Staff Accounts Hacked -.-

Nemesis · #1 05-31-2002, 08:15 PM

It has come to be that staff accounts are being hacked.

As first Delteria has become Hell Raven's home to hack and jail everyone. That is being addressed as I already have emailed both Stefan and Unixmad about the situation.

As for the hacked accounts. Everyone seems to be claiming that the owner of UN has been hacked. Yakuna. There is nothing to prevent anyone from getting a password, yet there is something to prevent someone from actually logging on the RC. That didn't happen to my knowledge and thank god it didn't.....

Anyhow, if people are trying to ask me how I did not solve the problem, is because I have to rely on others to do that for me, hopefully that will not happen and I can solve these problems before they get bigger.

Also Warcaptain_Enigma, was hacked. Great to find that it had no IP range set, and the rights were still there. SO when I logged on the server at 4 am eastern time (yes I am up on graal every night till about then, on and off of course) but I come to find 3 people on RC. By the time I solved that and got rid of those accounts, the server had been deleted. It still is (I did not have a backup) So thus if you see "Warcaptain_Enigma" that is not WC. So please ban it immediately without question, until we can delete the account.

Also I know everyone has heard this before. All the OLD staff accounts. PLEASE delete *.*.*.* from the accounts and put absolutely NO rights on those accounts. Unless they are being used. If they are being used. All RC accounts MUST have an IP range. I know Stefan hates it when staff does not set IP ranges for RC. This problem could of been avoided if the rights were removed alone with *.*.*.* but it didn't so. I am letting everyone know about this so that they can double check their accounts to make sure they all have ip ranges set so this will not happen.

Thanks.

I know you rather not like me telling you what to do, but this is a fair reminder, and for informational purposes. Please just double check and make sure all the accounts that are active have IP ranges, all inactive will be deleted (eventually) and assure that no rights whatsoever are assigned to it. Thanks

Python523 · #2 05-31-2002, 08:34 PM

Hell Raven didn't get on RC on delteria, all of a sudden everyone ended up in jail, I have no clue why
And I checked all the RCs on providence, all the Providence_RC# are safe and I will be IP locking the remander player account RCs when I get back from school today

Timpan3 · #3 05-31-2002, 09:07 PM

i saw Hell Raven on SL
weird he said he woudnt hack anymore

probly a lie

if hell raven is back the new hacks for the new version will be made

Timpan3 · #4 05-31-2002, 09:08 PM

maibe team pie is back?

Timpan3 · #5 05-31-2002, 09:29 PM

Quote:

Originally posted by Timpan3
maibe team pie is back?

i doubt it.. but i saw pie online on classic like 1 week ago ... Thats kinda weird... =/

- Cirillo Zen

Yakuna2001 · #6 05-31-2002, 09:36 PM

yep, someone hacked my account it was done like this to the best of my knownledge.

someone messaged me on AIM (s/n:- TheL0tusP0d) and sent me and online game, which i scanned for viruses. seemed pretty gen, didnt pick anything up so i played it fine. i got on, onyl to find out it has some sort of backdoor trojan, that emails him my graal registry.
my advice :- choose dont save passwords in graal, dont accept files even if you virus scan them, ip protect your rc, which i did and it stopped any real damage being caused.
i got his ip, for those who want to global ban, and also, his normal account name, he goes by the name of Flip, and used the accoutn Grallgod (yes spelt like that)
faheria accoutns were also hacked, along with mine, warcaptains and others.be weary.... ;X

CyberX · #7 05-31-2002, 09:56 PM

Quote:

Originally posted by Timpan3

i doubt it.. but i saw pie online on classic like 1 week ago ... Thats kinda weird... =/

- Cirillo Zen

What's his account?

Timpan3 · #8 05-31-2002, 09:59 PM

im not sure
its like

piehax0r
or something like that

//Victor

WHIPENIE4 · #9 05-31-2002, 10:09 PM

(X-Mann)
This happened on classic as well though, i don't think its hacked accounts, i think hes using a program, if hes not, hes got an FAQs account on Classic you might wanna check that out, Tyhm thinks its a bug

Max-imus · #10 05-31-2002, 10:58 PM

Quote:

Originally posted by Python523
Hell Raven didn't get on RC on delteria, all of a sudden everyone ended up in jail, I have no clue why

Yes, all of Hell Raven's hacking on Delteria was done without the use of an RC.

Logo · #11 06-01-2002, 12:21 AM

i know how it is all done, but to the hackers:

Minoc · #12 06-01-2002, 12:52 AM

Quote:

Originally posted by Timpan3
im not sure
its like

piehax0r
or something like that

//Victor

I banned some of pie's accounts, I think I banned piehax0r account too, he has many accounts ;P

AlkarenHyralt · #13 06-01-2002, 01:15 AM

I'd be able to do something if Agelaos would give me my level 4

Yakuna2001 · #14 06-01-2002, 01:21 AM

Quote:

Originally posted by AlkarenHyralt
I'd be able to do something if Agelaos would give me my level 4

u couldnt do anything more than what i did about it even with a level 4. chanegd my own pass, banned his ip from my server, and banned his account.

Pith · #15 06-01-2002, 01:27 AM

losers get hacked

haunter · #16 06-01-2002, 01:28 AM

Quote:

Originally posted by Nemesis

Also I know everyone has heard this before. All the OLD staff accounts. PLEASE delete *.*.*.* from the accounts and put absolutely NO rights on those accounts. Unless they are being used. If they are being used. All RC accounts MUST have an IP range. I know Stefan hates it when staff does not set IP ranges for RC. This problem could of been avoided if the rights were removed alone with *.*.*.* but it didn't so. I am letting everyone know about this so that they can double check their accounts to make sure they all have ip ranges set so this will not happen.

Can we just set the first few numbers? like #.#.*.* ? Or does it have to be the whole thing?

Yakuna2001 · #17 06-01-2002, 01:32 AM

Quote:

Originally posted by haunter

Can we just set the first few numbers? like #.#.*.* ? Or does it have to be the whole thing?

U OBVIOUSLY JUST SET WHAT U CAN, EG IF A STAFF HAS CABLE, U SET THE WHOLE THING 24.65.28.99 FOR EXAMPLE
doh caps lock

if they just have dial up, u set what u can, like mine for instace starts (edited) 99.99*.* or 88.88.*.* so in my rights i have a few different ip's like epearted by commas:-
63.45.*.*,213.86.*.*,62.92.*.*,80.197.*.*
(obviously i changed my ip's for the benefit of this post)

AlkarenHyralt · #18 06-01-2002, 01:33 AM

Quote:

Originally posted by Yakuna2001

u couldnt do anything more than what i did about it even with a level 4. chanegd my own pass, banned his ip from my server, and banned his account.

I could globally ban the account, or delete it.

Torankusu · #19 06-01-2002, 01:36 AM

Quote:

Originally posted by Nemesis
blah blah

The *.*.*.* Has been a rule that was in effect for over a month now. It's also a no-brainer. Servers that didn't follow it, I was told, were to be shut down.

Yakuna2001 · #20 06-01-2002, 01:46 AM

Quote:

Originally posted by AlkarenHyralt

I could globally ban the account, or delete it.

uc ant globally ban with level 4 can you? i thought global bans were done through CP? i dunno.
yes you could delete the account, but then what good is that when they just go sign up for another one.

Torankusu · #21 06-01-2002, 01:51 AM

Quote:

Originally posted by Yakuna2001

uc ant globally ban with level 4 can you? i thought global bans were done through CP? i dunno.
yes you could delete the account, but then what good is that when they just go sign up for another one.

they have to pay for accounts now.

(It's june isn't it? Well, tomorrow then.)

iniquitus · #22 06-01-2002, 01:51 AM

Yes, simply putting *.*.*.* (e.g. letting any IP through) is asking for it. Is there a way to set multipul ranges for a single account though? I'm not aware of one. What happens is somtimes you run into a problem where you need 2 ranges, e.g. 208.161.25.* and 205.130.*.*, so you are left with the option of entering *.*.*.* --I'm not sure about weather or not you can enter multipul IP ranges, but I think it would help the situation; also it would help if they ranges were defined with the subnet mask, instead of *'s whitch only allow us to specify a class a, b, or c, address, classless IP subnetting can narrow it down alot beter.

Example:

#.#.#.#/S network number (ip number) / network bits

so "208.161.25.32/27" (snm of 255.255.255.224) would only allow IP's 208.161.25.33-62 to be used. different ranges would be added with commas and a semicollin at the end.

i.e.

ips=208.161.25.32/27,205.150.0.0/16;

would allow 208.161.25.33 - 208.161.25.62, or 205.150.0.0 - 205.150.255.255

Thats the system I would use anyway :o

Urizen

Yakuna2001 · #23 06-01-2002, 01:55 AM

Quote:

Originally posted by iniquitus
Yes, simply putting *.*.*.* (e.g. letting any IP through) is asking for it. Is there a way to set multipul ranges for a single account though? I'm not aware of one. What happens is somtimes you run into a problem where you need 2 ranges, e.g. 208.161.25.* and 205.130.*.*, so you are left with the option of entering *.*.*.* --I'm not sure about weather or not you can enter multipul IP ranges, but I think it would help the situation; also it would help if they ranges were defined with the subnet mask, instead of *'s whitch only allow us to specify a class a, b, or c, address, classless IP subnetting can narrow it down alot beter.

Example:

#.#.#.#/S network number (ip number) / network bits

so "208.161.25.32/27" (snm of 255.255.255.224) would only allow IP's 208.161.25.33-62 to be used. different ranges would be added with commas and a semicollin at the end.

i.e.

ips=208.161.25.32/27,205.150.0.0/16;

would allow 208.161.25.33 - 208.161.25.62, or 205.150.0.0 - 205.150.255.255

Thats the system I would use anyway :o

Urizen

read my post, i just said you can use multiple ip ranges by putting , inbetween eg 66.66.66.66,77.77.77.77

haunter · #24 06-01-2002, 01:55 AM

Quote:

Originally posted by Yakuna2001

U OBVIOUSLY JUST SET WHAT U CAN, EG IF A STAFF HAS CABLE, U SET THE WHOLE THING 24.65.28.99 FOR EXAMPLE
doh caps lock

if they just have dial up, u set what u can, like mine for instace starts (edited) 99.99*.* or 88.88.*.* so in my rights i have a few different ip's like epearted by commas:-
63.45.*.*,213.86.*.*,62.92.*.*,80.197.*.*
(obviously i changed my ip's for the benefit of this post)

Well I have cable... But I have two computers 0.o;

draygin · #25 06-01-2002, 01:56 AM

Quote:

Originally posted by iniquitus
Yes, simply putting *.*.*.* (e.g. letting any IP through) is asking for it. Is there a way to set multipul ranges for a single account though? I'm not aware of one. What happens is somtimes you run into a problem where you need 2 ranges, e.g. 208.161.25.* and 205.130.*.*, so you are left with the option of entering *.*.*.* --I'm not sure about weather or not you can enter multipul IP ranges, but I think it would help the situation; also it would help if they ranges were defined with the subnet mask, instead of *'s whitch only allow us to specify a class a, b, or c, address, classless IP subnetting can narrow it down alot beter.

Example:

#.#.#.#/S network number (ip number) / network bits

so "208.161.25.32/27" (snm of 255.255.255.224) would only allow IP's 208.161.25.33-62 to be used. different ranges would be added with commas and a semicollin at the end.

i.e.

ips=208.161.25.32/27,205.150.0.0/16;

would allow 208.161.25.33 - 208.161.25.62, or 205.150.0.0 - 205.150.255.255

Thats the system I would use anyway :o

Urizen

you seperate the different ip's with a comma , my RC's have 3 seperate IP address in them such as 111.222.*.*,222.22.*.*,69.68.*.*

iniquitus · #26 06-01-2002, 01:59 AM

Quote:

Originally posted by Yakuna2001

read my post, i just said you can use multiple ip ranges by putting , inbetween eg 66.66.66.66,77.77.77.77

Oops!

Sorry, didn't read after I saw all CAPS I assumed you were just flaming...

I still think that having the subnet mask would be a good thing.

Also, is there any protection against IP spooffing?

Urizen

Tyhm · #27 06-01-2002, 02:25 AM

Hell Raven was using a program that read his NPC Scripts for the crucial server strings and their syntax, then setting them to any accountname he could get his hands on.
Everyone on Delteria is in jail because their NAT was gullible enough to use a server string for in-game jailing. Everyone on Classic found themself in Detention because it used the same system - critical difference being you can walk out of detention on your own.

Poogle · #28 06-01-2002, 02:49 AM

Quote:

Originally posted by Pith
losers get hacked

so you are saying that explains Stefan and Unixmad geting hacked?

Boozy_Bravo · #29 06-01-2002, 03:24 AM

The person who hacked Warcaptians Account is on Unholy Nation with the name DA_ _ _

Boozy_Bravo · #30 06-01-2002, 03:27 AM

There is also a person on UN with the same name as the hacked warcaptian account..Master_Ray
the hacked warcaptian account is Warcaptian

Timpan3 · #31 06-01-2002, 03:28 AM

Quote:

Originally posted by Minoc

I banned some of pie's accounts, I think I banned piehax0r account too, he has many accounts ;P

not good
ive saw Trooper online
u guys from classic should remember that hacker

Spark910 · #32 06-01-2002, 03:45 AM

Quote:

Originally posted by Nemesis
It has come to be that staff accounts are being hacked.

As first Delteria has become Hell Raven's home to hack and jail everyone. That is being addressed as I already have emailed both Stefan and Unixmad about the situation.

As for the hacked accounts. Everyone seems to be claiming that the owner of UN has been hacked. Yakuna. There is nothing to prevent anyone from getting a password, yet there is something to prevent someone from actually logging on the RC. That didn't happen to my knowledge and thank god it didn't.....

..................

Thanks.

I know you rather not like me telling you what to do, but this is a fair reminder, and for informational purposes. Please just double check and make sure all the accounts that are active have IP ranges, all inactive will be deleted (eventually) and assure that no rights whatsoever are assigned to it. Thanks

Dont al RC Get delted 2morro?

thesaiyan · #33 06-01-2002, 04:06 AM

Quote:

Originally posted by Spark910

Dont al RC Get delted 2morro?

Huh? and Why would they be? I haven't heard this.

DragonX2 · #34 06-01-2002, 04:10 AM

Quote:

Originally posted by thesaiyan

Huh? and Why would they be? I haven't heard this.

Yes it's true, because now you have to pay for any account you use and so staff accounts are being turned into trial mode and if you want to upgrade it you can but it'd be easier if you just put your staff on "staff=" line in server options.

Yakuna2001 · #35 06-01-2002, 04:12 AM

alot of hacking went on yesterday heh

Torankusu · #36 06-01-2002, 04:16 AM

Quote:

Originally posted by DragonX2

Yes it's true, because now you have to pay for any account you use and so staff accounts are being turned into trial mode and if you want to upgrade it you can but it'd be easier if you just put your staff on "staff=" line in server options.

Valiorlia did that. It was erased, now they have no RCs.

DragonX2 · #37 06-01-2002, 04:17 AM

Quote:

Originally posted by Torankusu
Valiorlia did that. It was erased, now they have no RCs.

Hahahaha!
Sucks to be them

GraalBR · #38 06-01-2002, 04:53 AM

heh I was hacked i just saw my Acct come up on the RC acct list i was like WTF so i got myself banned, changed my password and havnt had any problems since

warp2ukew · #39 06-01-2002, 05:41 AM

nemesis this is also hapening with Zen_Babylon

ZanderX · #40 06-01-2002, 06:00 AM

Hrm.

This is why I secured Providence, for the most part. Need to check a few RCs...