EVE Search - How to combat new wave of keylogger attacks?

All Channels

EVE General Discussion

How to combat new wave of keylogger attacks?

» Click here to find additional results for this topic using Google

Monitor this thread via RSS [?]

Pages: 1 [2] 3 :: one page
Author	Thread Statistics \| Show CCP posts - 0 post(s)
Another Forum'Alt Gallente Center for Advanced Studies	Posted - 2009.08.14 23:11:00 - [31] Blacklist IPs from china. For users, get Firefox with noscript, keep both + OS up to date. BECAUSE OF FALCON. Guide to forum posting
Seraph Castillon Gallente	Posted - 2009.08.14 23:30:00 - [32] Edited by: Seraph Castillon on 14/08/2009 23:33:03 If they are using trial account to post on the forums (do trails have posting privs?) then just take away those posting privileges from the trial accounts. If they are using actual payed for game accounts then there are two possibilities: 1)Only the characters are being banned/deleted or they are only being forum banned. If this is the case then account bans should be gotten to asap 2)Somehow they make a profit out of this, even while loosing accounts daily. If this is the case something is terribly wrong and something should be done to reduce their succes. P.S. For those telling people just not to click them ... fine, but it's still damn annoying to have the forums full of those posts.
Bestofworst Worstofbest Caldari Science and Trade Institute	Posted - 2009.08.14 23:32:00 - [33] Originally by: Seraph Castillon If they are using trial account to post on the forums (do trails have posting privs?) then just take away those posting privileges from the trial accounts. If they are using actual payed for game accounts then there are two possibilities: 1)Only the characters are being banned/deleted or they are only being forum banned. If this is the case then account bans should be gotten to asap 2)Somehow they make a profit out of this, even while loosing accounts daily. If this is the case something is terribly wrong and something should be done to reduce their succes. They use stolen credit card info to make these accounts. ________________________________________________ My Music Posts slowly rising in quality to the decline of my dignity.
Drima Veeshaub Stellar Solutions	Posted - 2009.08.14 23:37:00 - [34] Nuking China got my vote. Delenda est achura.
Mara Rinn	Posted - 2009.08.14 23:46:00 - [35] Run Mac OS X, or Windows Vista/7. Use a non-administrator account as your normal day-to-day account. Problem solved - you can click all the keylogger links you want and your machine will still be safe (unless you do something truly daft like type in your administrator password anytime an anonymous program asks for it). [Aussie players: join channel ANZAC]
Ukucia Gallente The Scope	Posted - 2009.08.15 00:08:00 - [36] Originally by: Mara Rinn Run Mac OS X, or Windows Vista/7. Use a non-administrator account as your normal day-to-day account. Problem solved - you can click all the keylogger links you want and your machine will still be safe (unless you do something truly daft like type in your administrator password anytime an anonymous program asks for it). Notsomuch. Several of the recent PDF and Flash exploits provide root privileges.
Taedrin Gallente Golden Mechanization Protectorate	Posted - 2009.08.15 00:12:00 - [37] To be honest, I fear the day when these guys get wise and actually hide their keyloggers behind REALISTIC posts. Right now, the keyloggers are blindingly obvious. But what about when they start posting in C&P about a failmail with a link to a fake killboard which has a piece of malware on it?
Herzog Wolfhammer Gallente Aliastra	Posted - 2009.08.15 00:44:00 - [38] If there was no ISK buying, there would be no ISK selling. Buying ISK should be a permaban offense.
Kolatha	Posted - 2009.08.15 01:39:00 - [39] Originally by: Seraph Castillon Edited by: Seraph Castillon on 14/08/2009 23:33:03 If they are using trial account to post on the forums (do trails have posting privs?) then just take away those posting privileges from the trial accounts. Or just set up the forum so trial accounts can't create links or post urls. Should be simple regex to do that. However, after the first few posts captured the first batch of idiots I suspect that most new posts are now actually coming from hacked accounts. This is why it is hard for CCP to keep up with the issue. This whole account hacking is, I suppose, simply because the plex and CCP's liberal use of the ban stick has made the whole ISK selling business very low in profitability. I agree that the next logical step in this war is targeting the buyers. While I don't think banning these players (for the first offense at least) is really the way to go, I do think something needs to be done. Perhaps hitting them square in the ego would be a way to go, with something like a name and shame thread for known buyers, or if that is against the terms of use for the forum perhaps a name and shame web site (something IGB compatible).
z0de Gallente The Bastards The Bastards.	Posted - 2009.08.15 02:12:00 - [40] Originally by: Devine13 Originally by: Destination SkillQueue Originally by: Devine13 Originally by: Abrazzar Just turn off the internet. There. no more spam anywhere. Only way to fix it really. EVE Offline? Yes. So.. what do you do after you kill the 7 (or so) red X's with your purple shuttle of doom? A wreck starts flashing but I can't do anything with it. click it. á á
Janice Jankowski	Posted - 2009.08.15 03:39:00 - [41] Lolcat has your answer
Zartanic	Posted - 2009.08.15 03:59:00 - [42] Edited by: Zartanic on 15/08/2009 04:00:36 Perma ban the buyers, the fact this does not happen means the same idiots keep buying knowing they can simply switch alts if they need to. They can easily sell GTC's for isk to cover any losses (which is why they are not banned of course) Even that Ricdic is still playing. IP bans wont work, its easy to set up a proxy. For the same reason I doubt they can trace who is doing it so the only legal action can be with the selling companies. These are also not easy to get, even the all powerful Blizzard spent a lot of time and money to shut one down..and another simply opens up. They have stopped going for the sexually frustrated and stupid now, they are being smarter so all direct links should be turned off for a start.
Cyprus Black Caldari 4 wing Mostly Harmless	Posted - 2009.08.15 04:07:00 - [43] The Chinese government doesn't give a **** about their citizens assaulting other countries via the internet. Good luck prosecuting them. ______________ Stupid people are amazingly clever at being stupid. They excel at slipping through idiot proof measures.
Bazuka	Posted - 2009.08.15 04:29:00 - [44] Hmmmm I never really followed this issue closely or was ever trying to figure out who and why is doing this but now that I read the OP accusing ISK farmers of doing all of this is makes perfect sense. EVE has been banning ISk farmers aggressively lately so this is their retaliation? Are they trying to say to CCP "Don`t fck with us and let us be or we`ll fck YOU up?" Is there war going on between CCP and Isk farmers here? Am I being Captain Obvious?lol I mean, RMT stuff has been in MMOs for decade but I never realized that it`s on such a big scale that the farmers are going ut of their way and even break laws in order to keep their business? Jeeeez, I`m not clicking on anything anymore, fck that. ___________ CareMyBear!
mazzilliu	Posted - 2009.08.15 08:23:00 - [45] To combat keyloggers, stop pressing keys. MAZZILLIU 2009. CHANGE I CAN IMPOSE ON YOU.
Valator Uel Caldari N'Th'Rack Squadron Tau Ceti Federation	Posted - 2009.08.15 08:25:00 - [46] As posted elsewhere: A possible temporary solution is to have reported posts totaly censored until a GM reviews the post (ie all contents removed). Abusers of the system get warned then banned. That way we as the community can help by reporting all these posts and thereby removing the content. It gives GMs/ISD time to act. Quote: Aya > Hostile tcf gang coming to h-pa Deva Blackfire > ships? Ralarina > Yes, in ships
Ephemeron North Eastern Swat Pandemic Legion	Posted - 2009.08.15 08:30:00 - [47] you are all proposing defensive measures. I am talking specifically about offense - how to hurt the people responsible. There should be some legal way of doing it. Even in China they gonna have laws against hacking/virus spreading.
Mara Rinn	Posted - 2009.08.15 08:38:00 - [48] Originally by: Ephemeron ... I am talking specifically about offense - how to hurt the people responsible. ... Vigilante justice only ever ends up with innocent people getting killed. [Aussie players: join channel ANZAC]
Mara Rinn	Posted - 2009.08.15 08:43:00 - [49] Originally by: Ukucia Several of the recent PDF and Flash exploits provide root privileges. I wouldn't know, I have Flash disabled on all the browsers I use. There was a root exploit in Flash back in 2003, since then I've chosen to avoid using that software. [Aussie players: join channel ANZAC]
Zaqar Pator Tech School	Posted - 2009.08.15 09:16:00 - [50] Originally by: Ephemeron you are all proposing defensive measures. I am talking specifically about offense - how to hurt the people responsible. There should be some legal way of doing it. Even in China they gonna have laws against hacking/virus spreading. It would be awesome if we could get whoever is responsible executed :D
Sneakybustard	Posted - 2009.08.15 09:54:00 - [51] maybe we could somehow track these people down and go **** them up really good?
hired goon	Posted - 2009.08.15 11:36:00 - [52] Originally by: Ephemeron you are all proposing defensive measures. I am talking specifically about offense - how to hurt the people responsible. There should be some legal way of doing it. Even in China they gonna have laws against hacking/virus spreading. Dude, you have to find them before you can hurt them. These people leave no trail to follow, everything is done via proxy. If they were selling ISK you could 'infiltrate' them as a customer then shut them down. But what they are doing now cannot be combatted against in any way except defense. It would be like trying to retaliate against a DDOS attack. The only way I can think of is that, if they are stealing loads of e-riches, the only way that can ever make them REAL money is once they sell it BACK to someone else in the game. Therefore I'd say we should go after isk sellers by doing what I just said - pretending to be a customer until we have enough information about them to shut them down. We need a new volunteer group alongside ISD that's solely responsible for this task. An army of people whose sole job it is to shut down isk sellers by posing as customers. Once the sellers realize that 50% of all customers are actually CCP cops, their cost suddenly outweighs their profitability. Though we'd need probably more than 50%, seeing as how automated spam-bots are not too much of an expense to set up. Unless they have to keep being modified, which is why my proposed offense should be coupled with a forum-block that's updated every day to counter each new iteration of bot. That way they'll need a guy there all the time trying to tweak the code of his bot. As it stands he can tweak it every month, it seems. -omg-
Bazuka	Posted - 2009.08.15 12:00:00 - [53] Originally by: Sneakybustard maybe we could somehow track these people down and go **** them up really good? Sure Captain Nerdtastic Lead the way. I`m right behind you. I have sharp mouse and my keybord is pretty heavy. ___________ CareMyBear!
slip66 Black Nova Corp	Posted - 2009.08.15 15:55:00 - [54] Originally by: Seraph Castillon Edited by: Seraph Castillon on 14/08/2009 23:33:03 If they are using trial account to post on the forums (do trails have posting privs?) then just take away those posting privileges from the trial accounts. this
Jack bubu Lyonesse. KIA Alliance	Posted - 2009.08.15 16:28:00 - [55] Originally by: Taedrin To be honest, I fear the day when these guys get wise and actually hide their keyloggers behind REALISTIC posts. Right now, the keyloggers are blindingly obvious. But what about when they start posting in C&P about a failmail with a link to a fake killboard which has a piece of malware on it? In case you havent noticed, they allready do. I have seen fake posts about the Return to Homeworld comics with links leading to Keyloggers and other stuff.
Pulivin Motic Caldari Sankkasen Mining Conglomerate	Posted - 2009.08.15 16:50:00 - [56] At the moment I sweep the forum twice every day reporting all the key loggers I find. In the end this is a war of attrition and if we act smart we will win.
Weight What	Posted - 2009.08.15 17:24:00 - [57] OP, stop using the royal 'we' in your paragraphs. Please do not pretend to speak for me. That is all, kthnx ----------------------------------------------- Annonymous, trading as "Weight What".
Bazuka	Posted - 2009.08.15 17:28:00 - [58] It is war allright bit it`s not our war. It`s a Isk farmer war on CCP to teach them a "lesson" for trying to remove the farmers out of EVE. Farmers don`t want your ISK, they want your money and they want to keep their business as usual. And atm they are winning because they have a very powerfull weapon, the stupidity of your Joe gamer. Joe is so horny that he keeps clicking on japanese boobs pics even with so many warrnings on these forums, including a final warning after you click a link. And I`m VERY supprised about farmers c.ockyness. They don`t cave in to the pressure, they are actually applying the preassure back and are basically saying to CCP "leave us alone, keep a blind eye as you`ve done over the years.. or else!" It`s a top-notch PVP happening right in front of our noses. ___________ CareMyBear!
Alex Vindan	Posted - 2009.08.15 17:37:00 - [59] Edited by: Alex Vindan on 15/08/2009 17:38:54 Considering how many people actually post links to some legitimate place on the non-off topic forums, I'd say disabling all links, other than the places that are linked the most, like Youtube, battleclinic, evesurvival, etc. This would help give CCP time, and, if someone else wanted to give a link, they'd have to say "search this". I think it would work without getting in the way... Edit: Also, pilots who are selling their services (animated avatars for example) through a website can ask for their site to be unblocked after someone reviews it, or something along those lines.
Another Forum'Alt Gallente Center for Advanced Studies	Posted - 2009.08.15 19:11:00 - [60] Edited by: Another Forum''Alt on 15/08/2009 19:11:34 Originally by: Kolatha Originally by: Seraph Castillon Edited by: Seraph Castillon on 14/08/2009 23:33:03 If they are using trial account to post on the forums (do trails have posting privs?) then just take away those posting privileges from the trial accounts. Or just set up the forum so trial accounts can't create links or post urls. Should be simple regex to do that. However, after the first few posts captured the first batch of idiots I suspect that most new posts are now actually coming from hacked accounts. This is why it is hard for CCP to keep up with the issue. This whole account hacking is, I suppose, simply because the plex and CCP's liberal use of the ban stick has made the whole ISK selling business very low in profitability. I agree that the next logical step in this war is targeting the buyers. While I don't think banning these players (for the first offense at least) is really the way to go, I do think something needs to be done. Perhaps hitting them square in the ego would be a way to go, with something like a name and shame thread for known buyers, or if that is against the terms of use for the forum perhaps a name and shame web site (something IGB compatible). Trials already can't post. I say blacklist all Chinese IP ranges, and permaban (or at least 1 year or so, as well as isk removed) any isk buyers (without demand there is no supply) BECAUSE OF FALCON. Guide to forum posting

Pages: 1 [2] 3 :: one page
First page \| Previous page \| Next page \| Last page

COPYRIGHT NOTICE
EVE Online, the EVE logo, EVE and all associated logos and designs are the intellectual property of CCP hf. All artwork, screenshots, characters, vehicles, storylines, world facts or other recognizable features of the intellectual property relating to these trademarks are likewise the intellectual property of CCP hf. EVE Online and the EVE logo are the registered trademarks of CCP hf. All rights are reserved worldwide. All other trademarks are the property of their respective owners. CCP hf. has granted permission to EVE-Search.com to use EVE Online and all associated logos and designs for promotional and information purposes on its website but does not endorse, and is not in any way affiliated with, EVE-Search.com. CCP is in no way responsible for the content on or functioning of this website, nor can it be liable for any damage arising from the use of this website.