Forum Settings
       
Reply To Thread

Keylog Attack ~How My Story Ended~Follow

#102 May 16 2007 at 2:10 PM Rating: Decent
**
423 posts
While I was not victim of this attack,
wouldn't have downloaded it if I had
recieved the tell, Don't use windower
or any third party software with FFXI,
I just have one little thing to say:

Thanks for reminding me to do a fresh
full on Virus Scan and check on my
firewall. =)

That's all.
#103 May 16 2007 at 2:12 PM Rating: Decent
***
1,978 posts
I think a good scripter could make Windower do a /tell all, or /tell area.

Anyways, that thing can really be broken on the wrong hands.

Windower bad, bad windower.

Back on topic, sorry that your account got stolen OP, I think the whole Registration Codes solution won't work, because even when you do a fresh reinstall of FFXI, and try to enter the reg codes it will immediately associate them with the current user and CC info. Thus, blocking you from the PlayOnline client. Of course, you can still give it a try.
#104 May 16 2007 at 2:16 PM Rating: Decent
Edited by bsphil
******
21,739 posts
Restyoneck wrote:
Quote:
... btw, I was the next person in line when they ran out of PS3s.


People stood in line where you live?

sh*t, they can't and haven't been able to sell PS3's in my area since it released.


That's interesting, because I've seen PS3s everywhere collecting dust for months while I was trying to find a Wii.
____________________________
His Excellency Aethien wrote:
Almalieque wrote:
If no one debated with me, then I wouldn't post here anymore.
Take the hint guys, please take the hint.
gbaji wrote:
I'm not getting my news from anywhere Joph.
#105 May 16 2007 at 2:25 PM Rating: Good
****
4,229 posts
Lobivopis wrote:
If a bank allowed this sort of thing there would be an uproar.

In most states it is *illegal* for a company to not protect it's customers from identity theft. They can't simply say "Sorry they have your account number so they own your account now".

How the hell does SE even get away with this?


Daboder wrote:
SE wrote:
Article 2: Data Collection and Privacy
In the course of your playing the Game and using the PlayOnline Service, you may accumulate certain usage statistics, score information, character traits, performance records and other Game-related data that are stored for you in the Game and on PlayOnline servers (collectively, your "Player Data"). SEI makes no assurances, representations or warranties whatsoever about the accuracy, currency or continuing availability of this Player Data at any time and reserves its right, at any time and from time to time, without notice to you, to delete all or any part of your Player Data. SEI shall have no liability to you or to any third party for any such deletion, and further shall not be held responsible for any complete or partial deletion done or caused by you, any third party, or other act or occurrence beyond SEI's reasonable control, such as a fire, power outage, natural disaster, terrorist act, equipment failure or any other such act or occurrence, whether or not similar to the foregoing. In addition, your Player Data and other information about you are subject to our PlayOnline Service Privacy Policy, which you should review in its entirety and may be accessed under the "Rules & Policies" section of the PlayOnline Viewer and Website. You agree that you will not store or attempt to store any personal information or player data about other PlayOnline users, except to the extent that such storage is an integral part of the Game and necessary in order for you to play the Game.


From the horses mouth. Part of the TOS you agree to EVERY TIME you log in to the game.
#106 May 16 2007 at 2:28 PM Rating: Decent
*****
15,512 posts
OmegaVegito wrote:
I think a good scripter could make Windower do a /tell all, or /tell area.

Anyways, that thing can really be broken on the wrong hands.

Windower bad, bad windower.

Back on topic, sorry that your account got stolen OP, I think the whole Registration Codes solution won't work, because even when you do a fresh reinstall of FFXI, and try to enter the reg codes it will immediately associate them with the current user and CC info. Thus, blocking you from the PlayOnline client. Of course, you can still give it a try.
I doubt that good a scripter would really need Windower.
#107 May 16 2007 at 2:42 PM Rating: Good
alricflaim wrote:
StubsOnAsura wrote:
I'm shocked at the number of people blaming the OP in this thread. There is a difference between responsibility and absolute responsibility. The OP consciously avoided running the program after he unzipped it, knowing full well the risk. One cannot blame the user's lack of expertise in the matter every single time, and the company (SE) shares some liability in this scenario for making it a) so easy to take over someone's account and b) so hard to get it back.

I have half a mind to report this business practice of "We need your CURRENT cc info to reverse the changes" to the local news media to see what kind of public response this gets. I think each and every one of you bashing the OP knows SE's policy is just as much to blame, but won't admit it for fear of not stroking SE's proverbial cock long enough.



Stubs, Seriously, GFY. Your Bank (okay maybe not in the states, but here in Canada) has HUGE notices posted telling you not to DL things from sources you cannot verify. At least in my office there are signs posted warning about id theft (likely because we are a government agency), the news is filled with stories about it. We all get spam every day, more then a few are phishing scams, and we are warned about them all the time.

Yes, it sucks that SE's policy won't let hiro get his account back, however did you stop for a minute and think there is a reson for policy like this? A CC number is one thing you can reasonably assume a person is going to keep safe, Not CD-Keys, not passwords, nothing else. Hiro agreed to Square's policies every time he logged in and pressed the I accept button. He knew, or at least square had every expectation that he knew their policies, and had read the latest version. What might have helped is if Square used a seperate program or web form to change your CC info, you would need ANOTHER password (not that many would) to change that.

Hiro, and ANYONE else who falls for this sort of thing is at fault. They didn't bother to think, or pay attention and they get burned for it, it sucks but it's life. There are all sorts of bottom feeders out there who make money scamming people out of what's theirs. It's your own responsibility to ensure that they don't catch you.



BTW, Sorry Hiro. I don't mean to imply that you're an idiot. Everyone gets burned once or twice in their life by something. If you end up starting a new character, look me (alricflaim) up. I might not know you, and I might not have any gil, but I can likely offer you some help of some sort on your climb back to the top of the pile.


Edited for coherency. Posting over time during the afternoon at work makes things sometimes disjointed



OK, a couple of things:

1) Why don't YOU go fuck YOURSELF you condescending obnoxious dumb shit.

2. YES, your bank and every other financial institution posts warnings about stupid sh*t, but guess what? If your identity is stolen, they STILL take the responsibility to help correct the situation within reason. They do not simpy say "Oh well dumbass, you should have been more careful, your loss." which is what you people are saying.

The issue at hand is SE's reliance on proving ownership of an account using information that is absolutely changeable the very moment an account is hijacked. It's like a police offer saying:

"No sir, we will not give you back this car which MAY be your stolen car, because the registration with the DMV was changed yesterday and you do not match the new owner's information. Nevermind that you have the VIN number, or an active insurance policy listing the vehicle, and never mind that you were not present at the time the registration was changed. Our policy is that since you do not match the person currently registered, you no longer own the vehicle.

Doesn't quite seem reasonable, does it? The only solid ground a policy like this has to stand on is that the previous owner of the account MAY have sold it. However, such acts are clearly against the terms of service SE has given us, and therefore, REGARDLESS of the possibility, any transaction should be null and void should the original owner contest such claims. AT the very LEAST, the account should be suspended or banned, but it is quite clear that SE's policy is simply one of NO action, which consequently, leaves the offender unpunished and the account available for further abuse.


Edited, May 16th 2007 5:46pm by StubsOnAsura
#108 May 16 2007 at 2:58 PM Rating: Default
Do what I do, if you are completely 100% sure you have no viruses on your comp, type in your password and SAVE IT. So you never type it again, you will never have your account stolen ever.
#109REDACTED, Posted: May 16 2007 at 3:04 PM, Rating: Sub-Default, (Expand Post) Way to fail the internets. Did you even read the part where I said (and other people quoted it directly from) SE's policy says they are not responsible for you being stupid? Guess not. Like it or not, you agree to their policy everytime you log into Final Fantasy. You don't see the spot where it says that you accept their terms of service and have to click the button?
#110 May 16 2007 at 3:14 PM Rating: Good
alricflaim wrote:
Way to fail the internets. Did you even read the part where I said (and other people quoted it directly from) SE's policy says they are not responsible for you being stupid? Guess not. Like it or not, you agree to their policy everytime you log into Final Fantasy. You don't see the spot where it says that you accept their terms of service and have to click the button?

And the GFY? That's because you came off like an emo kid whining with your comment about stroking SE's cock.


Excuse me? Where did I argue that it was not SE's policy?

Exactly. Way to miss the point, jerk. Maybe you should re-read it a few times.
#111 May 16 2007 at 3:17 PM Rating: Good
***
1,090 posts
Quote:
Way to fail the internets. Did you even read the part where I said (and other people quoted it directly from) SE's policy says they are not responsible for you being stupid? Guess not. Like it or not, you agree to their policy everytime you log into Final Fantasy. You don't see the spot where it says that you accept their terms of service and have to click the button?

And the GFY? That's because you came off like an emo kid whining with your comment about stroking SE's ****.

They're not talking about legal liability. They're talking about ethical liablity. The way the ToS and their customer service policies are set up are designed in a way that makes that car analogy pretty apt. It definitely makes for less work on their part, and it simplifies the legal issues surrounding accounts being sold and then taken back by the original person, but realistically, I think SE's customers would prefer that they ***** over the people buying accounts and stop the people stealing them, given a choice between the two.
#112 May 16 2007 at 3:23 PM Rating: Good
*
76 posts
The easiest way for SE to fix this would be to do what most other websites do. before you can change your data or request a reset of the password have a secret phrase or answer a secret question like "What's the name of your favorite book?" or "What's your mothers maiden name?". If you don't answer it correctly nothing gets changed.

In the OPs case the person who stole the account would be SOL becuse they would not have the answer even though they could log in. And failure to answer correctly 3 times would lock the account and only talking to an SE rep and verfying some info could unlock it.

Only problem would be the keylogger logging the password and the challenge response but im assuming that if you found you had been keylogged that you would clean the system before going in and changing it. Little personal responsability here is appropriate after all.

#113 May 16 2007 at 3:44 PM Rating: Decent
***
1,089 posts
I don't know how laws about identity theft are over there, but in Spain it doesn't go that way.
A company like SE can say whatever they want to say in their ToS. By law, they are responsible of keeping your identity safe. Any clause in their ToS that said they aren't, would be considered an abusive clause, void of any legal consequence, and SE would still have to abide the law.
#114 May 16 2007 at 4:14 PM Rating: Decent
Thief's Knife
*****
15,054 posts
Cookiemonkey wrote:
Quote:
How the hell does SE even get away with this?


http://www.labbb.org/BBBWeb/Forms/Business/CompanyReportPage_Expository.aspx?CompanyID=13168063

Meh I love Final Fantasy but they really need to work on customer service.

Edited, May 16th 2007 5:32pm by Cookiemonkey


Remember what happened to Nintendo over their artificial "shortages"?
All it will take is for some senator's grandkid to loose his account like that and SE will be hit with a huge class action lawsuit (which they will loose because what they are doing is blatantly illegal)
____________________________
Final Fantasy XI 12-14-11 Update wrote:
Adjust the resolution of menus.
The main screen resolution for "FINAL FANTASY XI" is dependent on the "Overlay Graphics Resolution" setting.
If the Overlay Graphics Resolution is set higher than the Menu Resolution, menus will be automatically resized.


I thought of it first:

http://ffxi.allakhazam.com/forum.html?forum=10&mid=130073657654872218#20
#115 May 16 2007 at 4:15 PM Rating: Good
Thief's Knife
*****
15,054 posts
Pergatory wrote:
Lobivopis wrote:
If a bank allowed this sort of thing there would be an uproar.

In most states it is *illegal* for a company to not protect it's customers from identity theft. They can't simply say "Sorry they have your account number so they own your account now".

How the hell does SE even get away with this?


Daboder wrote:
SE wrote:
Article 2: Data Collection and Privacy
In the course of your playing the Game and using the PlayOnline Service, you may accumulate certain usage statistics, score information, character traits, performance records and other Game-related data that are stored for you in the Game and on PlayOnline servers (collectively, your "Player Data"). SEI makes no assurances, representations or warranties whatsoever about the accuracy, currency or continuing availability of this Player Data at any time and reserves its right, at any time and from time to time, without notice to you, to delete all or any part of your Player Data. SEI shall have no liability to you or to any third party for any such deletion, and further shall not be held responsible for any complete or partial deletion done or caused by you, any third party, or other act or occurrence beyond SEI's reasonable control, such as a fire, power outage, natural disaster, terrorist act, equipment failure or any other such act or occurrence, whether or not similar to the foregoing. In addition, your Player Data and other information about you are subject to our PlayOnline Service Privacy Policy, which you should review in its entirety and may be accessed under the "Rules & Policies" section of the PlayOnline Viewer and Website. You agree that you will not store or attempt to store any personal information or player data about other PlayOnline users, except to the extent that such storage is an integral part of the Game and necessary in order for you to play the Game.


From the horses mouth. Part of the TOS you agree to EVERY TIME you log in to the game.


Doesn't matter because federal and state law superseeds the TOS.
____________________________
Final Fantasy XI 12-14-11 Update wrote:
Adjust the resolution of menus.
The main screen resolution for "FINAL FANTASY XI" is dependent on the "Overlay Graphics Resolution" setting.
If the Overlay Graphics Resolution is set higher than the Menu Resolution, menus will be automatically resized.


I thought of it first:

http://ffxi.allakhazam.com/forum.html?forum=10&mid=130073657654872218#20
#116 May 16 2007 at 4:18 PM Rating: Good
Thief's Knife
*****
15,054 posts
alricflaim wrote:
Quote:

OK, a couple of things:

1) Why don't YOU go fuck YOURSELF you condescending obnoxious dumb shit.

2. YES, your bank and every other financial institution posts warnings about stupid sh*t, but guess what? If your identity is stolen, they STILL take the responsibility to help correct the situation within reason. They do not simpy say "Oh well dumbass, you should have been more careful, your loss." which is what you people are saying.

The issue at hand is SE's reliance on proving ownership of an account using information that is absolutely changeable the very moment an account is hijacked. It's like a police offer saying:

"No sir, we will not give you back this car which MAY be your stolen car, because the registration with the DMV was changed yesterday and you do not match the new owner's information. Nevermind that you have the VIN number, or an active insurance policy listing the vehicle, and never mind that you were not present at the time the registration was changed. Our policy is that since you do not match the person currently registered, you no longer own the vehicle.

Doesn't quite seem reasonable, does it? The only solid ground a policy like this has to stand on is that the previous owner of the account MAY have sold it. However, such acts are clearly against the terms of service SE has given us, and therefore, REGARDLESS of the possibility, any transaction should be null and void should the original owner contest such claims. AT the very LEAST, the account should be suspended or banned, but it is quite clear that SE's policy is simply one of NO action, which consequently, leaves the offender unpunished and the account available for further abuse.


Edited, May 16th 2007 5:46pm by StubsOnAsura


Way to fail the internets. Did you even read the part where I said (and other people quoted it directly from) SE's policy says they are not responsible for you being stupid? Guess not. Like it or not, you agree to their policy everytime you log into Final Fantasy. You don't see the spot where it says that you accept their terms of service and have to click the button?


Federal and/or State law > TOS I'm sorry
____________________________
Final Fantasy XI 12-14-11 Update wrote:
Adjust the resolution of menus.
The main screen resolution for "FINAL FANTASY XI" is dependent on the "Overlay Graphics Resolution" setting.
If the Overlay Graphics Resolution is set higher than the Menu Resolution, menus will be automatically resized.


I thought of it first:

http://ffxi.allakhazam.com/forum.html?forum=10&mid=130073657654872218#20
#117 May 16 2007 at 4:19 PM Rating: Good
Thief's Knife
*****
15,054 posts
jotabe wrote:
I don't know how laws about identity theft are over there, but in Spain it doesn't go that way.
A company like SE can say whatever they want to say in their ToS. By law, they are responsible of keeping your identity safe. Any clause in their ToS that said they aren't, would be considered an abusive clause, void of any legal consequence, and SE would still have to abide the law.


Actually the laws are pretty much the same in the US regarding identity theft. SE is just ignoring them. Eventually this will come to a head and when it does SE is gonna get reamed by a class action lawsuit.
____________________________
Final Fantasy XI 12-14-11 Update wrote:
Adjust the resolution of menus.
The main screen resolution for "FINAL FANTASY XI" is dependent on the "Overlay Graphics Resolution" setting.
If the Overlay Graphics Resolution is set higher than the Menu Resolution, menus will be automatically resized.


I thought of it first:

http://ffxi.allakhazam.com/forum.html?forum=10&mid=130073657654872218#20
#118 May 16 2007 at 4:20 PM Rating: Default
**
313 posts
except they didn't lose his identity in this case. He lost it himself. I think in this case it's personal responsibility.

It's like saying the car dealership should have to get you back your car after you gave the keys to a scam artist.
#119 May 16 2007 at 4:28 PM Rating: Decent
***
1,089 posts
alricflaim wrote:

It's like saying the car dealership should have to get you back your car after you gave the keys to a scam artist.

Not really, because SE is still in possession of the "car", and is still holding the "keys".
#120 May 16 2007 at 4:46 PM Rating: Decent
Thief's Knife
*****
15,054 posts
alricflaim wrote:
except they didn't lose his identity in this case. He lost it himself. I think in this case it's personal responsibility.

It's like saying the car dealership should have to get you back your car after you gave the keys to a scam artist.


They are in violation of laws regarding identity theft.

Edited, May 16th 2007 8:47pm by Lobivopis
____________________________
Final Fantasy XI 12-14-11 Update wrote:
Adjust the resolution of menus.
The main screen resolution for "FINAL FANTASY XI" is dependent on the "Overlay Graphics Resolution" setting.
If the Overlay Graphics Resolution is set higher than the Menu Resolution, menus will be automatically resized.


I thought of it first:

http://ffxi.allakhazam.com/forum.html?forum=10&mid=130073657654872218#20
#121 May 16 2007 at 4:51 PM Rating: Decent
**
622 posts
I was wondering if the OP enters his POL ID(ex.ABCD1234), because I thought POL Handles took care of entering the POL ID for you, and you just set the password.
#122 May 16 2007 at 4:58 PM Rating: Decent
***
1,991 posts
I got the tell as did my other 5 team mates while we were doing Operation Desert Swarm. GM call bounced back due to high volume and i got a message saying they were looking into it.

I would post a screenshot up but i'm sure you believe me. Also i guess you are all a little jumpy now about clicking URL links specially after this latest dirty trick. It screams of RMT i'm afraid.
#123 May 16 2007 at 5:01 PM Rating: Decent
I have a feeling SE is going to get reamed over this, and hopefully will be forced to make some changes to it's lolcustomer service and lolTOS.
#124 May 16 2007 at 5:21 PM Rating: Decent
**
515 posts
You're all so negative.

._.

#125 May 16 2007 at 5:30 PM Rating: Excellent
***
3,777 posts
I have a few more comments. First off as I stated.

I like S-E for the most part. I think they try legitimately in most cases to resolve customer issues. But this is the one issue I'm extremely unhappy with. S-E has the policy if you do not know the current information you can not get it back, no matter if you have the cd keys, the old credit card, the password of old, know the exact character ON the account, all mules, all job lvls, every piece of armor, all craft lvls, the linkshell it has and can explain in vivid detail even where it was logged out at and every other miniscule insignificant detail TO A TEE of what the account has on it. THAT SHOULD prove its your account. If it's not your account there is no way in hell you can know all that, but if it is yours you damn well better expect it to be within the recesses of your mind....cause its yours. However it doesn't MATTER. All that matters is "you don't know the current password or credit card info". You can prove beyond a shadow of a doubt its your account and still get a big fook you. That I disagree with.


The stealing of accounts is identity theft and stubs description of the car theft is accurate to a large degree. In reality if you get your wallet stolenm becaause you forgot it at the super market and people drain your bank account and take your identity.... yes you ***** up. You should have been more careful, but ya know what. Authorities try to resolve the issue and catch the culprit to the best of their ability.

In thiss case S-E holds all the keys. They own the account, it is their legal intellectual property and they can damn well do whatever the hell they please with it. That includes resetting passwords and recovering lost accounts. It's just that their policy says they won't and so they don't. Thats very poor service and I cannot believe anyone would take that stance.

Again I say if you can prove beyond a shadow of a doubt the account is yours it should be recovered. If I know everything on the account. Name, jobs lvls, craft lvls, linkshell, friends list, mission status, general amount of gil on hand, items in inventory, mules names, where I logged out at, where my home point is, merits I have gotten, all trhe cd keys attatched to the account, my credit card info, my password, and any other relevant info that should damn well be enouh to PROVE its me. NOBODY can guess the login info and password and every minute detail of an account without it being theirs. . It's not humanly possible, and this is where S-E's policy fails. They don't try, and for that I condemn them on the issue of account theft. They CAN fix the issue but they DON'T.

People ***** up. It happens in real life. But S-E has far more power to right the wrongs than real life police do if you get your wallet stolen. And in real life they try a damned lot harder to repair it.


Edited, May 16th 2007 9:34pm by Melphina
____________________________
[ffxisig]56619[/ffxisig]

There are 10 kinds of people in the world. Those who understand binary, and those who don't.
#126 May 16 2007 at 11:07 PM Rating: Decent
**
924 posts
sorry to hear that your account got hacked. ****** idiots so desperate for accounts that there using keyloggers. Hopefully you get your account back, GL.
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 164 All times are in CST
Anonymous Guests (164)