Silkroad Online Forums

A community forum for the free online game Silkroad Online. Discuss Silkroad Online, read up on guides, and build your character and skills.

Faq Search Members Chat  Register Profile Login

All times are UTC




Post new topic Reply to topic  [ 30 posts ] 
Author Message
 Post subject: Regarding the recent rev6 hacking exploit
PostPosted: Thu Nov 29, 2007 6:41 pm 
Retired Admin
User avatar
Offline

Joined: Jan 2006
Posts: 8004
Location: World of Warcraft
Greetings SRFers.


As we all know, the recent discovery of a MASSIVE security flaw in JM's new website has caused countless accounts to be stolen in the past several days/weeks. We probably all know someone who was affected by it in one way or another.

In the past few days, there has been a flurry of discussion on this forum about this exploit, with many of our users claming that have hacked or were planning to hack accounts, whether to reclaim what was theirs or to steal others' accounts.

The rules of this forum clearly state that "hacking" (which has developed into a catch-all term for stealing accounts) is prohibited here, regardless of the reason behind it. If you choose to exploit JM's security and voilate their ToS, it is a risk you take on your OWN head, and SRF cannot and will not be held responsible for any punitive action that Joymax takes against you or your characters and accounts. SRF in no way endorses nor approves of the exploiting of security faults to gain access to accounts.

Hopefully Joymax takes from this incident a cue to tighten up their security and do a better job of protecting their users. Thank you for your patience and understanding during this turbulent time in the SRO and SRF communities.

-SG

_________________
Image
Thx IceCrash for my awesome sig :)
SRF Name Change Policy
Having trouble accessing SRF?

dom wrote:
RuYi wrote:
Are you from outer space or something?
He's from Jersey. Close enough.


Top
 Profile  
 
 Post subject:
PostPosted: Thu Nov 29, 2007 7:53 pm 
Advanced Member
User avatar
Offline

Joined: May 2007
Posts: 2191
Location:
Babel
missed 3 days of silkroad and this happens :banghead:

_________________
Image


Top
 Profile  
 
 Post subject:
PostPosted: Thu Nov 29, 2007 9:01 pm 
Active Member
User avatar
Offline

Joined: Feb 2007
Posts: 689
Location:
Xian
_Shinigami_ wrote:
missed 3 days of silkroad and this happens :banghead:

Better than logging on, going to town, and becoming a target to some hacker. Was better to stay on the D/L through that whole thing. ^^

Edit:
Ps. My irl friend is a SuicideGirl <3 Shes hawt.

_________________
Image

Forever an Avalonian.


Last edited by Spanktastik on Thu Nov 29, 2007 9:28 pm, edited 1 time in total.

Top
 Profile  
 
 Post subject:
PostPosted: Thu Nov 29, 2007 9:19 pm 
Ex-Staff
User avatar
Offline

Joined: Jan 2007
Posts: 2979
Location: Playin' Talkin'
@ SG
How about making one major topic named 'omg i got hacked' where people can write out their anger. This would prevent numerous future topics about people ranting they got hacked. :)

_________________
Image


Niyoke wrote:
err i know ium soudning weird but .. Mr Bow is my p.e teacher .. ARE YOU MR BOW? LMAO ?


Top
 Profile  
 
 Post subject:
PostPosted: Thu Nov 29, 2007 9:27 pm 
Active Member
User avatar
Offline

Joined: Feb 2007
Posts: 689
Location:
Xian
oops double post

_________________
Image

Forever an Avalonian.


Top
 Profile  
 
 Post subject:
PostPosted: Thu Nov 29, 2007 11:18 pm 
Banned User
User avatar
Offline

Joined: Feb 2007
Posts: 1428
Location:
Aege
Until the security hole was patched no topics were closed or locked on this forum from the so called hackers, wondering why ... ;)

_________________
Be straight be proud of it, don't end up like them:
Image


Top
 Profile  
 
 Post subject:
PostPosted: Thu Nov 29, 2007 11:23 pm 
sama98b wrote:
Until the security hole was patched no topics were closed or locked on this forum from the so called hackers, wondering why ... ;)

we cleaned out as many as possible.
all the topics that had tips to hacking in them were removed or edited.
some of us tried talking sense into the members but got completely ignored
and contradicted by them. it was when the one of the admins got online that
we got a clear answer to what to do with the topics.


Top
  
 
 Post subject: :(
PostPosted: Fri Nov 30, 2007 6:19 am 
Hi, I'm New Here
User avatar
Offline

Joined: Sep 2007
Posts: 9
yup i got all my gold, weapons and protector/gear stolen while offline sucks but what can you do about it..............nothing you just have to get on with it :(

_________________
ign, PLUG
build, str x bow
lvl, 45
wolf lvl 40


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 30, 2007 6:24 am 
Loyal Member
User avatar
Offline

Joined: Oct 2006
Posts: 1672
Location:
Azteca
Spanktastik wrote:
_Shinigami_ wrote:
missed 3 days of silkroad and this happens :banghead:

Better than logging on, going to town, and becoming a target to some hacker. Was better to stay on the D/L through that whole thing. ^^

Edit:
Ps. My irl friend is a SuicideGirl <3 Shes hawt.

spank u dummy. hes a guy irl

_________________
Image
Image


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 30, 2007 7:09 am 
Active Member
User avatar
Offline

Joined: Oct 2006
Posts: 911
Location:
Xian
My god. Reading the announcement joymax is refusing to take responsibility. WTF?! They have a security flaw that allowed you to use their forums to get any user login you wanted. Then a few months later they have another flaw that allows you to use any login without it's password to change the password. And somehow it was the users fault? BS joymax. Total BS.

_________________
Image
Image
Image


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 30, 2007 1:23 pm 
Elite Member
User avatar
Offline

Joined: Nov 2006
Posts: 5136
Location: Final Fantasy Versus 13.
ping_lo wrote:
My god. Reading the announcement joymax is refusing to take responsibility. WTF?! They have a security flaw that allowed you to use their forums to get any user login you wanted. Then a few months later they have another flaw that allows you to use any login without it's password to change the password. And somehow it was the users fault? BS joymax. Total BS.


Inconceivable i know,they totally refuse to give a damn,and completely neglect the necessity of even the slightest form of apology.

Major Fail right there.

_________________
Bmw 6 Series owner. Bleach fan. Music Fan.
Image Reise for Mod.
~ Those who make peaceful revolution impossible will make violent revolution inevitable..


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 30, 2007 6:07 pm 
Addicted Member
User avatar
Offline

Joined: Apr 2007
Posts: 2720
Location:
Artist Corner
good thing i quited the game :D

_________________
check my dA : http://hemagoku.deviantart.com/ :)


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 30, 2007 6:12 pm 
Casual Member
User avatar
Offline

Joined: Nov 2007
Posts: 57
Location: silkroad venus forums
What do Hackers hack your character or your account with money in it or both?

_________________
IGN: Image
Lvl: 42
Build: European
Class: WarLock/self-fishes cleric
Guild: Odyssey
Some people are born great others have greatness driven upon them and for some greatness is never achieved.


Top
 Profile  
 
 Post subject:
PostPosted: Fri Nov 30, 2007 6:33 pm 
Addicted Member
User avatar
Offline

Joined: Apr 2007
Posts: 2720
Location:
Artist Corner
WNxMegax wrote:
What do Hackers hack your character or your account with money in it or both?
they hack what they can

_________________
check my dA : http://hemagoku.deviantart.com/ :)


Top
 Profile  
 
 Post subject:
PostPosted: Sat Dec 01, 2007 7:48 pm 
Banned User
User avatar
Offline

Joined: Jul 2007
Posts: 2926
Location: Somewhereee
Some kids still haven't read this, they keep posting useless threads :(

_________________
<<Puff, bye>>


Top
 Profile  
 
 Post subject:
PostPosted: Sat Dec 01, 2007 9:11 pm 
Veteran Member
User avatar
Offline

Joined: Aug 2007
Posts: 3536
Location: Around
did the hacking stop? im seeing like no "OMG I HATE HAXORS!" threads.

_________________
Image


Top
 Profile  
 
 Post subject:
PostPosted: Mon Dec 03, 2007 7:57 am 
Common Member
User avatar
Offline

Joined: Aug 2007
Posts: 103
Thats why I quit...I better log and and see if my stuffs still there XD

Joymax is really lacking as a company, I have moved on to World of Warcraft and I never looked back.

_________________
Level 80....quit.
Playing World of Warcraft now.....such a better game, it really is amazing how lacking SRO is once you venture out XD


Top
 Profile  
 
 Post subject: What Can I say
PostPosted: Mon Dec 03, 2007 8:27 pm 
Banned User
Offline

Joined: Oct 2007
Posts: 182
I was probably the first to be hacked in Olympus with this flaw, back in October right b4 GNGWC semi s in Cal. I flushed out the hacker by giving him time to think he got away with it. Guess what, I was accused by most you in forum of boting, visiting suspect websites, giving id away to frnds., etc etc. I mentioned in this forum back in October that there was an exploit, and yes the culprits have been located thru IP addresses. Guys, this is something very serious. DONT DO IT! I think you're all jumping the gun in pressumng JM will do nothing. Obviously for me, being the first hacked with this flaw, Im screwed, roll back wont help me. For recent, hacked accounts you maybe saved. JM will come thru, I just hope that they dont allow access to their programs to outside Co's (this is the only way this can happen as it did to Microsoft). JM is going to patch in order to ensure the safety and respect to its members that we deserve...Good luck, don't log into game until its fixed, you're at risk.


Top
 Profile  
 
 Post subject: BTW
PostPosted: Mon Dec 03, 2007 9:47 pm 
Banned User
Offline

Joined: Oct 2007
Posts: 182
That its not the only exploit in the game.. You can actually send packets thru a game exploit, directly from the game from a character (the hacker) to the character you want to hack. This packet goes thru firewall as SRO is authorize by your firewall to internet access. The packet is hidden as a SRO file, so your Comp. uploads it, sends it back thru game to hacker, with all your login and PW info (yes ouch!!) So if you have the nice pixel stuff (SUN ONLY), you're going to be hacked. I started to Global this info in game, and GM (yes sometimes they're there) told me (yes in pink letters) to stop...The problems is being worked on and once its fixed every one thats been affected (and they know who is, and who is lying), will be compensated, in one way or another. So dont go out now and start pretending you're hacked, half the problem is fixed...Wish them well, and either quit playing or be patient, I'm waiting, iM A NOOB IN ANOTHER SERVER ROFL...peace


Top
 Profile  
 
 Post subject:
PostPosted: Mon Dec 03, 2007 10:30 pm 
Active Member
User avatar
Offline

Joined: Jul 2006
Posts: 605
Location:
Alps
DietSunkist wrote:
Thats why I quit...I better log and and see if my stuffs still there XD

Joymax is really lacking as a company, I have moved on to World of Warcraft and I never looked back.


i went to WoW...then i ran outa monies lol

_________________
Highest Lvl:43
Image
Image
Image


Top
 Profile  
 
 Post subject:
PostPosted: Tue Dec 04, 2007 4:13 pm 
Common Member
User avatar
Offline

Joined: Sep 2007
Posts: 102
Location:
Artist Corner
i dont hope they got me :shock:

_________________
Image
I make sigs for u!


Top
 Profile  
 
 Post subject:
PostPosted: Tue Dec 04, 2007 8:37 pm 
Casual Member
User avatar
Offline

Joined: Dec 2007
Posts: 72
Location:
Olympus
I don't understand what this has got to do with Rev6. I also have no idea how people got hacked. Any news for the new guy?

_________________
"Somebody's gonna get a hurt REAL bad.."

Image


Top
 Profile  
 
 Post subject: Re: BTW
PostPosted: Tue Dec 04, 2007 8:46 pm 
Active Member
User avatar
Offline

Joined: Oct 2006
Posts: 911
Location:
Xian
Blasjr wrote:
That its not the only exploit in the game.. You can actually send packets thru a game exploit, directly from the game from a character (the hacker) to the character you want to hack. This packet goes thru firewall as SRO is authorize by your firewall to internet access. The packet is hidden as a SRO file, so your Comp. uploads it, sends it back thru game to hacker, with all your login and PW info (yes ouch!!) So if you have the nice pixel stuff (SUN ONLY), you're going to be hacked. I started to Global this info in game, and GM (yes sometimes they're there) told me (yes in pink letters) to stop...The problems is being worked on and once its fixed every one thats been affected (and they know who is, and who is lying), will be compensated, in one way or another. So dont go out now and start pretending you're hacked, half the problem is fixed...Wish them well, and either quit playing or be patient, I'm waiting, iM A NOOB IN ANOTHER SERVER ROFL...peace

Your optimism is refreshing but misplaced. Joymax will do naught. World keep on turning game keep on rotting.

_________________
Image
Image
Image


Top
 Profile  
 
 Post subject: :((((((((((((((((((((((((((((((((((((((((((((((
PostPosted: Thu Dec 06, 2007 5:22 pm 
Hi, I'm New Here
User avatar
Offline

Joined: Sep 2007
Posts: 9
i can't believe it i got hacked again :cry: this time they turned me into murderer and i lost nearly all my prot gear as well as my shield what's the point this game has cost a fortune in real money for premium and joymax do nothing, six comendations for hacking security phawwwwwwww yeah right i quit and i will be keeping my money sick of these stupid hackers and there jealousy keep the game i'm outa here good luck to you all hope you can keep your accounts clear of these people :banghead:

_________________
ign, PLUG
build, str x bow
lvl, 45
wolf lvl 40


Top
 Profile  
 
 Post subject:
PostPosted: Fri Dec 07, 2007 9:06 am 
Banned User
User avatar
Offline

Joined: Jul 2007
Posts: 1504
Location:
Venus
omg cobber!!! Don't quit please :( :love:

_________________
*** | ImageAvalon | T3DDY | Pure STR Warrior/lock | 8x ***
*** | ImageAvalon | SwiftSparrow | Pure STR Rogue/cleric | 4x ***

Image


Top
 Profile  
 
 Post subject: :((
PostPosted: Fri Dec 07, 2007 1:00 pm 
Hi, I'm New Here
User avatar
Offline

Joined: Sep 2007
Posts: 9
i don't want to quit but i'm afraid i can't afford to rebuild my prot set and weap/shield anymore :cry: no gold now, gutted actually oh wellnever mind it's been great mostly friends made all over the world pity it came to this but joymax do nothing so why should i keep giving them my money :x

_________________
ign, PLUG
build, str x bow
lvl, 45
wolf lvl 40


Top
 Profile  
 
 Post subject:
PostPosted: Sat Dec 08, 2007 9:28 am 
Banned User
User avatar
Offline

Joined: Jul 2007
Posts: 1504
Location:
Venus
watever you lost, you can just get more gold and rebuild it... and degree 9 is on its way, so you wont be needing your old set for too long... Just wait and dont surrender...

_________________
*** | ImageAvalon | T3DDY | Pure STR Warrior/lock | 8x ***
*** | ImageAvalon | SwiftSparrow | Pure STR Rogue/cleric | 4x ***

Image


Top
 Profile  
 
 Post subject:
PostPosted: Tue Dec 11, 2007 5:59 am 
Hi, I'm New Here
Offline

Joined: Mar 2007
Posts: 3
FFS , rev6 didnt not event this problem many other sites/fourms
Rev6 is the reson JoyMax fixed it, THE owner of the site contacted joymax and talked about the explooit
So dont go balaming Rev6 just because it was famous site for its serverstats

BLame (sites like) gamerplanet not rev6
and can i point out that GZP is spreading Bots, cracked bots which is breaching 2 compays policys, the bot company and JoyMax

(i got to much time on my hand)


Top
 Profile  
 
 Post subject:
PostPosted: Mon Dec 17, 2007 12:02 am 
Elite Member
User avatar
Offline

Joined: Apr 2006
Posts: 5570
Location: Being the forum ritalin
Hmmm, wonder if they got my account rofl.

_________________
Quoted from BuDo
(Except I Am Vegeta cuz we all know he is a used tampon when it comes to his personality)
Image


Top
 Profile  
 
 Post subject: Spyder NICE BUT NO CIGAR
PostPosted: Tue Dec 18, 2007 3:47 pm 
Banned User
Offline

Joined: Oct 2007
Posts: 182
Sounds like you have a plan with all nice bot arguments, etc etc., but one mishap, I NEVER BOT, EVER!!! I was the first one to be hacked back in October 13/14, stolen everything thru JM mainsite. So there...And I've I stated in other Posts, make a mule account no one knows, transfer your shit to it b4 you log off. Hackers still sending packets thru Game Guard, Game is not safe, and not sure it will ever be. As long as the're is an exploit, hackers will find it. Live with it or play elsewhere...

Peace


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 30 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group