Massive hack last night Why it must be a bug

"

Hotcooler wrote:

Well I was on HC, now I have no characters and no moneys ;) So... I'd say they did not differentiate sc and hc.

Then I guess it is purely randomized.

"

Thyrandor wrote:

I think I don't get what you mean by "security measures". What exactly would you want to see implemented by GGG?

What I would like to see, and what should've been in the game before open beta even started, is the simple thing that if you log in from different IP, you need to punch in the code sent on your email. Or at least have notification that someone logged in from different ip. That stuff in no rocket science.

And as for char deletetions, have something like if you delete your char after a certain level, say after merciless, you char is not immediately deleted but linger in there for couple days grayed out with a restore button (i.e. not delete immediately, but place in a queue).

Both were done in other places for years and are not that hard to do.

"

Hotcooler wrote:

"

Thyrandor wrote:

I think I don't get what you mean by "security measures". What exactly would you want to see implemented by GGG?

What I would like to see, and what should've been in the game before open beta even started, is the simple thing that if you log in from different IP, you need to punch in the code sent on your email. Or at least have notification that someone logged in from different ip. That stuff in no rocket science.

And as for char deletetions, have something like if you delete your char after a certain level, say after merciless, you char is not immediately deleted but linger in there for couple days grayed out with a restore button (i.e. not delete immediately, but place in a queue).

Yeah, they're adding that now, but I don't think it will help much. People with compromised routers or computers would still spill their credentials everywhere, and the auto-leveling services would just ask for the confirmation email. It would stop most phishing attacks. So would the exit page they're adding to the forum links.

A Trash bin for characters is a good idea, probably in the suggestions forum, but go ahead and add that. It would have to manage the character slot limit somehow.

Still waiting for an official reply from GGG.

Once again, This is not our fault. Something has been breached.

Why stay quiet and not give us a quick comment?

It's impossible that hundreds of people get hacked in the same night and we all done something wrong..

"

Struyk wrote:

Like I said, few weeks ago there was a bug that could let you login on someone else's account with your id+password I think a similar replicated breach happened. I think the hacker(s) dont need our passwords to log in.

Here https://www.pathofexile.com/forum/view-thread/78388/page/1
maybe it is related to the hacking

My stance on the issue right now, wait and see what happens, if no chars restored, that is shit... since that means that I lost quite some time from my life for nothing, and that stinks... But at least I need to be reassured that that wont happen again and they are doing something asap. So basically I'll wait for the race and see what happens in the meantime.

"

Hotcooler wrote:

My stance on the issue right now, wait and see what happens, if no chars restored, that is shit... since that means that I lost quite some time from my life for nothing, and that stinks... But at least I need to be reassured that that wont happen again and they are doing something asap. So basically I'll wait for the race and see what happens in the meantime.

Exactly, I don't mind to much about the fact that it happened. But I want to be assured that this wont happen again.

Currently we got 0 communication with GGG which really stinks :(

That's not true.

GGG has said repeatedly that this is the players' fault, and that nothing will be restored, period. I understand their stance, and I accept it. Doesn't mean I like it :).

"

master_axe2 wrote:

That's not true.

GGG has said repeatedly that this is the players' fault, and that nothing will be restored, period. I understand their stance, and I accept it. Doesn't mean I like it :).

What's so hard to understand that it isn't the players fault?

Not only my orbs are gone, all the valued items in my stash are gone like a 5Link Astral plate, 6 soc thicket bows(ilvl 70~) etc. Definitely a security breach/hacker, not a bug.