Dynamic ip/ddos protected router/don't use stuff that shows IP to anyone

 

Ddos protected routers don't exist no matter what the companies say. It would be just as effective as having a bucket of water ready to dump on your router when it gets fried. :rolleyes:

whatismyip.org check it restart router if it changes you're dynamic(a good thing)

 

before you go staking turn off router and back on and don't post on tif/do anything on the internet period other than RS.

I wouldn't put it past a TIF mod or anyone for that matter to leak an IP for some quick $$$

 

don't bother with VPNs etc as if they have your actual IP the masked IP does nothing.

 

If you aren't dynamic calling your ISP is the best bet

 

E: oh and NEVER accept first

I like how people are accusing Tip.It mods for DDOSing people. All in all, it is your fault if you get DDOS'd.

Ouch. Another thing to watch out for in RS then :(

Corrupted tif mods (People pay like £30 for a single ip leak).

In your case most likely situations are corrupted tif mods

 

No one on the Tip.it Staff is selling your information - we're working extremely hard to protect it. One example of that would be how the majority of the staff actually can't see these important personal information tidbits that are so vital to things like recovering your RS account.

 

As Jolletzu pointed out, a lot of people use image scrapers to grab your IP. This method is actually fairly easy to do, doesn't generally come up to people as a "red flag", and is pretty damn common. This one is the most likely explanation simply because it's the easiest to get away with, and the least recognized.

 

Wolfmon is completely right. DDoS'ing is huge in high-stakes pking and the clan world. It's a quick and cheap way to cripple your opponent and basically hand you the victory. The best thing for you is prevention.

 

You do know there is no way you can actually prove that, right?

 

And to the TIF editor... He said its POSSIBLE not that it was what happened. BIG DIFFERENCE.

How can you 100% say without a shadow of a doubt one of the dozens of moderators didn't need the money out of desperation. However, it's probably because of the leaked tip.it database that wasn't encrypted or whatever that allowed several accounts to be social engineered. I'm fairly certain that's how my account was compromised while i was gone.

Wow. DDOS'd by a guy (if what RSI said is true) is known to DDOS people. Shock horror when staking something like a party hat.

 

And surely you cant be surprised that protection rackets like this exist.

 

You must be extremely idealistic.

I find it hard to feel any sympathy for you losing one phat considering your total bank value.

 

I do however completely understand the principle of the situation. People telling him to just not stake are retarded. He shouldn't have to not use a part of the game he enjoys because some little piss ant finds it funny to DDoS people.

 

This kind of thing has always happened to people who advertise their wealth though. You may as well put a sign above your head that says "Hey y'all, my bank is open to everyone, take all my shit pl0x."

If you haven't, make sure that you block ICMP on your firewall. One of the most common forms of denial of service is to repeatedly ping an IP address until it interrupts the connection. If you block ICMP in your firewall rules, you prevent that method of DoS attack.

How can you 100% say without a shadow of a doubt one of the dozens of moderators didn't need the money out of desperation. However, it's probably because of the leaked tip.it database that wasn't encrypted or whatever that allowed several accounts to be social engineered. I'm fairly certain that's how my account was compromised while i was gone.

Because most of us (me included) don't have access to user's IP addresses.

How can you 100% say without a shadow of a doubt one of the dozens of moderators didn't need the money out of desperation. However, it's probably because of the leaked tip.it database that wasn't encrypted or whatever that allowed several accounts to be social engineered. I'm fairly certain that's how my account was compromised while i was gone.

Because most of us (me included) don't have access to user's IP addresses.

 

Derp, that doesn't mean NO ONE has access or NO ONE could have misused it. Simple logic.

I was simply pointing out that not everyone on the staff has access to that information..in regards to his "dozens of moderators.."

 

Pointless blaming either way. Nothing can be proven.

 

The blaming ends now.

Higher mods like Tripsis and MageUK do, though. That I'm very sure.

 

EDIT: And yeah, it's not impossible for corrupted TIF mods to exist. It's just a possibility, no blaming on this end. :>

DDosing [or just DoSing for that matter] is outlawed in the police and justice act 2006, with a max sentence of 10 years in prison.

 

And you've got proof of a DDoSer admitting and threatening to re-offend?

 

...

 

If jagex have been known to notify the police in cases where a player has expressed a desire for suicide, i'm sure they can notify the police when a player is committing serious crimes.

 

Get the wheels of justice turning...

I like how people are accusing Tip.It mods for DDOSing people. All in all, it is your fault if you get DDOS'd.

My fault? Arguments about being more of a target aside, I have always been as careful as possible with my IP.

- Do not use skype, any IRCs, msn, or ever click on any links people send me ingame. You might remember I posted an attempt before to get my ip via a pm from "zezima", I just cannot work out how they would have been able to get my IP in the first place, no one on an IRC or skype could have sold me out, as I do not use them, this forum and RSC are the only forums I use with my username.

Leaked database most likely. What about Youtube? Any way someone might have been able to get your info there?

 

Sorry for your loss though. :|.

RSC is not a nice place to be imo, delete that account if you ever want to stake again.

Allowing users to post external images on a forum like this one is enough to find out your ip. The image does not even have to be noticeable.

 

Oh and there are hardware solutions which help against denial of service attacks, but it never gives complete protection.

Allowing users to post external images on a forum like this one is enough to find out your ip. The image does not even have to be noticeable.

This. Users can host an image on their own site, paste it on Tip.It (such as in a signature), and get the IP addresses of everyone who views them. This is a common threat going around right now and is one that we will be combating very soon.

 

Another possibility is that someone got your IP from when we or RSC (or a large number of other fan/clan sites) were hacked. Tip.It's database was compromised in October and RSC's database was compromised in March. And I could probably name at least 5 other clan sites and fan sites that had their databases stolen in the last six months. Your IP could have been obtained from any of those databases, and I'm sure they're each in the hands of multiple people by now.

 

There's honestly nothing I can say that will convince you, but Tip.It moderators and admins are NOT selling IP information. Only four moderators even have access to IPs (Super Moderators), but even their access is pretty limited. Admins do have access, but there's nothing I can do other than assure you that we're not selling IP information. You wouldn't believe the kind of things we've been offered to give up information and we've turned down every request as a team. It would be fairly obvious if an admin then went behind our backs and gave that information up.

 

It is honestly pretty hurtful and insulting that so many people have jumped to the conclusion that the Tip.It staff are at fault when there are so many other more likely scenarios (as I listed before).

 

I am sorry that this happened to you 999134, but I hope you will understand and realize that there are many plausible explanations for how someone got ahold of your IP. All of the Tip.It staff members value the security of our members and we always do everything we can to protect your accounts and private information.

As tripsis says, few of our staff have access to this information for just this reason, it's valuble and we do get e-mails and messages from people making offers for data about users, which we never hand over. We are committed to our community and if that means not making some fast money for ourselves by not handing out your data, that's exactly what it means. Our administrators and moderators are selected very carefully, and are re-assessed even as they progress through each rank (Mod -> Global -> Super, for example), and we make sure we can fully trust them.

 

Not to mention, that even if we wanted to, we'd be breaching laws by handing over your data without your consent, never mind the laws being broken by those doing the DDoSing, us handing over the data would effectively be enabling it.

I don't think the point is that anyone IS selling data as much as they COULD. I mean, I COULD rob a bank, in theory, but that doesn't mean I would in practice. We were talking about every POTENTIAL, not every LIKELY scenario. Not sure why people are getting so defensive.

I don't think the point is that anyone IS selling data as much as they COULD. I mean, I COULD rob a bank, in theory, but that doesn't mean I would in practice. We were talking about every POTENTIAL, not every LIKELY scenario. Not sure why people are getting so defensive.

 

Our point is that while yes, you are correct that it's a potential scenario, that's not where the information was obtained.

A "while we can never garantuee that any of our staff members give out confidential information, we are doing everything we can do to prevent this and select our staff very carefully, re-assessing them whenever they climb up a rank" would have suited more IMHO.

If you use IRC, get a BNC to help avoid ddoses. Pm me about it if you do.

 

Call your ISP and demand an IP change because you're being ddosed online, maybe even state that it keeps happening on a game or something and explain why they would? Include RWT into the picture and I think they might even take action if they find out who did it o_O.

A "while we can never garantuee that any of our staff members give out confidential information, we are doing everything we can do to prevent this and select our staff very carefully, re-assessing them whenever they climb up a rank" would have suited more IMHO.

 

Was there really any need for this post? Why are people being overly critical of the Admins responses? People on the first page WERE pretty much saying that it was "probably a leak from a corrupt tif mod."