HUGE breaches in NCsoft account "security"

[GreenBunionSoup]

9 hours ago, Mistia said:

Errrr, I agree with most of the things you said of taking extra measures to protect yourself. But this part is like telling a child who was molested that he/she should know better... Should really try to better phrase it.

 

HACKING is wrong, not that stopped anyone from doing it. Let's make that clear and not justify it. But steps can be taken to prevent yourself from suffering the fate of losing your account

That *cricket* analogy is not even close. If she purposefully goes through a sketchy alleyway fully knowing rapes are common through there, then yes I would consider it her fault. Hacks have become pretty common, so not protecting yourself against them is no one's fault but your own. If you get hacked/raped, I'm not saying I won't feel any sympathy, as both situations are terrible, but I won't sugarcoat it either. Softening your words to avoid hurting someone's feelings does not help them in the future. 

 

Edit: What? Nonconsensual sex is censored?

[Izanami]

Keeping this on 1st page. Almost feel like this should be stickied

[Faline]

 

Yep all CC info removed here too - I feel so much better now :3 

[TMPDai]

On 4/7/2016 at 0:17 AM, MetaMessiah said:

https://www.reddit.com/r/bladeandsoul/comments/4dp48l/i_tried_hacking_my_own_account/

https://www.reddit.com/r/bladeandsoul/comments/4dn59l/2step_verification_will_not_help_solve_your/

https://www.reddit.com/r/bladeandsoul/comments/4djepj/major_flaw_in_ncsofts_account_management_system/

https://www.reddit.com/r/bladeandsoul/comments/4dp3q0/pretty_sure_i_figured_out_why_so_many_people_are/

 

You may have seen frequent posts about accounts being hacked and many of you would accuse them of using 3rd party programs or gold buying etc. However I would just like to point out that it isn't really that hard to access someone's account. First of all, your 2-step verification is useless as according to the links above, if a hacker can access your account, they can change YOUR email to THEIRS without verification from the previous email. Following that, they can also disable your 2-step verification as it now asks for confirmation from your new email. There is also something called a DROWN attack but you should read it yourself as I'm bad at explaining.

 

The only thing stopping hackers is your password and ip verification. Passwords can be brute forced or spoofed. The only thing stopping these hackers is the IP verification. But if hackers do get inside your account they can even disable the ip-verification and see all your details including address and phone numbers.

 

So what did we learn today? Set up a good password and enable IP verification, ordinary hackers cannot bypass the latter. Also don't download 3rd party software or try to buy gold, these are still contributors to accounts being hacked.

 

 

Thank you for pointing this out. Hopefully this will open the eyes of people that say "I'm 100% sure you visited some "suspicious" website, there is no other way" and act like they are know EVERYTHING