PW staff passwords: please change

Admins · #1 11-29-2001, 07:30 AM

Recently some playerworld staff account have been 'hacked'
because the passwords were quite simple
/single words or so, please change them to some random
password with random letters/numbers.

Psyker · #2 11-29-2001, 07:39 AM

...are they able to login to RCs?

I'm not sure if they could, because in the ipgps.txt, there is a trick to let all IPs in...

James205 · #3 11-29-2001, 07:47 AM

Quote:

Originally posted by Stefan
Recently some playerworld staff account have been 'hacked'
because the passwords were quite simple
/single words or so, please change them to some random
password with random letters/numbers.

I did yesterday and my password has been changed once again.

LiquidIce00 · #4 11-29-2001, 08:56 AM

The biggest problem is trojans.
Mostly the passwords are stolen with trojans, and some people dont know much about that kind of stuff so they are unprotected.

The ftp passwords sometimes are stolen this way , but sometimes it is just people leaking the password.

I dont think many people are able to guess passwords x.x

Psyker · #5 11-29-2001, 09:07 AM

Quote:

Originally posted by LiquidIce00
The biggest problem is trojans.
Mostly the passwords are stolen with trojans, and some people dont know much about that kind of stuff so they are unprotected.

The ftp passwords sometimes are stolen this way , but sometimes it is just people leaking the password.

I dont think many people are able to guess passwords x.x

most people usually give up after 20 minutes.

yoshee15 · #6 11-29-2001, 09:55 AM

Quote:

Originally posted by Psyker

most people usually give up after 20 minutes.

2 tries

r_u_f_u_s · #7 11-29-2001, 11:26 AM

Quote:

Originally posted by LiquidIce00
The biggest problem is trojans.
Mostly the passwords are stolen with trojans, and some people dont know much about that kind of stuff so they are unprotected.

The ftp passwords sometimes are stolen this way , but sometimes it is just people leaking the password.

I dont think many people are able to guess passwords x.x

That's why you need a firewall.... nice free one at www.zonealarm.com (not advertising, just recommending for safety purposes)

Python523 · #8 11-29-2001, 11:39 AM

I wish I could get my RC password on Dino Valley changed, the problem is that all the 'Owners' live in Germany and that's around 6 hours time difference for me.

Admins · #9 11-29-2001, 12:26 PM

Brute force, they got some of the encrypted passwords.
And since some playerworld owners are lazy
and give out one-word passwords and set the
ip-range of staff accounts to *.*.*.* they should
better change them.

ZanderX · #10 11-29-2001, 12:28 PM

Stefan, could you give Providence a restart? Tyne left, I'm now owner(along with Shadow Knight, more or less), but I cannot change RC account passwords nor edit RC info like I should be able to to fix some of these problems...

TrIz · #11 11-29-2001, 12:28 PM

They need the website fixed Stefan.

All the accounts are now accessible. I found 6 accounts hacked on different servers. So everyone basically needs their account password changed.

Best thing to do, is go onto Classic, or 2001, and contact myself, James205 or SnakeEyes. Any other admin with the power, to change your password for you.

It's basically serious, considering you pay money for your p2p account, I don't think you'd like to lose your hats and such. Hopefully everyone will just ask us, they have an old version of that. The more accounts we update, the more time they spend testing them out.

Yes server staff can get your passwords changed as well. Thanks

TrIz · #12 11-29-2001, 12:31 PM

Stefan, RC is bugged for a lot of playerworlds

Their level 4 RC cannot change passwords, nor ban their accounts.

If you can fix this asap maybe we can reduce the problems this would occur. Because I have to do that plus regular accounts.

Example, Shaded Legend and N-Pulse don't have correct working RC. Nor do other servers I can imagine.

Along with that, FTP is a major issue as I told you with N-Pulse on that. So I hope you can change that for them

Action should be taken. I have several IP address from thsoe who've logged on with the passwords they've discovered. Obviously they go right for the staff account.

ZanderX · #13 11-29-2001, 12:33 PM

Quote:

Originally posted by TrIz
They need the website fixed Stefan.

All the accounts are now accessible. I found 6 accounts hacked on different servers. So everyone basically needs their account password changed.

Best thing to do, is go onto Classic, or 2001, and contact myself, James205 or SnakeEyes. Any other admin with the power, to change your password for you.

It's basically serious, considering you pay money for your p2p account, I don't think you'd like to lose your hats and such. Hopefully everyone will just ask us, they have an old version of that. The more accounts we update, the more time they spend testing them out.

Yes server staff can get your passwords changed as well. Thanks

Everyone already knows that accounts were hacked.

Admins · #14 11-29-2001, 12:40 PM

If playerworlds still have problems with the
staff account changing I said to contact me so
that I can restart the server

TrIz · #15 11-29-2001, 12:42 PM

Then Stefan can you please come on N-Pulse and then Shaded Legend to restart their respective servers.

I am asking for them because they are in need, and it's the right thing to do

Hopefully we can resolve this fairly quickly.

Thanks

Reiko_Lonja · #16 11-29-2001, 11:01 PM

i got my acc hacked and lost everything

Psyker · #17 11-30-2001, 12:37 AM

Quote:

Originally posted by Stefan
Brute force, they got some of the encrypted passwords.
And since some playerworld owners are lazy
and give out one-word passwords and set the
ip-range of staff accounts to *.*.*.* they should
better change them.

yeah, that's how... setting the IP to *.*.*.*
if only they set the proper IP, then nobody could get into RC

IceFire_TK · #18 11-30-2001, 01:17 AM

Quote:

Originally posted by yoshee15

2 tries

lol

Sir Triclops · #19 11-30-2001, 01:54 AM

WC told me that not even he can access accounts to change staff passwords and stuff, due to NL or something.

LiquidIce00 · #20 11-30-2001, 04:25 AM

Quote:

Originally posted by Stefan
Brute force, they got some of the encrypted passwords.
And since some playerworld owners are lazy
and give out one-word passwords and set the
ip-range of staff accounts to *.*.*.* they should
better change them.

thats the main problem..
a lot of people have AOL and AOL is evil and you know how it goes hehe..
I have highest staff on my PW with ip set stuff.

Andor_NPC-Admin1 · #21 11-30-2001, 07:03 AM

is it possible to have two ip's 4 RC?
like:
1.2.*.* and 3.4.*.*?

Psyker · #22 11-30-2001, 07:04 AM

Quote:

Originally posted by Andor_NPC-Admin1
is it possible to have two ip's 4 RC?
like:
1.2.*.* and 3.4.*.*?

i think so

Lyndzey · #23 12-04-2001, 05:51 AM

Quote:

Originally posted by Andor_NPC-Admin1
is it possible to have two ip's 4 RC?
like:
1.2.*.* and 3.4.*.*?

Yes, like 1.2.*.*, 3.4.*.*

Krunck · #24 12-04-2001, 07:43 AM

to set more ip range for the same account you can set like this:

BinaryCrash:1.2.*.*
BinaryCrash:1.4.*.*
BinaryCrash:2.1.*.*

just repeat the line with the other ip range you want.

the-kid1002 · #25 12-05-2001, 06:09 AM

umm stefan you DO know about teampie correct? i personally think you should friggin umm i dunno but DO something man they totally suck they are very good hackers....so far their followers hacked 2 accounts on delteria (staff accounts) they jailed everyone........one of them is the day i went and got you from graal 2001...remember? anyway maximus really needs to know if he will become owner of delteria plenty of delterians have went to mithica for now and are VERY bored as i am...if you dont know the teampie site its www.teampie.org...not advertising just notifying...