Hacked Accounts

"

Mathlete wrote:

"

barbzilla wrote:

Mine didn't come up, yet I was hacked as well. I just see this as a cop out. GGG used to be for the gamer, but they've become jaded over the years now. I hate to see it like this, but they are just washing their hands of responsibility and praying they can keep their user base. It is a terrible practice and more suited to the likes of EA than GGG.

Oh please, I know you're upset and all, but at least try to be rational.

How is this not being rational. I am not upset as I didn't lose much (I haven't played much since open beta), what upsets me is the practice that GGG is engaging in. It is truly an act of apathy more than action. If they followed the line they can delete the stolen goods and return the non stolen goods, as well as being able to ban the thieves. That is the proper course to take, yet they have decided oh, we don't care, we will let you deal with the loss.

While it doesn't effect me personally, it does effect many people who have spent a great deal of time and money (to support the game) on the game. You can go ahead and accuse me of whatever you wish, but GGG can access my account activity and know that I am telling the truth if they wish. I don't hack, I don't cheat, and I don't steal. At the same time I am barely in A2 during the open beta because I've been busy as hell since it went open.

This isn't about me, it is about shady business practices and I won't support companies that engage in them any longer.

If you get hacked, I suggest participating in the ladder events (weekly, maybe monthly soon), everyone starts from a fresh scratch in those. Yes they are hardcore, but it's a new economy and an even playing field.

Before participating in these races... Reformat your PC, AND make a new good password, AND a new email WITH a DIFFERENT good password. If your account still gets stolen, you are probably using internet explorer/visiting sites/downloading things you shouldn't.

I tried to login now, but I get a message saying my password is wrong. Yes, im guily of usin the 'save password' button. Hacked?

edit: strange, now I got to log in.

Just allow for real multifactor authentification (Google Authenticator for example) with a "reset" using a (long) reset-code we can keep in a different location and / or make it possible to lock the login to a country. This will help against all kinds of attacks, even against keyloggers/clipboard watchers.

"

barbzilla wrote:

If they followed the line they can delete the stolen goods and return the non stolen goods, as well as being able to ban the thieves.

Chris outlined why they can't do this in the OP:

"

Chris wrote:

If our policy was to restore in a way that duplicated the items, this would be a free duplication method that people could easily use. If our policy was to take the items back from the attacker without duplicating them, then this would result in a free tradehack that anyone could use. In either case, the economy would be destroyed.

It's not just people abusing trade hacks either - what if someone stole an item and then you traded with that person. Should you then lose the item you traded for when the original owner wants it back? If so, are you expecting whatever items you traded for it to be returned to you? What if they were currency and have already been used, should they then go and roll back the items that the currency were used on?

Even if they were able to trace this spider web of trades and currency rolls after a theft (and I would be highly surprised if they could), it would mean that if you had traded with any other person *thief or not* your trades and item crafting could be rolled back at any point. That is what would completely destroy the economy.

On the other hand, if you know of a way around those problems feel free to share it.

"

tvari wrote:

"

barbzilla wrote:

If they followed the line they can delete the stolen goods and return the non stolen goods, as well as being able to ban the thieves.

Chris outlined why they can't do this in the OP:

"

Chris wrote:

If our policy was to restore in a way that duplicated the items, this would be a free duplication method that people could easily use. If our policy was to take the items back from the attacker without duplicating them, then this would result in a free tradehack that anyone could use. In either case, the economy would be destroyed.

It's not just people abusing trade hacks either - what if someone stole an item and then you traded with that person. Should you then lose the item you traded for when the original owner wants it back? If so, are you expecting whatever items you traded for it to be returned to you? What if they were currency and have already been used, should they then go and roll back the items that the currency were used on?

Even if they were able to trace this spider web of trades and currency rolls after a theft (and I would be highly surprised if they could), it would mean that if you had traded with any other person *thief or not* your trades and item crafting could be rolled back at any point. That is what would completely destroy the economy.

On the other hand, if you know of a way around those problems feel free to share it.

I am actually speaking (emailing) with Chris on this subject as of current. The main thing is, it isn't just a matter of the in game economy, it is also a matter of customer support. GGG has always been Pro-Gamer since the beginning, unlike other larger companies. So this is like a huge black mark on that, otherwise, pristine face. Like you said, it is also about the money though. Dealing with all of these complaints and trying to trace back all of the items and currency through all of the trades is impossible (financially speaking). So we are stuck on an edge, one side he loses customers and money due to hackers, the other he loses money due to excessive customer support bills.

The only solution I could come up with is a one time token for each account that allows for one restore. This goes back to a weekly backup of the account so nobody has to worry about keeping track of what everyone has at all times and keeping a back log of the trades. Once a player burns that token to get a restore, his account no longer backs up and he is live only, to save on server space.

Since they increased the security for PoE it is going to be a bit harder for accounts to get compromised without having full access to the email of the account in question. If the player is allowing both his account and email to be compromised that is obviously his/her security issue, and not some in game security issue. So we are only really dealing with this big security breach that went down prior to this point.

I also pointed out that he can see the account that was traded to on the date of the mystery IP's connection and find the actually account transferred to, he should just ban that account which leaves all of the items on that account frozen and out of the economy.

Yes there will be some inflation due to duplication, but at least he isn't losing potential revenue due to an outside influence. This really isn't a simple issue, and is way more complex than just the game economy.

Giving a limited number of refunds isn't as easy as for Diablo 3 because the game is free and so people would just create new accounts.

1. Create new account
2. Give valuable items/currency to new account
3. "Steal" stuff from the new account to another account
4. Claim refund
5. Repeat

"

Boroness wrote:

Giving a limited number of refunds isn't as easy as for Diablo 3 because the game is free and so people would just create new accounts.

1. Create new account
2. Give valuable items/currency to new account
3. "Steal" stuff from the new account to another account
4. Claim refund
5. Repeat

You still have to farm said stuff, though I get your meaning. Still the time involved to level a character to farm items at any real quantity and then you get to dupe them once, it just doesn't pay out as well as just setting up farming bots, especially since this is F2P. I highly doubt this will become an issue, but to appease that you can do an IP range check after each refund to see if anyone is abusing the system.

Also: Did Diablo start limiting refunds? I haven't messed around much with 3

If someone's account is compromised from a location on another continent from where they normally connect, why not delete the stolen items entirely? No restores. You're SoL, but so is the thief. Item theft for monetary gain must be de-incentivized.

I havn't logged in awhile. decided to play today and find out my account was logged in from elsewhere so I look in my stash and it is emptied of all materials aside from identify scrolls and portal scrolls. I can't even get my unlock code.


Talk about a buzz kill for wanting to get back into this again.