security-compromise
Latest
Order & Chaos security compromised, accounts hacked
Bad news for Order & Chaos Online players today. It would appear that the popular mobile MMO from Gameloft is suffering from some security issues resulting in a number of players' accounts being compromised. The issue seems to be stemming from two major holes in the game's security. There is reportedly an exploit with Gameloft's website which allows players to change another player's password, and usernames and passwords are sent between the client and server in plain text, which makes it a breeze for anyone with the smarts to run interception. Hopefully these issues will be fixed soon, but until then, stay tuned in the event that more develops. [Thanks to Andrew for the tip!]
Turbine explains recent LotRO forum security issue
While Lord of the Rings Online's forums have returned following Turbine's decision to take them down due to a security issue, many players were left in the dark about what had happened. To clear the air with this, the studio posted a brief security FAQ that addresses the specifics of what went down this past week. According to the FAQ, Turbine became aware of a compromise in the forum database that would allow unauthorized access from outsiders. The company took the forums offline, brought in security experts, and fixed the bug that caused this issue. Turbine also claims it has strengthened its web security and that no payment details, including credit card information, were in danger of being stolen. As part of an effort to make sure all players were secure, Turbine sent out notices to a few customers with particularly vulnerable passwords. In the email, the players were informed that their passwords were reset for their own safety. The FAQ ends with a few Dos and Don'ts about password creation which all MMO players would be wise to adopt.
