Curse

dr love · Jan 01, 2010, 03:50 PM // 15:50

Quote:

Originally Posted by bsoltan

Has anyone been able to successfully change another account's information through this method of randomly being logged into their PlayNC account?

i'm trying to randomly access your account right now ><

RedDog91 · Jan 01, 2010, 03:51 PM // 15:51

One of my friend's accounts got hacked this way.
Luckily he was able to recover it from contactin NCSoft quickly.

Even luckier...the hacker used the account to store items and money.
My friend came out of the ordeal with 200k and a bunch of max gold r9s.

pumpkin pie · Jan 01, 2010, 03:52 PM // 15:52

the new security is not exactly safe either, read

Tullzinski · Jan 01, 2010, 03:57 PM // 15:57

So this is how the RMT's have been getting into the accts? Figures....

fowlero · Jan 01, 2010, 04:01 PM // 16:01

Pretty astonishing if this is true.

Anet's really on a roll, this alongside delay after delay on skill balances. As well as no acknowledgement of the botting appearing in pvp.

Really aiding GW2's appeal.

upier · Jan 01, 2010, 04:02 PM // 16:02

The guys on the other side are probably already thinking of a way to remedy this problem as we speak.
The "problem" of course being people exposing this sort of issues.

glacialphoenix · Jan 01, 2010, 04:06 PM // 16:06

Quote:

Anet's really on a roll

To be fair to Anet, I highly doubt they're responsible for the ridiculous lack of security on the NCSoft master account.

You can blame them for the problems within GW (lag, lack of festival hats, lack of skill balances/updates etc.) all you want, but I don't think you can pin the actual security gap in the master account on them.

(Denial of said security gap, however...)

Faer · Jan 01, 2010, 04:06 PM // 16:06

Quote:

Originally Posted by Fay Vert

I look forward to the official response in this thread

I'm actually hoping their excellent legal team advises them against making one. Gaile has already done enough damage by not reading things and claiming proven problems to be "rumors that are provably false". Let them keep pointing fingers at a fansite that hasn't been proven to exist yet (hey, what was that about spreading rumors, again?). Everybody knows about this now, so there's no point in worrying about what they have to say about it. Their actions will speak louder than any words they might offer.

Zinger314 · Jan 01, 2010, 04:07 PM // 16:07

My account got hacked (and likely stripped). The only time I linked it to an NCSoft Account was for the free pane of storage during the anniversary.

lol irony.

Shayne Hawke · Jan 01, 2010, 04:09 PM // 16:09

The chess timer has been far expired, ANet. It's about time you made your move.

Kerwyn Nasilan · Jan 01, 2010, 04:12 PM // 16:12

Can you just remove PlayNC ANet? It is a useless RED ENGINE GORED ENGINE GORED ENGINE GORED ENGINE GOing site and if this is anything to be believed then a major risk.

Martin Alvito · Jan 01, 2010, 04:13 PM // 16:13

They're in zugzwang, Shayne.

Paradise Lost · Jan 01, 2010, 04:14 PM // 16:14

There needs to be a way to de-link your gw account your from ncsoft master account!

pumpkin pie · Jan 01, 2010, 04:15 PM // 16:15

Just remove all previously solved tickets please ArenaNet! NOW.

Enko · Jan 01, 2010, 04:16 PM // 16:16

wonder if someone should report this to mmorpg.com. with a big enough stink about it, i bet ncsoft would be forced to deal with it unless they want to lose all of their customers.

Jair · Jan 01, 2010, 04:24 PM // 16:24

If this is actually true, it is pretty bad.

Erys Vasburg · Jan 01, 2010, 04:25 PM // 16:25

Quote:

Originally Posted by glacialphoenix

(Denial of said security gap, however...)

That was my point with ArenaNet, yes. The way they encourage the lies by allowing them to fester on their official wiki, which is where they want players to go for all the facts... It looks very bad for them, doesn't it? Then again, so did this... But they covered it up nice and good, too.

(Yet another snapshot garnered from somebody who was on top of the issue at the time - posted with permission)

Enko · Jan 01, 2010, 04:30 PM // 16:30

looks like if ncsoft would just make the old password a requirement to change passwords (just like most sites have), would be a quick bandaid for this until they can fix the actual issue.

ac1inferno · Jan 01, 2010, 04:31 PM // 16:31

What I don't get is can't they check and punish those who did it? I mean isn't it possible to look back in trade logs and see that one account moved everything it owns to another account? Or even if they were outside an outpost and everything was dropped for another account to pick up, isn't is possible to look back and check into those?

Lukyboy · Jan 01, 2010, 04:33 PM // 16:33

This is interesting....

What could be the reason that they are not fixing this?