Advice on stolen account (FL+ related)

[alphacat]

Hi, woke up today, pw changed, character logged on, account gone.

Since quite a few people have lost their accounts before, I'd like to ask a little advice. Apparently you need 5 pieces of info in order to get a PW reset:

Name
Date of Birth
Current address
Current CC
Original Reg code

I've called the service desk, and the lady told me that I need all 5 info in order to get an account reset. But here's the problem, the person who took my account changed both the address and CC, therefore, it's impossible to provide all 5 info. Also, I made up a DoB when I registered for PoL, so that's out too. The staff told me that he could see that what I gave him was the old CC (current as of 9hrs ago), but he needs the current CC. Since my current address was also changed, there's nothing they can do.

So my question is, how do you guys get a PW reset when you don't have all the info they want?

In case anyone wonders, no, I don't use any hacks. Nobody, EVER, had my PoL ID and/or PW other than myself. I've never pm'd and email'd even myself those info. The only third party tools I use is the windower. (also unlikely to be the problem) I also have an unique PW for PoL than anything I use elsewhere.

*Edit*
Added character info:

Name: Aace
Server: Odin
Race: Elvaan male face 7B
Jobs: 75 sam 72 drg, all mage jobs 75
Special characteristics:
Smithing 99+3
Morigan robe, slops, Maruk legs, multiple other 35 salvage pieces

In case the person changes server (and name) or puts it on sale, these are my character info. Please kill on sight, and don't let this guy in any HNMLS.

[Sidanoir]

Did you uniquely use your POL ID as pass?

[ceolceol]

Did you ever have POL change your password for you and forget to change it back?

*winkwink*

[skurlover]

Ryko did it.

[alphacat]

Did you ever have POL change your password for you and forget to change it back?

*winkwink*

Yes.

Was that the problem?

I still don't get how anyone got my ID though.

[Amele]

if you obviously have the CC from 9hours ago; just keep calling and eventually you'll get someone who will fix it for you.


...you never changed it after the reset it? bad you.

[draxyl]

The brute of forces figured out your account name.

[skurlover]

Did you ever have POL change your password for you and forget to change it back?

*winkwink*

Yes.

Was that the problem?

I still don't get how anyone got my ID though.

From the "other thread", you can randomly generate POL IDs with a program. If said person knew the password that it is reset to, they can generate the ID if I remember the thread correctly.

[ceolceol]

PM'd, alpha.

DON'T TAZE ME BRO

[alphacat]

I still don't get how anyone knows either the PW or ID, since I've never given it to anyone, or even have it in my email account. I did have SE reset my pw once a year or so ago, and I never bothered to change it again.

It seems like SE rep simply states that it's against company policy to reset pw unless you provide all 5 info, which is pretty fucked up.

[Ferien]

I still don't get how anyone knows either the PW or ID, since I've never given it to anyone, or even have it in my email account. I did have SE reset my pw once a year or so ago, and I never bothered to change it again.

It seems like SE rep simply states that it's against company policy to reset pw unless you provide all 5 info, which is pretty fucked up.

As far as I know, if you have the original Reg codes they'll do it anyway.

[ceolceol]

I still don't get how anyone knows either the PW or ID, since I've never given it to anyone, or even have it in my email account. I did have SE reset my pw once a year or so ago, and I never bothered to change it again.

It seems like SE rep simply states that it's against company policy to reset pw unless you provide all 5 info, which is pretty fucked up.

Somehow, someway, someone got ahold of the PW. By some means. And by somewhat similar means, blargy blahg burrddggassdfasdfasdfdadfsd.

Short story short: POL FL+ was fucked, so it fucked over people who didn't change their POL PW when SE changed it.

[alphacat]

If they knew this was a problem why doesn't anyone acknowledge it and actually help get people's accounts back.

[Kensaki]

Safe face for granite!

[Ryko]

If they knew this was a problem why doesn't anyone acknowledge it and actually help get people's accounts back.

Because the last topic where it was being discussed got deleted because SE's good at shutting people up and people were letting all sorts of cats out of bags, although in this case it was for everyone's good that they did.

Ryko did it.

Kinda wish I did, this guy's a fucking dingbat.

[Seraph]

Hi, woke up today, pw changed, character logged on, account gone.

Since quite a few people have lost their accounts before, I'd like to ask a little advice. Apparently you need 5 pieces of info in order to get a PW reset:

Name
Date of Birth
Current address
Current CC
Original Reg code

I've called the service desk, and the lady told me that I need all 5 info in order to get an account reset. But here's the problem, the person who took my account changed both the address and CC, therefore, it's impossible to provide all 5 info. Also, I made up a DoB when I registered for PoL, so that's out too. The staff told me that he could see that what I gave him was the old CC (current as of 9hrs ago), but he needs the current CC. Since my current address was also changed, there's nothing they can do.

So my question is, how do you guys get a PW reset when you don't have all the info they want?

In case anyone wonders, no, I don't use any hacks. Nobody, EVER, had my PoL ID and/or PW other than myself. I've never pm'd and email'd even myself those info. The only third party tools I use is the windower. (also unlikely to be the problem) I also have an unique PW for PoL than anything I use elsewhere.

I felt bad, until I read this. Why in the world would you just make up a random DoB? Don't want SE sending you a birthday card, or were you legally too young to play when you first started or something?

Also, mandatory Change your default password, don't ever post account info online, don't ever share account info, etc.

[Lynsy]

This is why we weren't fuckin supposed to discuss how it was done. It's too easy to replicate...and sometimes it's not just for the lulz.

[Ryko]

This is why we weren't fuckin supposed to discuss how it was done. It's too easy to replicate...and sometimes it's not just for the lulz.

Sad but true, anyone with half a brain with the smallest fucking info of what was exploited could have recreated it in a heartbeat.

[Sidanoir]

SE needs a serious policy change....on getting accounts back.

Original Reg Codes is a pretty fucking good sign you are the owner of the account, am I right? SINCE ACCOUNTS ARE NON TRANSFERRABLE ANYWAY RIGHT?

Current CC....LOL, as was said this is first thing people change when they jack accounts..

[alphacat]

Yah, that's why I was asking about how the guys who lost their accounts got it back. I know the CC and address were changed, so they must have made an exception.

I keep getting this Joel guy, who keeps telling me that you need to varify ALL 5 information, and there's nothing they can do.