Accounts Stolen, Possible Facebook Warning

[Phlow]

I don't understand why people are so against Facebook. There's absolutely nothing wrong with it, and its so easy to coordinate events with my friends through Facebook.

http://www.youtube.com/watch?v=QBw3x-JzIXo

That's why.

[Alphavision]

http://lite.facebook.com

[enoch]

Too bad that doesn't affect anyone who is just playing the game. You don't HAVE to do RMT and get scammed.

By agreeing to the game, aren't you also agreeing to give them access to all your personal details? That's usually the MO of these facebook apps. Even if you're not doing any RMT business, your details are still out there being bought and sold en masse.

[Kaslo]

By agreeing to the game, aren't you also agreeing to give them access to all your personal details? That's usually the MO of these facebook apps. Even if you're not doing any RMT business, your details are still out there being bought and sold en masse.

Oh noes! Someone's gonna know I like Timeline and Kevin Smith movies!

But in seriousness there isn't anything on my profile the world can't see already.

[Corrderio]

Ahem.

http://www.techcrunch.com/2009/10/31...ystem-of-hell/

Scroll down and check all the updates.

I don't pay for cash in that game. I currently have over 100,000 coins and ~24 bucks. I have no intention of paying money for a game I only play for less than an hour a day.

[fishstix]

kinda related to the whole social networking stuff

http://www.collegehumor.com/article:1796236

[Artemas]

About two weeks, I tried to log into my account and found the SE password was changed. I didn't download anything dangerous, nor do I visit strange sites, but I did an AVG check anyways. Nothing came up. I changed the SE password online and let a GM know. He said there was no issue with passwords, but I wonder at that.

Nothing on any character linked to the token (token is disabled) was compromised or changed. Just strange.

[RyanWh]

About two weeks, I tried to log into my account and found the SE password was changed. I didn't download anything dangerous, nor do I visit strange sites, but I did an AVG check anyways. Nothing came up. I changed the SE password online and let a GM know. He said there was no issue with passwords, but I wonder at that.

Nothing on any character linked to the token (token is disabled) was compromised or changed. Just strange.

did u share ur pw with some1 else? and did u get ur account back?

[Rulob]

...or which Twilight character are you? ....

I fucking LOL'd

[TheMysteriousX]

did u share ur pw with some1 else? and did u get ur account back?

My Pandemonium Warden is safe. No idea what "ur" account is. Is it like an SE account?

[Callisto]

Was she not using security token?

Just to note, yes she had one.

Whatever got on her computer turned her user account to no longer be the admin, changed the registry and made a fake POL login interface or something(or keylogged the real one, idk how it works) that took her S-E password and one-time password when she entered it, then crashed and used that on their end to log in and change her passwords.

Luckily she thought to use my laptop to attempt to log into her account a few times to boot whoever was on there so they couldn't do much on the actual account. The one-time passwords are not actually one-time usage though, I've used the same one to log into my main and then my mule a few minutes later(they're linked to the same token), so booting a person who stole it only once won't really do a whole lot, I believe it was shown the 6-digit codes are good for like 20-40 minutes.

[Kaslo]

I think it was timed at 23 minutes, which really sucks if you DC within the first 20 minutes of being logged in and have to wait for it to reset.

[Phlow]

I think it was timed at 23 minutes, which really sucks if you DC within the first 20 minutes of being logged in and have to wait for it to reset.

What kind of faggot security is that. My work has tokens that reset every 2 minutes.

[Destinye]

The codes are good for 20-25 minutes, but they're rendered useless the second you use it.

Also, most tokens tend to have codes that last around 15 minutes or less, it's just a threshold.

[Callisto]

they're rendered useless the second you use it.

Last week I used one to log into my main on the PC, then used it a minute later to log onto my 2nd account on the 360, I don't think they even become invalid when used.

I bought mine for the satchel anyways so w/e.

[bungiefan]

I think it was timed at 23 minutes, which really sucks if you DC within the first 20 minutes of being logged in and have to wait for it to reset.

You still get a new code every 30 seconds, and using a newer code will invalidate all older codes previously generated. Thus you only have to wait 30 seconds after the last login attempt to log in again.

[Nishida]

a thinger popped up that crashed her Firefox

The hell is a thinger?

[MaachaQ]

Just to note, yes she had one.

Whatever got on her computer turned her user account to no longer be the admin, changed the registry and made a fake POL login interface or something(or keylogged the real one, idk how it works) that took her S-E password and one-time password when she entered it, then crashed and used that on their end to log in and change her passwords.

Luckily she thought to use my laptop to attempt to log into her account a few times to boot whoever was on there so they couldn't do much on the actual account. The one-time passwords are not actually one-time usage though, I've used the same one to log into my main and then my mule a few minutes later(they're linked to the same token), so booting a person who stole it only once won't really do a whole lot, I believe it was shown the 6-digit codes are good for like 20-40 minutes.

This is exactly what they do, but in order to get into your stuff they log into your SE account using the 1 time password you "gave" them, and unlink your token first. By unlinking your token they can then log into POL without it and change that password. I had a friend a few weeks ago hacked who used a token, and this seems to be the way they got him.

Whatever happened to my account, they didn't get as far as unlinking my token, I believe because I tried to log in right away again and invalidated any 1 time password they may have gotten. No idea how my POL password and my husband's got changed, or corrupted, but we've been fine since I called SE support and had our passwords reset.

[Kaslo]

You still get a new code every 30 seconds, and using a newer code will invalidate all older codes previously generated. Thus you only have to wait 30 seconds after the last login attempt to log in again.

It has never worked that way for me...

[Dowzer]

About two weeks, I tried to log into my account and found the SE password was changed. I didn't download anything dangerous, nor do I visit strange sites, but I did an AVG check anyways. Nothing came up. I changed the SE password online and let a GM know. He said there was no issue with passwords, but I wonder at that.

Nothing on any character linked to the token (token is disabled) was compromised or changed. Just strange.

This happened to me as well. Exactly the same time frame it happened to you. I had to answer my secret question to reset the password. Nothing found by AVG too. I reformatted like 30sec later no joke. /tinfoil hat