Update on Hacked Accounts

[trioxsyn]

ive been hacked =( first time in over 8 years of MMO gaming. there a spot i can post to let the devs know? i have sent a GM petition in game. changed my PW and all my PWs on my emails and other stuff <FB, etc> and did scans and spy ware scans to clean my comp. what else should i do

[empyrean]

Haven't been hacked yet but yay!

[Shaedence]

Haven't been hacked yet but yay!

Note to self: Hack Empyrean's account

[Sammybear]

Nice to see them reacting quickly, with a nice sounding solution

[Xenite]

World of Warcraft = Six years old and no internal spam filter or 'coin lock' style feature.

Rift = Two weeks old and has both.

Score = Rift 1 - WoW 0

[Shaedence]

World of Warcraft = Six years old and no internal spam filter or 'coin lock' style feature.

Rift = Two weeks old and has both.

Score = Rift 1 - WoW 0

Actually that's 2 - 0

[Cascadesbiker]

I've never been hacked in any MMO I've played. I wonder if Rift will be the first. If so what is different about how Trion does things? Did they cut corners on data security to try to save money?

[Nely]

yeah im suprised no MMO has htought of this

Actually IP based account security/lockout has been implemented in WoW for a while now. They just lock the account completely and require you to reset your password via email IIRC.

However it's not unlikely that the hacker has access to your email as well, after all it's the user name of the Trion account and the password has probably been entered on the same computer that gave away the Rift password.
So it does raise the security standard a bit but not by as much as one would initially think.

For better protection you do want to utilize some sort of authenticator (also keep in mind that this will only protect your gaming account not other data, e.g. CC information)

[SG_01]

Just a random thought: Can we disable character deletions as well?

[chammer]

To all Rifters: It is your civic duty to post this in any thread complaining about lack of response.

Brilliant. Even though some of us are unable to play becuase of this issue, we should obviously keep our mouths shut about a problem trion could have prevented to begin with. After five years of development the lack of security is ridiculous.

[Tweek]

Are characters being rerolled if they were only ripped off money? I heard if plat only it would be returned via game mail...any truth to that?

[Nestran]

Irony FTW.

lol, true. I guess when you hang in the ghetto long enough you start to fit in. I think I need a break from the forums.

[Jesstival]

This is good, but perhaps it would be a good idea to include one more function in Coin Lock: disable the ability to delete characters.

Hackers are people, not robots. If they've been shut out of an account they might just delete everything out of spite, leading to even more problems.

[Temptation]

Another addition... No /gremove or guild permissions changes of any kind please. I'd rather not lose my entire guild because an officers account got hacked and some farmer decides to go pompey.

[PugPug]

Coin locked.. great idea!

I think you were the first to implement a chat spam filter, too. Kudos.

I hope that e-mail advises people on how to get rid of the keylogger or whatever before resetting their account.

And I hope people don't use the same password for Rift that they do in their e-mail. Not much you can do about that though.

My only concern is that if they got your login/password from a keylogger, they know your IP address and the region of your ISP. If they have access to a nearby proxy server, they're in.

Don't get me wrong, though. This is a HUGE step in the right direction. It will make a big, big difference.