Regarding the recent rev6 hacking exploit

SuicideGrl · Post by **SuicideGrl** » Thu Nov 29, 2007 6:41 pm

Greetings SRFers.

As we all know, the recent discovery of a MASSIVE security flaw in JM's new website has caused countless accounts to be stolen in the past several days/weeks. We probably all know someone who was affected by it in one way or another.

In the past few days, there has been a flurry of discussion on this forum about this exploit, with many of our users claming that have hacked or were planning to hack accounts, whether to reclaim what was theirs or to steal others' accounts.

The rules of this forum clearly state that "hacking" (which has developed into a catch-all term for stealing accounts) is prohibited here, regardless of the reason behind it. If you choose to exploit JM's security and voilate their ToS, it is a risk you take on your OWN head, and SRF cannot and will not be held responsible for any punitive action that Joymax takes against you or your characters and accounts. SRF in no way endorses nor approves of the exploiting of security faults to gain access to accounts.

Hopefully Joymax takes from this incident a cue to tighten up their security and do a better job of protecting their users. Thank you for your patience and understanding during this turbulent time in the SRO and SRF communities.

-SG

_Shinigami_ · Post by **_Shinigami_** » Thu Nov 29, 2007 7:53 pm

missed 3 days of silkroad and this happens :banghead:

Spanktastik · Post by **Spanktastik** » Thu Nov 29, 2007 9:01 pm

_Shinigami_ wrote:missed 3 days of silkroad and this happens

Better than logging on, going to town, and becoming a target to some hacker. Was better to stay on the D/L through that whole thing. ^^

Edit:
Ps. My irl friend is a SuicideGirl <3 Shes hawt.

MrBow · Post by **MrBow** » Thu Nov 29, 2007 9:19 pm

@ SG
How about making one major topic named 'omg i got hacked' where people can write out their anger. This would prevent numerous future topics about people ranting they got hacked.

Spanktastik · Post by **Spanktastik** » Thu Nov 29, 2007 9:27 pm

oops double post

sama98b · Post by **sama98b** » Thu Nov 29, 2007 11:18 pm

Until the security hole was patched no topics were closed or locked on this forum from the so called hackers, wondering why ...

cin · Post by **cin** » Thu Nov 29, 2007 11:23 pm

sama98b wrote:Until the security hole was patched no topics were closed or locked on this forum from the so called hackers, wondering why ...

we cleaned out as many as possible.
all the topics that had tips to hacking in them were removed or edited.
some of us tried talking sense into the members but got completely ignored
and contradicted by them. it was when the one of the admins got online that
we got a clear answer to what to do with the topics.

cobber · Post by **cobber** » Fri Nov 30, 2007 6:19 am

yup i got all my gold, weapons and protector/gear stolen while offline sucks but what can you do about it..............nothing you just have to get on with it

mike2007 · Post by **mike2007** » Fri Nov 30, 2007 6:24 am

Spanktastik wrote:
_Shinigami_ wrote:missed 3 days of silkroad and this happens

Better than logging on, going to town, and becoming a target to some hacker. Was better to stay on the D/L through that whole thing. ^^

Edit:
Ps. My irl friend is a SuicideGirl <3 Shes hawt.

spank u dummy. hes a guy irl

ping_lo · Post by **ping_lo** » Fri Nov 30, 2007 7:09 am

My god. Reading the announcement joymax is refusing to take responsibility. WTF?! They have a security flaw that allowed you to use their forums to get any user login you wanted. Then a few months later they have another flaw that allows you to use any login without it's password to change the password. And somehow it was the users fault? BS joymax. Total BS.

Grimjaw · Post by **Grimjaw** » Fri Nov 30, 2007 1:23 pm

ping_lo wrote:My god. Reading the announcement joymax is refusing to take responsibility. WTF?! They have a security flaw that allowed you to use their forums to get any user login you wanted. Then a few months later they have another flaw that allows you to use any login without it's password to change the password. And somehow it was the users fault? BS joymax. Total BS.

Inconceivable i know,they totally refuse to give a damn,and completely neglect the necessity of even the slightest form of apology.

Major Fail right there.

hemagoku · Post by **hemagoku** » Fri Nov 30, 2007 6:07 pm

good thing i quited the game

WNxMegax · Post by **WNxMegax** » Fri Nov 30, 2007 6:12 pm

What do Hackers hack your character or your account with money in it or both?

hemagoku · Post by **hemagoku** » Fri Nov 30, 2007 6:33 pm

WNxMegax wrote:What do Hackers hack your character or your account with money in it or both?

they hack what they can

Casey613 · Post by **Casey613** » Sat Dec 01, 2007 7:48 pm

Some kids still haven't read this, they keep posting useless threads

Panu · Post by **Panu** » Sat Dec 01, 2007 9:11 pm

did the hacking stop? im seeing like no "OMG I HATE HAXORS!" threads.

DietSunkist · Post by **DietSunkist** » Mon Dec 03, 2007 7:57 am

Thats why I quit...I better log and and see if my stuffs still there XD

Joymax is really lacking as a company, I have moved on to World of Warcraft and I never looked back.

Blasjr · Post by **Blasjr** » Mon Dec 03, 2007 8:27 pm

I was probably the first to be hacked in Olympus with this flaw, back in October right b4 GNGWC semi s in Cal. I flushed out the hacker by giving him time to think he got away with it. Guess what, I was accused by most you in forum of boting, visiting suspect websites, giving id away to frnds., etc etc. I mentioned in this forum back in October that there was an exploit, and yes the culprits have been located thru IP addresses. Guys, this is something very serious. DONT DO IT! I think you're all jumping the gun in pressumng JM will do nothing. Obviously for me, being the first hacked with this flaw, Im screwed, roll back wont help me. For recent, hacked accounts you maybe saved. JM will come thru, I just hope that they dont allow access to their programs to outside Co's (this is the only way this can happen as it did to Microsoft). JM is going to patch in order to ensure the safety and respect to its members that we deserve...Good luck, don't log into game until its fixed, you're at risk.

Blasjr · Post by **Blasjr** » Mon Dec 03, 2007 9:47 pm

That its not the only exploit in the game.. You can actually send packets thru a game exploit, directly from the game from a character (the hacker) to the character you want to hack. This packet goes thru firewall as SRO is authorize by your firewall to internet access. The packet is hidden as a SRO file, so your Comp. uploads it, sends it back thru game to hacker, with all your login and PW info (yes ouch!!) So if you have the nice pixel stuff (SUN ONLY), you're going to be hacked. I started to Global this info in game, and GM (yes sometimes they're there) told me (yes in pink letters) to stop...The problems is being worked on and once its fixed every one thats been affected (and they know who is, and who is lying), will be compensated, in one way or another. So dont go out now and start pretending you're hacked, half the problem is fixed...Wish them well, and either quit playing or be patient, I'm waiting, iM A NOOB IN ANOTHER SERVER ROFL...peace

sloweredmangyang · Post by **sloweredmangyang** » Mon Dec 03, 2007 10:30 pm

DietSunkist wrote:Thats why I quit...I better log and and see if my stuffs still there XD

Joymax is really lacking as a company, I have moved on to World of Warcraft and I never looked back.

i went to WoW...then i ran outa monies lol

MoneymakerR · Post by **MoneymakerR** » Tue Dec 04, 2007 4:13 pm

i dont hope they got me :shock:

Corvix · Post by **Corvix** » Tue Dec 04, 2007 8:37 pm

I don't understand what this has got to do with Rev6. I also have no idea how people got hacked. Any news for the new guy?

ping_lo · Post by **ping_lo** » Tue Dec 04, 2007 8:46 pm

Blasjr wrote:That its not the only exploit in the game.. You can actually send packets thru a game exploit, directly from the game from a character (the hacker) to the character you want to hack. This packet goes thru firewall as SRO is authorize by your firewall to internet access. The packet is hidden as a SRO file, so your Comp. uploads it, sends it back thru game to hacker, with all your login and PW info (yes ouch!!) So if you have the nice pixel stuff (SUN ONLY), you're going to be hacked. I started to Global this info in game, and GM (yes sometimes they're there) told me (yes in pink letters) to stop...The problems is being worked on and once its fixed every one thats been affected (and they know who is, and who is lying), will be compensated, in one way or another. So dont go out now and start pretending you're hacked, half the problem is fixed...Wish them well, and either quit playing or be patient, I'm waiting, iM A NOOB IN ANOTHER SERVER ROFL...peace

Your optimism is refreshing but misplaced. Joymax will do naught. World keep on turning game keep on rotting.

cobber · Post by **cobber** » Thu Dec 06, 2007 5:22 pm

i can't believe it i got hacked again :cry:

this time they turned me into murderer and i lost nearly all my prot gear as well as my shield what's the point this game has cost a fortune in real money for premium and joymax do nothing, six comendations for hacking security phawwwwwwww yeah right i quit and i will be keeping my money sick of these stupid hackers and there jealousy keep the game i'm outa here good luck to you all hope you can keep your accounts clear of these people :banghead:

AngloKnight · Post by **AngloKnight** » Fri Dec 07, 2007 9:06 am

omg cobber!!! Don't quit please

cobber · Post by **cobber** » Fri Dec 07, 2007 1:00 pm

i don't want to quit but i'm afraid i can't afford to rebuild my prot set and weap/shield anymore :cry:

no gold now, gutted actually oh wellnever mind it's been great mostly friends made all over the world pity it came to this but joymax do nothing so why should i keep giving them my money

AngloKnight · Post by **AngloKnight** » Sat Dec 08, 2007 9:28 am

watever you lost, you can just get more gold and rebuild it... and degree 9 is on its way, so you wont be needing your old set for too long... Just wait and dont surrender...

Spyder25000 · Post by **Spyder25000** » Tue Dec 11, 2007 5:59 am

FFS , rev6 didnt not event this problem many other sites/fourms
Rev6 is the reson JoyMax fixed it, THE owner of the site contacted joymax and talked about the explooit
So dont go balaming Rev6 just because it was famous site for its serverstats

BLame (sites like) gamerplanet not rev6
and can i point out that GZP is spreading Bots, cracked bots which is breaching 2 compays policys, the bot company and JoyMax

(i got to much time on my hand)

MrJoey · Post by **MrJoey** » Mon Dec 17, 2007 12:02 am

Hmmm, wonder if they got my account rofl.

Blasjr · Post by **Blasjr** » Tue Dec 18, 2007 3:47 pm

Sounds like you have a plan with all nice bot arguments, etc etc., but one mishap, I NEVER BOT, EVER!!! I was the first one to be hacked back in October 13/14, stolen everything thru JM mainsite. So there...And I've I stated in other Posts, make a mule account no one knows, transfer your shit to it b4 you log off. Hackers still sending packets thru Game Guard, Game is not safe, and not sure it will ever be. As long as the're is an exploit, hackers will find it. Live with it or play elsewhere...

Peace

Silkroad Online Forums

Regarding the recent rev6 hacking exploit

Regarding the recent rev6 hacking exploit

:(

What Can I say

BTW

Re: BTW

:((((((((((((((((((((((((((((((((((((((((((((((

:((

Spyder NICE BUT NO CIGAR