Originally posted by reaperuk

I'm sorry but I say this whole weak password stuff is absolute bullshit. I don't believe for a second that thousands of people are exposing their login details and password as is being suggested, How come other new games such as TSW didn't have the same problems?

Anyone who played Rift at launch has seen this whole scenario before: Thousands of accounts compromised, the developer blaming people for exposing their logins details and passwords..................and yet...... what did it turn out to be in the end? The answer is a flaw in tier own login procedures that enabled hackers to login with a genuine account and then use a backdoor to access any other account they wanted. No passwords or login details needed at all. It was only after one of their users pointed this out to them that they quietly closed the backdoor and miraculously, the whole  hacking thing died a death.

It's about time Arenanet started employing experts to sort this mess out instead of blaming the users.

2 differences:

1.  There was a known flaw in Rift, that was found out by the players.  Players havent found any such flaw in GW2

2.  There is a known fansite hack

You are suggesting that faced with something that walks like a duck and quacks like a duck, arenanet should pretend its a hippopotamus?

And i would bet my (unhacked) account they are investigating the possibility that its a two legged winged platypus instead of a duck just in case.

Originally posted by teakbois

 

1.  There was a known flaw in Rift, that was found out by the players.  Players havent found any such flaw in GW2

 

Yet. They havent found a flaw yet.

[mod edit]

Originally posted by svandy

For everyone protecting ANet you should really stop. We can't just rabidly defend them because we like them, they clearly fucked up. Yes Im one of the ones affected, and yes until I was I was all "idiots using the same passwords everywhere!"

I love GW2 and really want to play, but if they don't get their act together I can't in good faith continue to support them.

im a gw2 fan

you think i would have a made a thread about this if i was covering/defending for ANET?

anytime i see a new thread about someone being hacked,

i dont give them grief along the lines of sucks for you, your fault

instead, I post support links to try to help them out 

-- i dont blame ANET or the player, just want to help people get back into the game

Originally posted by Nadia

Originally posted by svandy

For everyone protecting ANet you should really stop. We can't just rabidly defend them because we like them, they clearly fucked up. Yes Im one of the ones affected, and yes until I was I was all "idiots using the same passwords everywhere!"

I love GW2 and really want to play, but if they don't get their act together I can't in good faith continue to support them.

im a gw2 fan

you think i would have a made a thread about this if i was covering/defending for ANET?

 

anytime i see a new thread about someone being hacked,

i dont give them grief along the lines of sucks for you, your fault

 

instead, I post support links to try to help them out 

-- i dont blame ANET or the player, just want to help people get back into the game

Wasn't directed at anyone in particular :)  I actually think it's awesome you are bringing more attention to this, because the more bad publicity ANet gets, the more inclined they will be to fix it

Originally posted by svandy

Originally posted by Nadia

Originally posted by svandy

For everyone protecting ANet you should really stop. We can't just rabidly defend them because we like them, they clearly fucked up. Yes Im one of the ones affected, and yes until I was I was all "idiots using the same passwords everywhere!"

I love GW2 and really want to play, but if they don't get their act together I can't in good faith continue to support them.

im a gw2 fan

you think i would have a made a thread about this if i was covering/defending for ANET?

 

anytime i see a new thread about someone being hacked,

i dont give them grief along the lines of sucks for you, your fault

 

instead, I post support links to try to help them out 

-- i dont blame ANET or the player, just want to help people get back into the game

Wasn't directed at anyone in particular :)  I actually think it's awesome you are bringing more attention to this, because the more bad publicity ANet gets, the more inclined they will be to fix it

We get it, you are angry you got hacked.   You so desperately want to make Arenanet out to be the villain here, its beyond pathetic.  You, unlike the OP, have no good intentions.  You just want to trash a company because you yourself screwed up.  You are like one of the people that would rent a movie, know when it was due, then be upset you had to pay 2 bucks when it was late and blame the corporation and call the BBB instead of taking responsibility for your actions.

Arenanet could have had more security measures to protect against user stupidity, but its still not their fault you got hacked and never will be.  And certainly no reason to want to sully a company's reputation.  

But hey, keep believing in that magic bullet that makes everything their fault and not yours.

Originally posted by Xzen
It is not Arena Net or NCSofts fault the accounts got hacked. However they do need to do something to get back to people in a more timely manner.

Agreed.  they did hire more people but the fact is they arent going to be perfect at it overnight.  Blizzard used to be absolutely atrocious in fixing hacked account issues, but over the years they got it down to having you fully restored in minutes.  It sucks that it takes so long, but it should get better.  And if it doesnt, thats when its time to complain hardcore.

Yes a majority (maybe 90%+) of those hackers comes from China, they're big on hijacking gaming accounts and stealing items and deleting characters. My old hotmail account (I don't use it on anything anymore) still gets "account compromised" and "confirm your email" and "reset password" messages for games I've never played. I used that email on some websites years ago, so it obviously fell into Chinese hands and they're using it to see if I used it on games. Even if you have white123@mail.com on some website and the Chinese has it, they'll attempt to try and log into GW2 with that email (and password they think you used) and see if it exists, if it doesn't they'll move on but if it does, they'll try over and over until they succeed, so your old emails are still being used even if games you play doesn't have that email.

LinkedIn for example was recently hacked, my business email has never ever received an email from LinkedIn even though it was the LinkedIn login, but after the news of the hack I received some odd emails on that account and I haven't used LinkedIn in over a year- my business email obviously fell into hackers' hands when they broke into LinkedIn.

Originally posted by reaperuk

I'm sorry but I say this whole weak password stuff is absolute bullshit. I don't believe for a second that thousands of people are exposing their login details and password as is being suggested, How come other new games such as TSW didn't have the same problems?

Anyone who played Rift at launch has seen this whole scenario before: Thousands of accounts compromised, the developer blaming people for exposing their logins details and passwords..................and yet...... what did it turn out to be in the end? The answer is a flaw in tier own login procedures that enabled hackers to login with a genuine account and then use a backdoor to access any other account they wanted. No passwords or login details needed at all. It was only after one of their users pointed this out to them that they quietly closed the backdoor and miraculously, the whole  hacking thing died a death.

It's about time Arenanet started employing experts to sort this mess out instead of blaming the users.

It was GW2guru that got hacked NOT TSWguru or RIftguru - that is why GW2 was the target. Some people can't actually read anything before they hit reply.

Originally posted by teakbois

Originally posted by svandy

Originally posted by Nadia

Originally posted by svandy

For everyone protecting ANet you should really stop. We can't just rabidly defend them because we like them, they clearly fucked up. Yes Im one of the ones affected, and yes until I was I was all "idiots using the same passwords everywhere!"

I love GW2 and really want to play, but if they don't get their act together I can't in good faith continue to support them.

im a gw2 fan

you think i would have a made a thread about this if i was covering/defending for ANET?

 

anytime i see a new thread about someone being hacked,

i dont give them grief along the lines of sucks for you, your fault

 

instead, I post support links to try to help them out 

-- i dont blame ANET or the player, just want to help people get back into the game

Wasn't directed at anyone in particular :)  I actually think it's awesome you are bringing more attention to this, because the more bad publicity ANet gets, the more inclined they will be to fix it

We get it, you are angry you got hacked.  But you have even admitted it was your fault.  Yet you so desperately want to make Arenanet out to be the villain here, its beyond pathetic.  You, unlike the OP, have no good intentions.  You just want to trash a company because you yourself screwed up.  You are like one of the people that would rent a movie, know when it was due, then be upset you had to pay 2 bucks when it was late and blame the corporation and call the BBB instead of taking responsibility for your actions.

 

Arenanet could have had more security measures to protect against user stupidity, but its still not their fault you got hacked and never will be.  And certainly no reason to want to sully a company's reputation.  

 

But hey, keep believing in that magic bullet that makes everything their fault and not yours.

When did I admit it was my fault? I am anal about passwords, have randomly generated them, use letters numbers and special characters, the whole nine yards. I said SOME PEOPLE are to blame, never said I was.

I hope it doesn't happen to you, but if it does you will be singing a very different tune. I don't want ANet to fail, and your personal attacks against my character are cute but I am the first to admit when I fuck up. What I am saying is MY USERNAME SHOULD NOT BE ABLE TO BE CHANGED WITHOUT ANY FORM OF CONFIRMATION WHATSOEVER.

If you haven't seen what happens when you get hacked, well here you go:

Someone -hopefully you!- has requested to change the email address associated with your Guild Wars account.

Need help or have questions about your Guild Wars account? Visit our support site: http://support.guildwars2.com/.

Thanks!

-The ArenaNet Team

Someone (hopefully me!) changed my email and thats it. And a generic link to the support page if it wasn't me. Fantastic security measures there. And no, I did not recieve a confirmation email that was deleted by the same hacker accessing my email address because A) like I said ,I use different passwords and B) I have my email open all day and did not recieve any email from ANet other than this one.

Claim I dont have good intentions all you want, but I am sure there are 11,000 other people right now who would at least like some kind of response from ANet other than a post on their forums that says we will get to you within 72 hours. 

Its interesting that in today's society we don't expect people to be responsible for supporting themselves, getting their own health care, providing for the children they bring into this world, paying their lawfully incurred debts, remembering to bring an ID to the polls, or using their turn singals while driving.

But, you had better not use the same sign up information for a video game that use you on an internet website!  Because that is just plain irresponsible and you should be accountable for your actions! 

Originally posted by svandy

 What I am saying is MY USERNAME SHOULD NOT BE ABLE TO BE CHANGED WITHOUT ANY FORM OF CONFIRMATION WHATSOEVER.

Except thats not what you were saying before.  You have been talking about arenanet being hacked.

My post still stands.  Sympathy does not get extended to people that try to turn an informative post into a hate fest.  And you are still trying to pass off blame.  I agree with you wth the red part, but you should be discussing that not implying that arenanet has been hacked.

Originally posted by slowpoke68

Its interesting that in today's society we don't expect people to be responsible for supporting themselves, getting their own health care, providing for the children they bring into this world, paying their lawfully incurred debts, remembering to bring an ID to the polls, or using their turn singals while driving.

But, you had better not use the same sign up information for a video game that use you on an internet website!  Because that is just plain irresponsible and you should be accountable for your actions! 

Not sure if you were being sarcastic so at the risk of looking stupid - I agree completely.

I should have known to make a brand new email just for Guild Wars 2, because everyone obviously does that for every game, right? The real "villains," here are clearly the hackers, and while I don't claim ANet just allowed this to happen, they should have had better systems in place to protect their customers (and therefore investments) and in the event that this does happen it shouldnt take 7 days to get your account back. That is just insane.

"Except thats not what you were saying before.  You have been talking about arenanet being hacked.

My post still stands.  Sympathy does not get extended to people that try to turn an informative post into a hate fest.  And you are still trying to pass off blame.  I agree with you wth the red part, but you should be discussing that not implying that arenanet has been hacked."

Yeah. I'm trying to pass off blame. On the internet. On a forum. Because that helps me somehow. And I really want your sympathy, too. I have my doubts that you are a Cyber Security Expert that knows for a fact that ANet wasn't compromised, so you are just as guilty as me for just writing it off as being a possibility.

I'll say it again: My primary issue, all rage aside, is that their customer service is horrendous and real security measures should have been in place to prevent this. I could care less how it happened.

Originally posted by slowpoke68

Its interesting that in today's society we don't expect people to be responsible for supporting themselves, getting their own health care, providing for the children they bring into this world, paying their lawfully incurred debts, remembering to bring an ID to the polls, or using their turn singals while driving.

But, you had better not use the same sign up information for a video game that use you on an internet website!  Because that is just plain irresponsible and you should be accountable for your actions! 

Can see you have alot of issues notably political ones which should not be discussed here. IE the ID at the voting polls being anything other then the ID used for years from the voting registration office. That said, the responsibility is with the players to make sure they are doing what needs to be done to protect their accounts, however, until recently Anet didn't have a secure email system to protect account information from changing. I too had my account info changed however i received an email from them just after this system wide change and i was able to change my password loginto the game and boot whomever was using my account.

The problem is most people don't want to use the facts in cases inside or outside of the games. ;)

Originally posted by svandy

The real "villains," here are clearly the hackers, and while I don't claim ANet just allowed this to happen, they should have had better systems in place to protect their customers (and therefore investments) and in the event that this does happen it shouldnt take 7 days to get your account back. That is just insane.

thats regrettable and poor service - i agree

I know I'm repeating what everyone else says but it seems it needs to be repeated again and again.

Don't use the same password for 2 different sites. Every single one of those 11,000 people not only used the same email but they used the same password for a 3rd party fan site(and I bet they had the same password for the email account as well meaning the hacker had access to their email to initiate the account change and delete the email from Anet, so that the victim never even saw the email). Why would anyone do this? I suppose because they just want to have to remember 1 password for everything. Sure that makes life easy, but one place on the web gets hacked and they have access to every site you use that password and email at.

Here's a tip. There are many really useful password progams that are completely free to use. Get one and generate a unique password for every website you visit. Just google 'password programs', read up on several reviews from reputable security sites and pick one. Get one that supports an app for whatever type of browser you use and install it. Doing that limits the hackers to just the site they actually hacked.

Originally posted by svandy

I'll say it again: My primary issue, all rage aside, is that their customer service is horrendous and real security measures should have been in place to prevent this. I could care less how it happened.

would it really have prevented it in your case though?  They had your username and password.  They could have logged in and cleaned you out just the same, your account still would have been hacked, it just wouldnt have been stolen.