Graal Forums  

Go Back   Graal Forums > General Forums > Graal Main Forum (English)
Reload this Page !Hacked Accounts!
FAQ Members List Calendar Today's Posts

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 04-24-2003, 03:28 PM
mhermher mhermher is offline
galase galase!
mhermher's Avatar
Join Date: Jun 2001
Location: Sweden, Stockholm.
Posts: 2,012
mhermher is on a distinguished road
Send a message via ICQ to mhermher Send a message via AIM to mhermher Send a message via Yahoo to mhermher
!Hacked Accounts!
It shows that some accounts have been "hacked", including a friends account..

There was some guy who was advertising for a website about graal.. Please, unless you want your account hacked, i suggest do NOT go on ANY website that someone PM's you, i repeat.. DO NOT go on ANY website that someone masses/pms you! The site is sending your password to someones email!

This is my word, follow it or not, i have warned you.
__________________
Donate money for my trip to Germany

Adiarde Manager
Reply With Quote
  #2  
Old 04-24-2003, 03:37 PM
Spark910 Spark910 is offline
Ex-Graal Global
Spark910's Avatar
Join Date: Oct 2001
Location: England
Posts: 10,892
Spark910 has a spectacular aura about
Well yesterday, unless you didnt know, there were about 50hackers on graal. And yes dont go to any forums/website.
__________________
--Spark911
Reply With Quote
  #3  
Old 04-24-2003, 03:59 PM
Spark910 Spark910 is offline
Ex-Graal Global
Spark910's Avatar
Join Date: Oct 2001
Location: England
Posts: 10,892
Spark910 has a spectacular aura about
Quote:
Originally posted by Kaimetsu
It's impossible to make a site access your registry without having the user consent to run a program on his/her machine.
All they get off the site is IPs and they take it from there. Most people will give them passwords to email accounts without realsing it. And so they can re-email password change to get it.
__________________
--Spark911
Reply With Quote
  #4  
Old 04-24-2003, 05:40 PM
Cynicism Cynicism is offline
Registered User
Join Date: Oct 2002
Posts: 417
Cynicism is on a distinguished road
If people aren't smart enough to avoid such threats, then tough luck I say.
__________________
Cyn is gone from the forums. (Thank goodness, huh?)
Reply With Quote
  #5  
Old 04-24-2003, 06:13 PM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Quote:
Originally posted by Kaimetsu
It's impossible to make a site access your registry without having the user consent to run a program on his/her machine.
ActiveX


Quote:
Originally posted by Spark910
All they get off the site is IPs and they take it from there. Most people will give them passwords to email accounts without realsing it. And so they can re-email password change to get it.
You are saying that people can get other people's account's passwords by only knowing their IP address?
I seriously doubt that, as your IP is mostly send to other players while playing Graal.
Reply With Quote
  #6  
Old 04-24-2003, 06:51 PM
Spark910 Spark910 is offline
Ex-Graal Global
Spark910's Avatar
Join Date: Oct 2001
Location: England
Posts: 10,892
Spark910 has a spectacular aura about
Quote:
Originally posted by Loriel

ActiveX



You are saying that people can get other people's account's passwords by only knowing their IP address?
I seriously doubt that, as your IP is mostly send to other players while playing Graal.
No not at all. I was refering to the email account passwords.
__________________
--Spark911
Reply With Quote
  #7  
Old 04-24-2003, 09:24 PM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Quote:
Originally posted by Spark910
No not at all. I was refering to the email account passwords.
Hm, then what do IPs have to do with that? And also, I still do not understand how they get email passes
Reply With Quote
  #8  
Old 04-25-2003, 12:51 AM
magicbud3344 magicbud3344 is offline
Banned
Join Date: Mar 2002
Location: mEEP
Posts: 0
magicbud3344 is on a distinguished road
Send a message via AIM to magicbud3344
yes how the heck does an IP get you an email pass?
most forums have things where any moderator can see your IP address. they didn't put sup leet hacks into the caz forums to get it. when i was a mod at James's aquanetwork i could see people IP's....not that you can really do anything with IPs, besides ping the heck out of people, and i still don't know what that means eather XD
Reply With Quote
  #9  
Old 04-25-2003, 12:55 AM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Duh, the webserver itself logs the IPs. No need for a forum to do so
Reply With Quote
  #10  
Old 04-25-2003, 01:14 AM
magicbud3344 magicbud3344 is offline
Banned
Join Date: Mar 2002
Location: mEEP
Posts: 0
magicbud3344 is on a distinguished road
Send a message via AIM to magicbud3344
so basicly any site you visit logs IPs :O?
also this is how they may be ahcking accounts.
you sign up for their forums, give them your e-mail then pick a password for the forums, if your like most people you use the same password as you do for e-mail?
then walla :X
Reply With Quote
  #11  
Old 04-25-2003, 01:48 AM
Milkdude99 Milkdude99 is offline
Truckin Up
Milkdude99's Avatar
Join Date: Jun 2001
Location: Central Florida
Posts: 3,390
Milkdude99 is an unknown quantity at this point
Send a message via ICQ to Milkdude99
Quote:
Originally posted by magicbud3344
so basicly any site you visit logs IPs :O?
also this is how they may be ahcking accounts.
you sign up for their forums, give them your e-mail then pick a password for the forums, if your like most people you use the same password as you do for e-mail?
then walla :X
I use many differnt passwords for things , to keep the same password for many things is a good way to lose any and all your info about you if someone gains access to your comp. You really shouldn't use the same password on anything.
__________________

Moon God
Graal.net

---------- Home---------

Reply With Quote
  #12  
Old 04-25-2003, 03:22 AM
funnylinkwantsbomys funnylinkwantsbomys is offline
Omi New
funnylinkwantsbomys's Avatar
Join Date: Mar 2001
Location: ohio
Posts: 2,116
funnylinkwantsbomys is on a distinguished road
Send a message via AIM to funnylinkwantsbomys
Quote:
Originally posted by Kaimetsu
It's impossible to make a site access your registry without having the user consent to run a program on his/her machine.
or they could code something in php to take your password :P
__________________

"Microwave a piece of cheese for 40secs and eat it. Yum." -Funnylink
Reply With Quote
  #13  
Old 04-25-2003, 03:43 AM
davidpsy davidpsy is offline
Over Nine THOUSAND!!!!!!!
davidpsy's Avatar
Join Date: Mar 2002
Location: Bandiria
Posts: 5,514
davidpsy is on a distinguished road
Send a message via AIM to davidpsy
I had downloaded something off that somesite someone massed but I thought it was a hack. It did what it was supposta but I got rid of it anyway and changed my password. Also even if they did get my email password which I dought but if they did it wouldent matter because thats not the email address with which I made my account with.
__________________
-Donald Shimoda
Level oo.

Forces greater than your self, can be over come.
Reply With Quote
  #14  
Old 04-25-2003, 04:33 AM
nikoma5000 nikoma5000 is offline
Registered User
Join Date: Jul 2002
Location: Germany
Posts: 139
nikoma5000 is on a distinguished road
Send a message via ICQ to nikoma5000
My account became hacked
__________________
Reply With Quote
  #15  
Old 04-25-2003, 09:39 AM
HoudiniMan HoudiniMan is offline
Playerworld Administrator
HoudiniMan's Avatar
Join Date: Dec 2001
Location: Calfiornia - USA
Posts: 3,512
HoudiniMan will become famous soon enough
Quote:
Originally posted by davidpsy
I had downloaded something off that somesite someone massed but I thought it was a hack. It did what it was supposta but I got rid of it anyway and changed my password. Also even if they did get my email password which I dought but if they did it wouldent matter because thats not the email address with which I made my account with.
You just admitted you downloaded and used a hack?...
__________________
-HoudiniMan (Chief Playerworld Administrator)
Compulsive Support Center Checker - 5 Years and Change
Graal Support Center
Reply With Quote
  #16  
Old 04-25-2003, 11:45 AM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Quote:
Originally posted by Kaimetsu
Usually can't run without the user's permission.
Many people allow their browser's to run ActiveX stuff though. I read about a hacker club in Germany that demonstrated how to steal money from a bank account with it, and got in all kinds of newspapers.
Reply With Quote
  #17  
Old 04-25-2003, 02:09 PM
Lyndzey Lyndzey is offline
Woman
Lyndzey's Avatar
Join Date: Aug 2001
Posts: 2,875
Lyndzey is a jewel in the roughLyndzey is a jewel in the rough
Don't worry about it, the few accounts that were "hacked" are from people who gave away their passwords. No one can hack your account unless you download a virus from them or give out your password.
Reply With Quote
  #18  
Old 04-25-2003, 02:22 PM
Spark910 Spark910 is offline
Ex-Graal Global
Spark910's Avatar
Join Date: Oct 2001
Location: England
Posts: 10,892
Spark910 has a spectacular aura about
Quote:
Originally posted by magicbud3344
so basicly any site you visit logs IPs :O?
also this is how they may be ahcking accounts.
you sign up for their forums, give them your e-mail then pick a password for the forums, if your like most people you use the same password as you do for e-mail?
then walla :X
No its not that, if someone has a hotmail address, I can explain it, it may not work, but still.
__________________
--Spark911
Reply With Quote
  #19  
Old 04-25-2003, 05:01 PM
melissa1988 melissa1988 is offline
Fruitty Jewel of Flavor
melissa1988's Avatar
Join Date: Dec 2002
Posts: 992
melissa1988 is on a distinguished road
Send a message via AIM to melissa1988 Send a message via Yahoo to melissa1988
Actually Kai, that's not true. Internet Explorer allows them to run automatically, and the average user is not smart enough to figure out how to turn them off, or at least make it prompt before allowing it. And if they do know how, they are too lazy to do it anyway.
Reply With Quote
  #20  
Old 04-25-2003, 05:33 PM
funnylinkwantsbomys funnylinkwantsbomys is offline
Omi New
funnylinkwantsbomys's Avatar
Join Date: Mar 2001
Location: ohio
Posts: 2,116
funnylinkwantsbomys is on a distinguished road
Send a message via AIM to funnylinkwantsbomys
Quote:
Originally posted by Kaimetsu


By default, my IE was set to prompt for signed and decline for unsigned. I don't know if other versions of Windows etc are any different.
it comes with prompt as default so people wont get a security risk and wont have their fav java applits ect not be able to run so its always on prompt to clear confusion
__________________

"Microwave a piece of cheese for 40secs and eat it. Yum." -Funnylink
Reply With Quote
  #21  
Old 04-25-2003, 08:52 PM
NPToita2 NPToita2 is offline
Registered User
Join Date: Mar 2003
Posts: 9
NPToita2 is on a distinguished road
Going into Registry is not hard
All the person has to do is know alot about ASP. Include a function of one of the shells built in to your windows to retrieve that pass from your registry and Walla.
Reply With Quote
  #22  
Old 04-25-2003, 11:24 PM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Re: Going into Registry is not hard
Quote:
Originally posted by NPToita2
All the person has to do is know alot about ASP. Include a function of one of the shells built in to your windows to retrieve that pass from your registry and Walla.
You say ASP code run on some website I visit can get into my registry?
Reply With Quote
  #23  
Old 04-26-2003, 12:58 AM
davidpsy davidpsy is offline
Over Nine THOUSAND!!!!!!!
davidpsy's Avatar
Join Date: Mar 2002
Location: Bandiria
Posts: 5,514
davidpsy is on a distinguished road
Send a message via AIM to davidpsy
Quote:
Originally posted by HoudiniMan


You just admitted you downloaded and used a hack?...
No when I say I thought it was a hack I ment there was a sub 7 virus in the program to steal my password. This program is supposta change Gui Images for you in graal but I thought it might be a hack so I got rid of it.
__________________
-Donald Shimoda
Level oo.

Forces greater than your self, can be over come.
Reply With Quote
  #24  
Old 04-26-2003, 01:09 AM
ZanderX ZanderX is offline
what up
Join Date: Feb 2001
Posts: 18,614
ZanderX is a glorious beacon of lightZanderX is a glorious beacon of lightZanderX is a glorious beacon of light
Quote:
Originally posted by Kaimetsu


Maybe, but probably not the majority.
The majority don't know how to turn it off.

By default, ActiveX is enabled and not-prompted in non-XP Windows operating systems.
Reply With Quote
  #25  
Old 04-26-2003, 01:16 AM
Admins Admins is offline
Graal Administration
Join Date: Jan 2000
Location: Admins
Posts: 11,693
Admins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud of
Quote:
Originally posted by ZanderX


The majority don't know how to turn it off.

By default, ActiveX is enabled and not-prompted in non-XP Windows operating systems.
Yes and the windows update complains when activex is disabled, so people who don't know that activex is bad might think they need to enable it again.
Reply With Quote
  #26  
Old 04-26-2003, 01:19 AM
ZanderX ZanderX is offline
what up
Join Date: Feb 2001
Posts: 18,614
ZanderX is a glorious beacon of lightZanderX is a glorious beacon of lightZanderX is a glorious beacon of light
Quote:
Originally posted by Stefan


Yes and the windows update complains when activex is disabled, so people who don't know that activex is bad might think they need to enable it again.
Exactly. I don't use Internet Explorer, so I avoid ActiveX.
Reply With Quote
  #27  
Old 04-26-2003, 01:28 AM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Quote:
Originally posted by ZanderX
Exactly. I don't use Internet Explorer, so I avoid ActiveX.
I don't use Windows, to avoid, uh, security holes.
Reply With Quote
  #28  
Old 04-26-2003, 10:47 AM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Re: Re: Going into Registry is not hard
Quote:
Originally posted by Kaimetsu
Totally wrong. Isn't ASP a serverside language like PHP?
It is, I think, as ASP means Active Server Pages last I checked.
Reply With Quote
  #29  
Old 04-26-2003, 08:22 PM
AlkarenHyralt AlkarenHyralt is offline
Former Forum Admin/GM
AlkarenHyralt's Avatar
Join Date: Jun 2001
Location: Drogenier, in the Realm of Heroes.
Posts: 6,954
AlkarenHyralt is an unknown quantity at this point
Send a message via AIM to AlkarenHyralt
Re: Re: Going into Registry is not hard
Quote:
Originally posted by Kaimetsu


Totally wrong. Isn't ASP a serverside language like PHP?
Indeed, it is. But it is an evil scripting language. PHP is just easier to script, and oh so sexy.
__________________
I am he that was once them.

Forgotten through the passage of Graal time.
Reply With Quote
  #30  
Old 04-26-2003, 11:36 PM
Loriel Loriel is offline
Somewhat rusty
Loriel's Avatar
Join Date: Mar 2001
Posts: 5,059
Loriel is a name known to allLoriel is a name known to allLoriel is a name known to allLoriel is a name known to all
Re: Re: Re: Going into Registry is not hard
Quote:
Originally posted by AlkarenHyralt
Indeed, it is. But it is an evil scripting language. PHP is just easier to script, and oh so sexy.
Ruby is better.
Reply With Quote
Reply

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT +2. The time now is 06:51 AM.

Contact Us - Graal - Archive - Privacy Statement - Top

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.