EntropiaForum.com
Go Back   EntropiaForum.com > Information > About Entropia Universe > Security
Notice
Security Discussion relation to Entropia Universe account security.

Reply
 
LinkBack Thread Tools
Old 07-11-2008, 14:49   #121
Rode Hard and Put Up Wet
Darker_Star's Avatar
Become a premium member today and enjoy enhanced EntropiaForum features!
Darker_Star AmateurDarker_Star AmateurDarker_Star AmateurDarker_Star Amateur  
  Activity Longevity
3/2010/20
Posts: 567
Gender: Male Ingame: Male
Avatar Name:
LokiDarkStar
Soc: Dawn Daemons**
Location: South Korea
EFD: 1.36
Reputation: Amateur
Fame: 0 Achievements: 0
Avoidance Coolness Blueprint Comprehension Serendipity
Wounding Mineral Sense Medicine
Hummm...

hummm...don't agree with Bruud a lot, but here I must...

Get a Gold Card...if you have one then MA (MUST????) do something????

At least I hope so...

DS...(Don't trust MA that much, but the gold card is the best thing we have at this moment...)




Quote:
Originally Posted by BruuD View Post
I really think people should stop acting like fools and get a goddamn Gold Card.
MA provided us top security with the goldcard system, but if you fail to use it then its your own fault!

What if they implement passwords on storage containers..
Dont you think that a "hacker" would get that password exactly the same way as they got the account password?

@iatragenesis: Surprised about the amount of "hacks" in this game?
I'm not.. EU users are a good target cause their accounts are worth real money and if you are ignorant enough to not use a goldcard it's a walk in the park even for 12 year old scriptkiddies.
It's nothing technical or complex, it's ppls ignorance/stupidity that allows easy access to these accounts.
And if you can get full access to your bank account with only a username and password i would seriously worry about my bank's security!

Sorry if i sound a bit harsh but i've seen maybe 40 of this kind of threads by now and the final conclusion is always the same: GET A GOLDCARD!
It is the only way to make sure your account is secure!
Darker_Star is offline Reply With Quote
Sponsored Links
Old 07-11-2008, 17:17   #122
Provider
ZeroX's Avatar
ZeroX GreenZeroX Green  
  Activity Longevity
3/2011/20
Posts: 164
Gender: Male Ingame: Male
Avatar Name:
zerox 666 666
Soc: HYPERBOREAN
Location: Latvia
EFD: 4,736.83
Reputation: Green
Fame: 119 Achievements: 1
Flower Calypso Ground Assessment Extraction

i dont understand one thing: why MA wont help to players who got hacked, they just say its their own foult, but MA have or atleast should have item tracking system, so they could see who traded, or picked up lost items, ar atleast see from what ip hacker was logged on...
ZeroX is offline Reply With Quote
Old 07-11-2008, 17:24   #123
Dominant
Indigo Wyrd's Avatar
Indigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd Initiated  
  Activity Longevity
3/203/20
Posts: 459
Blog Entries: 21
Avatar Name:
Indigo Rage Wyrdweaver
Soc: Chetara
Location: Anywhere
EFD: 357.60
Reputation: Initiated
Fame: 0 Achievements: 0
Style: Original EF Skin

Quote:
Originally Posted by ZeroX View Post
i dont understand one thing: why MA wont help to players who got hacked, they just say its their own foult, but MA have or atleast should have item tracking system, so they could see who traded, or picked up lost items, ar atleast see from what ip hacker was logged on...
The do have logs of virtually every transaction, if not every transaction that takes place.

Personally, I think we should be able to access our own personal transaction logs for ourselves, Read Only access. That would probably solve a whole bunch of problems all at once.
Indigo Wyrd is offline Reply With Quote
Old 07-11-2008, 17:29   #124
Elite
onyx oZ Zombie's Avatar
EntropiaForum Senior Member, click here for more information.
onyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professionalonyx oZ Zombie Professional  
  Activity Longevity
5/2014/20
Posts: 4,115
Gender: Male Ingame: Male
Location: St. Louis, US
EFD: 11.87
Reputation: Professional
Fame: 468 Achievements: 10
Style: TI Second Entity
Serendipity Ranged Damage Assessment Marksmanship

Quote:
Originally Posted by sharque View Post
Almost the same thing happened to me this week. A friend of mine told me that a day before i wasn't answering to his PM's.
fyi, there is a recurring bug that can show one person that another person from the FL has logged on, when in fact this is not the case - this bug is older than dirt and quite possibly what happened =)

Last edited by onyx oZ Zombie; 07-11-2008 at 17:34..
onyx oZ Zombie is offline Reply With Quote
Old 07-11-2008, 17:37   #125
Prowler
Pirx Danford's Avatar
Pirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford SkilledPirx Danford Skilled  
  Activity Longevity
6/2013/20
Posts: 1,356
Blog Entries: 3
Gender: Male Ingame: Male
Avatar Name:
Pirx Danford
Soc: Federation of Free Wanderers
Location: Germany
EFD: 595.02
Reputation: Skilled
Fame: 1623 Achievements: 32
Style: Minopolis Araneatrox

Quote:
Originally Posted by Indigo Wyrd View Post
The do have logs of virtually every transaction, if not every transaction that takes place.

Personally, I think we should be able to access our own personal transaction logs for ourselves, Read Only access. That would probably solve a whole bunch of problems all at once.
The idea is not all bad, but what I do not like is that someone could access that info on the webpage too easily.
Actually its the same with the "my items" section, that is just too damn much info.

Now that the Goldcard is integrated in the webpage I would love it, if you would need the goldcard to access the my items section.
Also then to integrate a "last transactions" section abailable with a goldcard number would be pretty nice.

There is much room for improvement and some of it could be used to encourage buying of the goldcard.
Pirx Danford is offline Reply With Quote
Old 07-11-2008, 17:42   #126
Prowler
This member has helped support EntropiaForum in the past via donations.
Noggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin EliteNoggin Elite  
  Activity Longevity
3/2018/20
Posts: 1,418
Gender: Male Ingame: Male
Avatar Name:
Balthazar Noggin Fishburn
Soc: nothing AND nowhere (nAn)
Location: UK
EFD: 535.28
Reputation: Elite
Fame: 0 Achievements: 0

Quote:
Originally Posted by ZeroX View Post
i dont understand one thing: why MA wont help to players who got hacked, they just say its their own foult, but MA have or atleast should have item tracking system, so they could see who traded, or picked up lost items, ar atleast see from what ip hacker was logged on...
Well, I understand why they won't help - it's far easier to do nothing.

The right and wrongs of all this are complex, as MA themselves could make themselves vulnerable by doing so.

Lets for a minute try to imagine (try hard) that MA are a very helpful, friendly and customer focused company, and that they have a policy to help people who have been on the wrong end of an attack.

Now, lets say you were hacked, and this greedy little person sold off your Mann MPH collection, along with your priceless Adjusted Combibo statue. They most likely transferred the PED to another avatar, then sold off the ped on eBay or the like.

By the time you noticed anything was awry, all the stuff had been liquidated. Imagine the amount of effort that would be involved in restoring it! It could be done, but whoever bought the PED offline would most likely bear the brunt of the problem.

I can understand why MA don't do this. This safety net would inevitably make people less bothered about security, and therefore this kind of thing would happen more often. MA would probably have to employ another person solely to perform this operation day-in, day-out, and IP ban all the nasty little hacky people.

I can imagine that it would not be a very cost effective way to run the business. Could MA afford to do it? I imagine so. But I'm sure most people would rather they spent the money on something more worthwhile (and maybe preventative?)

If they managed to stop the hacker mid-flow, I think it should be a different story, however. In that case it has to be a lot more simple to restore items and get rid of the lowlife in question.
__________________
Quote:
Originally Posted by Etopia
..but if you think MA will use a player compliant solution , you put your fingeur in your eye so deep you can touch your pantie that sure ...
Noggin is online now Reply With Quote
Old 07-11-2008, 17:51   #127
Old Alpha
WoenK InitiatedWoenK InitiatedWoenK InitiatedWoenK InitiatedWoenK InitiatedWoenK Initiated  
  Activity Longevity
7/204/20
Posts: 1,100
Gender: Male Ingame: Male
Avatar Name:
Irdeta WoenK Hocren
Soc: Riverboat Academy
Location: Munich
EFD: 6.02
Reputation: Initiated
Fame: 155 Achievements: 5

I admit I did not read all, but maybe that gremlin arm guards that got sold for over 12k could be a good hint to where the things went.
__________________
!!!ROBOTI ITE DOMUM!!!
Let their oil burn like hell!

Globals Hunting: 176 Mining: 6 Crafting: 28
HoFs Hunting: 2
WoenK is offline Reply With Quote
Old 07-11-2008, 19:46   #128
Prowler
Staffas's Avatar
Staffas AdeptStaffas AdeptStaffas AdeptStaffas AdeptStaffas AdeptStaffas AdeptStaffas AdeptStaffas AdeptStaffas AdeptStaffas Adept  
  Activity Longevity
9/207/20
Posts: 1,594
Blog Entries: 10
Gender: Male Ingame: Male
Avatar Name:
Eufrat Frat-boy Tigris
Soc: Orange Juice, OJ
Location: Sweden/Switzerland
EFD: 987.83
Reputation: Adept
Fame: 1580 Achievements: 26
Coolness Serendipity Marksmanship Ranged Damage Assessment
Ek 2600 Blueprint Comprehension

Quote:
Originally Posted by xuxa View Post
considering i dont go on any unknown sites or download random shit
now im fucked out of all my items they cleaned it out completely
im missing over 13k worth of items armor and skills so fucking mad
now idk wtf to do i was suppose to give that armor back in a few weaks now i dont got nothing idk wtf ima do im realy loosing hope at this point
please if anyone seen my avatar trading with poeple or selling items
please tell me names any info is well eneded

xuxa out
Quote:
Originally Posted by xuxa View Post
the armor i had wasnt a loan today get hacked tommarrow
i had it over several months for a pay monthly plan
that doesnt matter now its gone
Quote:
Originally Posted by xuxa View Post
agreed as of now im trying to get in contact with the armor owner let her know the situation and see what i can do to repay her for the lost set
she wont be happy but il do my best
I am not saying anything for or against here, but alot of this thread has been about you borowed that armor.
Aparently you had it on a payment plan, it is a different thing. Maby just a bad choise of words?
Basicly the armor was yours so I cant se that the original owner of the Boar will be mad at you as long as you continue to pay off the armor.
I hope that everything works out ok for you.
__________________
Track reckordHunting Global:Team:79 Solo:212
HOF: Team: 4 Solo: 18 (including 4 solo über)
Mining Global:6 HOF:1 Crafting Global:86 Crafting HOF:8 (including 4 Uber)
Staffas is offline Reply With Quote
Old 07-11-2008, 20:42   #129
Elite
EntropiaForum Senior Member, click here for more information.
Vedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder IncredibleVedder Incredible  
  Activity Longevity
7/2017/20
Posts: 4,238
Gender: Male Ingame: Male
Soc: MLS
EFD: 726.49
Reputation: Incredible
Fame: 1427 Achievements: 42

Quote:
Originally Posted by ZeroX View Post
i dont understand one thing: why MA wont help to players who got hacked, they just say its their own foult, but MA have or atleast should have item tracking system, so they could see who traded, or picked up lost items, ar atleast see from what ip hacker was logged on...
Quote:
Originally Posted by Noggin View Post
Well, I understand why they won't help - it's far easier to do nothing.

The right and wrongs of all this are complex, as MA themselves could make themselves vulnerable by doing so.

Lets for a minute try to imagine (try hard) that MA are a very helpful, friendly and customer focused company, and that they have a policy to help people who have been on the wrong end of an attack.

Now, lets say you were hacked, and this greedy little person sold off your Mann MPH collection, along with your priceless Adjusted Combibo statue. They most likely transferred the PED to another avatar, then sold off the ped on eBay or the like.

By the time you noticed anything was awry, all the stuff had been liquidated. Imagine the amount of effort that would be involved in restoring it! It could be done, but whoever bought the PED offline would most likely bear the brunt of the problem.

I can understand why MA don't do this. This safety net would inevitably make people less bothered about security, and therefore this kind of thing would happen more often. MA would probably have to employ another person solely to perform this operation day-in, day-out, and IP ban all the nasty little hacky people.

I can imagine that it would not be a very cost effective way to run the business. Could MA afford to do it? I imagine so. But I'm sure most people would rather they spent the money on something more worthwhile (and maybe preventative?)

If they managed to stop the hacker mid-flow, I think it should be a different story, however. In that case it has to be a lot more simple to restore items and get rid of the lowlife in question.
Agree... And now imagine even worse scenario: MA tries to help and roll back the involved transactions, thereby affecting maybe 10 or more innocent people who just happened to trade with the involved avatar(s) after the incident, or even an avatar who traded and avatar who traded.... (you get the point)

And yet worse: In this long and complicated process, MA makes a mistake and confiscates an item from the wrong person.
Or maybe the one claiming to be scammed, was really working together with the scammer, to leach money out of EU, while MA compensates the guy being scammed.

It's a nightmare of possible mistakes, unhappy customers and shaky legal boundaries.


But anyway... The main point remains:

MA should NOT waste time/money (that WE ultimately have to pay for), resolving scams for people without GC:

JUST GET A FRIKKIN' GC!
Vedder is offline Reply With Quote
Old 07-12-2008, 00:32   #130
Dominant
Indigo Wyrd's Avatar
Indigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd InitiatedIndigo Wyrd Initiated  
  Activity Longevity
3/203/20
Posts: 459
Blog Entries: 21
Avatar Name:
Indigo Rage Wyrdweaver
Soc: Chetara
Location: Anywhere
EFD: 357.60
Reputation: Initiated
Fame: 0 Achievements: 0
Style: Original EF Skin

Quote:
Originally Posted by Entropia Universe EULA
If you should happen to willfully or otherwise reveal your Password and/or Login, you have relinquished your right to any assistance regarding the possible outcomes or consequences based upon your actions. Your Account may be terminated if you let someone else use it inappropriately. If your Account is terminated for any reason, MindArk is under no obligation to provide you a license to use the Entropia Universe in the future.
Right there is the reason why MindArk won't do anything to help the hacked.
"If you should happen to willfully or otherwise [...]" in this case "otherwise" would be unwillingly or unwittingly, such as by being honestly hacked, falling victim to a keylogger, phishing scam, or abducted by government agents, pumped full of sodium penethol, and waterboarded until you gave up your password, this part of the EULA is still a valid reason for MindArk to take no action on your behalf. This is better known as a "Too bad, So Sad, Sucks to be You" Clause.

Does make it good or bad, just that it is what it is.
Indigo Wyrd is offline Reply With Quote
Reply

Bookmarks