+- Southperry.net (https://www.southperry.net)
+-- Forum: Maplestory (https://www.southperry.net/forumdisplay.php?fid=15)
+--- Forum: Maplestory Discussion (https://www.southperry.net/forumdisplay.php?fid=31)
+--- Thread: People being hacked since the last Server Check. (/showthread.php?tid=46631)
People being hacked since the last Server Check. - Dark Zero - 2011-09-04
street Wrote:I have a question does the nexon site show this for anyone else? Or I'm the only one?
If i'm the only one guess i'm next?
Google says if you see this it means:
The site uses SSL, but Google Chrome has detected either high-risk insecure content on the page or problems with the sites certificate. Dont enter sensitive information on this page. Invalid certificate or other serious https issues could indicate that someone is attempting to tamper with your connection to the site.
![[Image: tsN15.png]](http://i.imgur.com/tsN15.png)
Tranfer ur items man... is the only way to save your time.
People being hacked since the last Server Check. - Viaje - 2011-09-04
Bomber Wrote:I just refuse to believe hacks until I see it for my eyes.That's an absolutely absurd way to go about life.
People's accounts have been compromised, and you are basically saying that you believe all of us to be liars.
SwordStaker Wrote:I'm in the same boat as you. If these hackings are true one question for everyone. Have you played DFO recently. NEXON has stated if you play or have played DFO there was a breach there.A breach would only be the result of hacking.
If you believe in the breach, you must believe these hackings are "true".
My brother played DFO, but only for the crossover event they had months ago.
He played for less than an hour (not that that's relevant other to demonstrated that he was not a regular player).
mtam017 Wrote:I think Nexon's login server got attacked or the database is somehow leaked out after the login server maintenance (thinking of Edison Chan's photos case).This is the conclusion I came to as well.
...
The timing on login server downtime is pretty much match on the hack reported time, all hack reports are happened after the login server downtime.
I also found it disturbing that, as the servers came back up, some people were actually about to login to their characters without entering a PIC.
That tells me that the PIC can, in fact, be bypassed.
mtam017 Wrote:Then I should not be the first wave of victims, I am not known for good damage or rich. And I am not that high level as well... Only level 178.I don't think there's a true pattern to the hack as some people have reported their mule accounts getting hacked while their mains are so-far untouched.
One this is for sure:
The hackers don't to seem to have any real knowledge of the game economics.
They also are intent on making money with as few transactions as possible.
People being hacked since the last Server Check. - Joe.2 - 2011-09-04
MissingLink Wrote:You were D/C'ed then hacked? Or do you mean a mushie shop?
Yeah I meant a mushie shop, which was stocked with androids and hearts.
People being hacked since the last Server Check. - Locked - 2011-09-05
3 people got hacked today.
Kind of getting worried lol.
People being hacked since the last Server Check. - CrazyNomad - 2011-09-05
nvm... i will ask someone to check my account.
People being hacked since the last Server Check. - The Great One - 2011-09-05
Dark Zero Wrote:Tranfer ur items man... is the only way to save your time.
I think it says that with everyone(at least it dose for me and I haven't been hacked). Besides if this was how they were getting peoples info almost everyone who has ever logged in using the game site would be hacked already or at least the number of people hacked would be much much higher.
People being hacked since the last Server Check. - ResistGreen - 2011-09-05
Yay, Got hacked today ^^
In all seriousness, I lost 5b in cash, and about 6b in equips.
People being hacked since the last Server Check. - street - 2011-09-05
ResistGreen Wrote:Yay, Got hacked today ^^
In all seriousness, I lost 5b in cash, and about 6b in equips.
Last time you changed your password?
People being hacked since the last Server Check. - ResistGreen - 2011-09-05
street Wrote:Last time you changed your password?
I change it every two weeks.
People being hacked since the last Server Check. - Viaje - 2011-09-05
ResistGreen Wrote:I change it every two weeks.Holy. F'ucking. S'hit.
We're all boned.
Well, that's mostly an exaggeration.
Sorta...
If changing one's password does nothing to further secure one's account, then there must be either an ongoing breach or a bypass.
If there's an ongoing breach or a bypass, then literally no one is safe.
I'm trusting that the checklist applies to you:
- Associated email address untouched.
- Password intact.
- PIC intact.
Was your account connected to MSA or did you play DFO?
People being hacked since the last Server Check. - ResistGreen - 2011-09-05
Viaje Wrote:Holy. F'ucking. S'hit.
We're all boned.
Well, that's mostly an exaggeration.
Sorta...
If changing one's password does nothing to further secure one's account, then there must be either an ongoing breach or a bypass.
If there's an ongoing breach or a bypass, then literally no one is safe.
I'm trusting that the checklist applies to you:
- Associated email address untouched.
- Password intact.
- PIC intact.
Was your account connected to MSA or did you play DFO?
Everything was untouched other than my items, and I never played MSA or DFO before.
To add on to it, My untradables were still there, Czak, My level 200 medal, My shoulder, Von leon weapons, Except for my MoN, which seems to be gone.
People being hacked since the last Server Check. - Viaje - 2011-09-05
ResistGreen Wrote:Everything was untouched other than my items, and I never played MSA or DFO before.So, in other words, completely consistent with other reports so far.
To add on to it, My untradables were still there, Czak, My level 200 medal, My shoulder, Von leon weapons, Except for my MoN, which seems to be gone.
It's fairly clear that neither MSA nor DFO are the cause of the epidemic.
I'm at a loss as to what the common thread might be if it's something other than a database leak.
FM usage?
MTS usage?
I'm fairly confident that the spree of guildmates/alliances getting hacking is simply because guilds/alliances basically give the hackers a list of who they should probably hack next...
People being hacked since the last Server Check. - ResistGreen - 2011-09-05
Viaje Wrote:So, in other words, completely consistent with other reports so far.
It's fairly clear that neither MSA nor DFO are the cause of the epidemic.
I'm at a loss as to what the common thread might be if it's something other than a database leak.
FM usage?
MTS usage?
I'm fairly confident that the spree of guildmates/alliances getting hacking is simply because guilds/alliances basically give the hackers a list of who they should probably hack next...
I had a shop open in the FM every other night.
I only used MTS to store things or buy WGs, but never sold anything.
And the thing about the guild/alliance thing, There are far richer people in my guild than me.
Also would like to note that the hacker didn't delete anyone from my guild.
People being hacked since the last Server Check. - Liteness - 2011-09-05
nexon: hey guys, item lock all ur items cuz they only take tradable equips.
People being hacked since the last Server Check. - Viaje - 2011-09-05
ResistGreen Wrote:And the thing about the guild/alliance thing, There are far richer people in my guild than me.There would be no reason to delete anyone from your guild. They're only after money.
Also would like to note that the hacker didn't delete anyone from my guild.
Similarly, it's not really relevant that there are richer people in your guild.
The hackers clearly don't seem aware of many nuances about the game, and they're likely equally ignorant about who is richer than who. It seems to be a matter of visibility more than anything else.
On a side note, I just realized you're in FallenStarz. I actually was in the guild some time ago.
Sad to hear it's getting hit hard.
People being hacked since the last Server Check. - Viaje - 2011-09-05
I read through Nexon's "venting" thread and at least two people reported that Nexon removed the feature that locks you out of your account after too many failed password attempts, allowing hackers to potentially brute-force people's passwords.
After running some experiments on a secondary account, I've found this to have mostly truth but some falseness...
While I never experienced it personally, I understand that, at some point (or by some method), trying too many passwords for an account would lock the account until it was "verified" through an email.
This no longer seems to be the case.
After too many password attempts (five), you are indeed unable to attempt to login to any account for a certain duration of time.
Seems this block is done based on IP as deleting cookies or hopping to another browser doesn't allow for it to be bypassed.
However the duration of this lock is rather short. I roughly estimate about a minute.
So it does seem that brute-forcing is a very real possibility.
It is possible that the old lock-out is still around as I conducted these tests through the website, but I'd imagine the Gamelauncher is a poor platform through which to brute-force.
Notably, there is the fact that it's impossible to attempt to use Gamelauncher to login to an account which is already logged in while the web portal doesn't feature the same inability.
People being hacked since the last Server Check. - Locked - 2011-09-05
I'm going to take a guess in the dark and say all of these hackings are done via multi maple, seeing how unprofessional it is chances are if you make your password 13-64 digits long you can probably stop the hackings seeing as GameLauncher only accepts 12 at most.
People being hacked since the last Server Check. - Viaje - 2011-09-05
Locked Wrote:I'm going to take a guess in the dark and say all of these hackings are done via multi maple, seeing how unprofessional it is chances are if you make your password 13-64 digits long you can probably stop the hackings seeing as GameLauncher only accepts 12 at most.Indeed. Seeing as it does seem to be done in a factory-like style, I'd imagine this isn't a one-machine operation.
While I was looser with my Maple passwords previously, I recently upped the brute-force difficulty. Relevant.
Curious what you mean about Gamelauncher though. I'm able to type in more than 12 characters, and there doesn't seem to be any indication that that's an invalid length.
People being hacked since the last Server Check. - Kalovale - 2011-09-05
Locked Wrote:I'm going to take a guess in the dark and say all of these hackings are done via multi maple, seeing how unprofessional it is chances are if you make your password 13-64 digits long you can probably stop the hackings seeing as GameLauncher only accepts 12 at most.
The site is never up when I need to update my password.
The log-in page now allows 30 characters, it seems.
People being hacked since the last Server Check. - Bomber - 2011-09-05
Viaje Wrote:That's an absolutely absurd way to go about life.I'm sure that many accounts have been compromised. I'm not calling you liars. I'm just not going to pay any attention to these "hacked" accounts because I'd rather go on oblivious then worry about it(of course if I see my friend hacked I'd be upset). I don't care how much of a bad thing that does to my account, because it's kept my character healthy since broa came out.
People's accounts have been compromised, and you are basically saying that you believe all of us to be liars.