poe prone to hack???

As far as I'm aware, GGG has never been compromised...
Its when a big 3rd party site gets compromised, then all of a sudden a max influx of 'hacked' players start spamming GGG has been breached.

sigh...

anyway, ancient thread?!

This is a thread necro.

Anyway, the state of PoE today is that your account can only be hacked if the hacker compromises both the password to PoE **and** your email password. If this has happened, you have either 1) followed bad security practices and used an email password that matches your PoE account or is otherwise easily guessable, or 2) your local computer has been compromised, and the hacker used a keylogger to discover both your passwords.

In the latter event, what you want to do is get your original OS DVD, and reinstall the system from scratch. Make sure to patch to current and turn on automatic updates.

If you have shared storage of any type, purge any .exe files that aren't from a trusted commercial source.

The keylogger got installed somehow.

Finally, you may wish to check out Sandboxie.

--C

It would be a necro if I didnt do this two days ago.

Other than that, I agree.

"

Nokio3 wrote:

Still today one guy in my friendlist in game got hacked he played the game for a year now and got all is good stolen.

User or PoE not enough secure...? mhmmmmmmm

There is someone/thing acting from China (or at least the last IP they act is from there) that uses enormously long lists of email/possible password and tries them on a massive basis.

So yes, user fault.

China has been brute forcing passwords for 20 years
The point is the pass doesnt matter.

I didnt give them one key piece of information, my email pass.
Low and behold, im unhacked.

"

China has been brute forcing passwords for 20 years... the pass doesn't matter

ROFL. A wee bit exaggerated don't you think? Use a 14+ character complex password on your mail account involving at least 2 special characters, at least 4 numbers, and at least 8 other non-dictionary word letters. "China" won't be "brute forcing" it any time soon, no.

To wit: this level of security is within the user's control.

--C

The thread of hacked accounts would be far bigger if the GGG servers really got account hacked. If you got hacked it's your own fault. I worry for those because if they are that easy to hack i wouldnt want to know if the are doing far more important things on that computer then just a game.

"

Faerindel wrote:

"

Nokio3 wrote:

Still today one guy in my friendlist in game got hacked he played the game for a year now and got all is good stolen.

User or PoE not enough secure...? mhmmmmmmm

There is someone/thing acting from China (or at least the last IP they act is from there) that uses enormously long lists of email/possible password and tries them on a massive basis.

So yes, user fault.

No, this is exactly why it's not the user's fault. PoE needs additional ways to prevent someone who manages to bruteforce their way in, from actually being able to do anything.

Is there not a legal thing-a-ma-bob that would require GGG to publicly announce a compromise of its security?