security-issues
Latest
Order & Chaos security compromised, accounts hacked
Bad news for Order & Chaos Online players today. It would appear that the popular mobile MMO from Gameloft is suffering from some security issues resulting in a number of players' accounts being compromised. The issue seems to be stemming from two major holes in the game's security. There is reportedly an exploit with Gameloft's website which allows players to change another player's password, and usernames and passwords are sent between the client and server in plain text, which makes it a breeze for anyone with the smarts to run interception. Hopefully these issues will be fixed soon, but until then, stay tuned in the event that more develops. [Thanks to Andrew for the tip!]
City of Heroes offers a reminder on account security
NCsoft hasn't been having an easy start to the year, at least not in the eyes of security-minded players. The entire Guild Wars security question recently came to a head with suspicions and accusations that the flaw was something wrong with NCsoft's account management, a black eye if ever there was one. Of course, that raises questions about not just Guild Wars, but any game under the company's aegis, which includes City of Heroes. So it should come as little surprise that a reminder about account security has recently been posted on the official site. The reminder itself is fairly standard boilerplate, reminding everyone to avoid giving out their account information to any other players, only log in from secure locations, and so forth. It also addresses the issue at hand in a roundabout fashion, mentioning that they found no malicious workarounds after investigating "current claims." However, the very next line mentions that they have added more robust logging and security procedures, which can lead to the obvious conspiracy theories. With fewer items to be traded than many other games, City of Heroes has a smidge more built-in security -- but a little extra reminder and caution never hurts.
Potential smoking gun found for Guild Wars security issues
It started as a surprise. Guild Wars players reported suddenly finding themselves hacked, their accounts cleaned out, no indication of what could have caused the problem. NCsoft and ArenaNet offered suggestions, security safeguards, new measures being taken, hints that the problem lay in a popular third-party website with an undisclosed name. But with the recent rash of problems that Aion players have been having regarding security, new facts have begun coming to light, and they paint a picture that isn't pretty. Specifically, some players seem to be finding that it doesn't take any skill to wind up hacking someone's account accidentally. And all it takes is a few log-in attempts to find yourself with access to someone's account name, password, and billing information for all of a player's NCsoft games.
