FFXIV Links and Starter Info Thread 3.0- Read Before PostingFollow

Recently I've read through a few posts here on Alla in which people have had their accounts hacked or socially engineered out of their hands. I took a good amount of time in a previous game community and wrote two guides to help people prevent their accounts being "hacked". The first of which i will share with you now and is more of a basic understanding of things related to your PC or using one. If enough people find this information useful, then I will post the second one as well. And possibly finish off the Third edition that I've intended on finishing for some time now. I will do my best to edit things out that apply to the old game i play but forgive me if i forget one. The last game i played was real economy based so the NEED for security was very real and people getting hacked/scammed was almost a daily occurrence. Here i Begin...


I am Starting this Thread as to help anyone that wants to do their best at making a hackers life as hard as possible to get your account. Now I will say that where there is a will there is a way, so there is no ultimate protection against a threat and all we can do is take the measures that eliminate as many options as possible. If anyone has other ideas and would like to add to this list please feel free to post and I will add to the main Entry here and give credit where due. That being said Here is your checklist

Use Virus Scanner:
In Todays day and age its suicide to run without some sort of virus protection. Many will debate with which is the best, but its been my finding that the top name brands are usually all about equal. And Keep your protection up to date. New viruses are coming out on a daily basis and old protection will do you no good.
Suggestions:Symantec , McAfee , Free AVG

Use Ad remover program:
This wont in itself protect you against a threat, however as these spyware programs are getting smarter and its not a bad idea to keep up to date on this
Suggestions: AdAware , The Cleaner , Spybot

Use A Firewall:
Hardware or software will do. Alot of Routers these days have built in firewalls that you can configure. If you do not use a router there are plenty of software versions that do their job well. Ensure that your firewall is set to default Deny. Things that you do that hit the firewalls flags can easily be accepted and then you won't have that problem again.
Suggestions Software: BlackICE , Zone Alarm or Symantec
Suggestions Hardware: DLink ,LinkSys

Know What your computers doing:
It is important that you know what software is running on your computer. Often times people neglect to check their running processes and applications to see if there is anything out of the normal. These extra programs could very well be trojan viruses or other malicious software that will prevent you from using your computer to its optimal use or try and steal your sensitive information.
Suggestions: Windows Task Mananger, Whats Running , Process Explorer

Only Download software from the Original site:
Many websites will compile like products on one site for ease of download. However the problem is questioning the legitimacy of such sites. Sometimes these sites are branded and fine for downloading, however this is not always true. Some sites out there will add viruses to the software so that when you download them you are screwed. The only way to be sure you are getting authentic software is to go direct to their site.

Don't open emails with attachments:
Unless you are expecting something from somebody there is no reason to open emails with attachments EVER. If you don't know them at all then don't even open the email with or without attachments, Just delete it. If you do happen to open an email with an attachment and you start finding things are fishy you may want to take measures right away. The measures should be at least a full virus scan on your system

Don't use the same email for forums that you do for your account
Emails are so common and most are free, Set yourself up a few of them. I personally use a handful. a few with my RN for business contacts. Some with my avatar name so that i can share things with friends in game. And then some are just complete junk mail accounts for all those stupid sites you visit that make you enter an email before proceeding with their free trial. This seems to work well for me and others as you don't get bombarded with crap on the address's that you actually care about.

Use a complex password:
Complex means Capital letters, Lowercase Letters, Numbers and Special Characters (such as *$%) Also another thing to note when creating a password, Don't try to create a password that is easy to remember because its your favorite TV/Band/Movie or whatever you may talk about in conversation with someone. This is how social engineers will gain information about you. So try and make it something as far out as possible and something that you would never bring up in conversation (like the name you gave the zit thats been on your forehead since high school... well you get the idea)

Visiting the Web:
The Internet is a wonderfully dangerous tool in the hands of someone who may not fully understand what they are doing. When your on the web and surfing around for information about your favorite game or shopping or anything really. You are in control and must be responsible for your actions. If you are visiting your favorite information resource and out of nowhere there is a download initiating there should be a bell that rings inside your head that something is not right. If you are just reading and looking to download nothing, Yet something is trying? Theres a problem. People are getting smarter with how they attack you. Now read carefully as here is where most people will get caught. Some download pages will pop up and look A LOT like a typical windows (Yes/No) Message, when in fact its just setup to look like this. Now, the part that you have to remember that the person who coded that particular message is in control of what each (Yes/No) Button Does. If their intent is to entrap you into downloading something, then most likely the Yes and No buttons do the same thing (Download the malware on to your PC). The safest thing to do in this situation is to click the 'X' in the top right hand side to kill the question all together. Alternatively you could go into your process list and kill all instances of your browser until your satisfied with it not trying anymore.

Trust people only to a certain degree:
This is your own judgment, Remember you can't see the person to their face so who knows what they are feeding you. They may not be anything you expect in RL. People will spend A LOT of time getting to know you and getting you to trust them before they get the best of you. Why give anyone that satisfaction? There ARE BAD PEOPLE in RL and some just happen to be involved with this Virtual World. Unless you know the person in RL then don't loan anything that you would be upset with losing for good. And like I said this is up to your own judgment. There are a handful of people in this game that i have come to love and trust and there are circumstances where I've loaned out large equipment to people that i have not met (IRL). LUCKILY my trust was well placed and nothing bad happened. However there is NO guarantee that this will always occur.

Don't use 3rd Party Apps:
(This is an Alla addition to my Guide)
Most of us know already that 3rd party apps can be harmful to your account in more ways than one. The first being that its against EULA and SE can just ban you for no reason. Secondly you must question the intent on the person who wrote it. A lot of the people who write these apps have good intention. Before I get flamed for that comment hear me out. What i mean by good intention is they are simply trying to code something for a lazy man to make their life lazier/easier. However you do not know these people in real life (well maybe you do). But not all of them have good intentions in what they are offering you. Their application could be a trojan wrapped up all nice like a solution to your headache. You may have just installed the end of your account. I would think that this many years into the game it would be a no brain'er, but theres one thing I've learned in my help desk days thats been summed up in a perfect quote by Mr. Bullet Tooth Tony (Snatch for those of you who haven't seen it). "Never underestimate the predictability of stupidity". My apologies to people who read that as an insult because you may not know, and thats not your fault. But now that I've told you plainly and you fail to listen.. It is your fault.


I really do hope this helps some of you that maybe didn't know! And like i said if anyone has more points that perhaps I have forgot about or if i happened to post something that you are not in agreement with then by all means let me know and we can create this together. I want this to be a template for people out there as not everyone knows how to properly protect against these kinds of threats. I come from a world of help desk and now do software programming/testing in a secure environment. So a lot of this is just second nature and by reading these hack/scam threads i realize not everyone knows.

SO here it is and i hope you can benefit!

This is the second guide I wrote for a previous game community I was part of. I haven't played this game in a couple years now so some of this information may be out of date, but I'm posting it so that people who don't know better can get a feel for whats out there. All comments and critique are welcome.

I am starting this Thread as a follow up to my first 'Prevent Yourself from Hackers”. This tutorial will attempt to go more in depth with the subjects of Knowing process's are doing what on your machine and what programs are communicating with remote machines as well as some deeper thoughts on previously mentioned items. Again as I start laying out information that you see is incorrect or incomplete, please feel free to chime in with additional comments. I am bound to make a mistake or not go deep enough on a subject that you would like more info on. I’m only human and cannot be perfect, but as my Last thread had EXCELLENT feed back from the many contributors it has become a solid tutorial. My hopes is that the same will happen here, after all, if we work together as a community to help others we can hope to prevent more of these hackings. Please also forgive me if I jump from topic to topic, as I have written this guide over the course of several days in my spare time.

Use A Firewall:
This is a topic that I covered briefly in my last post but I will go a bit deeper here.
Hardware Based:
Most Hardware Firewalls come as default accept mode. This means that it is configured to allow easy install of the Firewall with minimal configuration to get it running. The problem with this is most people stop there. They figure that the firewall is in place so that’s good enough. Well the hard truth of the matter is most firewalls will just allow anyone access, you see this most visibly with Wireless Routers. When you unbox your Wireless Router and plug it in, it is generally configured to accept any traffic that tries’s to authenticate with it. If you really don't care about the safety of your network/data then this is fine. And it is fine for most people, HOWEVER, if you are looking to better secure your network then you should go into the configuration (which I will not be going into detail here as there are too many to cover specifically, for more information on this please refer to the main website of the product you have) and Turn on some validation. Most routers have several options for this depending on your preference. Turning on some sort of security is essential as well as not broadcasting your network. Broadcasting your network allows anyone in wireless range to view that you have a wireless network. Most people know this when they go to find their network and they see 'Bob's Wireless Network - No Encryption' and they can just connect to it. Bob might be their neighbor or someone that lives close. If Bob has shared network drives then anyone that can see his wireless network can get into those folders.

Software Based:
Software based firewalls generally come configured as Default Deny, Which is a good thing. You probably notice when you’re running Zone Alarm or a similar product and a message comes up saying "Entropia Universe is trying to send data via ??? Port. Default Deny is excellent and I’m glad that software based firewalls take this approach. Most of us our capable of saying "Yes I know EU is trying to get out so Ignore this message and EU is a safe program". HOWEVER some people are too liberal when it comes to hitting the ignore button and will allow software that they do not know about unrestricted access to your ports. Please Be Aware of what you are allowing to connect. If you are Unsure of what the program is, Look it up first.

Executable Type Files: Let me first start this off by talking briefly about Executable files. Most people know that files named .EXE and .COM are files that can be Run or executed. It is code that someone has written and then put into a Compiler which basically translates the coding language into Machine Language so that your processor can understand it and perform the tasks required. Now, these are not the only files that can be run on the computer, in fact the most dangerous ones these days are the Executable scripts. What a script is simply the code that someone has written that has not been sent to a compiler. So it in itself is not harmful. The script requires the Scripting runtimes in order to operate. Scripts do a number of various tasks and make it easier to perform operations on your computer. The way these are used maliciously is by taking advantage of the fact that almost every computer has the scripting runtimes loaded to view webpage’s etc. However if someone knows the in's and outs of the scripting language they can do things that can cause your life to be bad. One of the MOST common malicious scripts is one where someone sends an email to your hotmail address with a script attached. Once you open this email it executes the script thinking that it might be something to do with the layout or looks of the email. At this point the script would make it look like hotmail has logged you out (when in fact it’s just the script loading a look-alike login page) and you go and log back in. Now you have just entered your username and email address which is instantly emailed to the attacker. At this point either the script or the attacker will change your password and now you can no longer get into your email. This makes you think about how password resets work for things like EU...

Watching your Process list:
Here is another topic that I will go deeper into. For this example I personally use 'What’s Running'. Basically we are trying to learn what our computer is doing right? In doing this we must understand what processes are good in order to ignore them. Personally, it was hard for me to comprehend all the process’s that windows is using at any given time to do what it needs to do to allow your computer to function. When I was first learning this what I would do is Format my computer using an authentic Windows Stamped disc. After All updates were done, I would open up my process list and write down everything that’s running to give me a ballpark feel of what process's are windows owned. With programs like 'What’s Running' you can click on it and it will do a search on that process and tell you information on it. This method really only works to a certain extent. A couple years back now, there was a very nasty Virus (most of you IT guys will remember) Blaster worm. This worm actually used a good process called 'SVCHost' to perform its tasks of ruining your machine. It’s rare but not out of the question that these hacks come into play. Using windows against itself is the most common type of attack for PC based users, exploiting holes in code that was written by Microsoft. Unfortunately for these types of exploits we rely on our Virus protection. The downfall here is it’s hard to detect a virus that was written today or written for a specific purpose. Most viruses are spread through junk emails or things of this nature. However the ones that cause us the most Grief are the ones written with the specific purpose to get to YOU. Virus Protection company’s have problems here because they never receive the malicious code. The person doing the wrong, wrote the code and gave it to you and you alone, so there is no mass spreading of it, therefore it never reaches the Virus Protection Company’s visibility. Any good Virus protection goes above and beyond and watches for things that are happening out of the ordinary and Firewalls have taken some of this weight off the shoulders. Watching what's modifying key windows files and registry settings and bringing these things to your attention. But as I stated in my previous section, most people disregard and just hit accept on these when the program is telling you something important. We must strive to know what’s going on. Programs like 'What’s Running' will tell you the location of the process's executable file so that you can inspect it further.

Watching your network Traffic:
This is going to be a hard topic to cover as there is so much to know (a lot of stuff that I still have to learn as well) I personally use TCPVIew (by sysinternals who appears to have been taken over by Microsoft since my last visit to their page) What TCPView will do is show you a list of all open connections to and from your computer. Now as I said there is ALOT of communication that is happening while you are connected to the internet. However all of them should be communicating through a process that shows up in your process list. You will see a lot of communication coming from processes like SVCHost and InetInfo which are ok. However this is where you are looking if you suspect a program is sending/receiving data. Let’s say you got that new 3rd party app and you want to see if it’s transmitting data. Load up TCPView first. THEN load up your 3rd party app to see if it shows up in this list. IF IT DOES, then your 3rd party app IS transmitting data to somewhere. From here it will show you the IP address of where your computer is talking with. If you find something strange like this you probably want to First and Foremost kill that process and connection (which can be done inside TCPView by right clicking and Closing the Connection) Next thing I would do is do a Whois Search on the IP address to see what pops up. It might be a website someone owns or more likely a personal IP address which will lead to a dead end. At this point I would contact the maker of the software to find out just what data is being communicated. If they deny it, take immediate steps to eradicate the software from your machine as they are lying to you, which is one flag to let you know probable malicious intent.

Know what’s out there:
This is where a fine line is drawn in the sand between security experts and hackers. Some of the best security teams out there were former hackers. AtStake is a company I can think of right off the top of my head that were the developers of some really advanced Trojan's that are allegedly used as baselines to write the Carnivore/Magic Lantern Projects. One day they decided to profit off of their knowledge and turned to the security world. In order to know how to protect yourself, you MUST know WHAT you’re protecting yourself against. There are so many types of attacks to your system, from DoS (Denial of Service) Attacks, to Trojans and Root kits, Key loggers, Spy ware to name a few. All of these affect you in different ways. I highly suggest reading up on some of these subjects so that you know how they do affect you. I will cover a few of the top ones in a very basic overview.

Key logger: These are programs out there that simply record anything that happens on your keyboard or mouse. Most of the versions available have extensive logging as well to show what program was opened and then what was typed in that program. So you can visibly see things like
[MouseClick] 30,109
[ProgramOpen] POL.exe
[Keyboard] ABCD1234 <TabKey> ILoveFFXI
(And no this isn't my real account info, You think i'm that dumb to show you it? I AM writing a security piece after all)
Now a key logger isn't a bad thing in and of itself, because creating a log on your machine is still yours right? Well the problem comes when that log is accessed. A lot of key loggers have either 1 of 2 methods of getting this data to the person who sent it to you. One method involves random emails sent from your machine to the attacker. The key logger gets a bunch of info and fills a log. Once that log is filled it transmits that log via email to the attackers email address. The problem with detecting this method is that there is no outbound connection until that log is filled at which point an email is generated using (typically) a random mail server. If you can catch this connection while it is happening via a packet viewer you might be able to see where the email is being sent to, but would be very hard unless you knew it was there and filled it up on your own by clicking lots of random things. The second method of obtaining this log will bring me into my next topic

Trojans/Root kits: There are subtle differences to these but for the intent of this article I will omit the differences and talk about them as 1 and the same. Trojans are programs that mimic the functionality of programs like Net meeting/PC Anywhere and things of this nature. Basically what it does is turn your computer into a remote terminal that one can access at their own will and they will have the same amount of access as the person sitting at the keyboard. Including but not limited to (Reading anything on your network, Viewing connections, Seeing YOUR desktop (just the same as you do), Looking through your webcam, Listening through your microphone etc..) Trojans are probably the worst type of attack out there in my opinion. They can quite literally ruin your life. You keep your resume on your computer? Now the attacker knows your Phone, Address, Previous Employers, and School History. I don’t need to get into what kind of identity fraud this can lead to.

DoS Attacks: DoS (Denial of Service) Attacks can happen in a number of different ways and basically means that some program/script is causing one of the services on your machine to perform below standards. The services that are most commonly affected are your Internet traffic, Processing power or Hard Drive seek times. DoS Attacks happen alot in conjunction with the previous 2 mentioned types of attacks and can happen at various stages. It can be the method that a Trojan is installed on your machine. The possibilities for this attack are plentiful so I am not going to go through the various ways it can happen but I will give you one example that is commonly used so you have an idea as to what I’m talking about. When an attacker wants to get a Trojan/Root kit on your machine, Most of the time virus protection blocks it. So what the attacker will do is write a program that will cause your machine to get into a continuous loop. Now depending on what the attacker is trying to do they can strategically pick a Memory bank that is being used by say, your Virus protection. They create data and send it to that particular memory bank at speeds that will cause your computer to appear to freeze up until programs start to crash. Now if they did it specifically to one purpose (crashing your virus protection say) the program that is causing the DoS then sees that its tasks have been successful. Now it can load the Trojan onto your machine without worry that the virus protection will block it. At this point it can do very bad things, because your computer is still in a hung state and the Trojan is loaded. Now it stops jamming the memory bank and allows the attacker to get in. This is just one of the MANY strategies that are used.

This is where I will close my thoughts for now, and like I said, if anyone wants to know more about a paticular area let me know and perhaps I will address it in more detail with a followup or modified post. Also if you see anything that needs to be corrected please let me know asap so that I can change it. I've read it over a few times now but its late and i'm tired so its almost gaurenteed that i've screwed something up. Anyways I hope you got some info out of this that could be benificial to you.

Here are my tips for internet security, in no special order.

1. Surf carefully. Be careful of following links to random sites, and if you DO follow links, take a look at the address as your mouse hovers over it first. Avoid porn sites, "warez" sites (with Bittorrent these sites are obsolete) or sites that offer some too-good-to-be-true deal. Common sense here.

2. Download carefully. Unless you know for certain that you're on a trusted website, don't download random, pretty looking programs. Be ESPECIALLY careful of downloading .EXE, .BAT or .COM files. Actually I'm not even sure .com is used anymore for files? Also, porn is very often just rife with all kinds of nasty virus. Porn surf at your own risk.

3. Antivirus. Get some. Surfing the web without antivirus is like going on a hooker spree without a condom. You're gonna get infected. I use Norton Antivirus... but it's a resource hog. Do full system scans at least twice a week. Avast is supposed to be a good free download.

4. Internet Security Software. This is on the same page as Antivirus. Software firewalls help a ton. I use Zone Alarm. It's not for a novice PC user, as you need to know which programs specifically can access the web and/or your personal network. Also look for programs like Ad-aware or Spybot. Download them only from reputable sources as there are trojan versions floating around. Run them periodically. Also, another good freebie is Microsoft Security Essentials.

5. Use Mozilla Firefox. Once you've installed this, look for the addons called Ad-Block Plus and NoScript. This alone offers major defense against all the internet badness. Again, along sort of the same lines as Zone Alarm, you'll need to know how to give out permissions to websites using NoScript. Rule of thumb: If it's a trustworthy, "major" site, it should be fine. Everything else, don't allow.

6. Keep Windows Updated. Turn on Automatic Updates. Nuff said.

7. Password Security. Passwords should always be at least 8 digits long. For the best results, use both lower and upper case letters, numbers and even a symbol in your password. Use different passwords for different services. I know this is a pain and the majority of people probably don't do it, but it's a good idea.
Relating to MMOs... NO CUSTOMER SERVICE REP/GM WILL EVER ASK FOR YOUR USERNAME/PASSWORD ONLINE OR THROUGH EMAIL. Never, ever EVER give out your login information!

8. Account Sharing. Again, this is more relating to MMOs. You can follow all of the above suggestions religiously, your computer will never have so much as a sniffle of a virus.... but can you say the same thing about your buddy who's logging in to your account? Can you really be sure about that?

9. Use the SE Security Token. Once again, MMO related here. Yeah, it's one extra step and a pain to link to your account. But it's absolutely worth it.

10. Wireless Security. No open wireless networks. Period.


Follow these steps, and you'll hardly have to worry about all the nastiness floating around online.

Also, If there is any information you would like to see here (topic related), please feel free to suggest so.

It's because your CPU is the bottleneck. It doesn't matter what uber video card you put in because your CPU is holding you back.

What do the Chocobo symbols mean when selecting a World?

Quote:
It's because your CPU is the bottleneck. It doesn't matter what uber video card you put in because your CPU is holding you back.


I see. Thanks for the quick response. It would appear I have made a rather pointless investment.

Hi,

sorry if this question is in the wrong thread...

Can anyone please clear this for me:

I have setup a Sqare-Enix acount in my region country wich is Latin America / Ecuador, i am reading that you have to have an account in the region you are adquiring the game, as far as i know there are only two versions of the game aviable, the US edition and the EU edition, if i buy the us edition with its key would i be able to play it with my account set in the latin american region????