A while ago Jagex posted news on Runescape.com about one of the biggest Runescape fan sites adding keyloggers to files on their site.

 

 

 

Many people made up stories, and said Tip.it was the site who was doing this.

 

 

 

I doubt this is true, but what site did this?

 

 

 

Sorry if this isn't the right forum, if it is move it!

Deniately not Tip.it :shame: :wink:

I believe it was Tip.it...

whats a keylogger?

whats a keylogger?

 

 

 

It's like a virus, but rather than affecting files on your computer, it traces the keystrokes. Say you typed "Hi my name is Bob Bobson", it would be sent to the person who keylogged you.

 

 

 

They can be added to files, so as soon as you open the file, you are now keylogged.

 

 

 

This is how many users have their accounts stolen.

IIRC it was Zybez, but it wasn't because they did it on purpose, it was because someone cracked their site and planted the keylogger in their toolkit.

 

 

 

However, this is only a very faint memory :-k

The exact jagex post was this

 

It has just been brought to our attention that a large unofficial fansite (NOT our site) has had their password database stolen. And in fact has been leaking usernames+passwords for some time.

 

 

 

It was refering to us because our forum passwords were compromised, but they failed to mention that the passwords were encrypted in a way that is not backwards unencryptable. So, they had a bunch of useless gibberish if that is even what they had.

 

 

 

We are the largest runescape fan site. If we tried keylogging people, it would be found quickly, and noone would have any reason to continue using us.

ergh. The most recent post regarding fansite security was indeed the one that misplacedme mentioned, but that has nothing to do with keyloggers. The most recent memory I have of a keylogger in a major fansite was some considerable time ago.

I believe it was Tip.it...

 

What? Don't accuse tipit of sending keyloggers please. We don't appreciate it. I wonder if you know just how much work here the staff does to protect the users from people posting links to keylogged files.

 

 

 

 

 

Locking this since nothing is going to be achieved in this discussion. If you are talking about the the password issue then there is an announcement in general.