Prediction: More Hacked Players

[Bakthi]

Because viruses can't go over your local network right?

The only other machines on my network are Linux and OS X, which helps a bit. Of course, the only truly secure machine is turned off, unplugged, encased in cement, etc.

[ronin sparthos]

The consumer is just as much responsible for making sure their end is secure as SE is. How many times have people repeated "Use NoScript, update Flash, etc?" Being stupid is no longer a viable excuse. The information is out there, hop to it

Wasnt the whole point of this post to say that even with the most updated Flash that you could still be compromised?

spybot, ad aware, firefox onry, noscript, don't download stupid stuff, and don't go to websites you know have been compromised.

Problem is, how do you know whats compromised? Its not like the site pops up and asks you if you'd like to visit this compromised site Y/N. Somepage is suspect, Atlas and FFXIDats are suspect ok avoiding those are common sense.

Its kinda funny hearing "Avoid so-and-so site" when even BG was shown to be vulnerable to malicious attacks. Luckily the site back then got cleansed within the hour.

Edit: Looked at the date... isnt this the first Flash Exploit warning?

[Crisco]

You have to admit though that their password security was nearly nonexistent up til a month or so ago.

I was a bit naive, and because of it, I got hacked. But I didn't regularly visit forum sites that detailed such vulnerabilities and by the time the in-game community (xp pts, ls chat, etc...) started talking about useful saftey precautions it was too late. This usually goes for most people that got hacked. Either not savvy enough to use things like NoScript, AdBlocker, etc...or they didn't have the exposure to the information detailing how to protect themselves. You're right though, that the user should be held partially responsible, but SE is far from off the hook.

[The Blackrose]

Wasnt the whole point of this post to say that even with the most updated Flash that you could still be compromised?

Except I was addressing someone who was whining about SE's countermeasures. And I do agree with him that up to this point, shit was shoddy on their end.

Furthermore, I hate Flash with an absolute passion. Hated it before all of this started up. This just sort of cements a few things.

Problem is, how do you know whats compromised?

Its kinda funny hearing "Avoid so-and-so site" when even BG was shown to be vulnerable to malicious attacks.

I'm pretty sure every person who was using NoScript knew immediately that BG was compromised.

[Zidiane]

It lists the current flash version, so i guess it was shortly after the first. 3 Months is quite sometime so my guess is, its only the pro-rmt who are able to use it.

Also logic would say, if they were after ff/wow accounts, wouldn't they actualy put them on sites which people would visit. >.>

[Izzy]

I'm pretty sure every person who was using NoScript knew immediately that BG was compromised.

This.

Plus, the scripts that are run aren't actually run off of BG's webspace. The IFRAME is put into the code and the script runs from a different site. Basically if you were using noscript and you had bluegartr.com on your whitelist, you would be perfectly safe. You would not be safe if you were a dumbass if you clicked "allow scripts from 69.143.25.i'mgoingtostealyouraccount".

[Gulkeeva]

Well considering what "was infected on BG was the banner (that you see no matter where you go on the forums) I'm sure the same can be done any msot any other forum site

Noscript is nice, although you need to manually set it to filter "iframes" also, seems to be disabled by default (dunno why!) but alot exploits come from Iframe scripting also.

[yrpaine]

geez, gunna have to start running a virtual machine just to browse the internet. http://www.virtualbox.org/

[Shuemue]

simple. It's usually always the front page that's compromised right?

i saved the sacrarium map page from atlas, and the item search page for somepage, in bookmarks. Even when the site was infected, if i didn't go to that specific page, problem solved. heh.

It's common sense, people.

Sorry but that's simply not how it works.

[thinktank]

geez, gunna have to start running a virtual machine just to browse the internet. http://www.virtualbox.org/

Sounds like a great idea. I was thinking of using the virtualbox from sun and then install xubuntu to browse websites.

[Kuwait-cafe]

Uh no, all SE needs to do is:

<Dude> I got haxxed halp!
<SE> Ok, please confirm so and so information of your acct. to see you are who you are.
<SE> Everything is correct sir, give me a few minutes to access the database and fix your PW.
<SE> All set sir, please login and change your password, etc, etc
<Dude> Ty lol. Call you back in 3 months when my retarded ass gets compromised again.

There you go, happy customers. The process becomes a little more complicated when people QQ about their lost Kclub of course.

<Dude> ahh man i got haxxed halp, oh i know wut to do ill call up SE and get it back. OH Thats right TODAY IS FUCKING SATURDAY AND THIS HACKER GOTS 2 DAYS TO SELL OFF MY SHIT. GG
<SE> LOL PWNED

[Ruiner]

I've been doing this for two years now. I play on my PC and surf the net on my Mac.

This.

[Amok]

9.0.124.0 is still the latest version on adobe.com

[Kang]

I hope this isn't true that more people will be hacked. I usually use ffxi-related web sites on my Mac but i had to take it in to school to be fixed so for the last couple of days, I haven't used those sites since I'm now using the PC I play FFXI on to surf te net. Just being cautious.

It's so gay how this shit is impeding a game I like to play >.<

[Aikar]

read for tips on protecting self
http://forums.windower.net/index.php?showtopic=13208