Sroge wrote:Honestly, i'm not flamming or trying to argue. All i am saying is no type of account info is sent while your in game. By that i mean account ID or password.
If someone downloads a 3rd party program then yes their info can be stolen by the 3rd party program. People cannot hack your character while your in game by any type of action.
Is this your first mmo?
SILKROAD ALCHEMIST - we will never fall Drink less HATERADE
vulperin wrote:OK so this is a new hack. Great. *Changes password and format computer, turn off party/trade request*
By the way when you turn off all these things can you party match?
Seems like pt match is still okay.
Ok better to train a little bit slower than wasting 2 months of my work here.
I won't accept any trades/party match from anyone(including people i know of). Will change my password everyday with random password like ue5738fh938t35. Never visit any other website except this forum/youtube. Scan my computer everyday and if i still got hacked...oh well...what can i do?
Guild Hatred is recruiting lvl 20+ people. Please go to Guild: Alps to check on Hatred.
Sroge wrote:Honestly, i'm not flamming or trying to argue. All i am saying is no type of account info is sent while your in game. By that i mean account ID or password.
If someone downloads a 3rd party program then yes their info can be stolen by the 3rd party program. People cannot hack your character while your in game by any type of action.
Is this your first mmo?
Share with me on why they would need to send users that type of info when they have it server side? Only ID # your going to see during an exchange is the unique ID the item is given when its dropped.
i guess i am damn lucky then. I have not been playing for 2 weeks since then because of exam. i went in game 3 days ago just to do some alchemy stuff. when i log in, some guy tried to invite me to pt, i declined. phew~~
Sroge wrote:Honestly, i'm not flamming or trying to argue. All i am saying is no type of account info is sent while your in game. By that i mean account ID or password.
If someone downloads a 3rd party program then yes their info can be stolen by the 3rd party program. People cannot hack your character while your in game by any type of action.
Is this your first mmo?
Share with me on why they would need to send users that type of info when they have it server side? Only ID # your going to see during an exchange is the unique ID the item is given when its dropped.
Dont think too simple
It may / may not make a direct connection to you when you interact with another, thus a different method of obtaining the data they want; not to say that its directly sent over - but extracted
It may / may not make a direct connection to you when you interact with another, thus a different method of obtaining the data they want; not to say that its directly sent over - but extracted
Who knows - not me.
True, i didn't think of it that way. I bet with the window up they send a packet that tells the server you DC so when the server trys to validate back to the client thats what they are sniffing. The hard part is figuring out what they are using to log you in. Even then i doubt the server sends account ID and password. They would probably have to make themselfs DC then send the packet "YOU" recieved back to the server and viola when they get to the character selection screen its your characters.
They wouldn't be able to log you in, but if your not logged in they could DC themselfs back to your character selection screen with the right packets.
So i don't believe it to be a mem hack it would have to be through packets. Joymax wouldn't send any info to another player about you. But when you disconnect they would have to in order for the game to effect the other play with the info that you are no longer there for the trade/group window.
i wouldnt worry about the random pt invites... the new bot picks anyone who doesnt have a party thats in range and invites. even from behind walls and stuff =/...
as for the echanges... we've been getting random exhanges for a long time now.. and i thought a text field was needed for sql injection >.>... if you've been on silkroad long enough, there was an sql injection incident last year.. if you could sql inject i dont think you'd need to hack other ppls accts for items:
im NOT trying to say that this hack doesnt exist, but its kind of hard to believe... some of the ids on that list are actually botters that were hacked and deleveled a long time ago.... but what worries me is that some of them are stall accts with characters under lvl 5..
Last edited by Ja on Wed Sep 27, 2006 6:47 pm, edited 1 time in total.
While I still refuse and always will refuse to describe how it's done - I'll quote myself in case it lights off any fireworks inside your heads lol :
I haven't heard the problem being associated with party match, we checked all of the information we got over very carefully and that was not mentioned.. and given the nature of "how" they are working the hack, I can't see party match applying. Please be aware that this does not affect silk purchasing, or stalling (that we know of).
Sutaseyu wrote:The fact is, there is a hack, and it began 2 weeks ago when the opportunity in the coding presented itself. (hopefully the little grey cells will start to stimulate here lolz)
Sutaseyu wrote:While I still refuse and always will refuse to describe how it's done - I'll quote myself in case it lights off any fireworks inside your heads lol :
I haven't heard the problem being associated with party match, we checked all of the information we got over very carefully and that was not mentioned.. and given the nature of "how" they are working the hack, I can't see party match applying. Please be aware that this does not affect silk purchasing, or stalling (that we know of).
Sutaseyu wrote:The fact is, there is a hack, and it began 2 weeks ago when the opportunity in the coding presented itself. (hopefully the little grey cells will start to stimulate here lolz)
radeon wrote:3. dun simply use the silkroadonline.net official site -proven, but temporary solved by joymax. It was first hack by indonesian hacker who hack for fun. He inform joymax and joymax reply him kindly.
How was this solved? Just today I went to the official forums to check it out. I can still get the usernames of people who post there. Was there a bigger issue in the official forums before that Joymax fixed? Or are you referring to retrieving a poster's user ID?
Missing the good times in SRO...
SRO: 1x, STR Blader (Thebes) 54, STR blader (Venice) 0x, INT wizard (Venice) 19, INT spear (Venice) 34, STR rogue/bard (Venus) 0x, STR blader (Venus) 8x, INT bard/cleric (Gaia)
Its like the Salem Witch hunts all over again.
*sigh* paranoia will be the end of mankind.
Ive said it b4 i will say it again the polish sites with user ids and pw of botters was obtain through a botting website. If u dont believe me follow this link: http://www.srobot.republika.pl
unfortunatly bots from 369 and 258 will be here for awhile. The polish sites does not actually offer a real bot but uses a very clever website to lure wannabe botters.
I can't see how to change my password, plz share with me.......
Start up internet explorer, go to the main silkroad website (http://www.silkroadonline.net, and click on " Forget your ID or PW? Please click here!".. and enter your e-mail address and secret question+answer
it's that simple
Do not write stupid,when somebody loses.l lik the game myself but my 6jears old kid,who like to play games so much,has refuse to play,bcos of that word.Pls write something abit funny.l hope you consider my suggestion.Thank you and God bless you.
-retired
*cries*
