People being hacked since the last Server Check.

[byakugan]

My friend got hacked in between April 1st-5th. She hadn't played MS for over a year. We noticed about it because her level was showing in our guild's members list so we called her and asked her to check. Worst part of it all is, the pineappleing hackers felt the need to drop her Beta Banada just for the joy of it.

I seriously don't get if these are just professional hackers doing it to get mesos to sell or just huge jerks that do it for fun. Maybe both >_>

[Raul]

I don't know if item locks ever did prevent char deletion in GMS.
However, according to Orange Mushroom's blog:

http://orangemushroom.wordpress.com/...ion/#more-2780


So apparently in KMS(t) they do now prevent char deletion.
Since there would be no point to this if locked items could be moved to other characters in the same account, this sort of implies that locked items cannot be moved within account in KMS, at least as of this latest patch. Can anyone familiar with KMS confirm?

This means anyone with locked items who shares them between characters will want to move them to their main character before whichever update removes the ability to move locked items within the account.

Will have to ask KMSers about that. I wouldn't put it past Nexon to leave the ability to move locked items around in the game.
To prevent deletion of a specific character you'd have to lock a fully untradeable item (like, say, a medal).

Yeah, theyre handing out itemlocks if you change your pw too. Gonna lock my time traveler circlet asap.

[Combattente]

Yeah, theyre handing out itemlocks if you change your pw too.

Finally! They realised that they should've provided their customers with a FREE method to protect themselves from hackings.

[Raul]

Finally! They realised that they should've provided their customers with a FREE method to protect themselves from hackings.

Kinda.
They're doing it as a PW change campaign because people are getting hacked like no one's business. I guess their philosophy has become that if they can't keep people from getting hacked, at least they can minimize the damage done.

[Muppy]

The fact that Nexam keeps coming with all these 2x, 3x, 4x... events just makes me think that they'll never be able to fix the account hacking spree. Ever.

[MrTouchnGo]

The fact that Nexam keeps coming with all these 2x, 3x, 4x... events just makes me think that they'll never be able to fix the account hacking spree. Ever.

Seems to be more because so many people are quitting due to the overall state of the game.

[Promised]

I don't believe you can anymore.

There was a rumour around that e-mail ID's were safer. Did anyone who got hacked randomly have an email user ID?

I'm not a computer-technical person, but by reading Eos' explanation, would the rationale behind having an email user ID be safer relate to the account packets in question being extrapolated (if say, the theory was true)?

Id's aren't random. All you'd need to do is understand how the packet in question related to the account it brought back and extrapolate it to use on other characters by simple incrementation and guesswork. Tedious, but going account by account will eventually strike it rich.

[Eos]

I'm not a computer-technical person, but by reading Eos' explanation, would the rationale behind having an email user ID be safer relate to the account packets in question being extrapolated (if say, the theory was true)?

No.

Whether you use your user name, or your email address, those are just dummy mnemonics that point to your user id. Your user ID is a number, set in stone, identifying your account. The other two, regardless of which you use, are just semantic aliases for that user id. If someone can access your account via the user id it doesn't matter what the alias is, they're going directly passed it.

[Promised]

No.

Whether you use your user name, or your email address, those are just dummy mnemonics that point to your user id. Your user ID is a number, set in stone, identifying your account. The other two, regardless of which you use, are just semantic aliases for that user id. If someone can access your account via the user id it doesn't matter what the alias is, they're going directly passed it.

Thanks for clarifying.

That does make sense. I do not remember what Nexon's message was back then about the user ID being a unique ID etc. etc. to discourage you from disabling it and switching to logging in with e-mail.

Furthermore, 2 well-known "merchants" claimed/observed their/other accounts who were breached did not have e-mail user names. I suppose that's how the rumour started.

It was worth a shot. I suppose there's nothing we can really do then. As someone said: Sitting ducks...

[Edeott]

The more I browse Southperry the more paranoid I become.

[MrTouchnGo]

Thanks for clarifying.

That does make sense. I do not remember what Nexon's message was back then about the user ID being a unique ID etc. etc. to discourage you from disabling it and switching to logging in with e-mail.

Furthermore, 2 well-known "merchants" claimed/observed their/other accounts who were breached did not have e-mail user names. I suppose that's how the rumour started.

It was worth a shot. I suppose there's nothing we can really do then. As someone said: Sitting ducks...

I heard the same about e-mail IDs being safer and considered switching over after the MTS leak. Never did, and I haven't been hacked... yet. Although judging from Eos' response that's more due to me being lucky as hell.

[Promised]

I heard the same about e-mail IDs being safer and considered switching over after the MTS leak. Never did, and I haven't been hacked... yet.

Intuitively (to me, at least), it doesn't make sense that email user ID would be safer because if somehow the user ID is to be leaked again, whoever looking at the information will already know your email.

[Stereo]

Furthermore, 2 well-known "merchants" claimed/observed their/other accounts who were breached did not have e-mail user names. I suppose that's how the rumour started.

It was worth a shot. I suppose there's nothing we can really do then. As someone said: Sitting ducks...

I would guess 99%+ of all accounts don't use emails - after all, it's generally longer to type, and you have to go to the trouble of setting it up. Only the group that was forced to would have them for the most part.

[Rains]

I would guess 99%+ of all accounts don't use emails - after all, it's generally longer to type, and you have to go to the trouble of setting it up. Only the group that was forced to would have them for the most part.

Newly created accounts can only login through email, and have no user id.
Not sure when this was implemented

[Raul]

Newly created accounts can only login through email, and have no user id.
Not sure when this was implemented

Several months ago at the minimum; when I tried to make a mule some time like september or october, this was the case.

[PennyPacker]

Logged in today to find out I have been hacked for a second time. It happened almost 6 months to the day from when I was first hacked. It somehow doesn't surprise me that I was hacked again before Nexon even did anything about my first ticket. Lost all of my mesos and all of my tradeable gear on my main. They also threw away my horntail necklace, scar helm, and spear.

[Killed]

I hear some people who still have loads of duped items have recently been hacked, one in particular, wtpsimon, supposedly lost all of his mules.

[SaptaZapta]

I hear some people who still have loads of duped items have recently been hacked, one in particular, wtpsimon, supposedly lost all of his mules.

You sure it's hackers and not Nexon cleaning them out?

[Imagine]

Massive hacking spree's been going on in Chaos the past few days; sometimes the hackers don't take anything and use the accounts to spam a certain "free NX" website, other times the hackers take a few valuables.

[MrTouchnGo]

Massive hacking spree's been going on in Chaos the past few days; sometimes the hackers don't take anything and use the accounts to spam a certain "free NX" website, other times the hackers take a few valuables.

Have you checked out the website for yourself? Is it a keylogger or a website that sells stuff for USD or what?