Forum Settings
       
Reply To Thread

Hacks still happening . . .Follow

#52 Sep 03 2009 at 7:54 AM Rating: Good
Quote:
Wow Catwho... you actually named the domain after youself?.. just wow...


Why not? It's my website, and has been for over 10 years, long before I started playing FFXI. It was actually a big trend in the early days of the dot com era to have your own personal domain, named after your online handle.
#53 Sep 03 2009 at 8:35 AM Rating: Good
***
1,615 posts
On the plus side, all the paranoia over accounts hackings made me go over my bookmarks list (and delete a ton of non-working links) as well as update No-Script (hadn't in at least a month) and download AdBlock.

I've always said a little bit of paranoia is a good thing! Cept it isn't going to do much for those that've already been hacked :(

Still no concrete news on what, besides session hijacks, could be the cause?
#54 Sep 03 2009 at 9:58 AM Rating: Good
They got me.

On hold with SE right no...

NO ONE IS SAFE
#55 Sep 03 2009 at 10:12 AM Rating: Good
Oh no...

So sorry, hope they are able to get you back.
#56 Sep 03 2009 at 10:17 AM Rating: Good
Quote:
One of the theories is that there is some type of information leak between FFXIAH and the LS Community site as FFXIAH pulls information from that site.


I have a ffxiah account.
#57 Sep 03 2009 at 10:38 AM Rating: Excellent
***
1,261 posts
Last Friday I was in a LS party when one of the members DC'd. He was sitting on a couch with two other ls members at the time (all three were in the party). He plays on a PS2/PS3 exclusively and the only time he ever used a computer was for LS community when it first started up.

He got the "You are being logged in from another location" message and was unable to reconnect. His character, however, reappeared and warped. We initiated a gm call and were able to get his account frozen. Luckily he was with friends at the time.

Short of a cracking of ps2/ps3, it's either ls community or the registration server.
#58 Sep 03 2009 at 10:39 AM Rating: Decent
20 minutes on hold. Not too bad.

The error I got was 'The square enix account password or one time password is incorrect.' Mind you, I got this error while I was logged in already.

After I got the error, I was afraid to log back in, in case I'd be compromised. So I called SE first thing. The representative explained it was probably a residual login error from the issues today, but I have a feeling someone got a hold of my old POL account number and tried to log in without using the one time password, which is why it kicked me.

After verifying I was clean (at least by the virus detection methods I have on my PC) I logged back in . . . no password change, and I was in the same place I logged out, safe.

I can't deal with this anxiety.
#59 Sep 03 2009 at 11:45 AM Rating: Good
***
1,615 posts
Good to know that you're still safe cat.
#60 Sep 03 2009 at 11:46 AM Rating: Good
**
384 posts
Catwho, this better not be an elaborate attempt at a "Happy Friday" thread. If it is, then shame on you. If, in-fact, you were hacked, I feel bad for you. Good luck.

Edit: Never mind, I can't read English apparently. Glad to see that you are safe.

Edited, Sep 3rd 2009 2:47pm by drunktexan

Edited, Sep 3rd 2009 2:51pm by drunktexan

Edited, Sep 3rd 2009 2:52pm by drunktexan
#61 Sep 03 2009 at 2:11 PM Rating: Good
***
3,777 posts
Quote:

The error I got was 'The square enix account password or one time password is incorrect.' Mind you, I got this error while I was logged in already.


I left myself logged into the main ffxi top screen before going to work this morning, and when I got back I decided to take a nap. I was still on the top screen both before and after the nap so I assumed I could just choose a character and log in. Oddly when I did I got a network error, code 3001 saying that there was an error in the communications between my PC and s-e, and to log out and try again. It was accompanied by an error, code 5xxx (I forget the exact code, but it was a in the 5,000's) saying that my square enix ID and password were no longer valid.

I'm not going to worry my *** off over this though, and I refuse to let the RMT interfere with my playtime. I'm now taking the stance that if the RMT are capable of hacking my character by going through s-e's servers then there was nothing more that I could have done, and down the road there are going to be many more problems. I'm not planning on playing FF 14 (or any other MMO after I quit FF 11) because I don't expect the RMT to ever back down from this trend, so I doubt any MMO will be safe anymore. I've had a great time this far, but I also have a whole LOT of console games I've neglected the past decade because of the time sink of mmo's and with a full time job now I'll be able to keep entertained no matter what happens.

Long story short, I logged off and waited a few moments and tried to log back in. My password and token were working just fine, and my pc is clean. In addition, the time stamp of the last successful login attempt on my account was exactly what I expected it to be (IE: Early this morning before work, and I knew exactly when). I logged back in and everything was exactly as I had left it (and trust me, if I was hacked I would KNOW it. I have many shineys).

It seems that was nothing more than a network error. I don't know if it was a time out error, but that's my assumption. Since I wasn't actually logged into a character when it happened it was probably a different one than I would have seen if I had R0 from within the game. Either way, for now I'm just fine and looking for a pickup assault group as we speak.

Edited, Sep 3rd 2009 6:36pm by Melphina
____________________________
[ffxisig]56619[/ffxisig]

There are 10 kinds of people in the world. Those who understand binary, and those who don't.
#62 Sep 03 2009 at 2:29 PM Rating: Default
Interesting thread.

On a side note, are the PS2/3 and XBOX360 equally safe, or is one safer than the other? I don t have the game installed on my PC anymore, and just have it on both game systems. Am I at risk more this way? Should I uninstall one or the other?
#63 Sep 03 2009 at 2:30 PM Rating: Excellent
Jack of All Trades
******
29,633 posts
Quote:
I'm not going to worry my *** off over this though, and I refuse to let the RMT interfere with my playtime. I'm now taking the stance that if the RMT are capable of hacking my character by going through s-e's servers then there was nothing nothing that I could have done, and down the road there are going to be much more problems. I'm not planning on playing FF 14 (or any other MMO after I quit FF 11) because I don't expect the RMT to ever back down from this trend, so I doubt any MMO will be safe anymore. I've had a great time this far, but I also have a whole LOT of console games I've neglected the past decade because of the time sink of mmo's and with a full time job now I'll be able to keep entertained no matter what happens.


Pretty much my stance on things, only replace work (my job was a joke) with school >_>
#64 Sep 03 2009 at 2:58 PM Rating: Excellent
***
3,777 posts
Quote:
Pretty much my stance on things, only replace work (my job was a joke) with school >_>


I did the college routine in the field of programming for a year, but that was when I was offered the full time position so I took it. In retrospect, I'm glad I did. I ended up with approximately $25,000 in student loans after a little over a year's worth of classes and a solid way to pay it off slowly, whereas had I continued with college I would have ended up with approximately five times that in loans and then the task of finding a position of employment, which would have meant a move (probably out of state). I'm comfortable living where I do and have been here all my life so it's a choice that I'm happy with, despite it being somewhat strenuous on physical stamina.

On the note of RPG's, I always loved my consoles as a girl and I have a good 40 or 50 I have stored away which I've played an hour or less of that I've wanted to play for a long time. There's a really neat-o site out there called rpgamer that's an archive of all things RPG, console and mmo, old and new. It's got reviews of any RPG to ever hit any console, from the 8 bit era of the nes and genesis, to the new generation of the wiii and ps3 and 360. It has titles unreleased in america, and even stuff that never made it to completion (Like earthbound 64, a game I really wanted to play at the time. Sucks it got canceled.)

I'll always be able to find a game I want to play, and with e-bay you can find even the oldest games among them. So after I put down FFXI I'm looking forward to that. The story lines of some games I've played have been incredible (like the Lunar series originating on the PSX) and quirky games (like earthbound) and games with just hella fun battle systems (like disgaea). With all this (plus the fact that new mmos come out regularly) I'll never be starved for want of a new adventure, and consoles can take 40-100 hours to play through anyway. In addition to all that, as my screen name suggests I'm into anime! I can think of a good 8-10 anime series I wanna watch just off the top of my head, giving yet another venue of passtime beyond this game.

It's been much easier to enjoy my playtime in ffxi since I let go of my anxiety of getting hacked. I've set up the strongest security I can, adding not just noscript and adblock to firefox, but flashblock as well (preventing any and all flashes of any form from running without my ok). But no matter what I do there is never a perfect security, and S-E's customer service in the matter has downright sucked. If I end up getting hacked and am unable to recover my account I'll simply move on and remember all the memories of the good times I spent with friends. I'm also a consumer, and I'll remember this disservice next time I want to purchase a product from any company as well. No mmo lasts forever anyway, and in the end the greatest disservice of the hackings will be not to any one individual, but to the mmo genre as a whole. If the RMT have decided that from this day forward they will hack every mmo (as it seems they have) it's gonna be a severe deterrent to new MMO's taking off. As it stands, my interest in new mmo adventures is lost because I don't feel I'll ever be safe due to the nature of the cyber world and the fact that a perfect security is simply impossible.

I know that's a bit log winded, but that's my thoughts on the matter. The day I let my entertainment stress me out and eat away at my mind is the day I need to step back and rethink my stance on it. My gaming is my escape from the hassles of the world, I can get enough of that by logging out and going to work (or grocery shopping... or any other life endeavor for that matter).

Edited, Sep 3rd 2009 7:09pm by Melphina
____________________________
[ffxisig]56619[/ffxisig]

There are 10 kinds of people in the world. Those who understand binary, and those who don't.
#65 Sep 03 2009 at 4:32 PM Rating: Decent
Avatar
**
842 posts
Bit off topic to start but I'm a member mod on RPGamer, if you ever want to poke your nose on the board. (Just make sure you follow the rules there and I won't have to get my morgenstien out for a Hexa Strike on your behind.)

That said, I got a similar error this afternoon when I logged to a mule. Backed all the way out and tried again and got on. I hope it was nothing more than a network glitch..
____________________________
Elizara, Mithran WHM of Quetzalcoatl
LS's: SpecialFriends, ShikigamiWeapon, Noble's, WeSayHurray, JingZen, Betrayed (Dynamis and Aby)

Still a MithraPride kitty at heart, tho that shell is gone..Also still CTY at heart forevah!

Midgard: NEVER FORGET.

Alla profile: http://ffxi.allakhazam.com/profile.xml?11530

Thinking about swapping from console to PC? Check here to do it right!
#66 Sep 04 2009 at 12:19 AM Rating: Good
Hazoo wrote:
Interesting thread.

On a side note, are the PS2/3 and XBOX360 equally safe, or is one safer than the other? I don t have the game installed on my PC anymore, and just have it on both game systems. Am I at risk more this way? Should I uninstall one or the other?


I'm gonna go ahead and answer this, we'll compare PS2 and Xbox 360.

PS2 is a second generation machine from Sony's famous Playstation console. It has limited intelligence, it was not built for online play though it has that capability. The machine exists simply to play games similar to the original play station and has no current development going into it. The machine is dumb as a box of rocks and is ideal if you don't care about graphics. For memory any hdd you can use in your pc will work for ps2 all you need is the Network adapter which is sold separately.

Xbox 360 like the ps2 is only a second generation game console however it's graphics capabilities are far superior. Unlike PS2 Xbox360 runs using a web browser and almost requires online play for every game. This system is currently still in development and updates are made periodically to the operating system. The system is intelligent and offers services such as movie download and rental, game downloads, and if you use it social networking services.

For Security purposes, PS2 is a sealed system, nothing goes in, nothing comes out unless you put a disc in or activate a service from secured sources like Play online. You are essentially the only security risk for the PS2 console.

For Xbox 360, you are again a huge security risk however with Microsofts increasing options for the system, they are essentially constantly making the system more vulnerable, although too complex for hackers to bother with, getting a virus on your xbox 360 is very much possible.

Vista systems can recognize and link with Xbox 360 systems if you let them, I have seen that myself. Xbox 360 can share resources across a network if you let it, I have seen that too. If you can see your xbox 360 in your network, a hacker can see it too.

#67 Sep 04 2009 at 12:43 AM Rating: Excellent
Quote:
Any of these put you in the risk group of being hacked, other than that its doesnt happen magically i believe, unless your password and account are 12345.


12345? Thats the stupidest combination ive ever heard in my my life ! its like a combination some idiot would have on his luggage!!!!!
#68 Sep 04 2009 at 12:45 AM Rating: Excellent
Silent But Deadly
*****
19,999 posts
KugataKyia wrote:
Quote:
Any of these put you in the risk group of being hacked, other than that its doesnt happen magically i believe, unless your password and account are 12345.


12345? Thats the stupidest combination ive ever heard in my my life ! its like a combination some idiot would have on his luggage!!!!!
/em goes off to change his luggage combination.
____________________________
SUPER BANNED FOR FAILING TO POST 20K IN A TIMELY MANNER
#69 Sep 04 2009 at 1:21 AM Rating: Excellent
***
2,405 posts
This rise in account thefts can't be coincidental. I quickly flicked over to the EVE Online forums, and there are reports of exactly the same thing happening there.
#70 Sep 04 2009 at 4:01 AM Rating: Default
***
1,428 posts
Soulrunner the Eccentric wrote:
Hazoo wrote:
Interesting thread.

On a side note, are the PS2/3 and XBOX360 equally safe, or is one safer than the other? I don t have the game installed on my PC anymore, and just have it on both game systems. Am I at risk more this way? Should I uninstall one or the other?


I'm gonna go ahead and answer this, we'll compare PS2 and Xbox 360.

PS2 is a second generation machine from Sony's famous Playstation console. It has limited intelligence, it was not built for online play though it has that capability. The machine exists simply to play games similar to the original play station and has no current development going into it. The machine is dumb as a box of rocks and is ideal if you don't care about graphics. For memory any hdd you can use in your pc will work for ps2 all you need is the Network adapter which is sold separately.

Xbox 360 like the ps2 is only a second generation game console however it's graphics capabilities are far superior. Unlike PS2 Xbox360 runs using a web browser and almost requires online play for every game. This system is currently still in development and updates are made periodically to the operating system. The system is intelligent and offers services such as movie download and rental, game downloads, and if you use it social networking services.

For Security purposes, PS2 is a sealed system, nothing goes in, nothing comes out unless you put a disc in or activate a service from secured sources like Play online. You are essentially the only security risk for the PS2 console.

For Xbox 360, you are again a huge security risk however with Microsofts increasing options for the system, they are essentially constantly making the system more vulnerable, although too complex for hackers to bother with, getting a virus on your xbox 360 is very much possible.

Vista systems can recognize and link with Xbox 360 systems if you let them, I have seen that myself. Xbox 360 can share resources across a network if you let it, I have seen that too. If you can see your xbox 360 in your network, a hacker can see it too.



OMG. Machines are not intelligent, humans give them the illusion of intelligence with programming, but machines do not think. The Ps2 was built with an online vision. At first there was use of the pcmcia to connect hdd which was then changed to the HDD bay. The PlayStation network everyone is familiar with on ps3 was first invisioned with the ps2 and in Japan it is there for the ps2. Due to a botched HDD launch in the USA, the software needed for the PlayStation network for the ps2 was not ported to our language, there was hope there would be eventual implementation but then the slim ps2 came out and killed the HDD completely. As for any HDD working, that is also incorrect. There are several HDD that are not official that can be made to work with games that do not go online, see the HDLoader, but in order for the the system to play a game online it must pass DNAS and to do that you need the official HDD. As for the ps2 being as dumb as a box of rocks you are correct, but again its because machines are not intelligent. I can see my ps2 on my network as it has a mac address and was assigned an ip address, but there is no client officially installed to share files over a network, so all you can do is see the machine, nothing else. Your ps2 can communicate with other pc on the same network with the correct software. I had a program that would allow me to stream music and movies from a file server over the network and then use the ps2 as a player of that media.

http://en.wikipedia.org/wiki/PlayStation_2_Expansion_Bay

http://en.wikipedia.org/wiki/HDD_Utility_Disc

http://en.wikipedia.org/wiki/PlayStation_Broadband_Navigator



Edited, Sep 4th 2009 8:07am by shibaaa

edit: link to the old hdd boards on playstation site: http://boardsus.playstation.com/playstation/board?board.id=hdd

Edited, Sep 4th 2009 8:22am by shibaaa
#71 Sep 04 2009 at 4:21 AM Rating: Good
***
1,615 posts
Archfiend MDenham wrote:
/em goes off to change his luggage combination.


Hail Skroob!
#72 Sep 04 2009 at 5:29 AM Rating: Good
**
501 posts
For all you PS2 users out there: There is a program called uLaunchELF, it's a pain to get to run the first time on a PS2 but once you do you can install some other program that many people use for soft modding purposes. uLanuchELF is used mainly to launch .ELF files (executable launch file), something that PS2 uses sometimes, even in games. One of the thing you can do with said file is that you can browse ALL your information on your HDD and memory cards. You could even set it up to browse your PS2 files through your PC if you wish.

The point of this is that anyone with FFXI that is willing to use uLaunchELF may want to look through the HDD for any suspicious files, particularly any .ELF files. I don't have FFXI myself anymore (my PS2 won't read my HDD officially for whatever reason, even though I can still use it) so I can't do it myself. If you don't find anything then hey, maybe you could figure out how to do some .dat mods with it.
#73 Sep 04 2009 at 7:01 AM Rating: Excellent
Avatar
****
4,153 posts
Maeriya wrote:
Archfiend MDenham wrote:
/em goes off to change his luggage combination.


Hail Skroob!

THIS IS AN UNLISTED WALL!
____________________________
FFXI-Garuda 2003-2009; Lakshmi 2011-8/20/13 (retired)
FFXIV: ARR - Ghost Bear, Balmung server
#74 Sep 04 2009 at 7:08 AM Rating: Decent
Scholar
***
3,141 posts
The ImmortalAlchemist of Doom wrote:

One of the theories is that there is some type of information leak between FFXIAH and the LS Community site as FFXIAH pulls information from that site. A lot of people who have been hit have profiles on FFXIAH, however, there are those that don't as well so it is difficult to pinpoint where this is occurring.


How exactly is FFXIAH able to tap into SE's private servers and retrieve all that data anyway?
____________________________
.
#75 Sep 05 2009 at 7:14 AM Rating: Excellent
In order to register for the LS community, you needed to input your POL ID and password. You also need to do that to update the information. Presumeably, that information is still stored someplace on the LS Community website in a table deep in the database, but after you've logged in once, your accounts are forever linked.

FFXIAH uses the LS Community to passively retrieve information that is publicly available on your profile, and present it OFF the LS Community website, in a much easier to read format. The LS Community will continue to update your information based on live game data even if you haven't logged in in years.

FFXIAH's linking process does not use your POL ID information. You purchase a specific type of crystal for a specific amount (like a lightning crystal for 99 gil, its randomly generated) and once it matches the name you requested to the purchase, it assumes you're that person and hooks your account to the FFXIAH name. In order to tie it into the LS Community, you input the URL of your character information that is publicly available.

FFXIAH never requests your POL Login information, and does NOT log you into the LS Community to retrieve your information. As such, it is highly unlikely that there is a "link" between the two that allowed the AH to pull your POL information off the LS Community website, since it can't access it passively.

No, our reasoning for the frequency of people with FFXIAH accounts is that the RMT that did this specifically targed people with lots of money. The people that were in Yamato that got hacked got those really expensive pants from Saramiya and sold them for 20 million gil. This information was public on the AH. The RMT went after the people who were likely to have a lot of gil floating around, or a large number of really expensive items to sell.
#76 Sep 05 2009 at 9:40 AM Rating: Default
@Catwho

but I suspect that is why they are getting hacked. They put their equips on display like look at what I got. Who's been hacked with standard equips? Low level accounts?
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 665 All times are in CST
Anonymous Guests (665)