This Year's Scare

[TheKoolKandy]

I have checked a few of my friends who are both ranked higher then me and neither of them are on there so i doubt its the top 750k.

[swordwarior]

I don't think the list came from top 750k people on high scores, as im not on the list. I wouldn't be scared if i was, i'm more worried i got something from the site. :wall:

 

There seems to be people that say they got something, and people who say they haven't. Anyone clear this up?

[Levon_]

The site is safe. People saying they got something already had it

[ilovecuttingyews]

I have checked a few of my friends who are both ranked higher then me and neither of them are on there so i doubt its the top 750k.

It's probably just a combination of many independant highscore sites like Runehead. That's why some names are on there 2+ times. His program likely automaticly deleted repeated names that are on more then 1 list except he forgot to take into account capials etc.

[Big_Stingman]

Hypothetically speaking if I were to do this, I would just write some malware to infect other computers to route my internet traffic through. Then just try the 3 most common passwords and try logging into them using some bots. You may end up with only a few hundred (if that) accounts, but telling everyone you are going to do it would probably lower that number even more.

 

Course, if I could do all that, I would probably not be stealing Runescape accounts and would be more focused on other things.

 

My two cents.

[Dax]

On the list, this means I'm finally cool right?

Cool like me, I believe i'm on there, as a friend told me, but I don't want to click. :mellow:

They've spent months copying and pasting the top 750,000 names off the highscores that's why players old names are on there what do you expect, if you're in the top 750k then you're on there lol

Did you check it? I didn't think I would get to the top 750k :???:

With anything in life anything on a huge scale takes a vast amount of intellect, preparation and precision. I don't believe for one second someone can do this to 750,000 accounts because not only the slightest miscalculation means it all goes to waste, but it also means you can't recover from that 100 Accounts is really stretching things, 750,000 impossible.I Haven't looked no because honestly I'm not concerned in the slightest my account security is good and will always be good and I'd honestly like to see this player try, players who have never been hacked in their RuneScape lives and now he's going to manage to get all the top players passwords in one night, if it was that easy surely it would have been done before, and if it is that easy for him/her as I said before why not hack a real-life bank for money, or something on a bigger scale because the time spent on even copying the highscores down surely he/she could of done something more productive like read a book, sadly negative things make people scared like the Million Bug and word spreads quick.

 

Yeah, I was a bit worried when I heard my name was on the 'hack list', thinking it was at like 100 or so people, but when I found out that it was 750,000 people, my worry was gone. Bring it on, fools.

 

And I also agree that he/she/they have wasted alot of time getting this list.

[Robert_R]

I have checked a few of my friends who are both ranked higher then me and neither of them are on there so i doubt its the top 750k.

Same except backwards for me lol I'm ranked higher then my bro but he's on the list I'm not. I feel left out <_<

But seriously this is probably all a big joke by some bored moron sitting in a basement somewhere.

[das]

I've removed the original link and i'm going to go find some techheads/hackers to look at it for me. I've seen it on numerous sites asides from that one

[totalpwnage]

I think its just the top 375k, twice.

I'm on the list twice :unsure:

 

Anyways its fake and if its real there will be a rollback, 99% sure.

[AnneFrank]

I heard Kota21 was on it

but i changed my name ..

 

lol

 

this is climactic.

[subzerodragon]

I had my friends check and they said I wasn't on there. :)

[stonewall337]

Got a message that my name was on some list like this last year. I have a pin and recoveries. Not too worried.

[sees_all1]

suprise! i'm on the list.

 

Some things to set you at ease:

Even if he had EVERY SINGLE ONE OF YOUR PASSWORDS, in 24 hours, there would NOT BE ENOUGH TIME TO DO ANYTHING MEANINGFUL.

 

Also, to make matters worse for this nub, there are F2P and P2P players - meaning if you're currently F2P, he won't have much success trying to log into a P2P world, and vice versa.

 

 

The only thing that bugs me is that at one point in time, I used the same password for many sites. I've since stopped that practice, but there are a few places that i'm still doubled up. Time to change my email's password.

[Flyingjj]

I think its just the top 375k, twice.

I'm on the list twice :unsure:

 

Anyways its fake and if its real there will be a rollback, 99% sure.

Well, as of ten seconds ago, I'm rank 175,092, and I'm not on the list, leastwise not the one I checked.

[das]

I got a friend to check the original link, plus 3 i've seen before from various sources all 4 came back

Accept-Ranges: bytes

Content-Length: 8067897

Content-Type: text/plain

no html embed [cabbage], should be clean

 

 

And if you had a big botnet, it could be done in an hour :P Theoretically anyway

[das]

to further add - no html tags in any of the 4 places i've seen the list - identical data with 3 names appearing 5 times in each list (King Peter12, Timothy Gold, Zogo) so from what I can tell and my friends the lists appear to be clean .

[Uninstall]

on the list :twss: even the number one is on there twice... I think it's all [cabbage]

[WeatherMatt]

Not on the list. (~205k rank overall BTW, so the top 750k thing is bogus) I almost feel left out, like I'm missing something cool.

 

Even though I'm convinced nothing will happen, I'm gonna go ahead and change all my security stuff anyways (on a different computer, of course).

[Looce]

(For the record, I'm Das's main source on this. I'm still waiting for Cruiser or someone else to visit the pages in a Windows VM containing an antivirus, but both links to HTML pages seem to only have JavaScript provided by Wordpress, no other JavaScript. The text files are OK.)

 

Here's my comment on this thing, copy-pasted from silent c0re's blog:

 

To Kiba (comment 6923): Its a text file. It would be rather far-fetched for it to contain a keylogger. If you do access the file linked in this blog post, the administrator of data.fuskbugg.se might get your IP address, though, even if using it to hack your account would prove impractical.

 

And as Daniel the Awesome (comment 6929) posted below, Jagex can do rollbacks, Fail number 3″, a sentiment already echoed by Mike Fitz (comment 6909).

 

Im not at all worried. My guess is that the supposed hacker just linked to that list, compiled by someone else in older highscores, to have a cheap laugh at the expense of gullible folks.

 

Useful tidbits of information:

 

1. The file is named like it would be a million-user list, but there are 677,556 unique names in the list, out of 766,039 lines. There are 88,483 redundant lines.

2. There are 609,498 names appearing only once in the list. 48,471 names appear twice. 18,752 names appear 3 times. 832 names appear 4 times. These three players appear 5 times in the list: King Peter12, Timothy Gold, and Zogo. (The creator of this list is seriously noob at removing duplicates.)

3. You may find your name written with a capital at the start, and again with a lowercase letter at the start. Likewise, you may find your name written with spaces and then with underscores.

4. Ctrl+F doesnt work as quickly for names like Zezima, due to people naming themselves Sir Zezima45 or whatever and appearing before the real person in the alphabetical list portion. But Zezima is there, 3 times.

5. The Old Nite (who died some time ago) is in the list, 3 times. I didnt know you could hack a permanent banned account.

 

In short, nothing to see here, move along. If this hoax wasnt dead in the water yet, it should be. Spread the word. Thanks. Also, happy New Year!

 

Now I see that there is a supposed "proxy list" that the hacker is to use on New Year's Eve; he could also have acquired that from pretty standard proxy forums/elite proxy forums.

 

There's this old Internet adage that says "Don't feed the trolls." I think this Marsh guy is satiated.

[Laikrob]

Closing this, with Admin permission.

 

Hackers make these lists and post them on public cheatsites and hack communities every month or so - either top 1M, top 100K, top 10K overall players, top 1K/10K every skill or from different Playermod lists or memberlists from official forums, to make it easier to target reasonably higher leveled possibly weakly passworded or abandoned accounts.

That some guy decided to announce it for extra e-fame and hackredit, is no surprise. Jagex knows about these probably empty threats, and IF he's found any way to bypass normal procedures (which is very very unlikely), then they will handle it.

 

It's pure attention seeking and scare tactics, and they are gaining what they want the most: e-fame and reputation.

Allowing these topics to stay open for discussion is to give them the attention they desire and don't deserve.

 

Keep your accounts secure as usual, and otherwise enjoy playing.

 

Laikrob,

Tip.It Moderator