http://forums.achaea.com/index.php?showtopic=24433&hl=

I encourage all of you to read this thread. Lusternia may not be having this issue right now, but it could happen in the future and it's best to be prepared. They actually got into one of the Achaean player's accounts and suicided his character.

Thanks for the heads up! Hackers are icky!

Time to whip out that RNG and create a 36 character password... *sigh*

I -suspect- Lusternians are safe as it seems whoever is doing the hacking knows their Achaean stuff. Not only has one character suicided, I've known of one who attacked the guards of their city and I think there've been some other things happen too.

This is why I buy credits on any character I want to keep. Just the minimum amount, to stop suiciding.

I hope lusternia admins are taking steps to ensure its unlikely to happen to us.

Yeah, I saw that so I changed my password a bit.

http://forums.aetolia.com/index.php?showtopic=8332


Apparently, it's not only in Achaea now. Be careful Lusty folk!

Why is our game's abbreviated name "Lusty"? T_T

Nobody likes Luster?

I hope they make it so that if you get the wrong password 10 times, then you have to email support to get your account unlocked.

Do you imagine what would happen then? Immature idiots who'd try to log in to Daevos's/Forren's/anyone important's name EVERY day ten times, just to be a nuisance and make them have to send e-mails. Not to mention that the unlocking wouldn't be instantenous too, probably.

Better to just block that IP for a set amount of time, or lock the account for 5-10 minutes after x amount of errors. Would make brute force attacks rather slow.

Actually I doubt this is a brute force attack; it's probably a simpler dictionary attack.

Anyone wanting to make sure their account is extra secure, here's a useful random string generator: http://www.pctools.com/guides/password/

Good for generating obscure passwords.

Which is still pretty much brute force, and would still take a long time if every few tries you had to wait 5-10 minutes. Also, passwords with numbers in them have been guessed, so its not completely dictionary.

what sort of person would dive to such a low?

it boggles me.

I've never understood why such obviously smart people would stoop to finding enjoyment by screwing people over by hacking into their stuff or making horrid viruses that ruin things.

It's a challenge. They want to challenge themselves by doing it.

Hmph. There are plenty of ways to challenge oneself without wrecking other people's things.

I wasn't defending them, just answering the question.

However, that is of course assuming the person is using their own program they made to do these things, if they're using someone else's they're just some sniveling worm. Still, at some point in time someone made the program they're using to break the passwords to challenge themselves, to see if they could do it.