sabinati wrote:no he didn't. brute force was mentioned in relation to other incidents.
Indeed. Bruteforcing passwords has been attempted a number of times every now and then. It's a different thing altogether. It was mentioned simply because it has been bothering me at least as much.
stickman wrote:Loftar have you ever considered doing what a lot of other games do with logins.
If you login from a different IP then you normally do then it locks your account and sends an email to you that you have to click to unlock it?
I don't think this is normal. There are lots of people playing from dynamic IPs, and such a procedure would be a lot of pain for them.
While it's true that I strongly disdain brute-forcers and other account thieves, it is in almost all cases, in the end, the responsibility of individual account owners to keep their accounts safe. All the actual instances of account theft I've observed have been due to issues which the real owner really only has himself to blame for: ridiculously weak passwords, using keylogging clients, sharing passwords with semi-trusted people, et cetera. I have been helping some of them from time to other, but it should well be noted that when I have done so, it has been because I've been in a good mood that day; I do not consider myself having any form of "duty" to help people in those situations.
It would be another thing, of course, if the server software were so intrinsically weak as to make account theft possible even if the account owner has taken due and reasonable precautions, but thus far, I have not encountered such a situation. (That is not to say, either, that there aren't more precautions that could be taken on the server side to make account theft
harder, and I am considering such from time to time.)
Marouk wrote:In general, all kind of abuse should be punished, that is my opinion. No matter who, using hacking to get something more from game or to cheat the system is kinda stupid, where's the fun? :)
This is true, but as I've mentioned previously in the thread, it has, most of the time, been hard to connect individual cases of brute-forcing or other forms of account theft to any actual player.