" other than the fact that he seems to be bragging about it with his name...

EDIT:

Para, you got cracked, not hacked. There is a difference, though most people are not familiar with it.