The Fate of Account Thieves (Portgas&co)

Forum for discussing in game politics, village relations and matters of justice.

Re: The Fate of Account Thieves (Portgas&co)

Postby krukk » Sat Dec 03, 2011 8:40 pm

BruThoL wrote:No.
This is illegal.
A good protection is a system of login / password to an external server.


Are you saying that just because you were stupid enough to have no firewall while downloading clients from untrusted sources?
Sir, you were punished for your in-game behaviour anyway. Good luck with creating new characters.

P.S. I'm not Portgas or his party member.
krukk
 
Posts: 19
Joined: Thu Apr 07, 2011 11:50 pm

Re: The Fate of Account Thieves (Portgas&co)

Postby ramones » Sat Dec 03, 2011 8:45 pm

Koru wrote:
ramones wrote:If there is thread public to use a client and if person just wants to keylog anyone that logs in (its true, your fault you didn't check what u're using) i'd still ban the hell out of moron who is spoiling the game. but then again, good that i'm not with such powers, right.

We don't know if client was prepared only for the purpose of account stealing, it could be fake leak. They could give information about keylogging in thread where someone published it. It still makes ppl dumb to use such client.


What I'm saying is, people that hurt the game should be forever removed.
W8 - Hermitage
W7 - Emerald City
W6 - Gomorrah
W5 - Pandemonium
W4 - Angkor
W3 - Angkor
User avatar
ramones
 
Posts: 3053
Joined: Fri Jul 09, 2010 10:03 pm
Location: I am a man who walks alone'

Re: The Fate of Account Thieves (Portgas&co)

Postby Smurfette » Sat Dec 03, 2011 8:46 pm

In my opinion in this story there is no true victims. Both groups show an approach that can be called shameful for those who prefer an honest game. Not only that people from Dis download (Portgas was preyed just on your greed and he was not even wrong with it) and wanted to use a client who is not their own, and who was ill-gotten (even if it was just a trick), but alsow a group of Portgás stealing your accounta was shameful. Personally, I do not understand this style of play, winning at all costs is sick. Also such aspect like spies or just "angry villagers" are gamebraking cause, one guy can just summon all enemies inside village. And even more: I know few cases where NNN and now Dis offered bribes in real money to people for betraying theires villages. Dis had big luck,, but from theire style of playing i can be sure that in such situation they would done the same like Portgas, but maybe more thoughtful.
Smurfette
 
Posts: 66
Joined: Tue Jul 05, 2011 4:00 pm

Re: The Fate of Account Thieves (Portgas&co)

Postby xXGhostxX » Sat Dec 03, 2011 8:54 pm

Well, thanks to my programmer, he's come up with a full analaysis. The client is indeed bugged with a keylogger. The .jar file has a bootstrap. Basically, you log in as always, your password goes to a database. Which is what the russians are using to hack your account. It's a dirty trick indeed. Fortunently, there's a way to reverse the the hack. For those of you who actually downloaded the .jar file, you have to re compile the .jar file. This should remove it.
Nice try AD. You suck so bad for this. Your definently the reason why russians have a bad reputation in this community. Once again, nice job Dis.
User avatar
xXGhostxX
 
Posts: 481
Joined: Sun Jun 26, 2011 4:09 pm

Re: The Fate of Account Thieves (Portgas&co)

Postby Patchouli_Knowledge » Sat Dec 03, 2011 8:57 pm

This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.
Image
-=The law of inverse desire=- The chances of dropping what you want is the reciprocal of how much you want it.
User avatar
Patchouli_Knowledge
 
Posts: 2248
Joined: Mon Jun 20, 2011 1:57 am

Re: The Fate of Account Thieves (Portgas&co)

Postby xXGhostxX » Sat Dec 03, 2011 8:59 pm

Patchouli_Knowledge wrote:This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.

Not only that, this should seriously result of banning some people. This is the worst attack on H&H as a whole since the russians crashed the server. If that wasn't bad enough, something has to be done about this definently.
User avatar
xXGhostxX
 
Posts: 481
Joined: Sun Jun 26, 2011 4:09 pm

Re: The Fate of Account Thieves (Portgas&co)

Postby cauda_draconis » Sat Dec 03, 2011 9:08 pm

Patchouli_Knowledge wrote:This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.

For example, i change password every time, when i use suspicious clients, so you will make my life harder with password confirmation.
Perhaps it would be better to make confirmation for changing e-mail only, plus allow to get your current password on email?
cauda_draconis
 
Posts: 275
Joined: Tue Mar 02, 2010 1:34 pm

Re: The Fate of Account Thieves (Portgas&co)

Postby Patchouli_Knowledge » Sat Dec 03, 2011 9:12 pm

cauda_draconis wrote:
Patchouli_Knowledge wrote:This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.

For example, i change password every time, when i use suspicious clients, so you will make my life harder with password confirmation.
Perhaps it would be better to make confirmation for changing e-mail only, plus allow to get your current password on email?


A small inconvenience in comparison to having your game and forum account compromised with one mistake. And forum identity does matter a good deal more than one may think.
Image
-=The law of inverse desire=- The chances of dropping what you want is the reciprocal of how much you want it.
User avatar
Patchouli_Knowledge
 
Posts: 2248
Joined: Mon Jun 20, 2011 1:57 am

Re: The Fate of Account Thieves (Portgas&co)

Postby cauda_draconis » Sat Dec 03, 2011 9:19 pm

Patchouli_Knowledge wrote:A small inconvenience in comparison to having your game and forum account compromised with one mistake. And forum identity does matter a good deal more than one may think.

I mean - password confirmation is absolutely excessive. If you have control on email - even if someone changes your password, you always can get it on email, and then change it one more time. So, you just offer some more difficulties which do not give any additional protection.
cauda_draconis
 
Posts: 275
Joined: Tue Mar 02, 2010 1:34 pm

Re: The Fate of Account Thieves (Portgas&co)

Postby LadyGoo » Sat Dec 03, 2011 9:20 pm

@bmjclarck, ;)

Smurfette wrote:I know few cases where NNN and now Dis offered bribes in real money to people for betraying theires villages. Dis had big luck,, but from theire style of playing i can be sure that in such situation they would done the same like Portgas, but maybe more thoughtful.
You have no idea what you're talking about hoestly. You confuse NNN with A.D. Despite of the last one NNN doesn't pay real money for betrayals and use walljumps (we don't concider summoning as bug). Maximum, we might sell or buy characters in-game for real money. Since we're powerful enough we simply don't need any tricks. We could do the same stuff as Portgas&co with client, we were the first people who had this type of clients. However, we didn't; we don't; we won't.

btw, it was confirmed taht we killed Portgas. ^^
Hafen Helpdesk Skype Conference [Eng]: https://join.skype.com/mxo3yVNbrCK9
Справочная Конференция [Ru]: https://join.skype.com/fnAcsc0srDBN

Trade Conference [Eng-Ru]: https://join.skype.com/gNT6Rs92PTtM

W10 Queen of Dis fiancée of Leanne69 (Lolo)
W9 Hive [Ruler]
W8 Dis [Chieftain]
W7 Ofir [Lawspeaker]
W6 Dis [Chieftain] & Disneyland
W5 Vitterstad [Lawspeaker]
W4 A.D. [Fighter]
W3 Garden of Metallurgists [LS]
User avatar
LadyGoo
 
Posts: 2767
Joined: Sat Jul 09, 2011 9:06 am

PreviousNext

Return to In Congress Assembled

Who is online

Users browsing this forum: Claude [Bot] and 0 guests