Curse

Zehnchu · Jan 07, 2010, 03:55 AM // 03:55

Quote:

Originally Posted by Katsumi

Automated login scripts and the like don't seem to produce the bug. It's has to be a human doing it. Someone I have no reason to doubt set up a script to do that and was unable to log in. Another person was able to reproduce it first try. Another user reported getting into a different account after a few more tries. Several hundred, I believe.

Where they able to reproduce more then once? I've been reading and forgive me if I missed the answer in this fast flowing information.

I also doubt what browser and version they are running and if they have any add-on running might have a bit of influence. But it's just a random thought I had.

Cacheelma · Jan 07, 2010, 04:34 AM // 04:34

I think it's bad enough that it has to be US the customers who found out about this security breach of such big company. Now they're telling us "Proof or it didn't happen"?

I mean, seriously? Can't you find out about it by yourself? You have the G. D. source code in your hands. We don't. Relying on us to point out your mistakes should stay in beta. Your COMPANY is not in beta state anymore.

And Regnobra: I don't know about you, but for me, bugs and errors in softwares or scripts are practically the same thing: FLAWS that should be fixed.

Arkantos · Jan 07, 2010, 04:50 AM // 04:50

Quote:

Originally Posted by Regina Buenaobra

Theocrat: Any information provided will be followed up on by the NCsoft security team. At this point they're focusing on trying to replicate the error. Screen shots help, but they just show that there might be a bug, and the security team is digging much deeper, by trying to verify that the error exists. We sincerely appreciate those few people who have provided us with information.

Please keep in mind that, so far, we have discovered no malicious compromises having occurred in the manner described (random account switches). As I told you all before, we have added additional logging and security measures to further strengthen existing processes and preventative systems.

What proof would you like us to give you? I mean, I've heard from multiple reliable sources that they've randomly logged into a random NCSoft account who can provide screenshots, which isn't enough proof. People on multiple fansites (both GW and Aion) have claimed to have logged into random accounts. My Aion account was hacked (good thing I quit

) and I'm 100% sure that my computer is clean and that I'm not at fault. Whether NCSoft wants to admit it or not, it exists. I'll sit at my computer for hours recording me logging in and out of my master account until the bug occurs if that's enough proof. Just please, please, don't tell me this is a 'proof or it doesn't exist' situation. It does exist.

On another note, thanks a lot for the added GW security.

Lucci_Slevin · Jan 07, 2010, 06:31 AM // 06:31

Quote:

Originally Posted by Arkantos

What proof would you like us to give you? I mean, I've heard from multiple reliable sources that they've randomly logged into a random NCSoft account who can provide screenshots, which isn't enough proof. People on multiple fansites (both GW and Aion) have claimed to have logged into random accounts. My Aion account was hacked (good thing I quit

) and I'm 100% sure that my computer is clean and that I'm not at fault. Whether NCSoft wants to admit it or not, it exists. I'll sit at my computer for hours recording me logging in and out of my master account until the bug occurs if that's enough proof. Just please, please, don't tell me this is a 'proof or it doesn't exist' situation. It does exist.

On another note, thanks a lot for the added GW security.

I do not think they are 'demanding proof' specifically. If just one person who claims they experienced this bug would E-mail Gaile, she could ask the questions she needs to ask(I am guessing info like date/time ips ect) and may be able to look at it from their side(server-side) and figure the situation out.

It has been days and as of her post this morning, not one person has come forward. Why?

I do not think anyone has to worry about being banned.

Cacheelma · Jan 07, 2010, 06:43 AM // 06:43

Quote:

Originally Posted by Lucci_Slevin

I do not think they are 'demanding proof' specifically. If just one person who claims they experienced this bug would E-mail Gaile, she could ask the questions she needs to ask(I am guessing info like date/time ips ect) and may be able to look at it from their side(server-side) and figure the situation out.

It has been days and as of her post this morning, not one person has come forward. Why?

I do not think anyone has to worry about being banned.

Theocrat's post seems to imply that screenshots are sent to Anet and NCSoft already. And I'd imagine that honest people who have found this bug didn't really record the date/time and IP when it happened, as they'd think it's some kind of an accident or internet hiccups. She shouldn't expect us to have done that to begin with, really. And what would that prove? That these people lied becuase..hmm.. they can't remember the exact date/time and their IP addresses when such thing happened?

Please. It's "demanding proof" alright.

Lucci_Slevin · Jan 07, 2010, 06:46 AM // 06:46

Quote:

Originally Posted by Cacheelma

Theocrat's post seems to imply that screenshots are sent to Anet and NCSoft already. And I'd imagine that honest people who have found this bug didn't really record the date/time and IP when it happened, as they'd think it's some kind of an accident or internet hiccups. She shouldn't expect us to have done that to begin with, really. And what would that prove? That these people lied becuase..hmm.. they can't remember the exact date/time and their IP addresses when such thing happened?

Please. It's "demanding proof" alright.

What could it hurt? Gaile does not bite.

P.S.- I do not know what kind of questions she wants to ask, I was just guessing. But if one of these people e-mail her we might all find out.

Enko · Jan 07, 2010, 06:53 AM // 06:53

Quote:

Originally Posted by Lucci_Slevin

What could it hurt? Gaile does not bite.

lucci, cacheelma said that screenshots and such were probably already sent to anet and ncsoft. what probably wasn't sent were exact date/times and the ip address they were on or accessing. do you constantly keep an ip recorder on? unless you were actually looking to try to reproduce this and recorded all of your actions (such as arkantos said he would even be willing to do if that's what it took), you wouldn't have that information.

what's annoying the community now is that they are saying "we can't reproduce it, so as far as we're concerned, it doesn't exist" even though multiple people who I consider reliable have already told them.

Quote:

Originally Posted by Lucci_Slevin

P.S.- I do not know what kind of questions she wants to ask, I was just guessing. But if one of these people e-mail her we might all find out.

also have you thought that maybe no one has posted in this thread because they have been messaging them? just because its not posted on a forum thread, does not mean that the information wasn't sent in.

do you know that NO ONE has sent anything in? are you somehow magically connected to the mind of every person on guru?

Lucci_Slevin · Jan 07, 2010, 07:13 AM // 07:13

Quote:

Originally Posted by Enko

also have you thought that maybe no one has posted in this thread because they have been messaging them? just because its not posted on a forum thread, does not mean that the information wasn't sent in.

do you know that NO ONE has sent anything in? are you somehow magically connected to the mind of every person on guru?

I am aware of that possibly.

I said:

Quote:

It has been days and as of her post this morning, not one person has come forward. Why?

Your post seems to imply I was ignoring the possibility. Not at all.

What bothers me is today(Jan6) was not the first day she asked for people to contact her. (Jan2) was the first time. And again on (Jan4). Between the the 2nd and the 6th no one emailed. Maybe they did not know, but she is looking for them.

Faer · Jan 07, 2010, 07:33 AM // 07:33

Quote:

Originally Posted by Lucci_Slevin

It has been days and as of her post this morning, not one person has come forward. Why?

Because that isn't true. At all.

Lucci_Slevin · Jan 07, 2010, 07:35 AM // 07:35

Quote:

Originally Posted by Theocrat

Because that isn't true. At all.

Did you E-mail her?

P.S.- If you did not. Do it. I promise she won't bite.

Faer · Jan 07, 2010, 07:39 AM // 07:39

No. If you'll recall, I already explained to you that Gaile ignores me, and other people who directly gave her information on the wiki. I did, however, go to Regina with what we had available (on Jan 03, 2010, 5:18AM EST, in case that is of interest to you) . She, at least, was willing to give us the time of day - and I really must thank her for that.

Lucci_Slevin · Jan 07, 2010, 07:42 AM // 07:42

Quote:

Originally Posted by Theocrat

No. If you'll recall, I already explained to you that Gaile ignores me, and other people who directly gave her information on the wiki. I did, however, go to Regina with what we had available (on Jan 03, 2010, 5:18AM EST, in case that is of interest to you) . She, at least, was willing to give us the time of day - and I really must thank her for that.

Well just try that E-mail in the OP. I am sure she will not ignore you on this.

Sierraa · Jan 07, 2010, 07:43 AM // 07:43

Quote:

Originally Posted by Lucci_Slevin

I do not think they are 'demanding proof' specifically. If just one person who claims they experienced this bug would E-mail Gaile, she could ask the questions she needs to ask(I am guessing info like date/time ips ect) and may be able to look at it from their side(server-side) and figure the situation out.

It has been days and as of her post this morning, not one person has come forward. Why?

I do not think anyone has to worry about being banned.

It's not really worthy of a thread to be like: LOL DONT WORRY GUYS. I EMAILED HER.

Sorry, it's really none of your business. :P

Faer · Jan 07, 2010, 07:48 AM // 07:48

Quote:

Originally Posted by Lucci_Slevin

Well just try that E-mail in the OP. I am sure she will not ignore you on this.

I am sure I'd rather discuss the matter with people who care more about pressing community issues than missing masks and talking frogs. Gaile has ignored the things that matter far too many times for myself and many others to even bother anymore. A Support Liaison should not casually disregard things of this magnitude.

Regina has everything Guru has to offer. I have faith that she can handle passing it around the office.

Lucci_Slevin · Jan 07, 2010, 07:48 AM // 07:48

Quote:

Originally Posted by Sierraa

It's not really worthy of a thread to be like: LOL DONT WORRY GUYS. I EMAILED HER.

Sorry, it's really none of your business. :P

Well you would not need to make a thread yourself. She would undoubtedly post a public response herself on the wiki afterwords.

shoyon456 · Jan 07, 2010, 07:49 AM // 07:49

I don't know whether this is true or not, and there's no reason why I'd want to test such a thing. But I still have some faith in Anet, and it is possible the vulnerability was exaggerated. It may be possible that they didn't try replicating it manually, which I doubt, or there is a difference in their system that can't replicate it.

Either way, since Anet has been working extensively trying to find these vulnerabilities, I am now looking at this a bit more skeptically. Unless you were able to do it yourself (in which case you should talk to Anet support), then I don't think we are in a position to be pointing fingers or crying foul, especially since Anet has been working very hard and continues to test this potential vulnerability despite not being able to reproduce it after many attempts over many days.

Cacheelma · Jan 07, 2010, 07:51 AM // 07:51

Quote:

Originally Posted by Lucci_Slevin

Well just try that E-mail in the OP. I am sure she will not ignore you on this.

Who are you to know such thing? The Frog?

Don't answer that.

Faer · Jan 07, 2010, 07:51 AM // 07:51

Quote:

Originally Posted by shoyon456

But I still have some faith in Anet

This is an NCSoft issue, not an ArenaNet one. Besides the usual mishaps and mayhem, we're all still pretty solid in our belief that ArenaNet can get things done with their game, one way or the other. It's NCSoft we can't trust any more than a politician, especially given that this is not the first time their security has been a huge joke.

Sierraa · Jan 07, 2010, 07:56 AM // 07:56

Quote:

Originally Posted by Lucci_Slevin

Well you would not need to make a thread yourself. She would undoubtedly post a public response herself on the wiki afterwords.

You missed my point completely. It's none of YOUR business if we emailed her or not. It's really none of guru's business either be it thread or a post. It's for the parties involved.

Gaile has failed to post a public response for other questions that have been posted, I'm sure she'd forget to read mine since I'm not thankful of what she does. :] sorry.

Lucci_Slevin · Jan 07, 2010, 08:20 AM // 08:20

Well if you guys will not budge on this, I will leave it be.

But the fact remains they were looking to talk to you directly since January 2nd. The day after that thread popped up.