Hacked again
-
I have the entire log of the incident from where it started which will probably only go to Syn and Ertai unless they want it made public. Unfortunately there wasn't much I could do as I immediately contacted Ertai and he got sitebanned and I was frozen. However they never disconnected me so I was around for the entire thing. I'm sorry for all the inconveniences caused by this and we'll do our best to get everything back up to speed. We appreciate all you guys do as I saw some of you defending the game over gossip and says when you all got transferred. Thank you all and I apologize again for the trouble.
-
I'm sorry that you all had to go through that. I read the log Inimical posted. I'm pretty pissed about the whole thing, but I'm sure that doesn't compare to you guys who were actually there. I hope the come is restored in a timely manner, and not too much is lost.
Know that doesn't help any, but I thought I'd say a few words.
-
Just a side question… What the hell is the motive here for hacking Sentience?
-
Armand notices everyone's been transferred to cpk and promptly starts trying to kill everyone. What a guy!
-
I just sent syn and Ertai a pretty hefty email
containing useful info in determining the hackers
and what damage was caused
-
i wouldn't worry about it too much, we have backups
with our ip logs we can hopefully track this person down
i have classes until evening today but then i'll look at it
we still need to assess how much damage was caused. Also i am
going to implement a thing which will make all players change their passes after they login before they are allowed to play
however you guys have to realise there is no complete security in the internet world. i'm sorry to put it in these words but i'm the only coder even present at the moment, extremely overworked and i have full-time classes, a job and a social life. i'm trying to do the best i can with what little time i have to devote to this, all the while trying to recruiting help from people i know to be trustable (like Ertai), so please be patient while i figure this out
most likely we'll have it sorted out within the next couple of days, until then i would advise you all to be patient and not to worry. Hopefully through this dudes IP we can get his services denied.. i havnt looked closely but it appears to be a univ of michigan address.
-
<quote author="Syn">
@Syn:i wouldn't worry about it too much, we have backups
with our ip logs we can hopefully track this person down
i have classes until evening today but then i'll look at it
we still need to assess how much damage was caused. Also i am
going to implement a thing which will make all players change their passes after they login before they are allowed to play
as to your comments, jazelle, you have to realise there is no complete security in the internet world. i'm sorry to put it in these words but i'm the only coder even present at the moment, extremely overworked and i have full-time classes, a job and a social life. i'm trying to do the best i can with what little time i have to devote to this, all the while trying to recruiting help from people i know to be trustable (like Ertai), so please don't act like i'm doing something wrong because i'm not on call 24/7 to address concerns in the mudding world.</quote>
Syn I understand I was only thinking on your side having it so you can track down people better and people do think twice when they have to give out their info. I know the program for the game does have some security settings you could toggle. It's just a frustration point that is hard to come up with an answer.
No one expects you to be on 24/7 that is just plain silly we all have a RL and you deserve to have one too. We all trust Ertai and mainly feel sorry that he had to be their focus point. Just remember we do support you and will help out in anyway we can so don't hestate to ask us for help.
-
<quote author="Elmah">
@Elmah:Just a side question… What the hell is the motive here for hacking Sentience?</quote>
Guys with too much free time and needs to attempt to compensate for their small penises.
-
University of Michigan? If we get a name I can go there and kick some ass… :-D
I just wanna say something to Elmah here. You're awesome man. You deal with all sorts of rl issues and even though you can't currently connect, you stay in touch with us all and I just want to know that I appreciate you!
Anyways, I got some stuff to do after I check the rest of the posts so this will be short
eRT
-
Ertai you make me smile. Dude, I'm not going anywhere. Especially with people like you and some other folks I won't embarass publicly around. Heck, I feel like a part of the game now. Whether I was Bink the whiney little bitch, Jenner the asshole, Lyvain the… Lyvain?, or Elmah MacLean, I felt like I belonged.
I'm a Sentient. Be it down, or be I unable to connect.
Sorry for ranting.
-
Syn, about that password changing system… I'd suggest that you expand on it even further. I think it would be wise to impliment something that forces you to change your password say... every week or so. It's no big deal to come up with a new password and write it down, and it's much safer.
-
As I said on the huge friggen AIM chat last night:
"Awww, Sentience people. squee"
hehe. Maybe I'm being overly Lulu-like, but you guys make me feel fluffy. :> We may snark (a lot) at each other in game, but when it comes down to it, we all stick together. Awww. :D
hugs a tree
-
i've looked around on the server a bit. It doesn't show anyone but me and londo logging into shell, so it hink someone just hacked or guessed seresnity and ertai's password somehow, or that's what it would point to anyway. If they had shell account they would have at least wiped the logs, if not the other game data there, but it seems to be intact. At least i'm hoping that's the case since this is relatively easy to deal with… i'm considering adding a wait time to people who are denied due to a bad pw, but that maybe more trouble than it's worth
i've started working on the new changes, but i'm completly exhausted and have a programming project to do and work early tomorrow. so hopefully afte ri get out of class, i can finish this up and get the game goin
-
Yes, from what Londo said it looked like the shell access was totally safe. It had to be viva game account access only. Good thing they didn't touch the logs. About all I could tell from the player logs we took is that they messed up the pfile, locked out many of the areas, changed the churches names and hit every flag command they could. Pretty much just reinstall the pfile and game files and it should be up and going. Just a few days lost. But over all don't push yourself if it takes a few days so be it.
-
Meh, I guess I can live with a couple days' loss. Although, Londo determined that at the time Ertai was hacked into, only five pfiles were saved to disk: Bashae, Ertai, Armand, Serenity and Turlis. As far as those slaughtered during the CPK/slay/purge event as well as when those remorted by the moron….. you might not have been able to save your pfiles at all...
What does that means? You that got CPKd, might not have lost anything. Those that were remorted, might not have corrupted pfiles. And all that might need restoring would be the game files and the affected pfiles (with perhaps some bit of compensation). Hell, if areas were merely closed and whatnot, nothing deleted/butchered, those might not need restoring, just reopened. I DO know the church files are in a definite need of repair.
Anyways, that's alot of might's and maybe's. But hey, it could have been much worse. And even if the game were simply restored from the 19th's backup, it's not much loss for many people. We'll just to see when we get to log on.
On a side note in an attempt to bring some levity to the situation... did anyone else have visions of Matrix: Revolutions with the rampant Smiths destroying the Matrix and whatnot? Only way to laugh at that moron since he obviously didn't know what he was doing. He could have done ALOT worse with the immortal accounts he got into.
-
Well hopefully too much isn't messed with, the less the better. The only thing I can think of that might cause some complaint is missing global rewards. I'm not sure how that should be dealt with, I suppose we'll see.
As for what Syn said about them possibly guessing the passwords, I think that's a good reason that we should be forced to change our passwords now and then. Anybody who finds that too much of an inconvenience to play… probably couldn't take Sentience in it's entirety anyway.
Again, I hope things aren't too bad, and that we're up and runnin' again soon. I know a lot of people cough ME cough are bored because they don't have anything to do.
-
Depending on the extent of the damage we might just go to the save of the 19th if it would take too much time to fix everything. In which case me and Ertai will fix the global again and get it up and running again for you guys. Which while it isn't the same, it might be the best we can do, or at least the best I can.
-
Probably all we can expect, really. Cope with the few days loss and move on. Not like we can't recover. :)
And yes, I agree with Belexus… readies MUSHClient and his leveling fingers :D Ok, I can wait. :)
-
well, i maybe late on this..but if it was someone in the same relative location as ertai…would it be possible someone saw him log in, saw the pw? or has access to that comp at some point...
shrug, dunno.
back to being an asshole elsewhere
and yes.
we do all stick together. i might never say it much, but you ppl are pretty decent :) doesnt mean i dont want to take some of you and thrust you head-first into a wood chipper, or put other ppl's testicles in a blender on puree...but yeah.
Later
Soth
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login