BruThoL wrote:No.
This is illegal.
A good protection is a system of login / password to an external server.
Are you saying that just because you were stupid enough to have no firewall while downloading clients from untrusted sources?
Sir, you were punished for your in-game behaviour anyway. Good luck with creating new characters.
ramones wrote:If there is thread public to use a client and if person just wants to keylog anyone that logs in (its true, your fault you didn't check what u're using) i'd still ban the hell out of moron who is spoiling the game. but then again, good that i'm not with such powers, right.
We don't know if client was prepared only for the purpose of account stealing, it could be fake leak. They could give information about keylogging in thread where someone published it. It still makes ppl dumb to use such client.
What I'm saying is, people that hurt the game should be forever removed.
In my opinion in this story there is no true victims. Both groups show an approach that can be called shameful for those who prefer an honest game. Not only that people from Dis download (Portgas was preyed just on your greed and he was not even wrong with it) and wanted to use a client who is not their own, and who was ill-gotten (even if it was just a trick), but alsow a group of Portgás stealing your accounta was shameful. Personally, I do not understand this style of play, winning at all costs is sick. Also such aspect like spies or just "angry villagers" are gamebraking cause, one guy can just summon all enemies inside village. And even more: I know few cases where NNN and now Dis offered bribes in real money to people for betraying theires villages. Dis had big luck,, but from theire style of playing i can be sure that in such situation they would done the same like Portgas, but maybe more thoughtful.
Well, thanks to my programmer, he's come up with a full analaysis. The client is indeed bugged with a keylogger. The .jar file has a bootstrap. Basically, you log in as always, your password goes to a database. Which is what the russians are using to hack your account. It's a dirty trick indeed. Fortunently, there's a way to reverse the the hack. For those of you who actually downloaded the .jar file, you have to re compile the .jar file. This should remove it.
Nice try AD. You suck so bad for this. Your definently the reason why russians have a bad reputation in this community. Once again, nice job Dis.
This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.
-=The law of inverse desire=- The chances of dropping what you want is the reciprocal of how much you want it.
Patchouli_Knowledge wrote:This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.
Not only that, this should seriously result of banning some people. This is the worst attack on H&H as a whole since the russians crashed the server. If that wasn't bad enough, something has to be done about this definently.
Patchouli_Knowledge wrote:This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.
For example, i change password every time, when i use suspicious clients, so you will make my life harder with password confirmation.
Perhaps it would be better to make confirmation for changing e-mail only, plus allow to get your current password on email?
Patchouli_Knowledge wrote:This revives the issue that there is a need to revise the forum so it sends a confirmation of password change/email change to the e-mail address instead of automatically changing it on the forum (This has been requested many times). Loosing in-game objects and character is one thing but having your forum account compromised can end up opening more possibilities that the illegal user can do with the account with destroying reputation being the least damaging.
For example, i change password every time, when i use suspicious clients, so you will make my life harder with password confirmation.
Perhaps it would be better to make confirmation for changing e-mail only, plus allow to get your current password on email?
A small inconvenience in comparison to having your game and forum account compromised with one mistake. And forum identity does matter a good deal more than one may think.
-=The law of inverse desire=- The chances of dropping what you want is the reciprocal of how much you want it.
Patchouli_Knowledge wrote:A small inconvenience in comparison to having your game and forum account compromised with one mistake. And forum identity does matter a good deal more than one may think.
I mean - password confirmation is absolutely excessive. If you have control on email - even if someone changes your password, you always can get it on email, and then change it one more time. So, you just offer some more difficulties which do not give any additional protection.
Smurfette wrote:I know few cases where NNN and now Dis offered bribes in real money to people for betraying theires villages. Dis had big luck,, but from theire style of playing i can be sure that in such situation they would done the same like Portgas, but maybe more thoughtful.
You have no idea what you're talking about hoestly. You confuse NNN with A.D. Despite of the last one NNN doesn't pay real money for betrayals and use walljumps (we don't concider summoning as bug). Maximum, we might sell or buy characters in-game for real money. Since we're powerful enough we simply don't need any tricks. We could do the same stuff as Portgas&co with client, we were the first people who had this type of clients. However, we didn't; we don't; we won't.
