Ok I was thinking that more people had money taken from them, and that if he was not going to return the money on his own, an official statement about the situation from CJ might help them get paypal's help.

It seems that www.graalians.com has been suspended by the host.

I'm very sorry for the incident and I had no idea of any of this. I am the host of graalians.com, Velox came to me about a good idea for a graal site and I offered him hosting. I had not idea he put a script within the site to get passwords and eventually use it for illegal actions. The site is shut down, if cleaned up it may go back up again.

That's a big MAY.

And in no way was I related to the issue, i'm going to stress that.

He totally shocked me too James. I've known him since the early days of SL just like you. x_x

Seem's he got to Mr. Darren too ;x

Hmm yes I thought that was your site you hosted James. *shakes head* Hard to understand what people think they accomplish by behaving this way. Well this certainly isn't the first time someone that people trusted turn out this way... happens too often sadly..
*cough* Nemesis *cough*
P.S
Poor everyone.. but mainly my Tacky and Cassy : (

Any hard providence is going to be taken, Stefan ? Otherwise this will never stop.

...

It already stopped.

What happens if Velox is a foreigner, and they dont have rules there!
:(
It could happen.

Why are you always such a douche?

~

Velox eh? I thought he was kindof uh.. cool, ish. Glad I don't sign up for every "graal" related website like the rest of you tards. :cool:

I think it would be prudent to add a security check at log in, that ran on the server. Basically, if one IP and/or client app ID logs in to 3 or more accounts within a short interval, the server would scan the three accessed accounts for that IP in their log histories. If the IP is new, then it should email staff of a possible abuse. It wouldn't have taken staff very long to realize the activity (going from many to no items in short time of play) was more than a little suspicious.

Also, it should be very easy for the server to recognize when one IP address is attempting and failing to log into multiple different accounts. That should be an easy red flag to raise.

It is not really graal's responsibility - graal security verified the correct account/passwords afterall, and safeguarding the password is the user's responsibility - but it would be a nice added level of security, and discourage people from attempting phishing in the future.

The problem here wasn't that the staff didn't find out about it. The problem was realized pretty quickly.

Yea someone suggested that to him in gscript, Napo I think.

He already spoke to me, and I've informed PayPal of the situation

It had nothing to do with people signing up.

People had to sign up for graalians.com...

And Velox was (is) a smart one. He even had attempted tries logged. Even if you didn't use your normal password, but you tried to log in with it by force of habit, he was able to use that too.

You're the 'douche' for not reading the full post[s].

the perfect graal crime

lemme take over the site so i can steal gralets

I highly doubt that was his original plan.

My name is Tupper. And I have yet to recieve my money.

Well planed mission, but the bad boyz always get caught cept me .

If there is popular demand and someone can hack the relevant nameservers to work with that, I offer hosting on our server. Before you flame us for being less trustworthy for Velox, recall that we have members of the Graal administration among our ranks!
To reduce the chance of something like this happening again, we can probably set up live access to the site source.

Oh, it is just that no one cares about your retardedness because it is not remotely exciting.

All you people saying what Velox did was cool, smart and such might get banned for saying so.

Umm, I highly doubt anyone is going to get banned for saying that hacking is cool -,-

didn't you quit

and all of this just makes me cringe at the graal community

the sad thing is, the fact he didn't even hack anyone he just used some clever or lame (depends on how you look at it) phising to steal a lot of stuff which is dumb. if he hacked these people ninja style he would of never been caught.

oh well time for him to realize he commited a felony and is probably going to go to jail, because in cases like this the internet is some serious business!

I own the domain as well.

Atleast IPs must be secure.

Sorry for hurting ur feelings, u must have been relatives :frown:

What a vile and selfish act from something that seemed so selfless.

My mistake. I thought the money situation had already been sorted out.

Yes, it already stopped. :whatever:

I was referring to how the "hacking" had already stopped. Not that it makes a difference since that thread was made three hours before your post.

Yes, that is exactly what makes one infallible.

0_o

loss of money...

loss of trust...

loss of pride...

loss ...

you still so sure about that? :whatever:

I would not call his actions such a 'hacking action'; hackers do more than just steal a few accounts in a game just to please their egos. He is a lammer.
What I have tried to say is that they should really punish actions like this, instead of simple apply a global ban or so, but then; I am not sure if just a simple ban happened. If they are doing more than that,good ! I doubt any idiot will try to do the same next time.

I doubt he would go to jail. Not in the US as a first time offender. Realistically he would get 6mo - 1yr probation with community service, fines and court costs. Plus I think Velox/Rance Vicious or whatever name he uses is Canadian so the laws will vary.

What I don't understand about that list Googi posted is that he takes credit for some accounts that belong to him like Rance_P2P and Termina_Owner. Is he trying to make himself look cool by upping the count of compromised accounts by adding some of his own?

If my account and stuff was compromized I would have smacked myself.

Harsh stuff indeed. I hope everyone affected in this gets sorted out quickly. :(

I didnt even know this page ;D.

Genesis needs his password back.