The saga of RIFT's account security woes continues, as Trion World's Scott Hartsman responded to the hacker attempts, reassuring fans curious about what steps were being taken to secure their accounts.
Citing "constant attacks" since the launch of RIFT that have impacted 1% of accounts, Hartsman said that the team is blocking hackers and botnets as quickly as they are identified, but that this will also be an ongoing process.
"Both the login fix and the Coin Lock addition have been doing their part in signficantly reducing overall incidents over the last 18 hours," Hartsman wrote. "Neither one is a silver bullet, but so far it is looking to be a solid one-two punch for the weekend."
According to his post, Trion will be hiring additional staff to tackle the problem, and is working on a "two-factor authentication" process for the future.
Hartsman also praised the efforts of the player who brought a serious log-in vulnerability to the team's attention. ZAM tracked down the player for an interview, who himself had his account hacked in early March. The player is an "ethical hacker" who owns a security software company and realized that these hacks were not the fault of the player, but an exploit that had been discovered.
Reader Comments (44)
Posted: Mar 20th 2011 4:07PM Halldorr said
Posted: Mar 21st 2011 7:05AM Apakal said
@Puremallace
I still don't see that as a very valid excuse. If anything, all of Blizzard's, and Aion's problems for that matter, should have been more than enough evidence that an extra measure of security, like authenticators should have been there from the start. Yeah, yeah RSA was hacked, blah blah. WoW authenticators are apparently unaffected because of the token they use. Its still the best line of defense when it comes to account security.
I'll give Trion credit for responding quickly to the issue, but I'm not giving them a free pass just because they did it better than someone else when they could have used that example and largely prevented the issue to begin with.
I still don't see that as a very valid excuse. If anything, all of Blizzard's, and Aion's problems for that matter, should have been more than enough evidence that an extra measure of security, like authenticators should have been there from the start. Yeah, yeah RSA was hacked, blah blah. WoW authenticators are apparently unaffected because of the token they use. Its still the best line of defense when it comes to account security.
I'll give Trion credit for responding quickly to the issue, but I'm not giving them a free pass just because they did it better than someone else when they could have used that example and largely prevented the issue to begin with.
Posted: Mar 22nd 2011 1:10PM Gizzzymoe said
Was hacked on Rift a week ago. Still waiting to get my stuff back... really unhappy with the response time. All I recieved was a letter stating they were working on the issue, and then them explaining how they would handle the situation. But a week... and nothing else. Too bad the coin lock was added the next freaking day.
Posted: Mar 22nd 2011 1:36PM archer75 said
Ultimately protecting your account is your responsibility. People have no sense of computer and internet security.
There are the usual keyloggers that most people think about and scan for. A number of people fall for phising scams. But you are also thinking about issues that directly affect the game in which you play. Getting phished by emails that are about that particular game. Keyloggers about that particular game.
The thing is you can get keyloggers from places completely unrelated to the game. You can get phished from emails having nothing to do with the game.
The problem is people tend to use the same username and passwords all over the web. Or maybe they have a few they use. A forum you post on completely unrelated to gaming gets hacked, they now have your email, username and password and then they go to every site and game they can to see where it works at.
You really need to have unique usernames and passwords for every site. It's a lot to remember so you'll want to keep a secure list and use something like lastpass whenever possible. Try to have multiple email accounts for different types of sites. One for forums, one for shopping, one for gaming, etc.
It's a lot to keep track of but it's what you need to do these days.
There are the usual keyloggers that most people think about and scan for. A number of people fall for phising scams. But you are also thinking about issues that directly affect the game in which you play. Getting phished by emails that are about that particular game. Keyloggers about that particular game.
The thing is you can get keyloggers from places completely unrelated to the game. You can get phished from emails having nothing to do with the game.
The problem is people tend to use the same username and passwords all over the web. Or maybe they have a few they use. A forum you post on completely unrelated to gaming gets hacked, they now have your email, username and password and then they go to every site and game they can to see where it works at.
You really need to have unique usernames and passwords for every site. It's a lot to remember so you'll want to keep a secure list and use something like lastpass whenever possible. Try to have multiple email accounts for different types of sites. One for forums, one for shopping, one for gaming, etc.
It's a lot to keep track of but it's what you need to do these days.







