Updated Info and Prevention on Hacking Outbreak

• Deitylight wrote on 2012-01-01 00:31

  Quote from DragoniteAce;715529:

  Most of these so-called-hackers are just leechers. Only 1 person actually made this "hack" and it got leaked. These little kiddie-wanna-be-hackers will be found soon by nexon. They're not making any attempt to conceal their actions which is pretty stupid from a "hacker" point of view. Anyhow Enjoy your new year Everyone 5:50 pm here (6 more hours till new years eve) :skip:

  
  Has nexon ever banned people correctly?
  I mean really this will likely turn into a gold duping incident where random people who has nothing to do with it will be banned.
• M wrote on 2012-01-01 00:40

  Quote from Deitylight;715770:

  Has nexon ever banned people correctly?
  I mean really this will likely turn into a gold duping incident where random people who has nothing to do with it will be banned.

  
  
  even if they banned them, theyd just get new accounts/IP's and start over again. It's a never ending cycle of mabinogi hacking and exploiting
• Deitylight wrote on 2012-01-01 00:42

  Quote from Maia;715792:

  even if they banned them, theyd just get new accounts/IP's and start over again. It's a never ending cycle of mabinogi hacking and exploiting

  
  I almost forgot to mention that also, thanks for reminding me.
• DragoniteAce wrote on 2012-01-01 00:42

  Quote from Deitylight;715770:

  Has nexon ever banned people correctly?
  I mean really this will likely turn into a gold duping incident where random people who has nothing to do with it will be banned.

  
  
  I doubt it. Even if they do ban them? you can always re-create another account from a different location on a different computer. There really is no clear-cut way to completely solve the issue. Dont be shocked, nexon isnt the only one that suffers from this crap ;/ i would like to work for a game company someday after i finish my programming college education, but ~.~ having to deal with all these people who want to cause trouble just for personal enjoyment. Human nature can be really disgusting :shoe:
• Deitylight wrote on 2012-01-01 00:44

  Quote from DragoniteAce;715800:

  I doubt it. Even if they do ban them? you can always re-create another account from a different location on a different computer. There really is no clear-cut way to completely solve the issue. Dont be shocked, nexon isnt the only one that suffers from this crap ;/ i would like to work for a game company someday after i finish my programming college education, but ~.~ having to deal with all these people who want to cause trouble just for personal enjoyment. Human nature can be really disgusting :shoe:

  
  You can relate to my forum title right?
• DragoniteAce wrote on 2012-01-01 00:45

  Quote from Deitylight;715808:

  You can relate to my forum title right?

  
  
  I'll be honest, i can ~.~
• Xentaros wrote on 2012-01-01 00:45
  [Image: http://i43.tinypic.com/97pcld.png]
• Rydian wrote on 2012-01-01 01:00

  Quote from Hiccup;715695:

  Have you been around at all? This isn't something new.

  I'm relatively new to the hacking events in mabinogi specifically, but I'm not new to MMOs and computers/networking. I'll repeat, the statement sounds like BS to me, I've seen the same sort of claims made elsewhere time and time again and they're false.
  
  Most people believe things about computers that simply are not true. There's multiple causes for this, but it's generally either people repeating information over and over because they believe what they hear (for example people say that Ghz is the measurement of processor speed/power, which is false), or (commonly the case nowadays) some kid watched some TV show or something about hacking and figured he could take a few key phrases and use them to scare people. What I'm saying is this sounds like the second case, since the assertion (that accounts can be traced by IP addresses) doesn't make sense from the client's side. It would make sense from the server's side, but again if they were actually hacking nexon's servers themselves (instead of just ****ing with the game remotely by giving it bad input) they could be in serious legal trouble.
  
  This is a serious situation and it's important to separate the facts from the bull**** threats.
• Shizukani wrote on 2012-01-01 01:07

  Quote from Rydian;715834:

  I'm relatively new to the hacking events in mabinogi specifically, but I'm not new to MMOs and computers/networking. I'll repeat, the statement sounds like BS to me, I've seen the same sort of claims made elsewhere time and time again and they're false.
  
  Most people believe things about computers that simply are not true. There's multiple causes for this, but it's generally either people repeating information over and over because they believe what they hear (for example people say that Ghz is the measurement of processor speed/power, which is false), or (commonly the case nowadays) some kid watched some TV show or something about hacking and figured he could take a few key phrases and use them to scare people. What I'm saying is this sounds like the second case, since the assertion (that accounts can be traced by IP addresses) doesn't make sense from the client's side. It would make sense from the server's side, but again if they were actually hacking nexon's servers themselves (instead of just ****ing with the game remotely by giving it bad input) they could be in serious legal trouble.
  
  This is a serious situation and it's important to separate the facts from the bull**** threats.

  
  
  Gigahertz or hertz IS the measure of processor speed, specifically the number of cycles the processor performs per second (also known as the frequency).
• Hiccup wrote on 2012-01-01 01:09
  http://mabination.com/threads/32697-Nexon-failing-to-add-SSL-to-login-pages.?highlight=nexon+unsecured
  
  Read through it.
  
  May not be IP tracing but I was close enough. D:
  
  But with your IP they can match it too other accounts being logged on through that IP and can figure out the main account through that. Because other people and myself were logging in through alts then our main to throw em off.
• Rydian wrote on 2012-01-01 01:11

  Quote from Shizukani;715841:

  Gigahertz or hertz IS the measure of processor speed, specifically the number of cycles the processor performs per second (also known as the frequency).

  It's a measurement of frequency, not a measurement of speed in the terms of "computational power and less lag". The issue is what's done during those cycles varies from processor to processor, sometimes wildly, and people don't get this. Most people think that ghz is a raw measurement of power.
• Shizukani wrote on 2012-01-01 01:20

  Quote from Rydian;715849:

  It's a measurement of frequency, not a measurement of speed in the terms of "computational power and less lag". The issue is what's done during those cycles varies from processor to processor, sometimes wildly, and people don't get this. Most people think that ghz is a raw measurement of power.

  
  
  I didn't say it was the measurement of power (that depends on what processor you're using). Frequency, however, is essentially the same thing as how fast the processor runs, or speed.
  
  Ah well, let's not get into semantics.
• Rydian wrote on 2012-01-01 01:23

  Quote from Hiccup;715847:

  http://mabination.com/threads/32697-Nexon-failing-to-add-SSL-to-login-pages.?highlight=nexon+unsecured
  
  Read through it.
  
  May not be IP tracing but I was close enough. D:

  Actually that article's got nothing to do with determining IP addresses, it's about network sniffing stuff... and as people commented it doesn't matter in most situations (barring unsecured wireless and things like that). You were probably thinking of something else... but to be honest not using SSL for logins is the norm for most things (including game sites). Running a proper secured login costs money (as you need a cert given by the proper authority), so it's generally something done when the site is related to finances (bank, shopping sites) or serious personal information (suicide help centers and such).
  
  Of course the argument could easily be given that Nexon should be securing their crap since people buy NX, but the NX purchases themselves are done through secured connections run by other vendors (e.g. Paypal), and that's a whole 'nother discussion anyways.
  
  

  Quote from Hiccup;715847:

  But with your IP they can match it too other accounts being logged on through that IP and can figure out the main account through that. Because other people and myself were logging in through alts then our main to throw em off.

  Yeah I mentioned that's commonly how it's done, but the IP is often grabbed through forums or alternative communication, not the game itself or some magical tracking method. It's incredibly easy to get an IP online for people that browse game forums like this (hell, if you can see my signature I can grab your IP from my site's server logs, and this forum has the presented IP of every one of us), and as for other methods I know a common one was to try to send a file inline through AIM/Yahoo as the clients would do a direct connection so you could just do two comparative runs of netstat -n in the command prompt and pick out the new connection/IP as that of your target (not sure if they still use the same method now).
  
  Just so we're clear, I'm not against this thread (as I feel giving people information so they can avoid their own losses is important and a very good move), I'm just being anal about the info being given out. We don't want people freaking out over nothing, but at the same time if the actual threats are identified people can know what to steer clear from.
  
  
  
  

  Quote from Shizukani;715864:

  I didn't say it was the measurement of power (that depends on what processor you're using). Frequency, however, is essentially the same thing as how fast the processor runs, or speed.
  
  Ah well, let's not get into semantics.

  When I was referencing how people thought of it, I put "speed/power" for a reason. :P
• DragoniteAce wrote on 2012-01-01 01:27

  Quote from Rydian;715866:

  Actually that article's got nothing to do with determining IP addresses, it's about network sniffing stuff... and as people commented it doesn't matter in most situations (barring unsecured wireless and things like that). You were probably thinking of something else... but to be honest not using SSL for logins is the norm for most things (including game sites). Running a proper secured login costs money (as you need a cert given by the proper authority), so it's generally something done when the site is related to finances (bank, shopping sites) or serious personal information (suicide help centers and such).
  
  Of course the argument could easily be given that Nexon should be securing their crap since people buy NX, but the NX purchases themselves are done through secured connections run by other vendors (e.g. Paypal), and that's a whole 'nother discussion anyways.
  
  Yeah I mentioned that's commonly how it's done, but the IP is often grabbed through forums or alternative communication, not the game itself or some magical tracking method. It's incredibly easy to get an IP online for people that browse game forums like this (hell, if you can see my signature I can grab your IP from my site's server logs, and this forum has the presented IP of every one of us), and as for other methods I know a common one was to try to send a file inline through AIM/Yahoo as the clients would do a direct connection so you could just do two comparative runs of netstat -n in the command prompt and pick out the new connection/IP as that of your target (not sure if they still use the same method now).
  
  Just so we're clear, I'm not against this thread (as I feel giving people information so they can avoid their own losses is important and a very good move), I'm just being anal about the info being given out. We don't want people freaking out over nothing, but at the same time if the actual threats are identified people can know what to steer clear from.
  
  
  
  When I was referencing how people thought of it, I put "speed/power" for a reason. :P

  
  
  Basically the point is IP's don't mean crap. I hate when people flip that "THEY CAN TRACK YOUR IP QQ" card yeah? well just as easy as it is to track my ip its easy for me to change it. IP's now-a-days are no longer static, we have dynamic ip's very few have static ip's ~.~ This exploit/hack Isn't using your IP but more or so your game ID through the game's script :/
• Cheerios wrote on 2012-01-01 01:38

  Quote from Hiccup;715847:

  http://mabination.com/threads/32697-Nexon-failing-to-add-SSL-to-login-pages.?highlight=nexon+unsecured
  
  Read through it.
  
  May not be IP tracing but I was close enough. D:
  
  But with your IP they can match it too other accounts being logged on through that IP and can figure out the main account through that. Because other people and myself were logging in through alts then our main to throw em off.

  
  
  That only works if the "hacker" can get in the same network as you.