| User | Post |
Ggenko
 
   
  
 
 
Since: 06-07-02
Since last post: 8182 days
Last activity: 8174 days
|
|
Yeah as title says. Is it really possible to hacking people's account using the duped items? I wonder because I saw some posts from a site's forum warning players to sell duped items to NPCs.
If it's true I wouldn't buy any items from merchants. Who knows, they might sell us trojan items. jeeeze this scare me out of s**t... |
The Raven
 
Since: 04-22-02
Since last post: 8152 days
Last activity: 8169 days
|
|
| Nope, it's just a rumor. |
Sasami
Goddess in Training
 
Since: 02-18-02
From: Back in texas! YAY! college sucked!
Rating: 10 (1030 pts)
Since last post: 7546 days
Last activity: 7546 days
|
|
| Heh, i ended up taking down my false rumors section with all the possible hacks, ah well. |
AlainCh
 
Since: 06-05-02
From: NW ITaly (EU)
Since last post: 7799 days
Last activity: 7799 days
|
|
In sunken a guy gave me a card ..... to my SW 44
...how nice!!! we were hitting the same monster !!!
Quite an honest guy !!!!
Minutes later I look at the cards ... CREAMY card ?? UH???
Suspitions arised... I exit.
For no reason .. but ... I check the mail ...
!!!! someone sending me mail about Creamy card on the mail account I reserve for RAG ... UH !!!! ??? !!!!!
!!! ALLARM !!!
I re-login and go immediatly to my SW char ... using 2 pc I empty it of all items money everything storing in the other ACCOUNT -char Thief-. I log off.
I go to Ragoline side ....change my passw..
When I come back to the SW char...
... the char has been moved from where I left him...
AlainCh ( Hope it answer the question ..... |
Raveus
 
Since: 05-03-02
Since last post: 8167 days
Last activity: 8066 days
|
|
actually, that doesn't answer a thing.
(a) If a card dropped, and then he gave you a card, are you sure he actually gave you the card that was dropped, and not a different one (eg the creamy card)
(b) Once your account was compromised (most likely through someone getting your account name--it's sent by default in RO's protocol, the regular clients simply don't display it in any direct form--and then dictionary cracking the pass, unless someone has successfully cracked into the db--god I wish they would store the passwords in an unretrievable format, even just as md5 hashed), the person can log into the rag site and get your email addy from your profile there.
And that's just one possible scenario. *shrugs* maybe there is a trade exploit that's been found (of the possible alternative exploits, FAR more likely than anything simply involving particular items), but I rather doubt it. One sole strange case doesn't prove anything, especially when there's no way to isolate the particulars of how it actually occured.
· Raveus |
AlainCh
Since: 06-05-02
From: NW ITaly (EU)
Since last post: 7799 days
Last activity: 7799 days
|
|
hmmm
_____>A
1) I didn't see the card to be dropped ... that's the reason "he was so kind" .. I didn't even ask for it ... and he gave me !!
2) I've read somewhere that a guy was stealing account using this technique
3) it happened around 6 weeks ago, perhaps now it can't be done anymore 
4) The account's email is stored in the client locally...
5) I'ts quite easy to retreived account Id, pass, email.. and in one shot sent all to another char.
&) even if the computer are quick human are slow... so
He gave card to me and 10/20 people.. then disconnected. Only then collected the info and acked into my account..
I had barely time to get out all the stuff.
Question :
can someone steal from you using a duped Item
Answer :
So far, Yes!
( even if I cant explain in detail .. it can be done because items are not passive into the client) 
____> B
Wrong!
The profile you can acces via the Web.. the email is not shown for security reason..
I had to write Gravity and they manually changed my account's email.
AlainCh ( if it happened to me ... perhaps it will not happen to you .. Hope & Prayers
Edit for bad grammatics and errors....
(edited by AlainCh on 06-22-02 10:31 AM)
(edited by AlainCh on 06-22-02 10:38 AM) |
Arc Roacheford
 
Since: 06-16-02
From: Sylvestra
Since last post: 8137 days
Last activity: 8137 days
|
|
oh ...."""
--------------------
The end of the dark one will return peace to the world
|
Chibi-Bar
Moderator
 
Since: 04-16-02
Rating: 10 (400 pts)
Since last post: 7639 days
Last activity: 7595 days
|
|
I remember someone saying back in Alpha... the "account ID" is display when trading.. but that was "taken out" in Beta... so it is possible that it just not make it displayable.. thus.. people can get your account ID and just "force" hack their way in
--------------------
Chibi-Bar
Your Local Merchant on Chaos/Loki |
Akute Psyko
 
Since: 06-05-02
From: CA, USA
Since last post: 8139 days
Last activity: 8184 days
|
|
well.... wen u trade ther has to be a connection between the chars (ex: account name)... cuz how else would the item instantly display on the screen as people are putting em...
they shouldnt make account info accessable at the site...
--------------------
-Akute Psyko |
| 
