"Kekek" SRO Website got Pwned

Axeoo7 · Post by **Axeoo7** » Fri Jan 12, 2007 8:49 pm

Forums still down

Luoma · Post by **Luoma** » Fri Jan 12, 2007 8:52 pm

Axeoo7 wrote:Forums still down

yes and it probably will be for a while longer.. do you actually use it? I wouldnt use it, dont think its safe... use the srf instead!

Kitty · Post by **Kitty** » Fri Jan 12, 2007 8:53 pm

The words "Joymax" and "security" go hand in hand. :roll:

Axeoo7 · Post by **Axeoo7** » Fri Jan 12, 2007 8:55 pm

Luoma wrote:
Axeoo7 wrote:Forums still down

yes and it probably will be for a while longer.. do you actually use it? I wouldnt use it, dont think its safe... use the srf instead!

yeh i use it sometimes but with another nub account.

Luoma · Post by **Luoma** » Fri Jan 12, 2007 8:55 pm

Axeoo7 wrote:yeh i use it sometimes but with another nub account.

good

Jay · Post by **Jay** » Fri Jan 12, 2007 9:00 pm

They just posted in game the forums will be down till further notice to tighten security also "not to worry about your account information getting leaked" that they will secure that from happening to. Let's see if they will.

*edit* heres the text pizza said

Axeoo7 · Post by **Axeoo7** » Fri Jan 12, 2007 9:04 pm

Jay wrote:They just posted in game the forums will be down till further notice to tighten security also "not to worry about your account information getting leaked" that they will secure that from happening to. Let's see if they will.

So it wasnt secure before and now they are gonna make it secure

Forum Services Temporarily Suspended

Date : 1/13/2007
inquiry : 122

Hello, this is Silkroad Online.

In light of the recent activities on the website, we have temporarily suspended forum services until further notice in order to ensure the security of our game and services.

Upon our initial investigation, we have confirmed that players�� account security is not at a risk, so please be assured that this will not affect your game service or game play. However, we are conducting a more thorough investigation to be absolutely sure.

We apologize for the security concerns that have arisen over the past few days, and will see to it that no player is adversely affected.

i play silk road · Post by **i play silk road** » Fri Jan 12, 2007 9:12 pm

Innovacious wrote:
-)G(-Kratos wrote:Now let's vote for joymax as best company at mmosite. com all!!!!

My thoughts exactly!

lol, its still there, do you think they have noticed yet?

OMGZ ITS STILL T?HERE

i play silk road · Post by **i play silk road** » Fri Jan 12, 2007 9:26 pm

Innovacious wrote:
-)G(-Kratos wrote:Now let's vote for joymax as best company at mmosite. com all!!!!

My thoughts exactly!

lol, its still there, do you think they have noticed yet?

its gone now

zphantom · Post by **zphantom** » Fri Jan 12, 2007 10:42 pm

JM needs a few lessons from Ryoko

Suppaman · Post by **Suppaman** » Fri Jan 12, 2007 10:45 pm

wow just wow. Some people have too much time on their hands.

SROh4xb0ts · Post by **SROh4xb0ts** » Fri Jan 12, 2007 10:53 pm

AHAHAHAHHAHHAHAHAHHHAHAHAAHA

I don't think I've laughed this hard from a site hack in a long time...

last time i did was last year... when a rival of my clan's FPS game site got hacked...

omfg it was funny... i'll post a pic of it here.

UNi · Post by **UNi** » Fri Jan 12, 2007 11:21 pm

but seriously.. the admin account hijacking on their forums has been going on for days now. the post by "Satyr", who posted info on how to get the password hash from a sql injection, was left alone there since he posted it yesterday or something. the notice about Joymax's security mesaures in the forum got changed TWICE by people not associated to joymax. then today they changed the front page.

and whats that about ppl not needing to worry about their account info? if what Satyr posted was true, then anyone could just do as he described to get the password hash of any account they knew the login id of. this just sux

1llu51on · Post by **1llu51on** » Sat Jan 13, 2007 2:51 am

One after another. Great, just great.
Finally just about time, someone crushed their overconfident pride. Lessons learned, now we hope you seriously do your job and heed our suggestions.

Shine · Post by **Shine** » Sat Jan 13, 2007 4:32 am

Ironically, the "6 Security Conducts for Hacking Prevention" link/button is right next to that.

_Atreyu_ · Post by **_Atreyu_** » Sat Jan 13, 2007 4:51 am

Snap!

1llu51on · Post by **1llu51on** » Sat Jan 13, 2007 5:24 am

Sorry, couldn't help it.

Consider this guy Joymax. Totally matched.

nadare32 · Post by **nadare32** » Sat Jan 13, 2007 6:28 am

Lmao i think the judges were very impressed.

Skitsefrenik · Post by **Skitsefrenik** » Sat Jan 13, 2007 6:58 am

And to think I thought people liked SRO. Somebody should hack the site again and write, "**** You Hackers!"

ResTnPieces · Post by **ResTnPieces** » Sat Jan 13, 2007 7:02 am

-)G(-Kratos wrote:Now let's vote for joymax as best company at mmosite. com all!!!!

++++ 1 there

oktaytheazer · Post by **oktaytheazer** » Sat Jan 13, 2007 4:35 pm

gamef wrote:be afraid be very afraid

be very very afraid !!

Pan_Raider(`_´) · Post by **Pan_Raider(`_´)** » Sat Jan 13, 2007 8:31 pm

1llu51on wrote:Sorry, couldn't help it.

Consider this guy Joymax. Totally matched.

OMF G

That was a spectacular faceplant (From Joymax 2)

+100

Luoma · Post by **Luoma** » Sat Jan 13, 2007 8:37 pm

Pan_Raider(`_´) wrote:OMF G

That was a spectacular faceplant (From Joymax 2)

+100

yes indeed :shock:

Pan_Raider(`_´) · Post by **Pan_Raider(`_´)** » Sat Jan 13, 2007 8:43 pm

http://img444.imageshack.us/my.php?image=joymaxpwnedyl5.jpg
...

This just confirms many security statements :twisted:

DeaDSwarM · Post by **DeaDSwarM** » Sat Jan 13, 2007 9:18 pm

Grimjaw wrote:Quite possibly it's a grey hacker.

Small summary:

A Grey hat in the computer security community, refers to a skilled hacker who sometimes acts legally to test security issues, sometimes in good will, and sometimes not. They are a hybrid between white and black hat hackers. They usually do not hack for personal gain or have malicious intentions, but may or may not occasionally commit crimes during the course of their technological exploits.

There still is a small chance of this hacker turning bad though.

ROFL you read the PC user magazines aswell?

Well I guess that showed JM. Next big news will be JM trying
to say that one of there staff members added it to have a laugh.

If the hacker is what grimjaw said then there should be
no worrys for us only JM, Also if the hacker isnt what grimjaw
said then i woulda changed the payment accounts so when
everyone pays for silk the money will goto the hackers account.

ROFL!! You all think this is funny ROFL!! What would be funny is
if the hacker somehow got to the user list and removed everyones
name!! OMFG!!! stfu....

Bakemaster · Post by **Bakemaster** » Sat Jan 13, 2007 9:56 pm

Ryoko wrote:LOL um... a simple SQL injection could change a message like that.

Like the one we told them about months and months ago?

The same one they said they fixed?

The same one that I was informed by a player via this forum on October 5th was NOT fixed, and then yelled at the GMs about it in the SA forum, providing this screenshot which they then claimed was not proof, embarrassing me in the process?

COULDN'T BE

IT ARE NOT POSSIBLE

Joe_Mama · Post by **Joe_Mama** » Sat Jan 13, 2007 11:33 pm

Bakemaster wrote:
Ryoko wrote:LOL um... a simple SQL injection could change a message like that.

Like the one we told them about months and months ago?

The same one they said they fixed?

The same one that I was informed by a player via this forum on October 5th was NOT fixed, and then yelled at the GMs about it in the SA forum, providing this screenshot which they then claimed was not proof, embarrassing me in the process?

COULDN'T BE

IT ARE NOT POSSIBLE

Yep, I remember that exact topic from months ago. In the SA forums most of our complaints were relegated to "awww...you poor dummies...you know nothing..." type of condescending answers for most issues.

I also seem to remember a very lengthy post by someone (in this forum or tavern) that mentioned that very hack and even gave some pretty decent instructions.

I love the rationale behind "your info is safe..but..uhhh...we are going to shut things down anyways...becuase it's so secure and all....we are just...uhhh...checking..." Right, all of the players are feeling very safe right now.

I expect more from a developer for an ONLINE freaking game.

Grimjaw · Post by **Grimjaw** » Sun Jan 14, 2007 2:36 pm

DeaDSwarM wrote:
Grimjaw wrote:Quite possibly it's a grey hacker.

Small summary:

A Grey hat in the computer security community, refers to a skilled hacker who sometimes acts legally to test security issues, sometimes in good will, and sometimes not. They are a hybrid between white and black hat hackers. They usually do not hack for personal gain or have malicious intentions, but may or may not occasionally commit crimes during the course of their technological exploits.

There still is a small chance of this hacker turning bad though.

ROFL you read the PC user magazines aswell?

Well I guess that showed JM. Next big news will be JM trying
to say that one of there staff members added it to have a laugh.

If the hacker is what grimjaw said then there should be
no worrys for us only JM, Also if the hacker isnt what grimjaw
said then i woulda changed the payment accounts so when
everyone pays for silk the money will goto the hackers account.

ROFL!! You all think this is funny ROFL!! What would be funny is
if the hacker somehow got to the user list and removed everyones
name!! OMFG!!! stfu....

What's wrong with reading?
I like to be up to speed.

Psam · Post by **Psam** » Sun Jan 14, 2007 3:39 pm

At least now I know how I got hacked a few weeks back....

Partyataztec · Post by **Partyataztec** » Sun Jan 14, 2007 4:27 pm

ohh...now everyone is filled with fear.

the fear to lost their "ivespentalifetime upleveling this character". lost an account, lost the time that they have spend, and those silk for astral.

:twisted: