Hacking preventions; JoyMax employees: please read this too
Posted: Thu Jan 04, 2007 9:45 pm
Ok, from my recent experiences I thought I'd add a few hacking prevention tips on top of the ones JoyMax is giving out:
1. Don't use your normal email address, name and surname when creating an account. Using that information a hacker can gain the first 4 letters of your accountname, which may be enough to guess the full account name.
2. Don't use a secret question the answer to which could be found out with some simple investigation. I was foolish enough to use my mother's maiden name; trust me: if they know your name, they can find out your mother's maiden name as well.
3. Use long passwords with alphanumerical characters; there are plenty of brute force password cracking programs out there, and the longer your password, the harder it is to crack it this way.
4. Tip to JoyMax: After answering the secret question, a random password should be sent to the email address of the account. You do NOT let people enter a new password without first logging into the account! In stead, a user should use the generated password in his email to log into his account, and THEN he can change his password.
I've noticed that a lot of good, honest, non-botting, non-cheating, non-gold/silk buying people have been hacked lately. This should be a sign. JoyMax, when an owner of an account comes to you with a claim that his/her account was hacked: investigate and return the account to the rightful owner asap. These are your loyal paying customers, who have worked hard to get where they are. They should not lose everything this easily, especially if it can simply be corrected by returning an account to the rightful owner. They should also not be ignored. I have so far written 6 emails and 3 bug reports, and have yet to receive even a single answer from JoyMax.
Truly, I love this game; I love playing it, and I love spending time with my friends there, but this whole adventure so far has left me very disillusioned. I really thought JoyMax would care more for their loyal paying customers. Please JoyMax, show me that this trust was not in vain. I've spent over 600 hours and $150 on silk purchases on this account so far, and it really hurts to lose it all like this. It also hasn't left much motivation for starting over and spending money on silk once again; knowing that in 6-12 months someone might just come, and do this to me again.
1. Don't use your normal email address, name and surname when creating an account. Using that information a hacker can gain the first 4 letters of your accountname, which may be enough to guess the full account name.
2. Don't use a secret question the answer to which could be found out with some simple investigation. I was foolish enough to use my mother's maiden name; trust me: if they know your name, they can find out your mother's maiden name as well.
3. Use long passwords with alphanumerical characters; there are plenty of brute force password cracking programs out there, and the longer your password, the harder it is to crack it this way.
4. Tip to JoyMax: After answering the secret question, a random password should be sent to the email address of the account. You do NOT let people enter a new password without first logging into the account! In stead, a user should use the generated password in his email to log into his account, and THEN he can change his password.
I've noticed that a lot of good, honest, non-botting, non-cheating, non-gold/silk buying people have been hacked lately. This should be a sign. JoyMax, when an owner of an account comes to you with a claim that his/her account was hacked: investigate and return the account to the rightful owner asap. These are your loyal paying customers, who have worked hard to get where they are. They should not lose everything this easily, especially if it can simply be corrected by returning an account to the rightful owner. They should also not be ignored. I have so far written 6 emails and 3 bug reports, and have yet to receive even a single answer from JoyMax.
Truly, I love this game; I love playing it, and I love spending time with my friends there, but this whole adventure so far has left me very disillusioned. I really thought JoyMax would care more for their loyal paying customers. Please JoyMax, show me that this trust was not in vain. I've spent over 600 hours and $150 on silk purchases on this account so far, and it really hurts to lose it all like this. It also hasn't left much motivation for starting over and spending money on silk once again; knowing that in 6-12 months someone might just come, and do this to me again.
)
