Jagex mod got hacked

[RSBDavid]

False and bisexual.

 

One, like previously stated, Jagex accounts will auto lock if not authorized to used in a remote location, two his password is only 6 characters long and I am use Jagex would use a more secure password policy, and third, this is my first post in 6 months. Also, there are no videos, no official JMod posts, and no reputable sources on this situation.

 

This thread is just spam pretty much.

[Saradomin_Mage]

False and bisexual.

 

One, like previously stated, Jagex accounts will auto lock if not authorized to used in a remote location, two his password is only 6 characters long and I am use Jagex would use a more secure password policy, and third, this is my first post in 6 months. Also, there are no videos, no official JMod posts, and no reputable sources on this situation.

 

This thread is just spam pretty much.

 

To anyone who's interested, the password does in fact work, but like missingno said, the failure to breach past the point of lock-out is a sign of foresight in light of Jagex incompetence. I got the same result (locked-out) when I tried to log-in. So the account has technically been breached in that the correct password was retrieved, but no actual harm was done to it thanks to their security. As far as the "logging in and causing chaos" scenario though, that's [cabbage], don't worry about it.

[RU_Insane]

False and bisexual.

 

One, like previously stated, Jagex accounts will auto lock if not authorized to used in a remote location, two his password is only 6 characters long and I am use Jagex would use a more secure password policy, and third, this is my first post in 6 months. Also, there are no videos, no official JMod posts, and no reputable sources on this situation.

 

This thread is just spam pretty much.

 

To anyone who's interested, the password does in fact work, but like missingno said, the failure to breach past the point of lock-out is a sign of foresight in light of Jagex incompetence. I got the same result (locked-out) when I tried to log-in. So the account has technically been breached in that the correct password was retrieved, but no actual harm was done to it thanks to their security. As far as the "logging in and causing chaos" scenario though, that's [cabbage], don't worry about it.

 

Glad to know someone read my post \o/

[Dragonlordjl]

False and bisexual.

 

One, like previously stated, Jagex accounts will auto lock if not authorized to used in a remote location, two his password is only 6 characters long and I am use Jagex would use a more secure password policy, and third, this is my first post in 6 months. Also, there are no videos, no official JMod posts, and no reputable sources on this situation.

 

This thread is just spam pretty much.

 

To anyone who's interested, the password does in fact work, but like missingno said, the failure to breach past the point of lock-out is a sign of foresight in light of Jagex incompetence. I got the same result (locked-out) when I tried to log-in. So the account has technically been breached in that the correct password was retrieved, but no actual harm was done to it thanks to their security. As far as the "logging in and causing chaos" scenario though, that's [cabbage], don't worry about it.

 

Glad to know someone read my post \o/

 

Actually, it's more along the lines of hindsight than foresight.

 

Somebody keylogged Paul Gower's mod account (from his personal PC at home) many years back and wreaked havoc using it. That was what resulted in the extra security measure.

[stonewall337]

[hide]

Yeah im sure mod accounts are instant locked anywhere outside of Jagex HQ, or at least that's what Jagex says.

It took them 8 hours to lock the account.

Soo then is there a video of the ensuing chaos?

Read my previous post you got instantly logged out when you tried to log in.

[/hide]

But if people logged into it (and in 8 hours I'm sure someone did) then there must be a video of it somewhere.

 

This. You said it took them eight hours to lock the account, then you said you got logged out when you tried to log in. Which is it? And if it's the first case, there must be video or even photos,so where are those?

 

Locked account and being auto logged of an account are not mutually exclusive.

Edited October 9, 2011 by ForsakenMage
Shrinking the quote blocks

[Auror]

A Video

[Riptide Mage]

The only concern here is that runeHQ needs some plumming.

Lol, as if tip.it, zybez.net, and a [cabbage]ton of other sites aren't hacked.

 

That is the past and I think that is not what we are discussing here.

Right now (or yesterday) runehq was hacked and their password got decrypted by hackers, not on tip.it zybez.net or any other site. (according to op)

 

What is runehq's next move/what did they do to prevent this in the future.

 

Hashed passwords cannot be decrypted, only cracked. Encryption goes two ways, hashing only goes one.

[Makoto_the_Phoenix]

A Video

 

I notice that the video shows nothing that the GIF didn't...

[Auror]

It just shows that the GIF isn't a fake, you really get the message that the account is locked. I didn't want to prove anythign else, lol.

[Makoto_the_Phoenix]

It just shows that the GIF isn't a fake, you really get the message that the account is locked. I didn't want to prove anythign else, lol.

 

Speaking strictly for myself, I took it on faith that it wasn't (as it was also confirmed earlier in the thread). But there's nothing else interesting about this. It's just that a JMod's account is locked from the outside. -.-

[Auror]

It just shows that the GIF isn't a fake, you really get the message that the account is locked. I didn't want to prove anythign else, lol.

 

Speaking strictly for myself, I took it on faith that it wasn't (as it was also confirmed earlier in the thread). But there's nothing else interesting about this. It's just that a JMod's account is locked from the outside. -.-

 

I also think that there isn't a real big deal here. I just wanted to prove that you really get message that the account is locked to make people stop from saying and spamming this thread with "LOL NO VID NO PROOF" or "FAKE AND YAY".

[Crocefisso]

I'm not even sure this is true.

[@Dan3HitU]

If an account is "locked" you can type any password and it will say that, it's the response from the server to give the "locked" message prior to an "incorrect password" message.

[essiw]

If an account is "locked" you can type any password and it will say that, it's the response from the server to give the "locked" message prior to an "incorrect password" message.

You didn't try it yourself, did you? It says incorrect password if you type in something else.

[_YB_]

Congratz jagex

 

MOD EDIT: Image removed for revelation of personal details.

 

notice the last one its just password written backwards...

Edited October 10, 2011 by ForsakenMage
Please do not post up the personal info of others, including Jmods, no matter how nonsensical it may seem.

[ForsakenMage]

Final Warning for All Posters:

 

Please do not post up anyone's passwords/personal details on these forums. I don't care if they are all over Pastebin or something, they are NOT welcome to be posted here. You can discuss how [unfortunately] some of these people are not taking precautionary measures, but in the end, do not post them here!

[_YB_]

Found a vid for people that said that there were no vids..

 

For people that didn't saw my previous post Mod Chihiro, Mod Ajd & Mod Seb got hacked too.

[PoultryChamp]

It appears to be legit and it's really easy for an IPB password to be cracked. That's why you need a complicated password, and to keep passwords on all sites different from eachother.

 

princess1 is easily cracked.

priNC3ss1tuvaluTU2400@!5 may take years to be cracked.

 

My boss hates it, but it works. I am surprised at these JMOD's oversights.

[Carl]

I guess there's no real reason for a long, alphanumerical password if people can't do anything, at all, by accessing it. I presume a six-character password is just for ease of use, but they would use better protection on their own personal accounts.

[hatebringer]

Well if their accounts are automatically locked from outside viewers, it sorta is pointless for extreme security since their accounts are already protected by the game client itself, and thats pretty secure unless anyone plans on breaking into Jagex HQ, but from the pictures of the supposed new HQ, I wouldn't try since they do own a tank(maybe?) lol.

[stonewall337]

Actually, against a computer cracking program, more letters is better then numbers and letters, so I hear. princesisthenumberonebomb is harder to crack then pr1nc3s for instance.

[Agen]

It appears to be legit and it's really easy for an IPB password to be cracked. That's why you need a complicated password, and to keep passwords on all sites different from eachother.

 

princess1 is easily cracked.

priNC3ss1tuvaluTU2400@!5 may take years to be cracked.

 

My boss hates it, but it works. I am surprised at these JMOD's oversights.

 

Lol. <-- clicky.

[Mercifull]

It appears to be legit and it's really easy for an IPB password to be cracked. That's why you need a complicated password, and to keep passwords on all sites different from eachother.

 

princess1 is easily cracked.

priNC3ss1tuvaluTU2400@!5 may take years to be cracked.

 

My boss hates it, but it works. I am surprised at these JMOD's oversights.

Bear in mind that RuneScape passwords you cannot use special characters nor is it case sensetive :(

[NukeMarine]

It appears to be legit and it's really easy for an IPB password to be cracked. That's why you need a complicated password, and to keep passwords on all sites different from eachother.

 

princess1 is easily cracked.

priNC3ss1tuvaluTU2400@!5 may take years to be cracked.

 

My boss hates it, but it works. I am surprised at these JMOD's oversights.

 

Lol. <-- clicky.

That's been posted on another thread. Though funny, there's some flaws in trying to claim the first password is simpler than the second. It's assuming people only add the number at the end, don't use a familiar, but not so simple number (friend's phone number's last four), don't capitalize more than on character, don't use shift on a number set, etc. All that said, he is right that most people depend on one unusual word with slight modification that can be accounted for in many password cracks.

 

On topic: Remind me, who here is stupid enough to claim publicly on an open forum that they attempted to access another person's account without their consent? I'm not the most educated of persons, but something tells me that that's probably an illegal act in both the US and Great Britain.

[Unknown_Warrior]

In lieu of recent events, I request a minute to consider the irony of the following posts:

 

The only concern here is that runeHQ needs some plumming.

 

No, I don't think RuneHQ needs to find a place to put an air shaft. If it really is the case that RHQ's MD5 password table was compromised/leaked, they could do with a sweep of the server administrators.

 

The only concern here is that runeHQ needs some plumming.

Lol, as if tip.it, zybez.net, and a [cabbage]ton of other sites aren't hacked.

 

That is the past and I think that is not what we are discussing here.

Right now (or yesterday) runehq was hacked and their password got decrypted by hackers, not on tip.it zybez.net or any other site. (according to op)

 

What is runehq's next move/what did they do to prevent this in the future.