What's the point of playing if characters aren't safe?

[Alenon12]

I know a guy who does this shit.. They do some research on whom to hack. It must be "profitable" Like ppl having multiple chars etc.. This site is actally being used for research, just a tiny ammount, but it's happening.. I use a fortknox password, and a "anti-hack" program.. btw, using a complicated account name does help. MâÈtT1958, cause this aint done manually, u know...

YOu are not prepared!

This ^^

I also make sure my character name, forum name, account login, and email are all different for security purposes. But yeah, when someone makes a character name for you to see, that's not China, that's personal.

[Sharax]

Seen a option to lock account to my IP on other servers would be great if Nos could do something similar.

I would like to see any extra security features like this.

Hey, maybe some of us ARE dumb asses that aren't tech savvy. I like to think I am well-secured but if I made a mistake somehow, it would be brutal to lose your account and all characters without rectification. I'd love to be a long-time contributing member here but this is my #1 concern.

I love that the GM team is harsh against cheaters etc, but hope there is something that can be done to help legitimate hacked players. If it's more admin manpower to help with this particular issue, I'd volunteer if it's not too complicated to help restore deleted toons.

[t3hpwn3r3r]

I wouldn't be surprised if it's an actual security breach on Nostalrius and more people start getting hacked in the coming day, yup , the users' fault...

From the way you argue with people I'm not surprised you got hacked.

He's still in the "There is no way it's my fault! I'm not an idiot! Therefore it must be a failure of the admin." stage. Hence the lashing out.

Kübler-Ross model

Denial — The first reaction is denial. In this stage individuals believe the it's not happening, and cling to a false, preferable reality.

Anger — When the individual recognizes that denial cannot continue, it becomes frustrated, especially at proximate individuals. Certain psychological responses of a person undergoing this phase would be: "Why me? It's not fair!"; "How can this happen to me?"; '"Who is to blame?"; "Why would this happen?".

Bargaining — The third stage involves the hope that the individual can avoid a cause of grief. Usually, the negotiation for a restoration of toons is made in exchange for a reformed lifestyle.

Depression — "I'm so sad, why bother with anything?"; "I miss my toons, why go on?" During the fourth stage, the individual may become silent, refuse visitors and spend much of the time mournful and sullen.

Acceptance — "It's going to be okay."; "I can't fight it, I may as well prepare for it." In this last stage, individuals embrace their inevitable future.

[Amkô]

2nd time it happend I didn't even have an active subscription and got friends from RL telling me "wtf u no longer speack to me in wow?" and I was like "dude I told u I quit 3 months ago" so it turns out farmers were playing my account doing mining and gold transactions and being online on retail without even an active subscription. So blizzard had no excuse this time it was a server database hack, they did restore my account and plus they let me keep all the gold the farmers had which was like really a lot, 30k+ in Cataclism.

Exactly the same thing happened to me man.

But I had a subscription..

I logged in, all of my items were sold (even the items from the bank).
Alls my bags - EVERY slot! - (incl bank) were full with ore and herbs.

Blizzard gave me back my things without even asking and I kept all the ores/herbs and that was about 20k gold at this time.

Til today never got "hacked" again, dont event know how it happened this time, when they started farming ^^

[Bazinga]

to decline all responsibility and always blame the user for their account safety is just silly

take a look at this excelsheet https://docs.google.com/spreadsheets/d/1Je-YUdnhjQJO_13r8iTeRxpU2pBKuV6RVRHoYCgiMfg/edit#gid=3 (up to date)
even the biggest of the biggest aren't safe to hackers

why should they hack the customers and install keyloggers if they can get the full database instead?
btw, take a further look (inside the excelsheet) at line 42 there is a note about OVH (the hoster of nostalrius) as well

"A few days ago, we discovered that the security of our internal network at our offices in Roubaix had been compromised. After internal investigations, it appeared that a hacker was able to obtain access to an email account of one of our system administrators. With this email access, they was able to gain access to the internal VPN of another employee. Then with this VPN access, they were able to compromise the access of one of the system administrators who handles the the internal backoffice.

...

After our internal investigation, we assume that the hacker exploited the access to achieve two objectives:
- Recover the database of our customers in Europe
- Gain access to the installation server system in Canada"
http://status.ovh.net/?do=details&id=5070

[Fatherben]

Having your account hacked is getting a medical problem, it happens to everyone eventually. People who haven't been hacked are overconfident, make mistakes, and can't relate to other people being hacked. Even if you're careful it can still happen; there's no reason to blame the victim.

My account was hacked in Cata, my credit cards have been compromised like 5 times, I've been ddosed like 20 times. Even being on a Mac, taking precautions, checking for credit card skimmers every time I use my card, using a proxy (for ddos), nothing guarantees being safe from the scum bags.

If you want help with leveling a new char message me in game, maybe me and my friends can help.

[Sharax]

The answer given to me on the AMA was as follows:


If you use a unique username and password then there is no other way possible: our anti-brute force system secures accounts from external hacking. We still require you to pay attention to keyloggers, false copies of our website, or social engineering more generally.

So, I guess we have to just protect ourselves from keyloggers. I'm sure some external vanilla sources may have these viruses hiding there. Can anyone recommend a very secure (and free) way to protect yourself from keyloggers?

[Auccuatt]

The hacker got your password from somewhere, it's your fault you were hacked.

Possibilities:
1- One of your friend knows your password and stole your stuff/ leaked it
2- Someone found your email and email password and was able to reset password
3- you installed a modified game client, that has a keylogger included it happened to several people recently. Only download from the OP of the "client" thread in the getting started section
4- regular addons (where you just copy paste in interface folders) can't know your password, but some of them can automatically send gold away when you open a mailbox
5- you downloaded some keylogger from somewhere

When you have been hacked:
1- Don't tell the GMs, otherwise they will ban the account
2- Reformat computer, because if the leak was a keylogger, it is still here somewhere
3- from another computer or from the reformated computer, change email password and game password
4- Refrain from downloading shady stuff and don't tell your password to anyone

1-Yeah sure the only person I play with and level together with must have done it.... someone I know for 8 years...
2-They didn't reset the password, they logged in with the same password I was using. Nobody could have found it because I use this password only on nostalrius.
3-Downloaded the game through this site.
4-Downloaded all the addons through this site.
5-Yeah sure, some hacker was able to install a keylogger on youtube or any other site just to steal Nostalrius accounts and not bank accountss, paypal, etc...

I wouldn't be surprised if it's an actual security breach on Nostalrius and more people start getting hacked in the coming day, yup , the users' fault...

1- That's the number 1 possiblity indeed
2- apparently they did find your password?
3- from the site? You mean from the forum? what client exactly? was it the OP of the official thread or a comment?
4- Same question, but addons can't steal password and delete chars, just send your gold away via mail
5- people could put keyloggers into nostalrius related websites/softwares

Stop blaming others for your mistakes kid, or the same shit is bound to happen again

He's pissed because he knows that everyone who makes threads like this, everyone in the thread has to say "it's your fault," when in reality they have no idea what happened and can't admit that so they simply just give an unlikely explanation and say "it's your fault," it's kind of harsh if you ask me.

By "he," I mean the OP of the thread.

[gangstanigga]

disconnect yourself from the interwebs and you will never get a keylogger or virus

[Bazinga]

disconnect yourself from the interwebs and you will never get a keylogger or virus

and cut off all usb ports (since china adds trojaner and keylogger to cheap hardware)