Joymax Site Bug again.. Be Carefull !!!!

.curve · **Posted:** Sun Jan 16, 2011 8:50 am

Jadekiss wrote:

.curve wrote:

kontroversy wrote:

This bug only works if you are an idiot...

Dont give anyone your login name AND password AND email...and you have nothing to worry about. Not sure why anyone would do that.

This.

Plus, with your id + password + secret answer, he could easily brute force your account password. Doesn't help that the majority of the SRO population are morons with passwords like nukerlol123

I truly believe that anyone who gets "hacked" from this deserves it.

Sometimes.. i really think that the Majority of this community is retarded lol
You are saying that nobody would ever sell his account via ebay or whatever.. so only those ppl who are stupid got hack by this bug..
but did you ever thing of non stupid person who just bought an account and got hacked due this method ?
That person isnt stupid at aöö cause for a long period befor this exploit came out.. it was safe to buy accounts..

This has nothing to do with the stupidness of the person..
So he doesnt deserve if.. some on you guys are really ignorant morons

Selling/buying accounts is illegal, so they deserve to get "hacked" because of it.

Bukakke · **Posted:** Sun Jan 16, 2011 8:57 am

How is it a bug if you're GIVING someone ALL of your information?

Jadekiss · **Posted:** Sun Jan 16, 2011 10:26 am

Bukakke wrote:

How is it a bug if you're GIVING someone ALL of your information?

You still dont get it do you ?

"After you fill in that information on an email verified account you need to access your email and enter a specific code that get sent to you, the bug is that you can bypass it and go directly to the password change page.
You can always access your account back, since you can change the password again due to the email verification but you will have an empty char. "

*BlackFox · **Joined:** Sep 2008 **Posts:** 7923 **Location:**

Well, at least you warned us.. lulz
And the solution to this is so damn simple. Just report it to JOYMAX!

Btw:

kontroversy wrote:

Dont give anyone your login name AND password AND email.

QFT

.curve · **Posted:** Sun Jan 16, 2011 6:14 pm

Jadekiss wrote:

"After you fill in that information on an email verified account you need to access your email and enter a specific code that get sent to you, the bug is that you can bypass it and go directly to the password change page.
You can always access your account back, since you can change the password again due to the email verification but you will have an empty char. "

I want to reiterate that if you GIVE someone else all that information, that's not being hacked.

XMoshe · **Posted:** Sun Jan 16, 2011 8:06 pm

He's not only talking about himself, he's just warning you people that if they find out your stuff they can also change your pw, even on a verified account. >.>

Yani · **Joined:** Aug 2009 **Posts:** 110 **Location:** Georgia

lol ever though of this ?

Think it like this , emulators are built from packet sniffing the data being sent from client to server and vice versa.

Well ever though that websites can also be sniffed. Even though some datas are encrypted , it is possible to de-encrypt and just get the data you basically need. The site system sends the generated code to your email. Sniff it while its being processed and you can achieve the data without even going to the email.

* PS: That was just an idea of how this "bug" could be possibly true. Thats all.

XesoS · **Posted:** Thu Jan 20, 2011 10:04 pm

Yani wrote:

lol ever though of this ?

Think it like this , emulators are built from packet sniffing the data being sent from client to server and vice versa.

Well ever though that websites can also be sniffed. Even though some datas are encrypted , it is possible to de-encrypt and just get the data you basically need. The site system sends the generated code to your email. Sniff it while its being processed and you can achieve the data without even going to the email.

* PS: That was just an idea of how this "bug" could be possibly true. Thats all.

offtopic : Location : Georgia ? :p State or Country ?

Yani · **Joined:** Aug 2009 **Posts:** 110 **Location:** Georgia

state...

apan · **Joined:** Feb 2009 **Posts:** 958 **Location:**

I don't see a problem here?

Just don't give him the info lol ^^

apan · **Joined:** Feb 2009 **Posts:** 958 **Location:**

Jadekiss wrote:

bryanvan wrote:

Doesn't work. I tryed to get my hacked account back. Just redirects me to the email verification thingy.

Lol ! Of course it doesnt work.. because you dont know how the bug works...
I dont know it too.. but there is one...

There is no "bug".

The thing is that all you need to know to change the PW is ID+SA+EMAIL. There is nothing strange here, except maybe the security on Joymax's site. But there is NO bug!

Silkroad Online Forums

Joymax Site Bug again.. Be Carefull !!!!

Who is online