<?xml version="1.0"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd">
<channel>
<title>Massively</title>
<link>http://massively.joystiq.com</link>
<description>Massively</description>
<image>
<url>http://www.blogsmithmedia.com/http://massively.joystiq.com/media/feedlogo.gif</url>
<title>Massively</title>
<link>http://massively.joystiq.com</link>
</image>
<language>en-us</language>
<copyright>Copyright 2012 Weblogs, Inc. The contents of this feed are available for non-commercial use only.</copyright>
<generator>Blogsmith http://www.blogsmith.com/</generator><item><title><![CDATA[Order &amp; Chaos security compromised, accounts hacked]]></title><link>http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/</link><guid isPermaLink="true">http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/</guid><comments>http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/#comments</comments><description><![CDATA[<p>Filed under: <a href="http://massively.joystiq.com/category/fantasy/" rel="tag">Fantasy</a>, <a href="http://massively.joystiq.com/category/mmo-industry/" rel="tag">MMO industry</a>, <a href="http://massively.joystiq.com/category/news-items/" rel="tag">News items</a>, <a href="http://massively.joystiq.com/category/free-to-play/" rel="tag">Free-to-play</a>, <a href="http://massively.joystiq.com/category/mobile/" rel="tag">Mobile</a></p><div style="text-align: center;">
	<a href="http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/"><img alt="Order &amp; Chaos Online banner" src="http://www.blogcdn.com/massively.joystiq.com/media/2011/10/oc.jpg" /></a></div>
<div>
	Bad news for <em><a href="http://www.massively.com/tag/order-and-chaos">Order &amp; Chaos Online</a></em> players today. It would appear that the popular mobile MMO from <a href="http://www.massively.com/tag/gameloft">Gameloft</a> is suffering from some security issues resulting in a number of players' accounts being compromised.<br />
	<br />
	The issue seems to be stemming from two major holes in the game's security. There is reportedly an exploit with Gameloft's website which allows players to change another player's password, and usernames and passwords are sent between the client and server in plain text, which makes it a breeze for anyone with the smarts to run interception. Hopefully these issues will be fixed soon, but until then, stay tuned in the event that more develops.<br />
	<br />
	<strong> </strong>[Thanks to Andrew for the tip!]</div><p style="padding:5px;background:#ffffcc;border:1px solid #ffff99;clear:both;"><a href="http://massively.joystiq.com"><img src="http://massively.joystiq.com/media/feedlogo.gif" alt="Massively" style="float:left;padding:0 5px 5px 0;" /></a><a href="http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/">Order &amp; Chaos security compromised, accounts hacked</a> originally appeared on <a href="http://massively.joystiq.com">Massively</a> on Wed, 19 Oct 2011 15:00:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.<br style="clear:both;"></p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href="http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/forward/20085554/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/2011/10/19/order-and-chaos-security-compromised-accounts-hacked/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>f2p</category><category>free-to-play</category><category>gameloft</category><category>hack</category><category>hacked</category><category>mobile</category><category>order-and-chaos</category><category>order-and-chaos-online</category><category>security</category><category>security-compromise</category><category>security-issues</category><dc:creator><![CDATA[Matt Daniel]]></dc:creator><pubDate>Wed, 19 Oct 2011 15:00:00 EST</pubDate></item><item><title><![CDATA[City of Heroes offers a reminder on account security]]></title><link>http://massively.joystiq.com/2010/01/06/city-of-heroes-offers-a-reminder-on-account-security/</link><guid isPermaLink="true">http://massively.joystiq.com/2010/01/06/city-of-heroes-offers-a-reminder-on-account-security/</guid><comments>http://massively.joystiq.com/2010/01/06/city-of-heroes-offers-a-reminder-on-account-security/#comments</comments><description><![CDATA[<p>Filed under: <a href="http://massively.joystiq.com/category/super-hero/" rel="tag">Super-hero</a>, <a href="http://massively.joystiq.com/category/city-of-heroes/" rel="tag">City of Heroes</a>, <a href="http://massively.joystiq.com/category/culture/" rel="tag">Culture</a>, <a href="http://massively.joystiq.com/category/exploits/" rel="tag">Exploits</a>, <a href="http://massively.joystiq.com/category/rumors/" rel="tag">Rumors</a></p><div style="text-align: center;"><a href="http://www.cityofheroes.com"><img vspace="4" hspace="4" border="1" align="top" src="http://www.blogcdn.com/massively.joystiq.com/media/2010/01/coh-security-epl-106.jpg"  alt="" /></a></div>
<a href="http://www.ncsoft.com/global/">NCsoft</a> hasn't been having an easy start to the year, at least not in the eyes of security-minded players. The entire <a href="http://www.guildwars.com"><em>Guild Wars</em></a> security question recently came to a head with <a href="http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/#continued">suspicions and accusations</a> that the flaw was something wrong with <a href="http://massively.joystiq.com/tag/NCsoft/">NCsoft</a>'s account management, a black eye if ever there was one.  Of course, that raises questions about not just <a href="http://massively.joystiq.com/category/Guild-Wars/"><em>Guild Wars</em></a>, but any game under the company's aegis, which includes <a href="http://www.cityofheroes.com"><em>City of Heroes</em></a>.  So it should come as little surprise that <a href="http://www.cityofheroes.com/news/news_archive/reminder_about_account_securit.html">a reminder about account security</a> has recently been posted on the official site.<br />
<br />
The reminder itself is fairly standard boilerplate, reminding everyone to avoid giving out their account information to any other players, only log in from secure locations, and so forth.  It also addresses the issue at hand in a roundabout fashion, mentioning that they found no malicious workarounds after investigating "current claims."  However, the very next line mentions that they have added more robust logging and security procedures, which can lead to the obvious conspiracy theories.  With fewer items to be traded than many other games, <em><a href="http://massively.joystiq.com/category/City-of-Heroes/">City of Heroes</a></em> has a smidge more built-in security -- but a little extra reminder and caution never hurts.<p style="padding:5px;background:#ffffcc;border:1px solid #ffff99;clear:both;"><a href="http://massively.joystiq.com"><img src="http://massively.joystiq.com/media/feedlogo.gif" alt="Massively" style="float:left;padding:0 5px 5px 0;" /></a><a href="http://massively.joystiq.com/2010/01/06/city-of-heroes-offers-a-reminder-on-account-security/">City of Heroes offers a reminder on account security</a> originally appeared on <a href="http://massively.joystiq.com">Massively</a> on Wed, 06 Jan 2010 20:00:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.<br style="clear:both;"></p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href=http://www.cityofheroes.com/news/news_archive/reminder_about_account_securit.html>Read</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/2010/01/06/city-of-heroes-offers-a-reminder-on-account-security/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/forward/19305747/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/2010/01/06/city-of-heroes-offers-a-reminder-on-account-security/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>account-issues</category><category>account-security</category><category>city-of-heroes</category><category>city-of-villains</category><category>coh</category><category>cov</category><category>cox</category><category>exploits</category><category>guild-wars</category><category>gw</category><category>ncsoft</category><category>security-breach</category><category>security-issues</category><dc:creator><![CDATA[Eliot Lefebvre]]></dc:creator><pubDate>Wed, 06 Jan 2010 20:00:00 EST</pubDate></item><item><title><![CDATA[Potential smoking gun found for Guild Wars security issues]]></title><link>http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/</link><guid isPermaLink="true">http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/</guid><comments>http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/#comments</comments><description><![CDATA[<p>Filed under: <a href="http://massively.joystiq.com/category/fantasy/" rel="tag">Fantasy</a>, <a href="http://massively.joystiq.com/category/guild-wars/" rel="tag">Guild Wars</a>, <a href="http://massively.joystiq.com/category/exploits/" rel="tag">Exploits</a>, <a href="http://massively.joystiq.com/category/news-items/" rel="tag">News items</a>, <a href="http://massively.joystiq.com/category/rumors/" rel="tag">Rumors</a></p><div style="text-align: center;"><a href="http://guildwars.wikia.com/wiki/Locked_chest"><img hspace="4" border="1" align="top" vspace="4" alt="" src="http://www.blogcdn.com/massively.joystiq.com/media/2010/01/gw-smokinggun-epl-101.jpg" /></a></div>
It started as a surprise. <a href="http://www.guildwars.com"><em>Guild Wars</em></a> players reported suddenly finding themselves <a href="http://massively.joystiq.com/2009/11/30/guild-wars-account-security-issues-continue/">hacked</a>, their accounts cleaned out, no indication of what could have caused the problem. <a href="http://www.ncsoft.com/global/">NCsoft</a> and <a href="http://www.arena.net/">ArenaNet</a> offered suggestions, security safeguards, <a href="http://massively.joystiq.com/2009/12/23/ncsoft-taking-first-visible-steps-to-improve-security/">new measures being taken</a>, hints that the problem lay in a popular third-party website with an undisclosed name. But with the recent rash of problems that <a href="http://www.aiononline.com"><em>Aion</em></a> players have been having regarding security, new facts have begun coming to light, and they paint a picture that isn't pretty.<br />
<br />
Specifically, some players seem to be finding that <a href="http://www.guildwarsguru.com/forum/account-hackings-source-t10419779.html?s=ee7a3706fb5ee3b389eac505cc7383cc&amp;amp;">it doesn't take any skill to wind up hacking someone's account accidentally</a>. And all it takes is a few log-in attempts to find yourself with access to someone's account name, password, and billing information for all of a player's <a href="http://massively.joystiq.com/tag/NCsoft/">NCsoft</a> games.<p><a href="http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/" rel="bookmark">Continue reading <em>Potential smoking gun found for Guild Wars security issues</em></a></p><p style="padding:5px;background:#ffffcc;border:1px solid #ffff99;clear:both;"><a href="http://massively.joystiq.com"><img src="http://massively.joystiq.com/media/feedlogo.gif" alt="Massively" style="float:left;padding:0 5px 5px 0;" /></a><a href="http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/">Potential smoking gun found for Guild Wars security issues</a> originally appeared on <a href="http://massively.joystiq.com">Massively</a> on Sat, 02 Jan 2010 10:00:00 EST.  Please see our <a href="http://www.weblogsinc.com/feed-terms/">terms for use of feeds</a>.<br style="clear:both;"></p><h6 style="clear: both; padding: 8px 0 0 0; height: 2px; font-size: 1px; border: 0; margin: 0; padding: 0;"></h6><a href=http://www.guildwarsguru.com/forum/account-hackings-source-t10419779.html?s=ee7a3706fb5ee3b389eac505cc7383cc&amp;>Read</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/" rel="bookmark" title="Permanent link to this entry">Permalink</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/forward/19300183/" title="Send this entry to a friend via email">Email this</a>&nbsp;|&nbsp;<a href="http://massively.joystiq.com/2010/01/02/potential-smoking-gun-found-for-guild-wars-security-issues/#comments" title="View reader comments on this entry">Comments</a>]]></description><category>account-exploits</category><category>account-security</category><category>aion</category><category>arenanet</category><category>breaking-news</category><category>gaile-gray</category><category>guild-wars</category><category>gw</category><category>hacking</category><category>ncsoft</category><category>regina-buenaobra</category><category>security-breach</category><category>security-issues</category><dc:creator><![CDATA[Eliot Lefebvre]]></dc:creator><pubDate>Sat, 02 Jan 2010 10:00:00 EST</pubDate></item></channel></rss>
