Curse

Fril Estelin · Jan 17, 2008, 12:57 PM // 12:57

Quote:

Originally Posted by Ctb

What sort of idiotic operating system is still running arbitrary code on removable media without an explicit request by the user to do so?

I don't think it's still the case in Vista. External peripherals are treated as totally untrusted by default. It was about time!

(let's not start the Windows-Linux war on this thread, this would defeat the point of trying to improve the security... and yeah, people should try Ubuntu

)

zwei2stein · Jan 17, 2008, 01:13 PM // 13:13

Quote:

Originally Posted by Fril Estelin

I don't think it's still the case in Vista. External peripherals are treated as totally untrusted by default. It was about time!

Bad thing is, vistas "its dangerous, proceed?" dialogs are everywhere and do good job at teaching people to simply press "okay" button asap without thinking.

There is no point in secure system if user can't take advantage of it.

Ctb · Jan 17, 2008, 02:52 PM // 14:52

Quote:

There is no point in secure system if user can't take advantage of it.

They can take advantage, they just won't because it's a hassle.

There are three things you can have in computing with our current standards and hardware:

1. A completely unobtrusive computing experience.
2. Security.
3. Functionality.

You can have any two simultaneously. If you have a secure, functional system, you have to manage it yourself on some level in an intelligent way. If you have a secure system that you never have to think about, it's because it doesn't do anything. If you have a functional system that you never think about, it's not going to be secure.

I've argued for years that the arguments over which OS is "more secure" are a waste of time because the main problem with security on home systems anymore is a social and education problem, not a technical one. There was a time when you could foist most of the blame on Windows, but now there are lot of groups keeping Microsoft on its toes and honest about patches, and Windows is shipping with plenty of capabilities for securing a home system. People just don't know about patching and firewalls and how to pick an effective anti-virus tool, and they don't care to learn, and the first time any of the above inconveniences them, they just turn it off.

Prime example: it was just too much work for some people to put a CD in their drive and manually launch an installer, so to save a few clicks we got "autoplay" which promptly turned into an enormous virus distribution system. Yay...

Why... yes... I am in IT and I do find my users extremely frustrating from time to time... why do you ask?

scarlettpayne · Jan 17, 2008, 06:01 PM // 18:01

Quote:

Originally Posted by Roderick Bravehart

Tell your friends they can get their accounts back if they still have their CD keys. Send the Keys to Support and they'll reset the passwords so you can go back to playing.

i wish it was that simple for one of my mates.. But unfortunately the hackers sold gold from his accounts in the process of him trying to get in touch with ANET and they banned both his accounts.

The other they took all his stuff and deleted all but one of his toons.

JASON626 · Jan 17, 2008, 06:17 PM // 18:17

Account wide titles ftw

Thats what I keep pushing for but some people can't figure it out. Individual character titles get lost if deleted. Atleast if they get there accounts back they would have only lost weapons, money, armor. Plus even more benifits of account wide titles. It's a bit off topic but I just wanted to point it out.

BlackAngel · Jan 17, 2008, 07:26 PM // 19:26

Another question is that have they linked their account to PlayNC? They at least used to have weak security and hackers got their information from their server (while you have to give your account's e-mail and password to them when doing purchase, i.e. char slots).

Anyone have an update to said problem btw? I'm burning to get at least one more char slot and create a dervish I'm missing from all 10 professions. Is it safe to link your account to online shop in these days?

Angelica · Jan 17, 2008, 10:24 PM // 22:24

Quote:

Originally Posted by Master Knightfall

I wonder if they got hit with the disconnect please input your login information popup box after the disconnect? I've gotten these before and found them very suspicious since the way I logon would not require these popup boxes asking for your login information. I bet that is what they got hit with. Never ever input your login information in a popup box after a disconnect. Always go completely out of the program and use the folder .exe icon or your shortcut whichever you use.

If that is true ...... I'm done!

Coloneh · Jan 18, 2008, 05:22 AM // 05:22

Quote:

Originally Posted by scarlettpayne

so far in the past two weeks 2 of my friends have been hacked that don't buy or sell gold. Don't use 3rd party programs. or any of that mess and they have been hacked and lost all their stuff.

bull shit they were hacked. after playing GW for two years I have never heard or anyone's account actually getting hacked. these people that cry about getting hacked are usually just idiots that downloaded a keylogger or gave someone their password. Fail less at the internet and you get to keep your account.

Antheus · Jan 18, 2008, 05:46 AM // 05:46

Quote:

Originally Posted by Coloneh

bull shit they were hacked. after playing GW for two years I have never heard or anyone's account actually getting hacked. these people that cry about getting hacked are usually just idiots that downloaded a keylogger or gave someone their password. Fail less at the internet and you get to keep your account.

I have to concur. Of all the "hack" attempts I know, they were:
- Sibling walking by logged in account, deleting the characters, stealing stuff
- Spyware/keylogger, installed through a third-party application, usually pirated one
- Using a widely known e-mail/password
- Giving account info around guild mates

There was one incident where use of forum and plaync sites did reveal some information, which in several rare cases was used to steal accounts. This is long gone history though.

But outside of that incident, there hasn't been a single confirmed case of someone simply brute forcing their way without some "help" from account owner.

Red Sonya · Jan 18, 2008, 09:38 AM // 09:38

I've also been told you can get keylogger virus trojans from downloading free music and movies from 3rd party sites even like Kaza and Napster. I think many people download stuff all the time that they have no clue what is inside the program. I only download from official patch sites and rarely goto 3rd party sites like this one (yeah I'm trusting them with my data), but, GW doesn't have an official site and I've always been kinda picked by that. Forcing us to goto 3rd party sites to give feedback. I personally think that's pretty lazy service by not providing an official SAFE site for us to visit and give feedback.

Fril Estelin · Jan 18, 2008, 09:51 AM // 09:51

Quote:

Originally Posted by Red Sonya

I personally think that's pretty lazy service by not providing an official SAFE site for us to visit and give feedback.

That's the role of the official GuildWiki. I even found the list of GW mods!

O Nuxtofulakas · Jan 18, 2008, 10:01 AM // 10:01

could someone from Anet advise why we are not allowed anymore to use special symbols in password when we ask to change current one?

I believe this reduces a lot the strength of the password and really made me curious when i read it...

Red Sonya · Jan 18, 2008, 11:31 AM // 11:31

Quote:

Originally Posted by Fril Estelin

That's the role of the official GuildWiki. I even found the list of GW mods!

Uh huh and how long has that official Wiki been available? Certainly not since the beginning of GW and not even until nearly half of last year was gone. I do like the official wiki though, but, it took it's own sweet time coming and an official forum should have been put up as well. I find official forums more beneficial than 3rd party ones.

Fril Estelin · Jan 18, 2008, 11:52 AM // 11:52

Quote:

Originally Posted by Red Sonya

Uh huh and how long has that official Wiki been available? Certainly not since the beginning of GW and not even until nearly half of last year was gone. I do like the official wiki though, but, it took it's own sweet time coming and an official forum should have been put up as well. I find official forums more beneficial than 3rd party ones.

I perfectly understand Anet's stance on the topic of forums: look at GWG, there is A LOT of interesting stuff and very helpful people (it even has the equivalent of the auction house). But when it comes to Anet's business and decisions, it's mainly about QQing (if you agree too much, you quickly become Anet's fanboy and end up in the thread bin). Look at the recent case of the 117s, Gaile came on the thread to clarify issues and was met with very harsh comments. Yet she continues to come here and give information. (I've noticed that GW online's forum seems more calm and less PvP, in the sense of people trying to "win the thread" as in I'll fight you to death...)

And the official GW wiki actually has discussions on the various points. You can talk to the devs. What more would you want?

Yang Whirlwind · Jan 18, 2008, 01:11 PM // 13:11

Quote:

Originally Posted by Master Knightfall

Tell your friends they need to stay off PORN sites. That's the easiest way to get a backdoor keylogger trojan virus and never even know it. Plus really going to ANY website that is not an OFFICIAL one is subject to doing the same. Just because everyone is using a site doesn't mean it's legit either.

This would be my guess! Biggest concentration of keyloggers, vira etc. anywhere ... or so I've been told! ... Obviously never visited any of those sites myself! ... Actually I never heard about those sites before now! ... In fact,- what is porn? Never heard about it! *goes off in search of a halo to polish*

Etta · Jan 18, 2008, 01:18 PM // 13:18

Quote:

Originally Posted by Coloneh

bull shit they were hacked. after playing GW for two years I have never heard or anyone's account actually getting hacked. these people that cry about getting hacked are usually just idiots that downloaded a keylogger or gave someone their password. Fail less at the internet and you get to keep your account.

Blunt but Truth.

Quote:

- Sibling walking by logged in account, deleting the characters, stealing stuff
- Spyware/keylogger, installed through a third-party application, usually pirated one
- Using a widely known e-mail/password
- Giving account info around guild mates

Yep, some people seem to lack a common sense. If you left your back door open, they will come.

Quote:

Originally Posted by Yang Whirlwind

Obviously never visited any of those sites myself!

-_-......lol

Talon one · Jan 18, 2008, 01:21 PM // 13:21

Quote:

Originally Posted by O Nuxtofulakas

could someone from Anet advise why we are not allowed anymore to use special symbols in password when we ask to change current one?

I believe this reduces a lot the strength of the password and really made me curious when i read it...

i agree, the 13 digit alphanumeric passwords we are allowed to create is hardly up to date security. but its no reason to panic either, if our password is as secure as ncsoft allows us to make it, a brute force attack would still take 1 billion years - on a really cheap pc, on a really good one maybe only a million or a thousand years

its much more likely that an actual hack would happen via 3rd party software on the system or social engineering.

and some people seem to like to lie about being hacked. maybe they were running a bot on their second account and got banned for it, or they got scammed out of a stack of ectos and don't want to admit to their stupidity, or they are simply using it as an excuse to quit the game.

Fril Estelin · Jan 18, 2008, 02:23 PM // 14:23

Quote:

Originally Posted by Etta

Blunt but Truth.

Only partial truth, but truth nevertheless I'll admit.

The other side of the truth is "naive users", who use passwords simple to guess or share them with friends and family. There's been so many stories like that.

I'm not saying the OP didn't install 3rd party programs, I'm just giving a more objective opinion than the, indeed, blunt "you shouldn't have install anything".

Give your advice and just leave it like that, that's what years of forum-ing has told me. Discussion can go in one thousand directions, most of which (but not all of course) lead nowhere.

Commander Ryker · Jan 18, 2008, 05:32 PM // 17:32

Quote:

Originally Posted by Master Knightfall

I wonder if they got hit with the disconnect please input your login information popup box after the disconnect? I've gotten these before and found them very suspicious since the way I logon would not require these popup boxes asking for your login information. I bet that is what they got hit with. Never ever input your login information in a popup box after a disconnect. Always go completely out of the program and use the folder .exe icon or your shortcut whichever you use.

I use to think so about that too, but then I read somewhere that it was ok and now I just do it. I've never had a problem with hacking (knock on wood). Just don't use any 3rd party programs with gw and change your password to something that would be very hard to guess.

stefke86 · Jan 18, 2008, 07:03 PM // 19:03

Quote:

Originally Posted by The Real Avalon

OR!

They all lied and were with the group of [117]

/fail

To some of us this really isn't funny...