A successful recovery of an account is possible with very few information. The most important part are the old passwords. That's why keeping an unique password for RS account is so important. The account recovery isn't quite possible without at least one old password; the older the better.

 

By SQL -injecting and hacking (and other crap I got no idea about) the fansites the hackers/recoverers get people's passwords which are very often the same passwords that has been used at some point as a password of one's Runescape character, thus making it possible to recover.

A successful recovery of an account is possible with very few information. The most important part are the old passwords. That's why keeping an unique password for RS account is so important. The account recovery isn't quite possible without at least one old password; the older the better.

 

By SQL -injecting and hacking (and other crap I got no idea about) the fansites the hackers/recoverers get people's passwords which are very often the same passwords that has been used at some point as a password of one's Runescape character, thus making it possible to recover.

 

Which is a dumb system. Relying on *old* passwords, which have most likely been changed because of two reasons a) a hacker changed it and b) the password was compromised so the original user changed it. But the recovery process should never allow an illegitimate user gain control of an account.

 

But.. if most changed passwords are due to hacks, I guess old passwords are a way to verify the user. Just opens the door for someone to break that system...

Which is a dumb system. Relying on *old* passwords, which have most likely been changed because of two reasons a) a hacker changed it and b) the password was compromised so the original user changed it. But the recovery process should never allow an illegitimate user gain control of an account.

 

It does.

 

But.. if most changed passwords are due to hacks, I guess old passwords are a way to verify the user. Just opens the door for someone to break that system...

 

It has.

It seems we have the first contestant for the prize-draw this week. Page 32 on the rsof thread, someone just got a tattoo and posted. Proof it's not impossible haha. Lucky guy will probably get lifetime membership now :|

 

Least it's not a noob.

Right. I'm aware that it happens. I am suggesting that it should be changed to not allow false positives.

aww Jagex, while troll a player like that. saw the tattoo as a prize for first time ever today. and it landed on the prize to the left of it :L

Same here

[hide=Mystic Tattoo][/hide]

 

Ofcourse I didn't get it but ohwell

Actually think I hit that single water rune that spin :/

I have not even had any rare or super rare item so far.

Never seen the tattoo, happy i know what it looks like now :P

Lucky guy that actually got one.

He should try a casino =P

Funny the guy with more posts then 99% of the RSOF, just got membership in January, private adventurer's log... And the only one to have received one. I saw 2 in my spins today but got neither. :P.

Which is a dumb system. Relying on *old* passwords, which have most likely been changed because of two reasons a) a hacker changed it and b) the password was compromised so the original user changed it. But the recovery process should never allow an illegitimate user gain control of an account.

 

But.. if most changed passwords are due to hacks, I guess old passwords are a way to verify the user. Just opens the door for someone to break that system...

I suppose I'm the only one who changes my password semi-regularly. Memorizing it is the primary deterrent >.<...

I don't know what the point of changing passwords is on a regular basis. It's not like someone's going to coincidentally figure yours out near when you change it.

I'd rather just keep a single max-length password for a long time...

Even if you change it a million times, all they need is one old password

 

No surprises there really, since he was the only one who got the tattoo and posted.

Basically this causes 2 problems

 

2) (my opinion) More likely for him to get banned, as Jagex cares about making money off people. I pay 1 month at a time so jagex won't just ban me for "hijacking" or botting or something that has no evidential backing and run off with my money.

 

The amount of paranoia in this post is unbelievably amazing. I mean, really, I want to screencap it as proof that people like this exist.

 

2) the 6 month membership is 5-10$ less total. They may be a company, but that 10$ isn't even going to be noticed by them.

 

Recent evidence would suggest Jagex are less likely to take into account membership status of accounts considering the amount of members accounts banned in the last year is more than the previous 10 combined.