| Pages: [1] :: one page |
|
|
| Author |
Thread Statistics | Show CCP posts - 1 post(s) |
Stuart Ripley
   |
Posted - 2006.12.29 09:19:00 -
[1]
With all theese lame people trying to steal accounts, selling characters for isk and stuff like that... Is there a way to secure yourself against it?
Most of us know the basic stuff:
Antivirus
Firewall
Don`t install something that you dont know is.
Change password
Anyone out there who knows of anything else?
And this is my most important question:
If you are so unlucky to get your account hacked/stolen, character sold and so on... How do you get your stuff back. How can you prove it`s your account when you dont have cd-key...?? Downloaded the game.
|
Romeda
Minmatar
Trojan industries
|
Posted - 2006.12.29 10:23:00 -
[2]
The best defense is common-sense I think, like not running apps that claim to be 'HAXOR WIN EVE!!! INSTA ISK'  . When in reality it's a Trojan or key-logger.
But if the attack if directed on the server side where the passwords and credit card data is held then it's a problem for the host and not the user fault, I guess changing passwords every month is also a good idea.
|
ScreamingLord Sutch
Hand in Mouth
|
Posted - 2006.12.29 10:30:00 -
[3]
 Originally by: Stuart Ripley
If you are so unlucky to get your account hacked/stolen, character sold and so on... How do you get your stuff back. How can you prove it`s your account when you dont have cd-key...?? Downloaded the game.
Credit card or billing details and personal info given would be the first step in ascertaining account ownership.
Failing this I'm sure CCP could fall back on IP addresses to see login history, with common sense they could build up a picture of what happenend. The benefit of the doubt would probably go to the victim of the "hack" unleess the other party can show convincing evidence to prove the character was transferred "legally" (forum auction he won or similar)
|
Majutsu
Caldari
S.Y.N.D
|
Posted - 2006.12.29 10:42:00 -
[4]
I doubt anyone has been genuinely "hacked" for an Eve password
Any accounts lost are going to be down to
1. Giving your password to other people (your own fault)
2. Installing a keylogger of some sorts (your own fault)
Neither of which would remotely fall under hacking.
Generally if you get keylogged by someone wanting your Eve password you've installed something you shouldn't have done like the macro mining thing that was doing the rounds, you reap what you sow.
Caldari Gunboat Pilot
|
Elgar Lightfoot
Lightfoot Industries
|
Posted - 2006.12.29 11:19:00 -
[5]
The BEST protection for hacking prevention is to NOT change your passwords. Pick a good password (letters and numbers) to start and then stick with it.
The majority of thieves are script kiddies who can't really hack to save their lives. They use Trojan packages which can be obtained so easily my blind grandmother could do it.
These programs (once on your PC) capture your keypresses and relay them to the 'hacker'. The more times you type a password, the more chance they have of spotting it.
I'd recomend people start harrassing CCP to add back the saving of passwords in the client to defeat the usefullness of Keyloggers in 'hacking'
|
Andrue
Amarr
|
Posted - 2006.12.29 11:25:00 -
[6]
Edited by: Andrue on 29/12/2006 11:25:07
Originally by: Elgar Lightfoot
The BEST protection for hacking prevention is to NOT change your passwords. Pick a good password (letters and numbers) to start and then stick with it.
The majority of thieves are script kiddies who can't really hack to save their lives. They use Trojan packages which can be obtained so easily my blind grandmother could do it.
These programs (once on your PC) capture your keypresses and relay them to the 'hacker'. The more times you type a password, the more chance they have of spotting it.
I'd recomend people start harrassing CCP to add back the saving of passwords in the client to defeat the usefullness of Keyloggers in 'hacking'
I disagree most strongly.
A physical attack is actually more likely than a remote one. By that I mean someone stealing your computer or just a house guest logging in on your account. Burglary is very common and computer equipment is right up there at the top of the list.
Then there's the risk of you not clearing down old media when you scrap/sell it.
Also the risk that you will carelessly enable that option while logging in on someone else' computer (work machine, Internet cafe, friend's house). Actually I'd hope no one would be stupid enough to log into anything from the last two and generally cautious about doing it from any machine you don't have exclusive access to.
It's basically a bad habit to get into IMHO. If you change your password regularly keyloggers are less of an issue. It's not too hard to come up with a scheme for basing your password on the date.
--
(Battle hardened industrialist)
[Brackley, UK]
Linux is only free if your time is worthless |
Sinlare
Gallente
Sinlare Auditorium
|
Posted - 2006.12.29 11:26:00 -
[7]
Originally by: Majutsu
I doubt anyone has been genuinely "hacked" for an Eve password
Any accounts lost are going to be down to
1. Giving your password to other people (your own fault)
2. Installing a keylogger of some sorts (your own fault)
Neither of which would remotely fall under hacking.
Generally if you get keylogged by someone wanting your Eve password you've installed something you shouldn't have done like the macro mining thing that was doing the rounds, you reap what you sow.
Just for clarity, installing keyloggers is still a crime. If you got it from someone on msn or email or you find out where the logger is sending its data, you can still go to the police. |
Sensor Error
0utbreak
|
Posted - 2006.12.29 11:54:00 -
[8]
Originally by: Majutsu
I doubt anyone has been genuinely "hacked" for an Eve password
Any accounts lost are going to be down to
1. Giving your password to other people (your own fault)
2. Installing a keylogger of some sorts (your own fault)
Neither of which would remotely fall under hacking.
Generally if you get keylogged by someone wanting your Eve password you've installed something you shouldn't have done like the macro mining thing that was doing the rounds, you reap what you sow.
A very common attack is an e-mail based attack.
1) You find someone you want to hack.
2) You randomly bump into them, and make friends.
3) You ask them for their e-mail addy
4) You go and lookup their e-mail account security questions.
5) You Start a conversation about where you were born/ your pets/ favorite colour
voila. You now have access to their e-mail. You hit the Eve I forgot my password button, and get the username and password. Now change the e-mail, and the login details.
My tip:
Don't use the free e-mail providers with EvE - and if you absolutely
must, make sure that you have stupid answers to your sec questions. Such as
Favorite colour: Kent
Place of birth: Smith
Mothers maden name: Doggy
Pets name: Blue
RABBLE RABBLE RABBLE!!!
------------------------------------------
Dev Responses to common questions |
|
Jacques Archambault
Forum Moderator
Interstellar Services Department
|
Posted - 2006.12.29 12:54:00 -
[9]
It would also make sense not to use the same login/password combination that you use for EVE on other third party EVE-Online websites, such as fansites etc. (not accusing anyone here, just stating a security precaution).
CCP will never reveal how they investigate hacked accounts, as this may help potential hackers with their activities.
-Jacques
forum rules | [email protected] | Our Website!
Want to be an EVE-Online forum moderator? click here!
EvE +NLINE - T+TALHELLDEATH SUPPORTER
"remembered only as.... Jack" 
|
|
Mira deVorsha
|
Posted - 2006.12.29 13:20:00 -
[10]
Originally by: Majutsu
Any accounts lost are going to be down to
1. Giving your password to other people (your own fault)
2. Installing a keylogger of some sorts (your own fault)
Neither of which would remotely fall under hacking.
old skool.
I remember one from Neocron days where nearly everyone in a corp got hacked. They scanned their servers and peoples machine to try and figure out how the hacker had done so many accounts so fast.
Here is what had happened. Turned out the corp had ripped off some guy and then killed and looted him over and over (you could basically ressurect someone, kill them and more implants/loot would pop out). He created an alt. Got friendly with the clan over a period of a few months.
Then on their forums one day he posted a list of 20 or so stupid "get to know you better" questions. Junk mail type stuff you see. Some of the questions were useful though, for example "What is your mothers maiden name".
Also average players tended to have their name similar to their login name (thats a no no).
The guy then proceeded to check all those with hotmail or freemail accounts and told it they lost the password, it would ask the question like above and he got in to their mail.
From there he told the neocron servers he had forgot his password and it mailed it to them. At which point he went to town on their account. 30 or so accounts got looted and deleted.
Anyway from this you learn the obvious things.
1. Never ever have the login name the same as your character. Random as the password is generally good.
2. Never ever put in the correct answer to such questions like "mothers maiden name". Just put in a junk word you will remember.
3. Don't fill out stupid junk mail.
4. If you ever get your account looted 9 times out of 10 you will know the person looting it.
|
|
|
Winters Chill
Amarr
Ministry of War
|
Posted - 2006.12.29 13:53:00 -
[11]
Edited by: Winters Chill on 29/12/2006 13:57:12
If you are really paranoid, get an ISP that uses dynamic IP's rather than static. One of the reason many BT customers in the UK are hardly ever the victims of hacking is because of this. Also the kind of skill it requires to actually hack a PC is generally beyond the level of time/work verses reward when doing home computers. Its not worth it.
The Truth (tm)
A serious hacker, one who can slip past firewalls, virus protection and all the other stuff (even the windows basic firewall and the encrypted protection on web pages is beyond most degree level programmers) would have too put so much time and effort into hacking your account that it wouldn't be worth his while for a few hundred money units.
Its a sad fact that the "hacker scare" is simply a way for anti virus software companys and the resulting economys to make money.
Its never as bad as you think.
OH and don't be a t*t and give your password or creditcard details to ANYONE. Thats the way most people get hacked, through impersonation. So be careful of people asking you personal questions. Remember Sneaks? Most faudsters hack people, not computers. As its much much easier.
ON READING THE POST ABOVE:
Actaully that a good point. I have to free email accounts one for all my "Im stupid and forgot my password/game registraion" and another for my personal emails etc. Just in case. That way should a "friend" get lucky, they would newver know my passwords to my game accounts.
|
Jaguar Dragon
Blood Association of Dragons
|
Posted - 2006.12.29 17:40:00 -
[12]
i think most have forgotten about ccp's servers being hacked last year. hundreds of accounts were hacked into, though ccp did catch it and keeped server down, till all was replaced,
however, it did happen.
he who doesn't learn there history are bowned to repeat it
|
Shamis Orzoz
Sniggerdly
|
Posted - 2006.12.29 18:37:00 -
[13]
Edited by: Shamis Orzoz on 29/12/2006 18:38:42
1) Don't use your eve password anywhere else
2) don't give anybody else your password or username
3) choose a username different from your character name so people have to find 2 "passwords" instead of 1.
4) Avoid the P O R N.
5) consistently run a good anti-spyware program and anti-virus program, not the crap that comes with your dell computer though.
6) frequently run netstat on a dos prompt and look for connections that you didn't make. If you just closed your browser and have nothing else running, you shouldn't have a a hundred connections. This is a sure sign your computer is infected.
7) if your password is in the dictionary, you should end yourself.
Shamis
|
Herculite
Hunters Agency
Firmus Ixion
|
Posted - 2006.12.29 18:44:00 -
[14]
Almost every 'hack' I've seen in online gaming has been due to giving out the password to someone, be it a friend, guildmate, corp mate etc.
Never giving anyone your password for any reason will solve most of it.
|
Warchild Lightningblade
|
Posted - 2006.12.29 18:50:00 -
[15]
Originally by: Elgar Lightfoot
I'd recomend people start harrassing CCP to add back the saving of passwords in the client to defeat the usefullness of Keyloggers in 'hacking'
Then all the "hacker" needs to do is get the file off the infected computer that contains the password.
|
|
|
| |
|
| Pages: [1] :: one page |
| First page | Previous page | Next page | Last page |