Bleach Online Forum

Title: Questions about hacking and account secuirity(backups?) [Print this page]

author: [email protected] time: 2016-1-12 03:54:30 Title: Questions about hacking and account secuirity(backups?)

Edited by [email protected] at 2016-1-12 10:02

[attach]11396[/attach][attach]11395[/attach]

My m8 got his account hacked, he's nr 2 in arena and was doing pretty well, till he yesterday logged on and that was what he saw.
He's VIP 0, so he worked really hard to get all his partners and someone just hacked him and deleted all his partners and stones and equipment and inventory.
Before you ask, he says he did not share his password with anyone (except for me, since i helped him start off, AND NO, I DID NOT DO IT(just to be clear

))

I do not understand why someone would destroy someones hard work, i mean for hecks sake, he's vip 0, he spent so many hours in tavern!...
His stones werent bad either, there is a reason he was nr 2 in arena

Well, my question is, since i highly doubt he will get an answer from support: Is it possible to restore an account from a backup, you must make at least daily backups of the servers, since if you did not, in the case of a powerouttage, you couldve lost all data on all accounts....
So, is this possible?
Anyone else who can help my dear friend is welcome to reply here as well <3

author: [email protected] time: 2016-1-12 03:58:44

support has been pretty active later, they will reply

author: [email protected] time: 2016-1-12 04:34:06

[email protected] replied at 2016-1-12 09:58
support has been pretty active later, they will reply

hope so <3

author: Crylix time: 2016-1-12 04:41:35

Message support, I'm not 100% sure but they can probably get your friend's stuff back. I'm also positive that they can find the hacker's IP.
If your friend didn't share his password with anyone then either the password was weak, he got scammed or his computer was hacked. There are numerous ways for someone to find their way on someone else's pc.

author: [email protected] time: 2016-1-12 05:06:06

Edited by [email protected] at 2016-1-12 12:02

Crylix replied at 2016-1-12 10:41
Message support, I'm not 100% sure but they can probably get your friend's stuff back. I'm also posi ...

I myself am planning on becoming a CEH/network secuirity specialist later, so all the basic stuff i know already <3 and yes, it is true that his password was pretty weak, but bruteforcing it should not be possible with the right serverside authentication methods, as bruteforcing requires you being able to log into an account many times a second(which could look like a very simple and small scale ddos), i've even known of people using a modified version of some very simple ddos protection to block some bruteforce attacks, lulz.

(Ofc, timing attacks makes it possible to determine the psw without actually getting all the way through the login protocol, it also makes it possible to determine the password with less tries, but it should be a standard by now to block timing attacks by timing the delivering of pages/answering requests with a small set delay of even a couple ms, as this can make a huge difference in timingattacks (an acceptable delay as far as i remember(might be wrong about this one) would be around 30-50ms))

Thanks for the info though

<3 <3 <3 <3

author: [email protected] time: 2016-1-12 06:04:35

Bump ^^

author: Shaffney time: 2016-1-12 06:18:41

That sucks monkeyballz tho. That is like 3-4 months work going down the drain. I hope support can help him out with it. And next time use a good password instead of P@ssw0rd or something. Something only he can come up with even if he forgets it.

author: [email protected] time: 2016-1-12 06:24:15

Edited by [email protected] at 2016-1-12 12:32

Shaffney replied at 2016-1-12 12:18
That sucks monkeyballz tho. That is like 3-4 months work going down the drain. I hope support can he ...

Yea, i agree.
I wont disclose the length of his psw, nor will i tell you what it was, but i will tell show you this:
[attach]11397[/attach]

author: 595459354 time: 2016-1-12 06:32:06

It sucks but you already have violated the TOS, so the chance of them doing anything is very low.

author: [email protected] time: 2016-1-12 06:33:27

595459354 replied at 2016-1-12 12:32
It sucks but you already have violated the TOS, so the chance of them doing anything is very low.

u talking about account sharing?
We did not share accounts, and about the psw, i helped him make the account, so ofc i saw the psw... <3

author: 595459354 time: 2016-1-12 06:34:53

Edited by 595459354 at 2016-1-12 12:38

[email protected] replied at 2016-1-12 12:33
u talking about account sharing?
We did not share accounts, and about the psw, i helped him make t ...

You're not allowed to hand out your pw tbh.. (they can ban you for that)

Then again, I do understand the situation but yeah you know that the chance of them restoring it is very slim
edit: part of the TOS

Your Password

At the time your account is opened, you must set a password. You are responsible for maintaining the confidentiality of your password and are responsible for any harm resulting from your disclosure, or authorization of the disclosure of your password or from any person's use of your password to gain access to your account or account name. At no time should you respond to an online request for a password other than in connection with the log-on process to the Services. Should it be determined that you did reveal your password to any third parties, GoGames reserves the right to disable the account.

author: [email protected] time: 2016-1-12 06:55:46

595459354 replied at 2016-1-12 12:34
You're not allowed to hand out your pw tbh.. (they can ban you for that)

Then again, I do understa ...

"and are responsible for any harm resulting from your disclosure, or authorization of the disclosure of your password"

This hack was not result of the disclosure or authorization of the disclosure of his password of his password.

author: [email protected] time: 2016-1-12 07:02:47

595459354 replied at 2016-1-12 12:34
You're not allowed to hand out your pw tbh.. (they can ban you for that)

Then again, I do understa ...

Well, all i can do is hope we get an answer and solution, otherwise ill try to get him another account for free <3

author: 595459354 time: 2016-1-12 08:25:58

[email protected] replied at 2016-1-12 13:02
Well, all i can do is hope we get an answer and solution, otherwise ill try to get him another acc ...

you forgot to read this part: "should it be determined that you did reveal your password to any third parties, GoGames reserves the right to disable the account."

aka you're basically saying with this thread: Disable my account.

But I know what you're getting at.. just don't think you should say some stuff.. which could end up disbaling your friends acc..

author: [email protected] time: 2016-1-12 08:44:01

If it is indeed disabled, which is unlikely to happen, i did ready the part, yes.
But as far as i have had contact with them and/or heard stories, they are not too unreasonable, the fact that two people know the password after creating the account does not mean that he revealed it to me, you could argue that we both made the psw(ofc, if we did, the psw wouldve never been that weak, but the point still counts xD)
Well anyways, it's not really something im going to get in an argument over as we both stand on esseantially the same point

author: Sylencer90 time: 2016-1-12 09:06:24

Note: The author has been banned or deleted.

author: AssassinwithRPG time: 2016-1-12 12:45:05

Hacking a VIP 0, now a VIP 10 understandable. But why would hack and destroy an account of VIP 0 which wasn't even top. Could be a ban(although I don't see a reason), or fuck up directly from gogames rather than a hacker attack. Just my opinion, brute force is likely to work on this game, don't think they have any time limits or "password" attempts limits. But the target seems a bit weak for someone which is skilled enough to hack a game or create brute force program.

author: DeEmEn time: 2016-1-12 12:59:21

The only people that will benefit from this is probably one of the top 5 player that hacked him. Lower competition helps them grow faster. But for now, it doesn't matter who did it... Recover the account is your first priority.

author: [email protected] time: 2016-1-12 19:22:04

AssassinwithRPG replied at 2016-1-12 18:45
Hacking a VIP 0, now a VIP 10 understandable. But why would hack and destroy an account of VIP 0 whi ...

I agree

author: [email protected] time: 2016-1-12 19:22:37

DeEmEn replied at 2016-1-12 18:59
The only people that will benefit from this is probably one of the top 5 player that hacked him. Low ...

My thought excactly, allthough im not accusing them of anything without evidence to back me up <3

author: Zento-Hazashi time: 2016-1-12 19:43:42

FUCK

My m8 got his account hacked

author: [email protected] time: 2016-1-13 03:50:17

[email protected] replied at 2016-1-12 09:58
support has been pretty active later, they will reply

They replied pretty fast, i will update on the status and if it gets fixed, but it seems that gogames has had some interesting and positive changes to their attitude to helping players

Welcome to Bleach Online Forum (http://forums.gogames.me/)