IMPORTANT: Recent hackings

[Cosmos_Shielder]

Or maybe they live for their greed. Anyway if they like to be punished lets have them get what they want it doesn't bother me at all

[Varric]

And some for dem sweet ass looms.

[Dexxtaa]

Good to know you guys are on top of this.

Props for the quick response, guys. Keeping me addicted for even longer now

[Felix]

Or maybe they live for their greed. Anyway if they like to be punished lets have them get what they want it doesn't bother me at all

This. They can lol as much as they want, but they got caught. They lost. They are losers. chadz and his team will fix everything, proving that administration system is solid and functioning. And then they will be punished by chadz and community itself. That's all to it.

Indeed, world is no sweet place, but we could at least keep some order in this little world "cRPG" that was created and raised up with so much dedication and love from chadz, devs and community.

[chadz]

Actually, I've started to see people doing this as a natural disasters. It doesn't really matter who's causing it, just that it will happen eventually and that you should be prepared or do the clean-up afterwards.

I couldn't care less who's behind it, I just want to stop it. Needless to say, an emotionless ban is the other side of the coin

[Templar_Ratigan]

Most of you probably noticed (some poor lads even first hand) that there was a lot of hacking going on lately. People logged into other players accounts and tried to cause havoc in it. Mostly by selling heirlooms or by resetting chars.

a) Will those chars be restored.

Yes, definately. We will not allow anyone's fun and effort to be ruined by incidents like this. It will probably be a lot of work though, so just hang in there. Every transaction is logged, so it can be verified and restored. We will announce it when we have the tools&admins ready to reestablish the belongings.

b) How does it work.

It is, as far as I can see (the investigation isn't finished yet) related to the unpassed alts. Everyone can log into your account if you have no password set, all he needs is the name. We are currently believing, though not verified, that the reason why it got so easy is the NA stats. All you have to do is search for a player, check for some low level alt and hope for the best. I assume that works really well. This would also explain why it started when the stats were released and why it is mostly NA accounts that got hacked.

c) What are we doing about it.

Right now, we disabled logging into unpassworded alts. So this means you cannot use alts as a password retrieving tool for now. We will be changing the system entirely - when you join a server with a new alt, you will receive a 4 digit password that you can then enter into the website. This should deal with this exploit. However, this requires a website and a cRPG patch, and could take some time. We're trying to deal with this as fast as possible though.
Edit: actually, we changed it a bit. You now have 120 seconds to log into an alt before it gets impossible to login via this alt. Then you'd have to create a new alt and login within 120 seconds again. This should make it impossible for alt-guessers.


We're really sorry about this, and even further sorry that this will delay strategus ;)

But we're working on it, and all will be back to normal.

PS: please make sure your password is secure (not easily guessable). If you think your account got compromised, change your password.

Good news, and after what happened to me recently ive decided on a new pass each week.

[Garrus]

...
We're really sorry about this, and even further sorry that this will delay strategus ;)
...

He's the master of excuses

[chadz]

so far, one member of LLJK failed to cover his tracks properly and was banned for causing many of those incidents. We are currently investigating further to see if there were helpers.

[DrKronic]

so far, one member of LLJK failed to cover his tracks properly and was banned for causing many of those incidents. We are currently investigating further to see if there were helpers.

knew it, well my paranoia had figured that is the correct way to say that

[Cosmos_Shielder]

so far, one member of LLJK failed to cover his tracks properly and was banned for causing many of those incidents. We are currently investigating further to see if there were helpers.

People who dod that must definitely understand that they are getting their clan reputation really bad

[Dan lol]

so who here is on board the strategus goon wipe rape train now?

[Dexxtaa]

Our world is full of shit cause of such irresponsible and selfish, and furthermore - stupid people.

Love it when Russians talk. I imagine the accent and think how cool it sounds.

[Classical]

so far, one member of LLJK failed to cover his tracks properly and was banned for causing many of those incidents. We are currently investigating further to see if there were helpers.

Care to release the name? This will come as a shock to most of the clan, and by god some private lynchings will be done internally.

[Ecko]

b) How does it work.

It is, as far as I can see (the investigation isn't finished yet) related to the unpassed alts. Everyone can log into your account if you have no password set, all he needs is the name. We are currently believing, though not verified, that the reason why it got so easy is the NA stats. All you have to do is search for a player, check for some low level alt and hope for the best. I assume that works really well. This would also explain why it started when the stats were released and why it is mostly NA accounts that got hacked.


We're really sorry about this, and even further sorry that this will delay strategus ;)

But we're working on it, and all will be back to normal.

PS: please make sure your password is secure (not easily guessable). If you think your account got compromised, change your password.

I thought this as well, but goretooth has no alts. So how did he get hacked?

[chadz]

Goretooth was hacked in a different, and actually way more advanced way. Everyone that got hacked can contact me in irc so we can check how it worked.

Care to release the name?

Not yet, we first want to have a talk with him.