OMG it's dangerous!!(EDIT:for clarification,read last entry)

Silkrose · Post by **Silkrose** » Tue Jan 02, 2007 1:45 pm

It's much safer to give our your password rather than your username>.<
Even if you GC ur password, if ppl don't know your username, they can never get access to your acct, or in anyway harm your acct...

But if somebody knows your username, and try guessing your pass, you're account get get blocked for the reason that you entered the password incorrectly, and you can't even get your secret question and answer it...

Waaahhh...I had just lost a noob char i made last month with low level SoS and SoM weapons and gears because i somehow jambled the digits in my password and entered the wrong word+digit incorrectly 6 times!

I regretted it, but now I've overcome the loss of my collections...=/ But a new paranoia just surfaced>.< Sometimes I play in lan shop so we can go online together side by side with my bf, and some kids (who play SRO too) there watches while you type your log in to Silkroad. Ofcourse they can read your username...so what if they try opening your acct and type in random words? 6 times incorrect, and you'd be block forever.

It's even worse coz u didn't even get hacked and have your items distributed to other players, it will just disappear forever and you didn't even do anything bad...

I think Joymax should do something about this, it's risky...=/

iGod · Post by **iGod** » Tue Jan 02, 2007 2:10 pm

I thought when u type in a wrong password 6 times or w/e u just got d/c :roll:

hmm

Silkrose · Post by **Silkrose** » Tue Jan 02, 2007 2:26 pm

no=( It said:

"You have entered the wrong password 6 times. You cannot connect to Silkroadonline anymore."

Just that, then i hurried to the official website to try change my password but it said: "We cannot show you your secret question"

=/

Just now, i tried relogging in to that char and see if it was a temporary block, or hopefully just a glitch, but it kept saying "Confirmation failed. Please check your password"

But then again, i can't change my password in the official site>.< I didn't dare try another 6 times entering random combination of my password bec. it might block our IP this time and i can't connect my main char as well...omg so scary...

AMON-Ra · Post by **AMON-Ra** » Tue Jan 02, 2007 2:33 pm

I have to agree that this is a ridiculous situation.

Joymax have made a serious error having such "protection", and to not be able to access your secret question is one of the dumbest things they've ever done.

I had never heard of this before O.o

THE_ZUL · Post by **THE_ZUL** » Tue Jan 02, 2007 2:39 pm

wow..that almost happened to me last nite..i put 3 wrong pwd in row..at last..i noticed.. i pressed caps lock by mistake thx god

Silkrose · Post by **Silkrose** » Tue Jan 02, 2007 2:53 pm

for those who haven't experienced this, try make a separate, new acct and deliberately enter wrong password for 6x...=/

Sorry i didn't have a screenshot of what it said after i entered wrong pass 6x coz i was so shocked upon reading the message that I exit right away and open the official website...nothing can be done now=/ I just hope that the "you cannot connect to SRO anymore" was just a bluff and i can change my password after 2-3 months or so...=( My collection...waaahhh..

Aya · Post by **Aya** » Tue Jan 02, 2007 3:22 pm

basicly everyone on the official SRO forum could get his account blocked? :shock:

clarencekuna · Post by **clarencekuna** » Tue Jan 02, 2007 3:25 pm

some people have their ign as their usernames too.

one of the reasons why I never play in cyber cafes. either people will be crawling behind my back or the have a syndicate that got the PC riddled with keylogger softwares.

TrustNoOne

Silkrose · Post by **Silkrose** » Tue Jan 02, 2007 3:46 pm

yeah, but this is a different thing from keyloggers though...
The last resort is your secret question-_-; I agree that they should block the acct if you entered the wrong password 6 times, but if you try the secret question, atleast you should be able to retain your account, coz it's the proof you have left to show them it's really yours... *sigh*

@clarence: yep i agree with you, some ppl have their char names as their log in...
what if somebody (out of curiousity, let's say not intentional) tries guessing your password. That person would get blocked and he wouldn't understand why :!:

Blackchocob0 · Post by **Blackchocob0** » Tue Jan 02, 2007 4:44 pm

So someone could take my acct name and get me blocked...wow.

Wooooooooooooooooooooooowwwwwwwwwwwwwwwww
wwwwwwwwwwwwwwwwwwwwwoooowwwwww

NOW I do have something to despise Joymax for. That is THE most retarded 'protection' against people guessing your PW.

And you people who go to cafe's...if you see someone looking over your shoulder while you type, fucken kick his ass. It's obvious what he's doing. I'd love the opportunity to hurt someone who intends on stealing my acct. And while you're at it tell the supervisor that he was looking at your PW and acct name. He should get kicked out if not banned.

cool2fool · Post by **cool2fool** » Tue Jan 02, 2007 5:46 pm

Everything He/She said was lies ...I just tried it
I did 6 times then it gives me the msg. saying you cannot connect to silkroad anymore so becareful to type your pasword correctly. then press Ok you get DC. after that i log back on still the same you either put wrong PW and get DC or put the right one to log on .. :oops:

What you eman you can't go and change the PW.... I could

PR0METHEUS · Post by **PR0METHEUS** » Tue Jan 02, 2007 7:54 pm

I'm not at home right now to actually try this on a new account, but I'm sure Joymax has some account retrieval protections in place for forgotten passwords.

As for playing in an Internet cafe, I wouldn't do that myself, but when you do, why not just log in and then quickly go out to the official site and change your password (if someone was looking over your shoulder)? I'm sure once the person sees you log into SRO, they won't continue watching you. If they stay there, they can't use your account until they leave anyway. So when they leave, change your password. That doesn't help with the whole keylogger problem, but that can be solved by simply not playing SRO in an Internet cafe.

The same can be said for any personal account that you actually care about. If you don't want it stolen, don't access it from a public system.

LuV3r8o1 · Post by **LuV3r8o1** » Tue Jan 02, 2007 9:35 pm

What are you guys talking about?

I got the error..

And I could still log in. All I did was enter my correct password and i was in.

[edit]I could also change my password on the website.

Silkrose · Post by **Silkrose** » Tue Jan 02, 2007 11:57 pm

cool2fool wrote:Everything He/She said was lies ...I just tried it
I did 6 times then it gives me the msg. saying you cannot connect to silkroad anymore so becareful to type your pasword correctly. then press Ok you get DC. after that i log back on still the same you either put wrong PW and get DC or put the right one to log on ..
What you eman you can't go and change the PW.... I could

Omg then why can't i??
In this case, then I have a problem because it seems that ONLY me can't change my password, when i enter my username and email, it will say "We cannot show you your secret question because ID and email does not match"

I know my username (obviously it was correct coz it's what got me block)
As for the email add i used, i purposely made another email account just for this noob account, so there's no way I'm entering the wrong add either...-_-; Anywayz, I have only 3 email accounts, and I've tried entering all 3 of them under the username I know I'm using for that account, but it still gives me the "We cannot show you blah blah blah..."

So i thought they messed up your acct info because they don't show it to you even when you enter everything correctly...so you guys were able to change you passwords? waaaaahhh :cry:

I really can't...and i know the log in and email matches too...

FK47 · Post by **FK47** » Wed Jan 03, 2007 12:05 am

If Joymax were smart they could use this to easily give people who've been hacked their accounts back. If you've been hacked, enter a password X number of times to disable the account from being sold etc. and contact Joymax.

Of course, they'd need to have some other form of verifying a user other than a secret question, so the hacker doesn't try and unlock the account.

Demarthl · Post by **Demarthl** » Wed Jan 03, 2007 1:40 am

thats always been there, you just re launch the client and it shoudl allow you to log in, with the right password that is.

also, if you have a password that is over 12 characters (username too) yuo have to cut off the last digits to make it 12, even though you can type more, 12 is the maximum

Silkrose · Post by **Silkrose** » Wed Jan 03, 2007 10:42 am

If you guys can log in after re-opening the client, and can still change your passwords, then I'm probably hacked O.o My nooby acct's probably hacked :?:

But i can't understand how it could be...

But i have no other explanation then, someone got it and somehow changed the password (guessed the secret answer to the question)..

Coz i know my log in and email add that i used, still it will say "it does not match"...as for the password, I can say that I have like 20 words to choose from as my password, and now, though i entered them all, it will still say "Confirmations failed" none of them could get through...=/

Example of why i say i have 20 words that are possibly my password, and atleast one should get me through to my noob acct.

cutie590
590cutie
cutie90
90cutie
cutieangel590
590cutieangel
cutieangel90
90cutieangel

Those are just examples, meaning, I interchanged them that way, it's just impossible that I can't log in to any words i know im using...so therefore, my acct was stolen...-_-; And they somehow break my secret answer and question...

hmmm....

Sorry for the alarm, i thought it was like that since I can't imagine that lvl 15 acct could get hacked=/ So i was thinking I can't log in and it was JM's fault>.<

I'm sorry [GM]Crayon...pls continue to expect me in caves like next week and drop me my sosun 64 glavie... :cry:

iCannot · Post by **iCannot** » Wed Jan 03, 2007 12:31 pm

Imho it's quite fair there is 6-time attempt limit:
1. it prevents brute force (although i doubt JM's skills in security issues)
2. makes u turn on the light next time u input ur pw (so u don't play in dark and don't weaken ur eyes that way)
No, really. As far as i know there's no cure for crooked fingers yet lol

Silkrose · Post by **Silkrose** » Wed Jan 03, 2007 1:18 pm

iCannot wrote:Imho it's quite fair there is 6-time attempt limit:
1. it prevents brute force (although i doubt JM's skills in security issues)
2. makes u turn on the light next time u input ur pw (so u don't play in dark and don't weaken ur eyes that way)
No, really. As far as i know there's no cure for crooked fingers yet lol

nah that wasn't my problem>.< I don't have issues of why 6 failed attempts disconnects you from Silkroad. My issue was that I thought there was some glitch on it or something since I can't change my password and I can't get to my account eventhough I've tried all passwords i use=/ Yet, others can...so it must mean i got hacked (?) and the haxor guessed the secret answer & question (which i think is impossible)

Im not really after that lvl 15 acct, it's just that i have my little collections there that I've worked hard for...=/

Aya · Post by **Aya** » Wed Jan 03, 2007 1:27 pm

well try at another PC, your friends one for example...

Silkroad Online Forums

OMG it's dangerous!!(EDIT:for clarification,read last entry)

OMG it's dangerous!!(EDIT:for clarification,read last entry)

not true

Re: not true