The New SDub: Haxed

Sdub121 · **Joined:** Apr 2006 **Posts:** 288 **Location:** New York

Well i got bruteforced

Ahh Well

Some Nub Accnt PMs me,Giovina, Has my sh!t

G/L To all
G/L To all my friends in Soju. I will be in vent.
Here i come WoW

Yea Boi !!

canakin · **Posted:** Sat Dec 16, 2006 8:33 am

nothing to say.. sorry for you mate good luck to you at your new game...

it sucks to see how someone quits Sro for this reason or another everyday...

Key-J · **Posted:** Sat Dec 16, 2006 8:35 am

O come on dude, dont give up just yet. You still have your Char. and im sure there are people who will want to give you some money to help you out.

Just change the password, there is still hope

YEAH BOI!

Sdub121 · **Joined:** Apr 2006 **Posts:** 288 **Location:** New York

dude he told me himself...It was one of the hardest Accnt passes he ever haxed...but he eventually got it..in 2 weeks he said....so i can't make any harder then it was/is....he knows my user name so .....

[Pokealeaf] · **Joined:** Dec 2006 **Posts:** 194 **Location:**

Wow man, that is pretty sad... And you just reached lvl 64! Aw... Best of luck on WoW =)

Black_Mamba · **Joined:** Jan 2006 **Posts:** 2888 **Location:**

How did he know your username though? I see the hackers name in the whispers box, did you ss them talking to you? How come they didn't give you murder status too, npc your bought pet or even change the pw?

I always use maximum pw's of random letters and numbers and I change it every 2-3 days.

CodeOfSilence · **Joined:** Jul 2006 **Posts:** 440 **Location:**

how come he didnt take all those pots? those cost gold too. i bet all your stuff is in storage lol.

Priam · **Posted:** Sat Dec 16, 2006 1:40 pm

CodeOfSilence wrote:

how come he didnt take all those pots? those cost gold too. i bet all your stuff is in storage lol.

now that's a retarded thing to say >.<

Draquish · **Joined:** Mar 2006 **Posts:** 6423 **Location:** ____

I feel ur pain >_< @ least you have a chance to start over from 0......my hacker took all my stuff AND my account!! :banghead:

Jay · **Posted:** Sat Dec 16, 2006 1:49 pm

You still have your acc, and you have your squirrel left to? When my friends & family got hacked they even npced their monkey/wolf. and one of my friends got their acc sold.. =/ You still have yours so your not doing to bad, just rebuild your equip and continue playing, don't give up, you can always get back on track.

Sdub121 · **Joined:** Apr 2006 **Posts:** 288 **Location:** New York

Yeah Thnx all....but.....It's like i was on my way out the door...the hacker just pushed me through...So anyone who wants my accnt....pm me

[SD]Kratos · **Joined:** Apr 2006 **Posts:** 4787 **Location:**

I hate hackers :/ Well gluck in WoW, if you choose wow

nightbloom · **Joined:** Jan 2006 **Posts:** 5492 **Location:**

This new hacking trend disheartens me a great deal. I do not wish it upon ppl I despise.

JoyMax appears to not believe hacking is possible unless you bot or let someone know your user name but judging from experience and the mass hackings of Greece, I doubt that is true.

I cant say you were ever one of my favorite ppl SDub, but Im sorry you got hacked. If you need any help, drop me a line here. I couldnt do a lot, but I can at least pitch in.

i_hydrate_i · **Joined:** Jun 2006 **Posts:** 228 **Location:**

that suks man..u did change ur pass after letting some people on right? i know krais has become emo as of late and was kicked from guild and i know u let him on ur id once hopefully its not one of the people u have trusted in teh past cause lookin at ur inventory they didnt do anything REALLY abd like level 15 pk or sell squirel

EliteHealer · **Joined:** Dec 2006 **Posts:** 116 **Location:**

He bruteforced your pw in two weeks? I'm sorry to say it, but then your pw was probably too easy and probably made up of real words.

26 letters x 2 (upper and lower case) + 10 digits = 62 possibilities/letter

A 5 letter/digit pw will have 62 x 62 x 62 x 62 x 62 possible combinations, that's 916.13 million possibilities. With a computer checking 10,000 combinations per second, it would take 91,613 seconds, or 25 hours, to try all combinations.

A 6 letter pw will take 1578 hours, or 65.7 days.

etc.

So unless your pw was very short, I'm guessing he used word lists to try different combinations of words.

Progress · **Joined:** Jun 2006 **Posts:** 304 **Location:** Earth

Something isnt right with his claims.

You just dont bruteforce a password via a network connection.

So i suspect one or more of the following is true:

1. His password wasnt strong, even though he thought it was.
2. It was a word found in a dictionary.
3. He got keylogged.

Brute forcing takes a very long time. I dont think most of you really understand how many combinations we are talking about.

But since its so easy for you, why dont you "hack" the following MD5 string with a speed of 100 tries per second (this is probably what you COULD get via a WAN):

"5fa8ee23ec1b63401403e8d0eb8c31db"

That would probably take you longer than 5000 years.

zphantom · **Joined:** Jun 2006 **Posts:** 251

It seems bruteforce is unlikely, it's more improbable than winning the lottery. A lottery's 6 numbers in 54 pales compared to a game ID and long PW with symbols from 26 letters + 10 numbers.

6 from 54 numbers = 18.6 billion possibilities

6 from 36 letters+numbers = 2.2 billion possibilities
7 from 36 letters+numbers = 78.4 billion possibilities
10 from 36 letters+numbers = 36^10 = 3,656 trillion possibilities

Changing your password will not lessen the chance of being bruteforce either because it is still one password in zillions. It only helps to prevent previous password leaks like if the rumor is true about trade windows and party requests.

The hacker (not likely bruteforcer) first has to get your login ID.

The easiest way to get your ID known is posting at the main forums (http://www.silkroadonline.net). The second way is if you use your SAME GAME LOGIN ID as your FORUM ID (SRF or SRT or whichever). Rumors are rumors (like trade window and party requests), it isn't likely true. People just need something to blame it on and that seems the most likely (the only) player interaction that caused a security leak.

How the password is obtained is a mystery unless it is easy to guess, leaked, or keylogged (most likely through bots).

Your EMAIL should be changed to one that is unused and unknown to everyone else. Most people give others their contact information, their EMAIL, which can be used to change your password. Once a person has your LOGIN ID and your EMAIL (or if your LOGIN is the same as your EMAIL), the hacker will be tipped off with the secret answer question.

Priam · **Posted:** Sat Dec 16, 2006 6:42 pm

w/e!

On thing still remains, he got hacked. Which is kinda flarked up.

Sdub121 · **Joined:** Apr 2006 **Posts:** 288 **Location:** New York

The point being....I got haked...And basically Im Done....My pass was 12 letters and numbers long...Completely random..no meaning...consisted of 4 numbers and 8 letters...nutthin less......
I got Bruteforced What do you want....And the only peeps who knew my sh!t was ImpeC,Krais, loather, Memphist, and winterNightS...And i nkow im gunna get rapped on bout that but ....I can say 100% that not one of them would ever run my shit like that....Although I do find it starnge that i wasnt pk...and monkey, skill realocation, potions, scrolls were all still there...
Iono...All i gotta say is...Im bout to get laid tonite...Huge party on Gold St. 900pm Utica New york....3$ admission or a rack at the door...

Yea Boi !!

[SD]Master_Wong · **Posted:** Sat Dec 16, 2006 9:39 pm

zphantom wrote:

It seems bruteforce is unlikely, it's more improbable than winning the lottery. A lottery's 6 numbers in 54 pales compared to a game ID and long PW with symbols from 26 letters + 10 numbers.

6 from 54 numbers = 18.6 billion possibilities

6 from 36 letters+numbers = 2.2 billion possibilities
7 from 36 letters+numbers = 78.4 billion possibilities
10 from 36 letters+numbers = 36^10 = 3,656 trillion possibilities

Changing your password will not lessen the chance of being bruteforce either because it is still one password in zillions. It only helps to prevent previous password leaks like if the rumor is true about trade windows and party requests.

The hacker (not likely bruteforcer) first has to get your login ID.

The easiest way to get your ID known is posting at the main forums (http://www.silkroadonline.net). The second way is if you use your SAME GAME LOGIN ID as your FORUM ID (SRF or SRT or whichever). Rumors are rumors (like trade window and party requests), it isn't likely true. People just need something to blame it on and that seems the most likely (the only) player interaction that caused a security leak.

How the password is obtained is a mystery unless it is easy to guess, leaked, or keylogged (most likely through bots).

Your EMAIL should be changed to one that is unused and unknown to everyone else. Most people give others their contact information, their EMAIL, which can be used to change your password. Once a person has your LOGIN ID and your EMAIL (or if your LOGIN is the same as your EMAIL), the hacker will be tipped off with the secret answer question.

and where does it state it is impossible?

i never liked him but its not funny to get hacked

Sdub121 · **Joined:** Apr 2006 **Posts:** 288 **Location:** New York

XMoshe · **Posted:** Sun Dec 17, 2006 12:03 am

Man that sux dude =( Dont give up on your account, get a new pw and start over..

.

Man, sorry to hear it

Innovacious · **Joined:** Sep 2006 **Posts:** 2446 **Location:**

You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

khang · **Joined:** Sep 2006 **Posts:** 926 **Location:**

mate - as much as i want your account... i must ask u not to give up and to carry on, giving up means that u forfeit and he wins... we all know jms are pain in the ass but we still must face it.. it's simply part of life.

i hope that u getting hack was not worthless.. perhaps it was faith and it was saying silkroad simply suckk.,....

oo yea on the note side... ..... em hard for me

n use protection

Drew_Benton · **Joined:** Oct 2006 **Posts:** 639 **Location:** Texas

Innovacious wrote:

You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

I seriously hope thats not a "password".....

http://www.silkroadforums.com/viewtopic.php?p=247121&highlight=#247121

khang · **Joined:** Sep 2006 **Posts:** 926 **Location:**

wats the link for?

n sdub what i gotta do for account

Sdub121 · **Joined:** Apr 2006 **Posts:** 288 **Location:** New York

Innovacious wrote:

You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

Yeah ti is butt i changed it n e ways...So u dont know my username

Drew_Benton · **Joined:** Oct 2006 **Posts:** 639 **Location:** Texas

Sdub121 wrote:

Innovacious wrote:

You censored the random message on the last picture, but you didnt on the picture before. you might wanna fix that.

Yeah ti is butt i changed it n e ways...So u dont know my username

Please read the link I posted

Draquish · **Joined:** Mar 2006 **Posts:** 6423 **Location:** ____

I tested something.

If I had the right bruteforce program I could've gotten like 10 accnts today....if you don;t believe me.... Hey Innovacious, whats ur father's middle name?!?!

Scary. I know. :shock:

khang · **Joined:** Sep 2006 **Posts:** 926 **Location:**

using wat software?

Silkroad Online Forums

The New SDub: Haxed

Who is online