Questions about hacking and account secuirity(backups?)

[email protected]

My m8 got his account hacked, he's nr 2 in arena and was doing pretty well, till he yesterday logged on and that was what he saw.
He's VIP 0, so he worked really hard to get all his partners and someone just hacked him and deleted all his partners and stones and equipment and inventory.
Before you ask, he says he did not share his password with anyone (except for me, since i helped him start off, AND NO, I DID NOT DO IT(just to be clear   ))

I do not understand why someone would destroy someones hard work, i mean for hecks sake, he's vip 0, he spent so many hours in tavern!...
His stones werent bad either, there is a reason he was nr 2 in arena   

Well, my question is, since i highly doubt he will get an answer from support: Is it possible to restore an account from a backup, you must make at least daily backups of the servers, since if you did not, in the case of a powerouttage, you couldve lost all data on all accounts....
So, is this possible?
Anyone else who can help my dear friend is welcome to reply here as well <3

[email protected]

support has been pretty active later, they will reply

[email protected]

[email protected] replied at 2016-1-12 09:58
support has been pretty active later, they will reply

hope so <3

Crylix

Message support, I'm not 100% sure but they can probably get your friend's stuff back. I'm also positive that they can find the hacker's IP.
If your friend didn't share his password with anyone then either the password was weak, he got scammed or his computer was hacked. There are numerous ways for someone to find their way on someone else's pc.

[email protected]

Crylix replied at 2016-1-12 10:41
Message support, I'm not 100% sure but they can probably get your friend's stuff back. I'm also posi ...

I myself am planning on becoming a CEH/network secuirity specialist later, so all the basic stuff i know already <3 and yes, it is true that his password was pretty weak, but bruteforcing it should not be possible with the right serverside authentication methods, as bruteforcing requires you being able to log into an account many times a second(which could look like a very simple and small scale ddos), i've even known of people using a modified version of some very simple ddos protection to block some bruteforce attacks, lulz.

(Ofc, timing attacks makes it possible to determine the psw without actually getting all the way through the login protocol, it also makes it possible to determine the password with less tries, but it should be a standard by now to block timing attacks by timing the delivering of pages/answering requests with a small set delay of even a couple ms, as this can make a huge difference in timingattacks (an acceptable delay as far as i remember(might be wrong about this one) would be around 30-50ms))

Thanks for the info though <3  <3  <3  <3

[email protected]

Bump ^^      

Shaffney

That sucks monkeyballz tho. That is like 3-4 months work going down the drain. I hope support can help him out with it. And next time use a good password instead of P@ssw0rd or something. Something only he can come up with even if he forgets it.

[email protected]

Shaffney replied at 2016-1-12 12:18
That sucks monkeyballz tho. That is like 3-4 months work going down the drain. I hope support can he ...

Yea, i agree.
I wont disclose the length of his psw, nor will i tell you what it was, but i will tell show you this:

595459354

It sucks but you already have violated the TOS, so the chance of them doing anything is very low.

[email protected]

595459354 replied at 2016-1-12 12:32
It sucks but you already have violated the TOS, so the chance of them doing anything is very low.

u talking about account sharing?
We did not share accounts, and about the psw, i helped him make the account, so ofc i saw the psw... <3