The New SDub: Haxed

Sdub121 · Post by **Sdub121** » Sat Dec 16, 2006 8:29 am

Well i got bruteforced

Ahh Well

Some Nub Accnt PMs me,Giovina, Has my sh!t

G/L To all
G/L To all my friends in Soju. I will be in vent.
Here i come WoW

Yea Boi !!

canakin · Post by **canakin** » Sat Dec 16, 2006 8:33 am

nothing to say.. sorry for you mate good luck to you at your new game...

it sucks to see how someone quits Sro for this reason or another everyday...

Key-J · Post by **Key-J** » Sat Dec 16, 2006 8:35 am

O come on dude, dont give up just yet. You still have your Char. and im sure there are people who will want to give you some money to help you out.

Just change the password, there is still hope

YEAH BOI!

Sdub121 · Post by **Sdub121** » Sat Dec 16, 2006 8:47 am

dude he told me himself...It was one of the hardest Accnt passes he ever haxed...but he eventually got it..in 2 weeks he said....so i can't make any harder then it was/is....he knows my user name so .....

[Pokealeaf] · Post by **[Pokealeaf]** » Sat Dec 16, 2006 9:38 am

Wow man, that is pretty sad... And you just reached lvl 64! Aw... Best of luck on WoW =)

Black_Mamba · Post by **Black_Mamba** » Sat Dec 16, 2006 12:48 pm

How did he know your username though? I see the hackers name in the whispers box, did you ss them talking to you? How come they didn't give you murder status too, npc your bought pet or even change the pw?

I always use maximum pw's of random letters and numbers and I change it every 2-3 days.

CodeOfSilence · Post by **CodeOfSilence** » Sat Dec 16, 2006 12:57 pm

how come he didnt take all those pots? those cost gold too. i bet all your stuff is in storage lol.

Priam · Post by **Priam** » Sat Dec 16, 2006 1:40 pm

CodeOfSilence wrote:how come he didnt take all those pots? those cost gold too. i bet all your stuff is in storage lol.

now that's a retarded thing to say >.<

Draquish · Post by **Draquish** » Sat Dec 16, 2006 1:45 pm

I feel ur pain >_< @ least you have a chance to start over from 0......my hacker took all my stuff AND my account!! :banghead:

Jay · Post by **Jay** » Sat Dec 16, 2006 1:49 pm

You still have your acc, and you have your squirrel left to? When my friends & family got hacked they even npced their monkey/wolf. and one of my friends got their acc sold.. =/ You still have yours so your not doing to bad, just rebuild your equip and continue playing, don't give up, you can always get back on track.

Sdub121 · Post by **Sdub121** » Sat Dec 16, 2006 3:11 pm

Yeah Thnx all....but.....It's like i was on my way out the door...the hacker just pushed me through...So anyone who wants my accnt....pm me

[SD]Kratos · Post by **[SD]Kratos** » Sat Dec 16, 2006 3:52 pm

I hate hackers :/ Well gluck in WoW, if you choose wow

nightbloom · Post by **nightbloom** » Sat Dec 16, 2006 4:09 pm

This new hacking trend disheartens me a great deal. I do not wish it upon ppl I despise.

JoyMax appears to not believe hacking is possible unless you bot or let someone know your user name but judging from experience and the mass hackings of Greece, I doubt that is true.

I cant say you were ever one of my favorite ppl SDub, but Im sorry you got hacked. If you need any help, drop me a line here. I couldnt do a lot, but I can at least pitch in.

i_hydrate_i · Post by **i_hydrate_i** » Sat Dec 16, 2006 5:01 pm

that suks man..u did change ur pass after letting some people on right? i know krais has become emo as of late and was kicked from guild and i know u let him on ur id once hopefully its not one of the people u have trusted in teh past cause lookin at ur inventory they didnt do anything REALLY abd like level 15 pk or sell squirel

EliteHealer · Post by **EliteHealer** » Sat Dec 16, 2006 5:16 pm

He bruteforced your pw in two weeks? I'm sorry to say it, but then your pw was probably too easy and probably made up of real words.

26 letters x 2 (upper and lower case) + 10 digits = 62 possibilities/letter

A 5 letter/digit pw will have 62 x 62 x 62 x 62 x 62 possible combinations, that's 916.13 million possibilities. With a computer checking 10,000 combinations per second, it would take 91,613 seconds, or 25 hours, to try all combinations.

A 6 letter pw will take 1578 hours, or 65.7 days.

etc.

So unless your pw was very short, I'm guessing he used word lists to try different combinations of words.

Progress · Post by **Progress** » Sat Dec 16, 2006 5:28 pm

Something isnt right with his claims.

You just dont bruteforce a password via a network connection.

So i suspect one or more of the following is true:

1. His password wasnt strong, even though he thought it was.
2. It was a word found in a dictionary.
3. He got keylogged.

Brute forcing takes a very long time. I dont think most of you really understand how many combinations we are talking about.

But since its so easy for you, why dont you "hack" the following MD5 string with a speed of 100 tries per second (this is probably what you COULD get via a WAN):

"5fa8ee23ec1b63401403e8d0eb8c31db"

That would probably take you longer than 5000 years.

zphantom · Post by **zphantom** » Sat Dec 16, 2006 6:26 pm

It seems bruteforce is unlikely, it's more improbable than winning the lottery. A lottery's 6 numbers in 54 pales compared to a game ID and long PW with symbols from 26 letters + 10 numbers.

6 from 54 numbers = 18.6 billion possibilities

6 from 36 letters+numbers = 2.2 billion possibilities
7 from 36 letters+numbers = 78.4 billion possibilities
10 from 36 letters+numbers = 36^10 = 3,656 trillion possibilities

Changing your password will not lessen the chance of being bruteforce either because it is still one password in zillions. It only helps to prevent previous password leaks like if the rumor is true about trade windows and party requests.

The hacker (not likely bruteforcer) first has to get your login ID.

The easiest way to get your ID known is posting at the main forums (http://www.silkroadonline.net). The second way is if you use your SAME GAME LOGIN ID as your FORUM ID (SRF or SRT or whichever). Rumors are rumors (like trade window and party requests), it isn't likely true. People just need something to blame it on and that seems the most likely (the only) player interaction that caused a security leak.

How the password is obtained is a mystery unless it is easy to guess, leaked, or keylogged (most likely through bots).

Your EMAIL should be changed to one that is unused and unknown to everyone else. Most people give others their contact information, their EMAIL, which can be used to change your password. Once a person has your LOGIN ID and your EMAIL (or if your LOGIN is the same as your EMAIL), the hacker will be tipped off with the secret answer question.

Priam · Post by **Priam** » Sat Dec 16, 2006 6:42 pm

w/e!

On thing still remains, he got hacked. Which is kinda flarked up.

Sdub121 · Post by **Sdub121** » Sat Dec 16, 2006 9:34 pm

The point being....I got haked...And basically Im Done....My pass was 12 letters and numbers long...Completely random..no meaning...consisted of 4 numbers and 8 letters...nutthin less......
I got Bruteforced What do you want....And the only peeps who knew my sh!t was ImpeC,Krais, loather, Memphist, and winterNightS...And i nkow im gunna get rapped on bout that but ....I can say 100% that not one of them would ever run my shit like that....Although I do find it starnge that i wasnt pk...and monkey, skill realocation, potions, scrolls were all still there...
Iono...All i gotta say is...Im bout to get laid tonite...Huge party on Gold St. 900pm Utica New york....3$ admission or a rack at the door...

Yea Boi !!

[SD]Master_Wong · Post by **[SD]Master_Wong** » Sat Dec 16, 2006 9:39 pm

zphantom wrote:It seems bruteforce is unlikely, it's more improbable than winning the lottery. A lottery's 6 numbers in 54 pales compared to a game ID and long PW with symbols from 26 letters + 10 numbers.

6 from 54 numbers = 18.6 billion possibilities

6 from 36 letters+numbers = 2.2 billion possibilities
7 from 36 letters+numbers = 78.4 billion possibilities
10 from 36 letters+numbers = 36^10 = 3,656 trillion possibilities

Changing your password will not lessen the chance of being bruteforce either because it is still one password in zillions. It only helps to prevent previous password leaks like if the rumor is true about trade windows and party requests.

The hacker (not likely bruteforcer) first has to get your login ID.

The easiest way to get your ID known is posting at the main forums (http://www.silkroadonline.net). The second way is if you use your SAME GAME LOGIN ID as your FORUM ID (SRF or SRT or whichever). Rumors are rumors (like trade window and party requests), it isn't likely true. People just need something to blame it on and that seems the most likely (the only) player interaction that caused a security leak.

How the password is obtained is a mystery unless it is easy to guess, leaked, or keylogged (most likely through bots).

Your EMAIL should be changed to one that is unused and unknown to everyone else. Most people give others their contact information, their EMAIL, which can be used to change your password. Once a person has your LOGIN ID and your EMAIL (or if your LOGIN is the same as your EMAIL), the hacker will be tipped off with the secret answer question.

and where does it state it is impossible?

i never liked him but its not funny to get hacked

Sdub121 · Post by **Sdub121** » Sat Dec 16, 2006 11:36 pm

XMoshe · Post by **XMoshe** » Sun Dec 17, 2006 12:03 am

Man that sux dude =( Dont give up on your account, get a new pw and start over..

.

Man, sorry to hear it

Innovacious · Post by **Innovacious** » Sun Dec 17, 2006 12:11 am

You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

khang · Post by **khang** » Sun Dec 17, 2006 12:45 am

mate - as much as i want your account... i must ask u not to give up and to carry on, giving up means that u forfeit and he wins... we all know jms are pain in the ass but we still must face it.. it's simply part of life.

i hope that u getting hack was not worthless.. perhaps it was faith and it was saying silkroad simply suckk.,....

oo yea on the note side... ..... em hard for me

n use protection

Drew_Benton · Post by **Drew_Benton** » Sun Dec 17, 2006 12:49 am

Innovacious wrote:You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

I seriously hope thats not a "password".....

http://www.silkroadforums.com/viewtopic.php?p=247121&highlight=#247121

khang · Post by **khang** » Sun Dec 17, 2006 12:53 am

wats the link for?

n sdub what i gotta do for account

Sdub121 · Post by **Sdub121** » Sun Dec 17, 2006 1:20 am

Innovacious wrote:You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

Yeah ti is butt i changed it n e ways...So u dont know my username

Drew_Benton · Post by **Drew_Benton** » Sun Dec 17, 2006 1:29 am

Sdub121 wrote:
Innovacious wrote:You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

Yeah ti is butt i changed it n e ways...So u dont know my username

Please read the link I posted

Draquish · Post by **Draquish** » Sun Dec 17, 2006 1:32 am

I tested something.

If I had the right bruteforce program I could've gotten like 10 accnts today....if you don;t believe me.... Hey Innovacious, whats ur father's middle name?!?!

Scary. I know. :shock:

khang · Post by **khang** » Sun Dec 17, 2006 2:04 am

using wat software?