SRO base hacked - all accounts in danger ????

Hyori · **Joined:** Mar 2006 **Posts:** 165

Sroge wrote:

Honestly, i'm not flamming or trying to argue. All i am saying is no type of account info is sent while your in game. By that i mean account ID or password.

If someone downloads a 3rd party program then yes their info can be stolen by the 3rd party program. People cannot hack your character while your in game by any type of action.

Is this your first mmo?

Ryoko · **Joined:** Dec 2005 **Posts:** 6390 **Location:**

Great

I've been accepting the random PT invites in hotan before I go train. I wondered why they don't just use match.

Great again.

Chaud · **Joined:** Apr 2006 **Posts:** 1950

Ryoko wrote:

Great

I've been accepting the random PT invites in hotan before I go train. I wondered why they don't just use match.

Great again.

Might want to get on changing that pass.

vulperin · **Joined:** Aug 2006 **Posts:** 997 **Location:**

OK so this is a new hack. Great. *Changes password and format computer, turn off party/trade request*

By the way when you turn off all these things can you party match?

Chaud · **Joined:** Apr 2006 **Posts:** 1950

vulperin wrote:

OK so this is a new hack. Great. *Changes password and format computer, turn off party/trade request*

By the way when you turn off all these things can you party match?

Seems like pt match is still okay.

vulperin · **Joined:** Aug 2006 **Posts:** 997 **Location:**

chaud wrote:

vulperin wrote:

OK so this is a new hack. Great. *Changes password and format computer, turn off party/trade request*

By the way when you turn off all these things can you party match?

Seems like pt match is still okay.

Ok better to train a little bit slower than wasting 2 months of my work here.

I won't accept any trades/party match from anyone(including people i know of). Will change my password everyday with random password like ue5738fh938t35. Never visit any other website except this forum/youtube. Scan my computer everyday and if i still got hacked...oh well...what can i do?

Sroge · **Joined:** Jul 2006 **Posts:** 203

Hyori wrote:

Sroge wrote:

Honestly, i'm not flamming or trying to argue. All i am saying is no type of account info is sent while your in game. By that i mean account ID or password.

If someone downloads a 3rd party program then yes their info can be stolen by the 3rd party program. People cannot hack your character while your in game by any type of action.

Is this your first mmo?

Share with me on why they would need to send users that type of info when they have it server side? Only ID # your going to see during an exchange is the unique ID the item is given when its dropped.

0n3 · **Joined:** Sep 2006 **Posts:** 78 **Location:**

i guess i am damn lucky then. I have not been playing for 2 weeks since then because of exam. i went in game 3 days ago just to do some alchemy stuff. when i log in, some guy tried to invite me to pt, i declined. phew~~

lucky i also disabled my trade option
phew x2 ~~

Ryoko · **Joined:** Dec 2005 **Posts:** 6390 **Location:**

Sroge wrote:

Hyori wrote:

Sroge wrote:

Honestly, i'm not flamming or trying to argue. All i am saying is no type of account info is sent while your in game. By that i mean account ID or password.

If someone downloads a 3rd party program then yes their info can be stolen by the 3rd party program. People cannot hack your character while your in game by any type of action.

Is this your first mmo?

Share with me on why they would need to send users that type of info when they have it server side? Only ID # your going to see during an exchange is the unique ID the item is given when its dropped.

Dont think too simple

It may / may not make a direct connection to you when you interact with another, thus a different method of obtaining the data they want; not to say that its directly sent over - but extracted

Who knows - not me.

Sroge · **Joined:** Jul 2006 **Posts:** 203

Ryoko wrote:

Dont think too simple

It may / may not make a direct connection to you when you interact with another, thus a different method of obtaining the data they want; not to say that its directly sent over - but extracted

Who knows - not me.

True, i didn't think of it that way. I bet with the window up they send a packet that tells the server you DC so when the server trys to validate back to the client thats what they are sniffing. The hard part is figuring out what they are using to log you in. Even then i doubt the server sends account ID and password. They would probably have to make themselfs DC then send the packet "YOU" recieved back to the server and viola when they get to the character selection screen its your characters.

They wouldn't be able to log you in, but if your not logged in they could DC themselfs back to your character selection screen with the right packets.

So i don't believe it to be a mem hack it would have to be through packets. Joymax wouldn't send any info to another player about you. But when you disconnect they would have to in order for the game to effect the other play with the info that you are no longer there for the trade/group window.

hitman47 · **Joined:** Feb 2006 **Posts:** 328 **Location:**

Well i heard about this

and heard they r using something called SQL injection

and yeah they use the exchange and direct party to hack into ur account

but what i heard that they need at least 10 mins to get your PW

so u have to open the party or the exchange for more than 10 mins

not sure about all this

but in any case

u guyz better uncheck the exchange and party invitations from your option window

Waisha · **Joined:** Apr 2006 **Posts:** 3216 **Location:** wat

I was going to buy silk today. Is it safe to do it cause of this 'hack'?

Ja · **Joined:** Feb 2006 **Posts:** 552 **Location:**

i wouldnt worry about the random pt invites... the new bot picks anyone who doesnt have a party thats in range and invites. even from behind walls and stuff =/...

as for the echanges... we've been getting random exhanges for a long time now.. and i thought a text field was needed for sql injection >.>... if you've been on silkroad long enough, there was an sql injection incident last year.. if you could sql inject i dont think you'd need to hack other ppls accts for items:

im NOT trying to say that this hack doesnt exist, but its kind of hard to believe... some of the ids on that list are actually botters that were hacked and deleveled a long time ago.... but what worries me is that some of them are stall accts with characters under lvl 5..

Skitsefrenik · **Joined:** Apr 2006 **Posts:** 1692 **Location:** Maryland

PM me with ur login and PW. ill make it safe for you

Waisha · **Joined:** Apr 2006 **Posts:** 3216 **Location:** wat

I write again. Do u guys think it's safe to buy silk? Or will i be hacked?

[SD]Kratos · **Joined:** Apr 2006 **Posts:** 4787 **Location:**

W3GAN wrote:

I write again. Do u guys think it's safe to buy silk? Or will i be hacked?

atm...nobody can really know

In france we say : ca part en couille... (Stall, if you read this :wink:

)

Waisha · **Joined:** Apr 2006 **Posts:** 3216 **Location:** wat

Uh ok. If someone know's tell me lol.

[SD]Kratos · **Joined:** Apr 2006 **Posts:** 4787 **Location:**

W3GAN wrote:

Uh ok. If someone know's tell me lol.

I guess it is safer to wait a bit till things are solved...if they really hacked some stuffs...you better be really carefull :wink:

Sutaseyu · **Joined:** Sep 2006 **Posts:** 116 **Location:**

While I still refuse and always will refuse to describe how it's done - I'll quote myself in case it lights off any fireworks inside your heads lol :

I haven't heard the problem being associated with party match, we checked all of the information we got over very carefully and that was not mentioned.. and given the nature of "how" they are working the hack, I can't see party match applying. Please be aware that this does not affect silk purchasing, or stalling (that we know of).

Sutaseyu wrote:

The fact is, there is a hack, and it began 2 weeks ago when the opportunity in the coding presented itself. (hopefully the little grey cells will start to stimulate here lolz)

hitman47 · **Joined:** Feb 2006 **Posts:** 328 **Location:**

Sutaseyu wrote:

While I still refuse and always will refuse to describe how it's done - I'll quote myself in case it lights off any fireworks inside your heads lol :

I haven't heard the problem being associated with party match, we checked all of the information we got over very carefully and that was not mentioned.. and given the nature of "how" they are working the hack, I can't see party match applying. Please be aware that this does not affect silk purchasing, or stalling (that we know of).

Sutaseyu wrote:

The fact is, there is a hack, and it began 2 weeks ago when the opportunity in the coding presented itself. (hopefully the little grey cells will start to stimulate here lolz)

i didnt mention party match

i said direct party invite :wink:

PR0METHEUS · **Joined:** Aug 2006 **Posts:** 4093 **Location:** Earth

radeon wrote:

3. dun simply use the silkroadonline.net official site
-proven, but temporary solved by joymax. It was first hack by indonesian hacker who hack for fun. He inform joymax and joymax reply him kindly.

How was this solved? Just today I went to the official forums to check it out. I can still get the usernames of people who post there. Was there a bigger issue in the official forums before that Joymax fixed? Or are you referring to retrieving a poster's user ID?

EsQuiRe · **Joined:** Sep 2006 **Posts:** 575 **Location:**

Its like the Salem Witch hunts all over again.
*sigh* paranoia will be the end of mankind.
Ive said it b4 i will say it again the polish sites with user ids and pw of botters was obtain through a botting website. If u dont believe me follow this link: http://www.srobot.republika.pl

Ja · **Joined:** Feb 2006 **Posts:** 552 **Location:**

so the bots from bot369 will remain free to ks my cave grinding spots -_-?

EsQuiRe · **Joined:** Sep 2006 **Posts:** 575 **Location:**

unfortunatly bots from 369 and 258 will be here for awhile. The polish sites does not actually offer a real bot but uses a very clever website to lure wannabe botters.

Frozen · **Joined:** Sep 2006 **Posts:** 347

Yea.... Wasn't those 40 pages of logins botters?

number · **Joined:** Aug 2006 **Posts:** 94 **Location:**

true, noone from 369 was on that list, all from fake poland site

Ja · **Joined:** Feb 2006 **Posts:** 552 **Location:**

number wrote:

true, noone from 369 was on that list, all from fake poland site

NOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

WHYYYYYYYYYYYYYYYYYYYY?????????????????????!!!!!!!!!!!!!!!!!!!!!!!!!!

[Oasis] Uber_Wang · **Joined:** Aug 2006 **Posts:** 43 **Location:**

I am a n00b :banghead:

*cries*

I can't see how to change my password, plz share with me.......

nightv · **Joined:** Apr 2006 **Posts:** 109 **Location:**

i just talked to gm gargamel on the phone about some stuff going on and this is not true. just drop it

Troo · **Joined:** Jun 2006 **Posts:** 487

Quote:

I am a n00b *cries*

I can't see how to change my password, plz share with me.......

Start up internet explorer, go to the main silkroad website (http://www.silkroadonline.net, and click on " Forget your ID or PW? Please click here!".. and enter your e-mail address and secret question+answer

it's that simple

Silkroad Online Forums

SRO base hacked - all accounts in danger ????

Who is online