[0.82] Personal Identification Codes

[Fiel]

There are a few things worth mentioning here.

EULA:
First of all, I don't know if Nexon is going back on its word with changing "Nexon Cash" to "NX". In the latest patch, they changed references to "NX" back to "Nexon Cash" in the EULA. Sooooo yeah, don't know what's up with that.


Personal Identification Code (PIC):
A few error messages for the new PIC system did appear in the data:


http://www.happychinchilla.info/Southperry/01082/Notice.text.95.png

http://www.happychinchilla.info/Southperry/01082/Notice.text.94.png

http://www.happychinchilla.info/Southperry/01082/Notice.text.93.png

http://www.happychinchilla.info/Southperry/01082/Notice.text.92.png


"You cannot delete a character without a PIC. Please create your PIC."

They changed needing to know birthdays to the PIC. I'm not sure if I like this. If a person has compromised your account, they will have to know your PIC to do it. If they know your PIC, they can also delete your characters. This wasn't quite so with the old system. A hacker could know your PIN but have no idea of the birthday. Making the PIC work for both of these situations decreases the overall security of the account. While this security step decreases the chance of hackers finding out the PIC, if they do manage to find it out, they have everything.

Or maybe I'm wrong. Perhaps you need to know the birthday and the PIC, in which case this security move would make a bit more sense. But what's the point in having to know the PIC and the birthday? If the hacker already knows the PIC to enter, he also knows the PIC for character deletion. So requiring the PIC for both is rather ridiculous, and yet there's the message above stating that one needs to know the PIC to delete a character. So does this mean no birthdays?

But this further goes to show that Nexon does not believe that their database has been compromised. If it had ever been compromised in the past, I can assure you they would take extra precautions to increase the security. And yet it's a bit obvious they are not concerned now. Why should they be? They weren't hacked, right? What do you think?

Taking this a logical step further, let's look at this error message a bit closer - "You cannot delete a character without a PIC. Please create your PIC." Using the ontological argument, Nexon would not create something unless it needed to be created. Therefore, there must be a place in the game which this is used or referenced - further evidenced by the fact that it's coming in this patch. Because of this argument, there must be some set of variables that exist for this error message to occur, which means that you might, in one case or another, be able to get to the character deletion screen without needing a PIC set. Thus, players are allowed to skip PIC creation and stick with the PIN. What's the f'ing point of having a new security system if it isn't being forced on players? If Nexon has already acknowledged that a new security system is needed right this second that they create a patch solely for its own sake and don't force the players to use it, then there's no point of the patch and no reason to have the new security system.

[Jon]

I wonder how we set our PICs for the first time. What if someone knows the id/pass of someone else's account and they get in before the owner. Can they set the PIC? Or am I totally wrong?

[sinisterboy9]

I wonder how we set our PICs for the first time. What if someone knows the id/pass of someone else's account and they get in before the owner. Can they set the PIC? Or am I totally wrong?

Yeah you're pretty much correct

[Sarah]

PIC is a really stupid acronym. That's what I think.

If they really removed the need for birthdays then they're really screwing themselves and us.

[Fiel]

I wonder how we set our PICs for the first time. What if someone knows the id/pass of someone else's account and they get in before the owner. Can they set the PIC? Or am I totally wrong?

First you login and enter your PIN. Once you enter your PIN correctly, you will be asked to create a PIC. So a hacker can change the PIC if they already know your account info.

[Hazzy]

Bday is more secure, but there are a lot of people with a lot of accounts registered under fake information, anyone who tries to dispute this is in denial. So PIC would make more sense in that manner, since it's easier to remember than a random Bday entered.

Wait, wut? We get our crappy Pin system AND PICs? .__.

[Fiel]

Good lord. Is this really that confusing?

Once you set your PIC, there's no going back to the PIN.

[Chameleonic]

Pin is removed once you make a Pic

PICs can be 6 to 16 characters long.-Whats the point of letting you make a PIC 6 characters long if it can be cracked in a matter of seconds? Why not make it so you have to use a 16 character PIC?

[Fiel]

Cracked in a manner of seconds? I think not.

The PIC allows you to create a code which contains lowercase letters, uppercase letters, and numbers. That means any one part of the code could contain one of (26 + 26 + 10) 62 characters. That's over 56 billion possible different combinations with just six letters. I'd call that pretty good.

[JoeTang]

Pin is removed once you make a Pic

PICs can be 6 to 16 characters long.-Whats the point of letting you make a PIC 6 characters long if it can be cracked in a matter of seconds? Why not make it so you have to use a 16 character PIC?

Why limit it to 16? Why not make it 128?

[Bribery]

Are PICs entered via soft keyboard like PINs?

[Jon]

Pin is removed once you make a Pic

PICs can be 6 to 16 characters long.-Whats the point of letting you make a PIC 6 characters long if it can be cracked in a matter of seconds? Why not make it so you have to use a 16 character PIC?

Because 16 character PICs aren't practical for everyone.

[Smooth Criminal]

I'm going to take a page from Greg, and have to leave only this comment on the content found in this extraction: I am going to shi't all over this patch. Seriously, not much worth commenting here. Kinda boring.

As for the PIC system, I'm actually worried if Nexon here has actually degenerated a step in security by using PICs versus the old birthday system. It's far easier for a hacker to get this information; and it makes the possibilities of what a hacker can do all the more frightening, especially with the whole hacking issue going on right now.

[Chameleonic]

Cracked in a manner of seconds? I think not.

The PIC allows you to create a code which contains lowercase letters, uppercase letters, and numbers. That means any one part of the code could contain one of (26 + 26 + 10) 62 characters. That's over 56 billion possible different combinations with just six letters. I'd call that pretty good.

I thought someone said in the "recently hacked" thread that even 8 char PW didnt take that long to crack...



Why limit it to 16? Why not make it 128?

Why not indeed, the more the better.




Because 16 character PICs aren't practical for everyone.

How is making your account safer not practical?!

I cant see why anyone would make a PIC with less than maximum characters...

[Hazzy]

How is making your account safer not practical?!

I cant see why would anyone would make a PIC with less than maximum characters...

Sheer laziness.
I'm debating whether or not to even set a PIC, if this works like it did in kMS.

[Stereo]

Bday is more secure, but there are a lot of people with a lot of accounts registered under fake information, anyone who tries to dispute this is in denial.

Why should I lose account security because of other peoples' mistakes? I know my birthday, I don't want the PIC to allow both full access to my account and letting my characters be deleted.

[Bomber]

I'm lost my bday a while ago, and I'm happy in way that I did, since there is no way for a hacker to recover it...
Now...

[Coogi]

Bday is more secure, but there are a lot of people with a lot of accounts registered under fake information, anyone who tries to dispute this is in denial. So PIC would make more sense in that manner, since it's easier to remember than a random Bday entered.

Wait, wut? We get our crappy Pin system AND PICs? .__.

Yeah, I learned the hard way I stopped using fake info I use pure real info now to make sure I never forget, lol.

[Sn1perJohnE]

Ive got myself a nice long PIC already planned out for my accounts. Gonna be a good mix of caps and numbers too.

[IllegallySane]

I am unhappy with how this will go. No birthday anymore to delete characters? What the hell is this crud? :f7:

[Delicae]

It's almost as if Nexon is purposefully drawing away players with such poor security measures.
They're taking 5 steps back everytime, and the more updates there are ignoring the hackings, the more I really just don't want to play anymore.

[Edit] Lol wow I'm tired. Lazy post ftl?

[street]

You guys are going crazy over your precious b-day, their is a b-day cracker a friend forgot her b-day and seeing that nexon couldn't help she looked around and found one. Your b-day is not that secure as many crying over it. Everyone claiming the unknown "what if the hacker gets on my account" if they get on your accounts its your own dam fault, stop crying over losing a few numbers and gaining a system were you can extend on securing your account.

Also for the players that choose to not get a pic the blame is on them. The same way you cant force someone to do something they don't want too.

[Super_cyp]

I've told a ton of people my b'day.. o_O but I never really cared. I'm disliking the load from there website crap. PIC's well I liked the PIN because it was on a soft keyboard, guess I'll just have to find my own Virtual Keyboard to input my PIC.. and I really don't feel like creating a new PIC for my main acc's ugh and the rest of my acc's well yay... time to think up a PIC... :f6:

[singularity]

Bday is more secure, but there are a lot of people with a lot of accounts registered under fake information, anyone who tries to dispute this is in denial. So PIC would make more sense in that manner, since it's easier to remember than a random Bday entered.

Wait, wut? We get our crappy Pin system AND PICs? .__.
lol, no... 365 * 100 = 36,500
(In reality, the # of combinations is much lower because I chose 100 years to give a reasonable upper limit.)
Someone mentioned a b-day cracker a few posts above. Also, a lot of people have revealed their birthday through social networking websites. And many states publish birth records online when people become age 13+; they're searchable by first/last name, county of birth, etc. So birthdays were never really secure.

Meanwhile, for PICs:
62^6 = 56,800,235,584
62^16 = 47,672,401,706,823,533,450,263,330,816

I'm going to be really disappointed if we are all forced to log into the website to start the game though. (They haven't mentioned a workaround/ability to keep logging in the way we always have.) And websites have security vulns. all the time.

[ZottenKerel]

Yeah, I learned the hard way I stopped using fake info I use pure real info now to make sure I never forget, lol.

Nice, now anyone can look you up in google or facebook/forums, what ever, and find out stuff about your info. You may not think about it, but when you say yay it's my birthday online, people with bad intentions can know part of your info. Is it that hard to use fake info and just write it down?

[Phoenix]

Nice, now anyone can look you up in google or facebook/forums, what ever, and find out stuff about your info. You may not think about it, but when you say yay it's my birthday online, people with bad intentions can know part of your info. Is it that hard to use fake info and just write it down?

This goes against what they encouraged me to do when I signed up...

And my account is quite old. I'm sorry I lack that kind of foresight, I assumed account security would be a bit more extensive that last name/bday.

[GameMX]

I'm lost my bday a while ago, and I'm happy in way that I did, since there is no way for a hacker to recover it...
Now...

Actually, this is wrong.

For the hacking epidemic, some of my friends had lost their bdays on the account (fake BDays inputted), I used a birthday cracker, and found it. But on top of that, I was able to find people's last name and emails just by looping around the Nexon website logged into their account.

When Nexon deletes your personal information from their tickets, it's quite stupid in my opinion, anyone who has half a brain can go around a pull a few things, and they have their email, last name, and birthday... you can do this with just your pass/pin.

---

Anyway, I see Nexon will not be ditching the PINs as well, you will need the following now it seems.

PINs
PICs
And maybe Birthdays, not sure yet!

[Combattente]

I wonder if there'll be a way to reset PICs just like PINs from the website.

[BeanTheMage]

If this PIC works how I think it will upon login, then in my opinion, it's probably the best admission we'll ever get from Nexon that there was SOME sort of information leak regarding MS accounts. Making users set up brand new login information (which cannot be retrieved using a player's old login information) would render anything a hacker obtained from before this patch... useless.

For that to be right though, the following would have to be correct:
- The hacking was caused by an information leak (hacking a database, etc)
- They have fixed whatever caused it (doesn't matter if we have 20 separate passwords/pins/pics to enter... If someone can continually grab all the necessary information from a database, this won't stop the hacking)

It'll be interesting to see the numbers of new hacking reports in the coming weeks.

[DrRusty]

Nexon's pretty ignorant.... it's pretty obvious that their information has been hacked. I know people who have been hacked (including myself) who haven't shared their information. My shadower got hacked without me telling anyone the info and having a crazy password (something like 0mGWtF!!$# was the pass). I ended up letting people on it later since I didn't really care.

[Akebo]

So basically they're doing the same thing KMS did with the KSSN except it's a code that you make?

[-Greg]

As far as I'm concerned this new PIC system won't help or hurt anything. If hackers really have found their way into Nexon's database, it doesn't really matter what kind of new security system is implemented.

I don't really like the idea of removing birthdays, though. Hopefully we'll have to enter both our PIC and our birthday.

[Kawasari Mimoto]

6-16 characters isn't bad. But I dislike the fact that symbols cannot be used. Uppercase, lowercase, and numbers can only do so much. But by adding 'symbols', you can further enhance one's security. There exists so many symbols with "ALT CODES", and by using any of those symbols, the chances of hackers cracking it are harder.

[singularity]

6-16 characters isn't bad. But I dislike the fact that symbols cannot be used. Uppercase, lowercase, and numbers can only do so much. But by adding 'symbols', you can further enhance one's security. There exists so many symbols with "ALT CODES", and by using any of those symbols, the chances of hackers cracking it are harder.I was thinking about mentioning non-alphanumeric ASCII characters, but if Nexon doesn't properly validate input PICs, then there'd be potential for injection vulns. So then... you think Nexon could do the coding necessary (knowing their history of difficulty converting time zones, past security flaws, etc.)? With that said, I guess it'd be hard for a hacker to write an exploit in 16 char. or less.

[Nightclaw]

16 chars? no way am i remembering 16 random characters....

sticky note on the monitor time!

[Kawasari Mimoto]

16 chars? no way am i remembering 16 random characters....

sticky note on the monitor time!

Doesn't have to be random. It just has to be something that makes sense to you.

Mine's probably gonna be ... some YuGiOh card, or a reference to an anime, translated in to 1337 as much as possible, but with some uppercase+lowercase words, and tons of symbols. Ex:

"87u33y3sWD!~@"

[maiiev]

if they get rid of the birthdays, and a PIC isn't softkey you type it in manually with your keyboard, I'm going to be pretty disgruntled.

[TugboatWilly]

if they get rid of the birthdays, and a PIC isn't softkey you type it in manually with your keyboard, I'm going to be pretty disgruntled.hopefully someone can test it after the game is back up. i'd test it for myself but i don't have any characters to delete. :f4:

[maiiev]

i mean if you have a keylogger installed and someone is observing what you type, and you log in with a user name and password, and then type in your PIC... they have all the information they need to pretty much do everything to your account they could possibly want. PIC better be soft key and birthdays better still be needed in tandem with PICs to delete character. =|

[TugboatWilly]

i guess we'll see once the game is back up. if it is indeed soft key, it'll be kind of annoying and most people will probably just use an easy 6 character one. i'm hoping it's one you type yourself but like i said, we'll see. if you're careful, it shouldn't be a problem.

[Fiel]

i mean if you have a keylogger installed and someone is observing what you type, and you log in with a user name and password, and then type in your PIC... they have all the information they need to pretty much do everything to your account they could possibly want. PIC better be soft key and birthdays better still be needed in tandem with PICs to delete character. =|

No, there is a softkeyboard. So you can type it in with your keyboard or click on it with your mouse. Using both methods is best for security.

[Worthyness]

Isn't there a type of keylogger where it can take a picture everytime you're mouse clicks?

[Corn]

The PIC is a soft keyboard....texting style.

What a pain to write 16 characters. Plus the keys get scrambled sometimes.

[street]

Isn't there a type of keylogger where it can take a picture everytime you're mouse clicks?

if someone has that kind of keylogger on their comp they are going to fishy sites. Keyloggers need to stop being talked about:f7: if you have one your screwed point black

[Corn]

Looks like there's no way to change your PIC, either. Also, you have to enter your PIN on the first time you log in.

[Kawasari Mimoto]

3 password layering system:

1) Original password to enter account
2) PIN
3) PIC (2nd password, technically)

This helps, but the PIC thing sorta annoys me, because it works like the PIN, and I cannot type.

[Corn]

You don't need PIN the second time you log on. Already tested it out.

[XTOTHEL]

Nexon should sell those keys paypal used for extra security. Something physical.

[RIPGobies]

Is there a way to reset PIC's? My friend asked me to setup a store for her so I thought I setup a "temporary" PIC for her and now I think it's permanent. >_< MAN, THIS SUCKS!

[XTOTHEL]

Is there a way to reset PIC's? My friend asked me to setup a store for her so I thought I setup a "temporary" PIC for her and now I think it's permanent. >_< MAN, THIS SUCKS!
They'll probably come up with a way to do so...but at the moment no.

[Worthyness]

that means if hackers get through your PIC, your account is screwed unless you constantly change your PW right?

[RIPGobies]

Wondering would the old pin reset from the website work to reset PIC's? Has anyone tested it or has it been removed?

[Sarah]

Ugh I thought we had the choice to type it out? If I could type it out I would make it the full 16 letters but it takes like 8 minutes to punch it in with that ridiculous soft keyboard.

[ZakumSlaYers]

Nexon's reaction to this is exactly the same as Asiasoft when MSEA first experience the database hacking incident in 2008.

Also, PIC == MSEA second password system :P

[Bribery]

So did they remove the birthday requirement to delete characters? I'm at work so I can't check.

[Kabanaw]

Ugh I thought we had the choice to type it out? If I could type it out I would make it the full 16 letters but it takes like 8 minutes to punch it in with that ridiculous soft keyboard.

My same reaction. I'm through with this game until they do something about the unnecessarily difficult to use soft keys. Even if they just make it so you can type it out on your computer. I don't care if it lowers my protection from keyloggers, I never go on sketchy sites and have computer security. Besides, the PIN protected you from keyloggers anyways, so how is this any better?

[ZakumSlaYers]

So did they remove the birthday requirement to delete characters? I'm at work so I can't check.

Based on MSEA, if you have a PIC [Second password] set you'll need to input both birthdate [13 Digit Asiasoft passport for MSEA] and PIC.

[Corn]

Doesn't take that long after a while, since the buttons never change positions.

[zOrpheus]

Bday requirement removed, only PIC is used to delete characters...

[Kabanaw]

Doesn't take that long after a while, since the buttons never change positions.

Yes they do. If you use more than just lower case letters, when you switch back to another panel they've switched. So by making my password more secure by using all three, I've made it phenomenally more difficult for myself.

[Corn]

Yes they do. If you use more than just lower case letters, when you switch back to another panel they've switched. So by making my password more secure by using all three, I've made it phenomenally more difficult for myself.

Never mind, they never change positions if you don't exit from the game completely.

[XTOTHEL]

It doesn't take long to locate 16 characters. Why do people always find something to complain about.

[Sarah]

It doesn't take long to locate 16 characters. Why do people always find something to complain about.

1. Because I was expecting to be able to type it and
2. Because I am not fast enough to softclick my way through a long password before the game times out and crashes.

[XTOTHEL]

2. Because I am not fast enough to softclick my way through a long password before the game times out and crashes.

Only sympathetic if you're on a touch pad.

[Lozmaster]

Only sympathetic if you're on a touch pad.

Which I currently am, and didn't think through setting a 16 alphanumeric w/capitals code beforehand. ffff

[Sarah]

Only sympathetic if you're on a touch pad.

Cool. Doesn't change my right to complain about it though, since it does effect my security. I have to choose between a secure password or something I can push through in order to not get disconnected by their faulty and unnecessary time-out system.

[RIPGobies]

Man this is the stupidest patch that's ever been made by Nexon. And there has been some really DUMB ones but this one is over the top stupid.

1. No birth date requirement to set up PIC's?
2. PIC's are not resettable and at the moment are permanent?
3. No birth date requirement to delete characters?

Oh I am sure hackers are going to have a FIELD DAY today. They can just take over your account for the week if you haven't setup PIC before they get you and even delete your character when they're done with it. I am blown away by this. This is just unbelievable.

[Tikey]

Cool. Doesn't change my right to complain about it though, since it does effect my security. I have to choose between a secure password or something I can push through in order to not get disconnected by their faulty and unnecessary time-out system.

They still have that?

[XTOTHEL]

They still have that?

Didn't feel like it when I first tried making a PIC, took me at least 5mins to figure out how to type letters and getting the two to match.

[TugboatWilly]

Cool. Doesn't change my right to complain about it though, since it does effect my security. I have to choose between a secure password or something I can push through in order to not get disconnected by their faulty and unnecessary time-out system.can't even copy/paste it either. :f4:

[Spideyjvc]

Ugh I thought we had the choice to type it out? If I could type it out I would make it the full 16 letters but it takes like 8 minutes to punch it in with that ridiculous soft keyboard.

I know, it's annoying as hell. I have all 16 characters used up, but it takes so long to punch it in with the stupid soft keyboard. This will make switching to my mules for NLC potions and stuff a pain in the ass.

[Kabanaw]

The system is arbitrarily dificult. They could have easily set up an enitre keyboard on screen that's easy to use. I would be fine with this if it were the case.

[dpeterlin]

Bleh~
Well I suppose at worst a 6 character pass is better than a 4 number pin
Haven't been on the system yet but I'm probably going to go with something short because I do value my time over my security. Touchpads were just not made for soft keyboards.

[Darkning]

So besides all the chatter about PICs....

Did anyone notice you don't have to login through the website? Wasn't that the primary purpose of this patch?

[XTOTHEL]

So besides all the chatter about PICs....

Did anyone notice you don't have to login through the website? Wasn't that the primary purpose of this patch?
I thought of that too, apparently not. That might be coming later.

[Potora]

Is there a way to reset PIC's? My friend asked me to setup a store for her so I thought I setup a "temporary" PIC for her and now I think it's permanent. >_< MAN, THIS SUCKS!

Yeah you can reset them. Go to the Maple website and log in. Then click "info" on that same tab where you logged in and where it used to say "Reset Pin" (i think) it now says "Reset PIC".

[RIPGobies]

Yeah you can reset them. Go to the Maple website and log in. Then click "info" on that same tab where you logged in and where it used to say "Reset Pin" (i think) it now says "Reset PIC".

Thanks! I'll let her know right away.

[Corn]

Make sure she knows the email she signed up on.

[stachowiak]

i hate this already it is very much more annoying than the pin

[Ryukiroku]

I'm already feeling more secure with this change. Sure it's a bit annoying but I'd rather have a small annoyance rather than the complete agravation of being hacked.

[Worthyness]

Bday requirement removed, only PIC is used to delete characters...

Eww. lame.

[Solarboy]

Well, There are ways of a little prevention with hacking, make your pic, so god darn long and make it so that it makes no sense to anyone else than you, also a very Extreme solution can be to move to a less populated world, as you can see ppl from yellonde have less chances of being hacked than the ones in scania (Im not saying this will prevent you from geting hacked, but it may probably make the rate lower)

OT: this patch is just too Lame

[Kabanaw]

I'm already feeling more secure with this change. Sure it's a bit annoying but I'd rather have a small annoyance rather than the complete agravation of being hacked.

Hey, you can have both! As long as the hacking issue is on Nexon's side, unless you use the strategy of locking your account with special characters you're not safe.

People support this because they think that their accounts weren't secure before. The problem isn't on the people's end, it's on nexon's. If nexon secured their database so the hacking epidemic is over, then your account is pretty much as safe as with a pin and password before.

[Solarboy]

By the way, did anyone else notice that wegot some mob and map data? I mean, Fiel didnt put up anything new, but Can someone clarify me what this is/could be?

If it is the setup for KS ulu city or neo city/tokio

then awesome

[Ryukiroku]

Hey, you can have both! As long as the hacking issue is on Nexon's side, unless you use the strategy of locking your account with special characters you're not safe.

People support this because they think that their accounts weren't secure before. The problem isn't on the people's end, it's on nexon's. If nexon secured their database so the hacking epidemic is over, then your account is pretty much as safe as with a pin and password before.


Of course, I already agree with you on that. I'm not lowering my guard until I know for sure the problem is completely stopped. My only references are forums such as this site and to a much lower degree Basil. If trends start to look up then I can start saving on my power bill yet again xD

[Jon]

By the way, did anyone else notice that wegot some mob and map data? I mean, Fiel didnt put up anything new, but Can someone clarify me what this is/could be?

If it is the setup for KS ulu city or neo city/tokio

then awesome

We got absolutely NO data in this patch, aside from the PIC-related UI images.

[buddypine]

Sorry didn't read the whole thread..

Your birthday is just an 8 digit code really, so the PIC with up to 16 chars is superior to birthday.
But in reality, who is going to do a 16 char password???It takes so long to type it in using a softkeypad...if it was typed on the normal keyboard then perhaps...I think most ppl are going to just do 6 chars.

[Bishopsangel]

this thing would be better if they left ur old pin and left the bday. that way it would be almost impossible to hack.

[Bribery]

Sorry didn't read the whole thread..

Your birthday is just an 8 digit code really, so the PIC with up to 16 chars is superior to birthday.
But in reality, who is going to do a 16 char password???It takes so long to type it in using a softkeypad...if it was typed on the normal keyboard then perhaps...I think most ppl are going to just do 6 chars.

I did 16 chars. I'd rather not take chances with my account security. :f3:

I really wish they kept in the birthday...and even the pin. That would have made accounts nearly impossible to hack. PICs are nice since they're practically impossible to crack, but if a hacker somehow gets a hold of it, they can completely wipe out your account.

[LadyGaga]

Honestly, they should've left the pins and birthday req. in as well. Cause it really only takes 10 seconds max to type in a pin and maybe 20 seconds max to type in a birthday code. And plus, how would you ever forget your own birthday (unless if you used a fake one)? I know some people will disagree with this because it's "too much" to remember and type.

[Kabanaw]

Have any of you been hacked before? And those of you who were hacked, did you tell anybody your password/ find a keylogger on your computer? This recent string of hackings was due to a breach on nexon's side. If they store the PICs somewhere else, bravo. Still, at least make it an OPTION to enter your PIC using a keyboard.

[Ryukiroku]

Fine tuning. The system's still new to us so that means there's room for it to be tweaked. Let's not get hyped up over nothing now. There's always a chance of change.

[Corn]

Hey, did anyone notice Nexon removed the Guest login?

[Spideyjvc]

Hey, did anyone notice Nexon removed the Guest login?

I never saw the point in it anyway.

[TøbiasBlack]

...now if only i could get the pin...
damn.

EDIT BY FIEL: No buying hacks, and no selling them. kthxbai

[Stereo]

So uh... PIC of iiiiiii anyone? There's a fairly good reason when I was suggesting security improvements none of my suggestions were "omg make the PIN longer and harder to type". Security by making me unable to log on certainly works but it's not very profitable.

[Kubi]

Might be annoying, but more security would be better if they kept the birthday too. Just tested the PIC on a newly created dummy character to see if you delete a character using only the PIC, and you can...

So basically, only a PIC is needed to wreak havoc and delete characters on an account. Be careful who you give your account info to, INCLUDING run hosters for Zakum,HT, CWKPQ, etc runs... Wish they kept the birthday to delete characters.

[Phoenix]

Question, any map changes in the data o.o?

[Jon]

Question, any map changes in the data o.o?

Nope.

[Sn1perJohnE]

Question, any map changes in the data o.o?


Nope.

I think I know why he asks; the patcher is taking a little longer at the map.wz as well as the mob.wz. Im rather surprised at the size of this patch for all that it contained. Makes me wonder if they added some stuff but were able to hide them from Fiel.

[Kevo]

So I heard that hackers only need the username to hack somebody now, and everything else can be bypassed? .... dunno how true that is but if that's the case I think I'll just quit....

[Jon]

I think I know why he asks; the patcher is taking a little longer at the map.wz as well as the mob.wz. Im rather surprised at the size of this patch for all that it contained. Makes me wonder if they added some stuff but were able to hide them from Fiel.

The reason it took longer at those parts is because it has to re-create every .wz file JUST to change the version number to v82.

[Worthyness]

they need the birthday requirement. I'm cool with the pin removed, but Birthday requirement? Now there's nothing standing in the way of your characters being screwed if your PIC is discovered. Wasn't that the purpose of the Birthday pin in the first place? User, pw, pin, birthday code. Now they have user, pw, PIC. they removed a layer of security o_o

[street]

So I heard that hackers only need the username to hack somebody now, and everything else can be bypassed? .... dunno how true that is but if that's the case I think I'll just quit....

If this was the case we will still see people getting hacked to this point and at a faster rate.

Why don't post like this get deleted? When someone posted how he thinks people are getting hacked it got deleted before anyone can see it.

Regarding b-days being removed it was only for deleting accounts. What else did your b-day serve as? If they are able to crack your pic your b-day is nothing, everyone needs to stop thinking as if hackers are going to really waste their time to put your pic in just to delete your char.

[Sn1perJohnE]

If this was the case we will still see people getting hacked to this point and at a faster rate.

Why don't post like this get deleted? When someone posted how he thinks people are getting hacked it got deleted before anyone can see it.

Regarding b-days being removed it was only for deleting accounts. What else did your b-day serve as? If they are able to crack your pic your b-day is nothing, everyone needs to stop thinking as if hackers are going to really waste their time to put your pic in just to delete your char.

Well, its also required for gifting NX to others, which is bypassed by buying something in mts (they shoulda had it have the b-day required for transactions that was so much nx and above).

[CarrionCrow]

The b-day is still needed for gifting, and most likely name change/server transfer.

[HellenzSin]

my PIC is apparently 17 characters long , i wrote the last char twice, and i get in by typing it twice.

[singularity]

my PIC is apparently 17 characters long , i wrote the last char twice, and i get in by typing it twice.Did you un-highlight the last character with the right arrow OR switch to (un)capitalized and reswitch back? Otherwise, it will overwrite the first one. For example, if you have "FF" somewhere in your PIC (e.g., ________FF______), then if you input the first F but leave it's asterisk highlighted, the second F will overwrite that first F. So in that example, your PIC would actually be ________F______. A similar thing happens if you wanted "FE" or "FD" instead. Leaving that asterisk highlighted makes you input just a E or D instead of the two letters.

It is more obvious if the first letter of the letter combination you're using isn't a C, F, I, L, etc. For example, if you wanted to put in "DF", then you'd clearly see that asterisk that was your D, turn into an E.

[Nature]

Is anyone not using the website to start maple?:f6: I'm for one am starting it the same way like always.

[Chameleonic]

Is anyone not using the website to start maple?:f6: I'm for one am starting it the same way like always.

I think that will come next patch, they will have to update the website as well. Expect big changes to the website for the next patch.

[Phoenix]

I think I know why he asks; the patcher is taking a little longer at the map.wz as well as the mob.wz. Im rather surprised at the size of this patch for all that it contained. Makes me wonder if they added some stuff but were able to hide them from Fiel.

That and I happened to back up my Maple folder before I prepatched, and noticed that the Map.wz had shrunk a bit. Also a few rumours floating around about the placement of the rope in HT cave 1, which I was too lazy to go see lol.

[street]

my PIC is apparently 17 characters long , i wrote the last char twice, and i get in by typing it twice.

Type? or you mean click hellen

[Fiel]

That and I happened to back up my Maple folder before I prepatched, and noticed that the Map.wz had shrunk a bit. Also a few rumours floating around about the placement of the rope in HT cave 1, which I was too lazy to go see lol.

If any byte of information was changed, I'd see it. If they remove an image I know about it. If they add an image I know about it. If they change images I know about it. If they change data I know about it. No data was changed for Map.wz. The only reason they have to patch Map.wz even though no data is added is to change the offsets due to the offset encryption.

[Phoenix]

If any byte of information was changed, I'd see it. If they remove an image I know about it. If they add an image I know about it. If they change images I know about it. If they change data I know about it. No data was changed for Map.wz. The only reason they have to patch Map.wz even though no data is added is to change the offsets due to the offset encryption.

All seeing, all knowing!

Guess that puts that rumour to rest.

[y0y0y0y0shi0]

If this was the case we will still see people getting hacked to this point and at a faster rate.

Why don't post like this get deleted? When someone posted how he thinks people are getting hacked it got deleted before anyone can see it.

Regarding b-days being removed it was only for deleting accounts. What else did your b-day serve as? If they are able to crack your pic your b-day is nothing, everyone needs to stop thinking as if hackers are going to really waste their time to put your pic in just to delete your char.
...Because I've heard from reliable sources that this system is flawed as well. Details are unknown, however.

[Corn]

That and I happened to back up my Maple folder before I prepatched, and noticed that the Map.wz had shrunk a bit. Also a few rumours floating around about the placement of the rope in HT cave 1, which I was too lazy to go see lol.

That might be because Nexon removed the Guest login button.

[Nature]

...Because I've heard from reliable sources that this system is flawed as well. Details are unknown, however.
Everything is flawed nothing is perfect. Its just a matter of time before something is exploited for the benefits of others. Could takes years. Could take days. Could take secs. Who knows.

[Stereo]

Holy pomegranate this thing is tough to use on my laptop's touchpad. Half the time when I click a letter it accidentally double clicks. And having to use t9 style input is just sick. I'd estimate I have to click about 60 times to input a 10 character password, as compared to 4 times for a 4 number PIN. So I guess that's like 2 minutes to log in, every time? Say bye to drop trading >_>

[Sn1perJohnE]

Also, i think this is a deterrent for people who share accounts. It basically makes it so that if you do share an account, the person you share it with will have the ability to delete the characters, which isnt exactly doable before without the birthday code.

[IllegallySane]

Also, i think this is a deterrent for people who share accounts. It basically makes it so that if you do share an account, the person you share it with will have the ability to delete the characters, which isnt exactly doable before without the birthday code.

Usually if you share accounts it means there's a mutual agreement to not do any serious things like delete characters unless all people sharing the account are aware of it. Otherwise, you obviously met the wrong person to trust your account to if he/she deletes characters without your consent.

[Chameleonic]

Holy pomegranate this thing is tough to use on my laptop's touchpad. Half the time when I click a letter it accidentally double clicks. And having to use t9 style input is just sick. I'd estimate I have to click about 60 times to input a 10 character password, as compared to 4 times for a 4 number PIN. So I guess that's like 2 minutes to log in, every time? Say bye to drop trading >_>

lol I lost a 10% shoe jump because my PIC is to long. I saw one drop(the only 10% scroll from the monster is a 10% shoe jump) and I just happened to lag out at the same time, by the time I got back in the map was clean. :f3:

[Nalek]

Just deleted a char tht was an ign holder. All i needed was the PIC no birthday :X