Splatter Shot
   |
Posted - 2003.08.27 11:28:00 -
[1]
I'm very new to EVE, so excuse me if I'm being inaccurate, but something doesnt add up. Part of my role at work involves maintaining internet security. The denial from EVE support that he was not hacked through the game isnt so cut and dry from the info posted.
The issue is not what method was used to gain access, but how his IP address was identified in the first place. It doesnt matter which OS or firewall etc is inplace, if the hacker doesnt know the IP address they cant do anything.
There are only 3 ways that I can it could be done.
1) The hacker already had the IP address from another source. There are many ways to get this. For example if they had comminicated using some other software. It is possible to get IP addresses from for example from AIM, ICQ and other chat programs connections. Many forums actually store the IP address of posters to try and reduce spamming, flaming etc. Some even publish the IP address!! (havent checked this one out yet  )
2) Possibly EVE at some level communicates directly to other people's machines for certain features and not via the EVE server(s). It is faily easy find all the IP addresses that your machine connects to and even read the content. Maybe the chat feature of EVE goes direct client to client. Whilst this is just speculation, using peer-to-peer connections would be a viable way of reducing chat lag by not sending it all via central servers.
3) He has actually gained access to EVE servers or routers and obtained the IP address. As mentioned in a post above no system is secure.
If I get time, I might have a go to checkout point 2). Although I have all the tools and some of the experience needed to do it I must point out that I use them for checking security issue at work and not hacking myself  . It wont be a thorough or intrusive check though as I dont want to get banned myself hehe.
If I do find anything out, I wont be posting the details on here as it would basiclly be free info for more would be hackers. I will however send it to EVE support. If anyone else doest find out how it was done, please can they also do the same.
The advise that I give to all players is make sure you keep upto date with Microsoft patches, use uptodate Virus checkers and install a firewall (software or hardware or both for the paranoid like me)
|