1
Forum Settings
       
Reply To Thread

Any compromised accounts returned yet?Follow

#27 Jan 15 2008 at 8:54 AM Rating: Decent
***
1,041 posts
That's the thing...everything is logged...everything as the STF said and they're the ones who go through EVERY log..so people wouldn't be able to just say that and expect to get away with it ;)

Especially if it was recent (past few months recent)..it will still be there.

Edited, Jan 15th 2008 11:54am by Jennestia
#28 Jan 15 2008 at 8:54 AM Rating: Decent
***
2,112 posts
Quote:
Honestly, I'd be a little surprised if SE returned all equipment and gil.

Not only because it would have an impact on the economy of the entire game but because I doubt SE has a way to legitimately track who had what gear and how much gil at the time of the theft.

Hell, people could say they had all sorts of rare/ex gear but that the hacker must have dropped all of the useless gear or NPC'd it when dealing with the rest of the gear.

I had a Ridill and an Armada Hauberk. No, really, the guy must have just NPC'd it or something.

And then when it comes to the economy, all of that old gil and the old gear is still out there. SE would effectively be duping items while the gilsellers sell off the gear and launder the gil. Theoretically, so much gil could come into the economy that it would undo a lot of SE's efforts of balancing the economy. And then you have all of the characters who were hacked coming back, buying things, selling thingsssss, etc., etc..

SE has a LOT to think about in doing this. I do however hope that everything gets resolved well for everyone in the end.


SE Documents everything your character does, when you drop an item it's not hard to go back and look at the lines of code. Hence why it is going to take a while.
____________________________
90drk/90sch/61thf/60war/54rdm/40nin/44sam/
Relic Scythe Finished
Aegis Currency Finished
Drk Job Profile
http://ffxi.allakhazam.com/profile.xml?38156

#29 Jan 15 2008 at 9:19 AM Rating: Excellent
***
1,719 posts
Quote:
Honestly, I'd be a little surprised if SE returned all equipment and gil.


I was specifically told that my my account would be returned to me "AS IS" that it would be left exactly how it is. Without anything being returned or account roll backs.

So according to the people who saw my account in rollandberry field my:

Osode
8 HQ staves
Tatami Shield
Ugly Pendant
SH +1
Hauby +1
Byrnie +1
Arhats gi +1
Serket Ring
Flame Rings
Snow Rings
Serveral +1 cursed items

and much much more gear not to mention about 36 million gil is all gone.

But for me - I don't care I really just want my char back - crafts, quests and jobs is what's important to me. I can always get new gear.
#30 Jan 15 2008 at 12:52 PM Rating: Good
UNCTGTG wrote:
Quote:
That sounds similar to my case. I got my account back and changed it back to my old credit card number but still got banned. I've talked to an ICS yesterday and was told they are trying to resolve the issue but couldn't tell me how long it would take.


So your saying you were hacked, got your account back? Also did you have everything that was there before you realized you were hacked?


Ummm. I lost my account on the 25th November. I'm from Germany but I got an US account. I informed the police about the account theft and they called the customer service for me and got my account back about 1 week after it was stolen. I changed the information back to what it used to be and was able to play til the 27th December. I was playing then suddenly got disconnected and when I tried to log back on I got that sorry but your account has been disabled message. I called the SE customer service and they told me that I got banned because my account had the same user informations as another account that was banned.

It's been about 2 weeks since my ban complaint and I was told they are looking into the issue.
#31 Jan 16 2008 at 11:00 AM Rating: Excellent
***
1,719 posts
CaldorDarkKnight wrote:
UNCTGTG wrote:
Quote:
That sounds similar to my case. I got my account back and changed it back to my old credit card number but still got banned. I've talked to an ICS yesterday and was told they are trying to resolve the issue but couldn't tell me how long it would take.


So your saying you were hacked, got your account back? Also did you have everything that was there before you realized you were hacked?


Ummm. I lost my account on the 25th November. I'm from Germany but I got an US account. I informed the police about the account theft and they called the customer service for me and got my account back about 1 week after it was stolen. I changed the information back to what it used to be and was able to play til the 27th December. I was playing then suddenly got disconnected and when I tried to log back on I got that sorry but your account has been disabled message. I called the SE customer service and they told me that I got banned because my account had the same user informations as another account that was banned.

It's been about 2 weeks since my ban complaint and I was told they are looking into the issue.


This is almost exactly what happened to me but I used a lawyer, ebay, paypal, yahoo and NY state police to get my account back. It was quite the experience and I took my account retrieval more seriously than I probably should have but I expended the effort and money to get it back out of principle more than practicality.
#32 Jan 16 2008 at 12:59 PM Rating: Good
I got lucky with my account hack. I was on, then I got dced. I reconnect with that lovly message your account is currently logged in in to another terminal. As Soon as I get on I change my password and get on my character. My nobles tunic was still in the waiting to be recieved list in the delivery box. I canceled the delivery and sent the name to a GM. Goodbye Bfgxtdu (close enough to his name). Turns out the hack happened when my roommate used my account to buy gil since he didn't want to get banned for gilbuying. Tip for those who go to ffxiah.com DO NOT SAVE YOUR PASSWORD. And make sure you password is weird as hell with multiple capitalizations. (keyloggers can't detect the caps locks key but can detect shift.) example for password P3r4Ect4aRk weird as hell I know, but good luck getting that keylogged.
#33 Jan 16 2008 at 2:51 PM Rating: Default
*
169 posts
Lightningcount wrote:

Turns out the hack happened when my roommate used my account to buy gil since he didn't want to get banned for gilbuying.


All your credibility went out the window after reading this. Sorry, I lol'd...some friend you have.

Or perhaps what you meant to say was:

Lightningcount wrote:

Turns out the hack happened when I used my account to buy gil because I so blindly went to a RMT website and inadvertently downloaded a keylogger.



#34 Jan 16 2008 at 5:54 PM Rating: Decent
****
6,580 posts
As to better security measures, why not just do like internet banking and have you enter a set of randomly selected characters from your password each time.

You know, one time you have to enter the 1st, 8th, 9th and 12th letters, sometimes the 2nd, 5th, 7th and 9th, etc etc.

Edited, Jan 16th 2008 8:56pm by NoodlesCCCLV
#35 Jan 18 2008 at 1:56 PM Rating: Decent
***
1,719 posts
Update:

I just received an email from SE and it reads as follows:


Dear valued customer,

We understand that you have contacted us previously regarding an account you feel may have been compromised. Based on that information, we have taken action to ensure that no one will be able to access that account at this time. We will be contacting you at a later date with additional specific information in order to assist us with the continuing investigation regarding that account. We understand your desire to begin playing the game immediately, however we ask that you please be patient with us as we are working to ensure our policies will be useful in all aspects regarding this concern. If during this time you are able to produce additional information that you may feel will assist you in verifying the account in full per our normal account verification policies please do not hesitate to contact us again. Below is the information that we will need to verify completely with any representative you may contact. At this time, only the information below will allow a representative to provide additional details, or make changes to the account.

The full name on the account
The correct date of birth
The complete mailing address
The PlayOnline registration code
The first and last 4 digits of the current credit card

We do apologize for the inconvenience this may have caused, however we are working hard to ensure the account is returned to the proper user. Please be patient while this investigation is underway.

Note: Please do not reply to this email. Any replies received will not be answered. In the event you need to contact us, please contact us by phone or through our live chat support.

Thanks,
=================================
PlayOnline Information Center

For the latest news, help and support:
1. PlayOnline Viewer main menu -> \"Information\"
2. FINAL FANTASY XI main menu -> \"Help Desk\"
3. Official web site: http://www.playonline.com/
For installation and billing support issues, please call (858) 790-7529.





My account password has indeed been changed so they did lock out the account. Not that they needed to do that since it was already banned due to the dirty credit card that was registered with my account while it was under RMT control.

I am glad to see any news from SE though I would much rather it was about getting my account back :).


Anyways - I will keep yall updated.
#36 Jan 18 2008 at 2:08 PM Rating: Decent
I got that e-mail a few days ago also. I like how it says that your account has been frozen but when I look on ffxiah.com and look at my toon I still see him buying things which makes me wonder how they can tell me that it has been frozen. Oh well atleast it seems like a step in the right direction.
#37 Jan 18 2008 at 2:20 PM Rating: Default
***
1,041 posts
bebi wrote:
I got that e-mail a few days ago also. I like how it says that your account has been frozen but when I look on ffxiah.com and look at my toon I still see him buying things which makes me wonder how they can tell me that it has been frozen. Oh well atleast it seems like a step in the right direction.


You do know being frozen can mean A LOT of things...right?
#38 Jan 18 2008 at 2:27 PM Rating: Decent
***
1,719 posts
bebi wrote:
I got that e-mail a few days ago also. I like how it says that your account has been frozen but when I look on ffxiah.com and look at my toon I still see him buying things which makes me wonder how they can tell me that it has been frozen. Oh well atleast it seems like a step in the right direction.


It kinda read like they wanted you to call and verify the account - do you know if that's the case?
#39 Jan 18 2008 at 2:29 PM Rating: Decent
28 posts
I posted a bit earlier in the thread about my friend being told by SE that good things come to those who wait.

Well he called SE again today and they told him they are working to verify these accounts. They also told him that they are waiting for some sort of notification from Japan about which direction to take their account verification process. (I am not sure what that means, but I have worked a phone job it the past so I know how difficult it can be to come up with the right words on the spot.)

This time they finally gave him a time-frame on how long it would take to complete the process. He was told, "We are working as quickly as possible and it could take anywhere from 1 week to several months for you to re-gain access to your account. Please be patient."

I hope it won't take months. I feel really bad for everyone who has lost their accounts. >.<
#40 Jan 18 2008 at 3:00 PM Rating: Default
***
1,041 posts
Lots of accounts, it can take months depending on Japan's decision.

Which, btw, is where SE HQ is..everyone else is merely a branch..so the higher ups are in Japan.
#41 Jan 18 2008 at 6:02 PM Rating: Decent
Quote:
bebi wrote:
Quote:
I got that e-mail a few days ago also. I like how it says that your account has been frozen but when I look on ffxiah.com and look at my toon I still see him buying things which makes me wonder how they can tell me that it has been frozen. Oh well atleast it seems like a step in the right direction.



It kinda read like they wanted you to call and verify the account - do you know if that's the case?


I sent in a complaint and gave them that info then a few days later I got this email from SE.
#42 Jan 23 2008 at 1:13 PM Rating: Excellent
***
1,719 posts
This is a related/unrelated update...

Nothing from SE yet but something happened to a friend at work that made me think SE really needs to get their act together and people really need to stop appologizing for SE's shoddy customer service.

So anyways -

A friend in the cube next to me at work and I were talking about various MMOs. He is a WoW player and I mentioned to him about the recent account thefts and all the fall out from them and how bumbed I was my account was stolen.

So he replies that his WoW account was stolen two weeks ago due to a trojan in a UI modification he used.

I was kind of shocked that he lost his account too and asked how the process was going and if he had hopes of ever getting his account back. He looked at me funny and said "I called up support, told them what happened and had my account back with all my lost gold and gear within 2 days". He then asked "Why isn't that how all games work?".

I could only respond it's how all games SHOULD work.


Ohh well that's my story. Thought some of you might like to read.

#43 Jan 23 2008 at 1:31 PM Rating: Excellent
Guru
Avatar
*****
11,159 posts
CyrUrgit wrote:
I could only respond it's how all games SHOULD work.


Ideally, yeah. I mean, blindly restoring someone's account probably shouldn't be done under the premise of pseudo-duping (aka, give your **** to a friend then cry wolf), but a little research with investigative tools that should be in place (logs of both log-ins and in-game activities like trades, deliveries, etc.) and routine character database back-ups (thinking daily at the proverbial JP midnight, but once a week during Conquest tally is probably more likely) would be more than enough to keep people safe and satisfied in conjunction with additional password security options (What's your pet's name? First school? etc.).

Assuming they built the game intelligently from the background perspective, character restorations and their related investigations would be a one to three person job, just mainly due to possible volume of restores needed in a time of outbreak.
____________________________
Violence good. Sexy bad. Yay America.
#44 Jan 23 2008 at 1:34 PM Rating: Excellent
UNCTGTG wrote:


SE Documents everything your character does, when you drop an item it's not hard to go back and look at the lines of code. Hence why it is going to take a while.


Yet they can't figure out who the RMT's are before they hit 75 or fished up 10,000,000 gil worth of fish in SSG at lvl 1?
#45 Jan 23 2008 at 1:39 PM Rating: Good
***
1,719 posts
Quote:
Ideally, yeah. I mean, blindly restoring someone's account probably shouldn't be done under the premise of pseudo-duping


I am not suggesting this at all. I am assuming that there protocols in place in other games to prevent duplication of money and items. I agree that abuse could get out of hang quickly without the proper research and protocols.
#46 Jan 23 2008 at 1:57 PM Rating: Excellent
Guru
Avatar
*****
11,159 posts
Really, the IP trail is a pretty solid tracking mechanism. As an extension of that, DNS logging helps as a more visual-friendly fingerprint. I imagine a lot of players don't travel much, so a dynamic IP should at least be recognizable from their closest hub point. I know I play from my home and a friend's place, we both have Comcast, and I know the DNS puts me out from St. Clairsville, OH (even though that's not where I live, but you get the idea) from either location.

The only real monkey wrench in this with my past administrative experiences has been when dealing with AOL. They don't seem to break stuff down into regions with their DNS, instead just assigning whatever random IP they have free from their leased sets of octets. Understandable given the sheer size of their user base, at least back in the day, but a nightmare when you were trying to stomp a problem AOL user because to block them, you had to block all of AOL. In these particular cases, you'd almost have to deal with AOL more directly to determine whether or not the log-in point was outside the norm.

I'm honestly boggled that things have gotten this far with character loss and the extreme delay of restorations. I would've thought it common sense protocol by what I've learned over the years as just a basic net jockey. Though, I guess it's an example of plausible deniablity in that it's technically not SE's fault the accounts were lost. Still, it wreaks of shoddy customer service.
____________________________
Violence good. Sexy bad. Yay America.
#47 Jan 23 2008 at 2:05 PM Rating: Excellent
***
2,552 posts
So long as SE can pull up IP logs, transaction logs (The STF say they can pull up any character transactions from months back they claim.) and put that against the 'normal' (normal login, normal CC info etc etc.) then SE can have valid ways of proving that someone isnt crying wolf. RMT leave telltale signs and they log in mostly from half-way across the world. (Yes, NA and EU RMT exist, but its concentrated in SE asia.)

They also use VISA giftcards and other gibberish information for accounts so when you have such a large samplepool of information you can validate alot more on SEs side than you can on our side (we can do some logical FFXIAH research but SE can do so much more.)

The STF once said:

There is no escape from us if individuals are involved in illegal activity due to extensive logs.

Id like to see them back that up regarding this case as well. Isnt the monthly STF report supposed to be today?

Edited, Jan 23rd 2008 5:06pm by SparthosofLakshmi
#48 Jan 23 2008 at 3:47 PM Rating: Good
*
145 posts
Yesterday, a friend of mine had their account stolen. We gave him the Cust support number, he called, told them what happened and they reset his password for him. He has his account back, but it's been stripped. At least he got it back though. I'm not sure why he was able to when so many werent, maybe they never got around to changing the credit card details on his account, not sure.

I'll find out exacly what happened from him later, and let you know. I don't know exactly what he said to the rep, maybe something that might be of interest as he did get his account back.
#49 Jan 23 2008 at 4:02 PM Rating: Good
*
137 posts
Which is only reason why resetting password back sucks. If you reset it they cannot help you if you are stripped. But if you wait 10 years for them to actually do an investigation they SHOULD restore your account to a certain point. Which I am STILL waitin on SE to hurry the F*** up.
#50REDACTED, Posted: Jan 23 2008 at 4:05 PM, Rating: Sub-Default, (Expand Post) Somebody stole Setzor, sans spouse; supposedly SE salvaged Setzor's situation, and Setzor's satisfied.
#51 Jan 23 2008 at 8:25 PM Rating: Good
**
369 posts
sadly just lost my account this morning, found that keylogger this afternoon and got rid of it. But from the sounds of it I wont be playing for a long time ; ;
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 4060 All times are in CST
Anonymous Guests (4060)