Hacked, ,anyone else lately

[Bluecat]

Re: Hacked, ,anyone else lately

uuummm I hope you don't mean you use 3 different anti-virus softwares.... because thats not a very good idea ;p

no I mean I use Windows Defender (spyware and adware scanner/remover), McAfee (anti virus protection), McAfee siteadvisor (tells you what websites have spyware or adware).

[Kailea]

Re: Hacked, ,anyone else lately

I have never been hacked guess I am lucky, that and I use a hard ass password to get into my account 3 different types of virus protection and anti-hacking software. I also dont keep cookies saved on my PC. I deleted them every time I get off the internet xD.

uuummm I hope you don't mean you use 3 different anti-virus softwares.... because thats not a very good idea ;p

[Bluecat]

Re: Hacked, ,anyone else lately

I have never been hacked guess I am lucky, that and I use a hard ass password to get into my account 3 different types of virus protection and anti-hacking software. I also dont keep cookies saved on my PC. I deleted them every time I get off the internet xD.

[Aksannyi]

Re: Hacked, ,anyone else lately

Not exactly hacked, but this just happened to my friend.

Apparently, a long time ago my friend inherited an account from someone who stopped playing. She's since leveled several jobs and is well on her way to G-horn, when she can't access her account anymore.

Turns out, the person she got the account from's ex called SE and called it stolen. So four+ years worth of work that my friend did on an account that has been in her possession for a really long freaking time has gone to someone who stole it "back" just to spite his ex.

Talk about a cheap way to get back at someone, and it wasn't even the person he was trying to fuck over.

I'm so angry at the gall people have to do this kind of crap. It's one thing if your account actually got stolen. But this one didn't. It was given away - might I say again that it was a LONG time ago - and then a petty breakup screwed someone who wasn't involved at all.

I'm glad SE is trying to give accounts back, but if they looked who's been paying the bill all the time, they'd know whose possession the account was in. Account hackings were not common back when she got the account.

I think she's going to try to get it back if she can, if not though, she's already working on another character. But who wants to start over from scratch because of some bullshit like this?

[Raydeus]

Re: Hacked, ,anyone else lately

So, I skipped most of the thread so I have no idea what it was about, but still.

FFXIAH, a real windower (without plugins), Item database, etc. they are all services SE should be hosting and providing themselves in their own servers, without any 3rd party ads.

They are just lazy.

Also, where's DX9?

[ItazuraNhomango]

Re: Hacked, ,anyone else lately

thats the thing, you cant -.- people have seem to forgotten this little bit of info

you use 3 diffrent servers when you play FFXI

Login server >> World Server >> AH Server

and if I am not mistaken each zone is on a different drive on the server.

Actually, each zone is a server, most likely. To be more precise, each zone of each world is a server. If you move around zone to zone, you end up moving from server to server, so to speak.

Search and Auction House seem to be linked, so that could be one server per World to service both. Also, some areas, like Assaults, are instanced, so there can be variable number of servers for each of those zones on every World.

What I'm not sure about is whether there is a particular "server" for a "World" besides the collection of zone servers and AH/search server--which is why I dislike using the term "servers" to refer to "Worlds"--each "World" is a collection of multiple servers, and the number of servers each isn't a constant.


* * *

Server := Software, a program (which often can run other programs) which handles requests from clients.
Host = Hardware, where a server software is running.

Not much is know about the hosts, except that S-E was very pleased with itself for making people from every region of the Earth use the same set of hosts, so they are utilized 24 hours a day--load balancing by mixing users from different time zones. Very low tech, but relatively efficient, I suppose.

S-E had a major hardware upgrade to the hosts/cluster system two years back, maybe? I think it was roughly around the time of all the major DDoS attacks. I believe they massively upgraded communication capacities (at least for the AH/search servers/hosts), but not entirely clear about the boxes of hardware.

Some people have garnered surprising amount of info on the servers by capturing communication between them and the client (that would be the POL/FFXI client), but for the most part they keep the details of what they know to themselves.

Using that information, they've created things like the very useful FFXIAH, produced those blasted cheats for claiming monsters automatically without getting caught (for now)--and one hacker supposedly found a way to kick people offline in FFXI (until S-E patched the software flaw).

[Kailea]

Re: Hacked, ,anyone else lately

Wasn't the point, as usual, but thanks for playing.
______________________________


Not the point.

The point was that, if FFXIAH did somehow pull account information off the servers, that would be a huge gaping flaw in SE's security. I don't really see how you can disagree with that.

well yeah it would be, and I would agree, but why agree to something that wont happen anyway, (look at my example above)

[Feba]

Re: Hacked, ,anyone else lately

thats the thing, you cant

Wasn't the point, as usual, but thanks for playing.
______________________________

They don't simply pull account information from SE's servers.

Not the point.

The point was that, if FFXIAH did somehow pull account information off the servers, that would be a huge gaping flaw in SE's security. I don't really see how you can disagree with that.

[Kailea]

Re: Hacked, ,anyone else lately

I don't really see how any method that would allow someone to simply pull account information off SE's server wouldn't be a huge flaw.

thats the thing, you cant -.- people have seem to forgotten this little bit of info

you use 3 diffrent servers when you play FFXI

Login server >> World Server >> AH Server

and if I am not mistaken each zone is on a different drive on the server.

It allows for the AH to go down and not take the game with it, and each zone to be taken down alone, without taking the whole server offline.

AH server has nothing to do with the login server, so that info is safer.

[Mhurron]

Re: Hacked, ,anyone else lately

I don't really see how any method that would allow someone to simply pull account information off SE's server wouldn't be a huge flaw.

They don't simply pull account information from SE's servers.

[Feba]

Re: Hacked, ,anyone else lately

This depends on exactly how they get their information

I don't really see how any method that would allow someone to simply pull account information off SE's server wouldn't be a huge flaw.

[Phanex]

Re: Hacked, ,anyone else lately

If it is a key logger, try useing the Microsoft On-Screen Keyboard, under accessiblity. I don't know much about how Key Loggers work, but they can't record your keystrokes from the keyboard if your using ur Mouse to punch a letter on the program. What you guys think? WIll that help?

[Mhurron]

Re: Hacked, ,anyone else lately

C- It's a HUGE GAPING FLAW in SE's security.

This depends on exactly how they get their information, and unfortunately they're not very forthcoming in providing that information. There is no secret information on FFXIAH, everything there is available to legitimate users, so a security breach of SE's systems or procedures would not be required.

FFXIAH is only liked to your account if you want it to be, you have to go out of your way to do it.

[Feba]

Re: Hacked, ,anyone else lately

I'm unsure of how the game's search function works, but its most certainly tied to POL and if FFXIAH is broadcasting that info somehow, no one is really safe. If that proves to be the case, FFXIAH's owners need to swallow thier pride and shut the site down.

ugh. no.

FFXIAH scans the AH servers. It doesn't require personal info to work.

If FFXIAH somehow found a way to get the server to give them account information:

A- They would have no reason to 'broadcast' it, it's not part of their database.
B- Anyone hacking FFXIAH could just implement it themselves
C- It's a HUGE GAPING FLAW in SE's security.

So no, that's not the case at all.

It's only a liability to people who go there without their computer being secured against viruses and other crapware, and POSSIBLY people that have put their POL account info on the site in some way (such as through PM). If you get hacked because of FFXIAH, and you don't use it, that simply wasn't how you were attacked.

[Neomage]

Re: Hacked, ,anyone else lately

Huh... That actually sounds like it might work E... Seems sensible.

NINJA-EDIT: This just caught my attention...

Well, this happened today.

I was in Salvage and all of a sudden I got the "You got disconnected from another terminal" message.

I have no idea how it happened though. I have AVG running daily. I don't bother going to sites like ffxiah.com. The only ffxi sites I've been going to for the last year or so is the official one at playonline.com, this one, FFXIclopedia, ffxi-atlas, my dyanmis LS fourms, my main LS fourms, and BG.

This has gotten me worried. I took some guys advice here and made a bunch of random letters/number password, but what's to say this won't happen again. How much can I shield myself from this? Is there anything else other then AVG?

*sigh*

I'm very worried.

Hasn't there been some rumors going about how this site is infected also? Do you have scripts/activex disabled? AVG wouldn't catch something like that...