Don't really care about your spam :P

 

The blog is pointless anyways. Also boots are crashing so very hard, so do something for better money.

Don't really care about your spam :P

 

The blog is pointless anyways. Also boots are crashing so very hard, so do something for better money.

 

 

Such as sell your body FOR SCIENCE.

Not sure if legal for a 15 year old.

And... I've been hacked... Main and pure...

 

Virtus, Ely, 200m cash, 300m items.... Pure had 100m aswell.

Somehow left with 60m, which is nothing compared to what I had before... But it's a start.

What to do now?

17 December 2011 - 03:30 PM

One of my friends recently quit, giving me 500m, along with the supplies for Turmoil,my major goal at the time.

 

Was this an IRL friend?

Sorry you got hacked man, that really sucks :S But atleast you've still got some left to rebuild with anyway :D

 

A little odd that they didn't take what was remaining, but I guess should just be glad of that :) time to camp frosts forever?

What to do now?

17 December 2011 - 03:30 PM

One of my friends recently quit, giving me 500m, along with the supplies for Turmoil,my major goal at the time.

 

Was this an IRL friend?

I know him very well, and I'm certain it wasn't him. He has no iniciative to play any more. :(

Wow..just wow. People. Looks like we can start bossing more together. :unsure:

Seems so. :lol:

:thumbdown:

Back to Glacors. Karma steadfasts pls....

:( :( :( :( :( :(

:( :( :( :( :( :(

I have to agree with you. I'm going to miss 1390 Base hp...

Should be home from school in an hour, no idea what to spend my little remaining moneys on.... Akrisaies and runes, mages book, I'm set for potions... Infinity boots.... What makes me feelbad, is the fact that I still have millions, but it feels like nothing. White cashpile aswell.... :(

:( :( :( :( :( :(

I have to agree with you. I'm going to miss 1390 Base hp...

Should be home from school in an hour, no idea what to spend my little remaining moneys on.... Akrisaies and runes, mages book, I'm set for potions... Infinity boots.... What makes me feelbad, is the fact that I still have millions, but it feels like nothing. White cashpile aswell.... :(

I know, it sucks :( :(

 

Do you know how you got hacked? via e-mail or recovery questions? If you haven't already you should try to narrow it down so you can work to improve security in that area.

I have no idea how I could have gotten a keylogger

Password wasnt changed

Email has nothing but loyalty point stuff.

Bruteforce? Idk

 

 

My conclusion: I have no idea. :blink:

 

Omw back from school, extra replies in 20.

You don't have to answer these if you don't want, but just things to think about and help narrow down the problem.

 

1. Did you have a strong password? Something like 7TeEEkEoR4Am (random numbers, letters, and symbols). If not, did you use dictionary words? Or anything close to them? Did your password contain any personal information (birthday, hometown, name, etc.)? Did you use the same password for both accounts?
    
   
2. Did you use the same e-mail for both accounts (I don't even know if that's possible)?
    
   
3. Were your recoveries the same for both accounts?
    
   
4. You said you don't think you could have gotten a keylogger, but did you do a full virus scan (not a quick one) just in case?

The fact that both of your accounts got hacked on the same day suggests there's something connecting the two. If it was via e-mail it's entirely possible that they deleted the evidence (e-mails from Jagex) afterwards. I'd suggest taking precautions just in case.

 

1. Use different e-mails for each of your RuneScape accounts. DO NOT use those e-mails anywhere else. Don't put your RSNs in your new e-mail usernames. Use GMail.
   
2. Use a password like 6)3$cmPazrys for your e-mail (numbers, letters, and symbols).
   
3. Enable two-step verification.
   
4. Set strong recoveries that are NOT legitimate answers (i.e. if the question is "What is your mother's maiden name?" DO NOT put your mother's maiden name. Put something like h38d>b+miyKQ . Make sure your RuneScape recoveries do this as well (don't use legitimate answers for your recoveries).

:angry: That's the second harpy to get hacked in a fortnight.

You don't have to answer these if you don't want, but just things to think about and help narrow down the problem.

 

1. Did you have a strong password? Something like 7TeEEkEoR4Am (random numbers, letters, and symbols). If not, did you use dictionary words? Or anything close to them? Did your password contain any personal information (birthday, hometown, name, etc.)? Did you use the same password for both accounts?
   The only thing connecting them is that they are mine, passwords were random, Ambler3's bank pin was a keyboard bash. :lol:
    
   
2. Did you use the same e-mail for both accounts (I don't even know if that's possible)?
   Nope, different, and both special ones for rs.
    
   
3. Were your recoveries the same for both accounts?
   Different, both random
    
   
4. You said you don't think you could have gotten a keylogger, but did you do a full virus scan (not a quick one) just in case?

I'm using a mac. Virus scan showed nothing.

 

The fact that both of your accounts got hacked on the same day suggests there's something connecting the two. If it was via e-mail it's entirely possible that they deleted the evidence (e-mails from Jagex) afterwards. I'd suggest taking precautions just in case.

None of the passwords were changed, I logged on as normal, didn't reconise IP, log on, and I'm hacked. Check my pure, same IP, hacked also.

 

1. Use different e-mails for each of your RuneScape accounts. DO NOT use those e-mails anywhere else. Don't put your RSNs in your new e-mail usernames. Use GMail.
   
2. Use a password like 6)3$cmPazrys for your e-mail (numbers, letters, and symbols).
   
3. Enable two-step verification.
   
4. Set strong recoveries that are NOT legitimate answers (i.e. if the question is "What is your mother's maiden name?" DO NOT put your mother's maiden name. Put something like h38d>b+miyKQ . Make sure your RuneScape recoveries do this as well (don't use legitimate answers for your recoveries).

All of these apply can only use letter and numbers for rs though.

 

I think I was bruteforced. Don't see how anything else could be possible... :unsure:

With the system Jagex has in place, brute-forcing would take years for a simple 6-12 length password. You gotta figure you get 5 tries? And then every try after that is 5 minutes apart. With billions of possible key combinations, that's the most unlikely.

 

However, was your RuneScape password the same as your Tip.It Forums password? Remember that incident where a group of people took over Tip.It for a short period of time. They could quite easily brute-force any hashed passwords they got during that incident. Although I doubt it would have taken this long.

 

Just some thoughts. Remember the HJT log, please?

However, was your RuneScape password the same as your Tip.It Forums password? Remember that incident where a group of people took over Tip.It for a short period of time. They could quite easily brute-force any hashed passwords they got during that incident. Although I doubt it would have taken this long.

Or any other forum/clan password.

My rs password is/ was completely different to anything else I currently and have ever used... I'll just have to assume myself an unucky [Harpy].

 

Blog wise: No idea how I can make back 900m without staking. Which I'd rather avoid. I'm not #spure. :rolleyes:

However, was your RuneScape password the same as your Tip.It Forums password? Remember that incident where a group of people took over Tip.It for a short period of time. They could quite easily brute-force any hashed passwords they got during that incident. Although I doubt it would have taken this long.

Or any other forum/clan password.

I was simply going by the one that he currently seemed to have the highest rank/standing on. :P. I'm not sure the full list of websites that were compromised. >.<

 

But as Tripsis has said, any website can be unsafe. I personally use the same password for fansites, a different password for my e-mails, and a third password for all my gaming accounts. Can never be too safe!

 

Don't put your RSNs in your new e-mail usernames.

I'd honestly never thought of that. Good thinking. :).

 

Blog wise: No idea how I can make back 900m without staking.

http://forum.tip.it/topic/308649-new-duelling-glitch-look-out-lost-150m/page__view__findpost__p__5201412

That was just last night. The bugs have been around near a week (Not all started with the Squeal update). I'd give it a good week or two for Jagex to (attempt to) fix the bug/glitches.

More keyboard bashing for emails then. :lol:

That or [email protected]. ;)

 

@Stev, that's why I dont want to stake. :lol:

 

I will be pestering people to loan me stuff for Glacors for bxpw. Beware.

However, was your RuneScape password the same as your Tip.It Forums password? Remember that incident where a group of people took over Tip.It for a short period of time. They could quite easily brute-force any hashed passwords they got during that incident. Although I doubt it would have taken this long.

Or any other forum/clan password.

I was simply going by the one that he currently seemed to have the highest rank/standing on. :P. I'm not sure the full list of websites that were compromised. >.<

I could probably get a full list with some digging but I'm busy atm so I'll go with:

 

Tip.It

RuneHQ

Zybez (website was compromised - forum wasn't. I don't know if they had any information stored on the website server so..)

DI

Supreme Skillers

RSNL

 

Those are just some of the big ones.. there are loads of other, smaller clans/sites that have been compromised too.

:blink: Didn't realise there were so many...