Hacked Accounts

If you get hacked, I suggest participating in the ladder events (weekly, maybe monthly soon), everyone starts from a fresh scratch in those. Yes they are hardcore, but it's a new economy and an even playing field.

Before participating in these races... Reformat your PC, AND make a new good password, AND a new email WITH a DIFFERENT good password. If your account still gets stolen, you are probably using internet explorer/visiting sites/downloading things you shouldn't.

I tried to login now, but I get a message saying my password is wrong. Yes, im guily of usin the 'save password' button. Hacked?

edit: strange, now I got to log in.

Just allow for real multifactor authentification (Google Authenticator for example) with a "reset" using a (long) reset-code we can keep in a different location and / or make it possible to lock the login to a country. This will help against all kinds of attacks, even against keyloggers/clipboard watchers.

"

barbzilla wrote:

If they followed the line they can delete the stolen goods and return the non stolen goods, as well as being able to ban the thieves.

Chris outlined why they can't do this in the OP:

"

Chris wrote:

If our policy was to restore in a way that duplicated the items, this would be a free duplication method that people could easily use. If our policy was to take the items back from the attacker without duplicating them, then this would result in a free tradehack that anyone could use. In either case, the economy would be destroyed.

It's not just people abusing trade hacks either - what if someone stole an item and then you traded with that person. Should you then lose the item you traded for when the original owner wants it back? If so, are you expecting whatever items you traded for it to be returned to you? What if they were currency and have already been used, should they then go and roll back the items that the currency were used on?

Even if they were able to trace this spider web of trades and currency rolls after a theft (and I would be highly surprised if they could), it would mean that if you had traded with any other person *thief or not* your trades and item crafting could be rolled back at any point. That is what would completely destroy the economy.

On the other hand, if you know of a way around those problems feel free to share it.

"

tvari wrote:

"

barbzilla wrote:

If they followed the line they can delete the stolen goods and return the non stolen goods, as well as being able to ban the thieves.

Chris outlined why they can't do this in the OP:

"

Chris wrote:

If our policy was to restore in a way that duplicated the items, this would be a free duplication method that people could easily use. If our policy was to take the items back from the attacker without duplicating them, then this would result in a free tradehack that anyone could use. In either case, the economy would be destroyed.

It's not just people abusing trade hacks either - what if someone stole an item and then you traded with that person. Should you then lose the item you traded for when the original owner wants it back? If so, are you expecting whatever items you traded for it to be returned to you? What if they were currency and have already been used, should they then go and roll back the items that the currency were used on?

Even if they were able to trace this spider web of trades and currency rolls after a theft (and I would be highly surprised if they could), it would mean that if you had traded with any other person *thief or not* your trades and item crafting could be rolled back at any point. That is what would completely destroy the economy.

On the other hand, if you know of a way around those problems feel free to share it.

I am actually speaking (emailing) with Chris on this subject as of current. The main thing is, it isn't just a matter of the in game economy, it is also a matter of customer support. GGG has always been Pro-Gamer since the beginning, unlike other larger companies. So this is like a huge black mark on that, otherwise, pristine face. Like you said, it is also about the money though. Dealing with all of these complaints and trying to trace back all of the items and currency through all of the trades is impossible (financially speaking). So we are stuck on an edge, one side he loses customers and money due to hackers, the other he loses money due to excessive customer support bills.

The only solution I could come up with is a one time token for each account that allows for one restore. This goes back to a weekly backup of the account so nobody has to worry about keeping track of what everyone has at all times and keeping a back log of the trades. Once a player burns that token to get a restore, his account no longer backs up and he is live only, to save on server space.

Since they increased the security for PoE it is going to be a bit harder for accounts to get compromised without having full access to the email of the account in question. If the player is allowing both his account and email to be compromised that is obviously his/her security issue, and not some in game security issue. So we are only really dealing with this big security breach that went down prior to this point.

I also pointed out that he can see the account that was traded to on the date of the mystery IP's connection and find the actually account transferred to, he should just ban that account which leaves all of the items on that account frozen and out of the economy.

Yes there will be some inflation due to duplication, but at least he isn't losing potential revenue due to an outside influence. This really isn't a simple issue, and is way more complex than just the game economy.

Giving a limited number of refunds isn't as easy as for Diablo 3 because the game is free and so people would just create new accounts.

1. Create new account
2. Give valuable items/currency to new account
3. "Steal" stuff from the new account to another account
4. Claim refund
5. Repeat

"

Boroness wrote:

Giving a limited number of refunds isn't as easy as for Diablo 3 because the game is free and so people would just create new accounts.

1. Create new account
2. Give valuable items/currency to new account
3. "Steal" stuff from the new account to another account
4. Claim refund
5. Repeat

You still have to farm said stuff, though I get your meaning. Still the time involved to level a character to farm items at any real quantity and then you get to dupe them once, it just doesn't pay out as well as just setting up farming bots, especially since this is F2P. I highly doubt this will become an issue, but to appease that you can do an IP range check after each refund to see if anyone is abusing the system.

Also: Did Diablo start limiting refunds? I haven't messed around much with 3

If someone's account is compromised from a location on another continent from where they normally connect, why not delete the stolen items entirely? No restores. You're SoL, but so is the thief. Item theft for monetary gain must be de-incentivized.

I havn't logged in awhile. decided to play today and find out my account was logged in from elsewhere so I look in my stash and it is emptied of all materials aside from identify scrolls and portal scrolls. I can't even get my unlock code.


Talk about a buzz kill for wanting to get back into this again.

"

Steamrice wrote:

I havn't logged in awhile. decided to play today and find out my account was logged in from elsewhere so I look in my stash and it is emptied of all materials aside from identify scrolls and portal scrolls. I can't even get my unlock code.


Talk about a buzz kill for wanting to get back into this again.

I feel your pain m8. I hope you didn't lose too much. As for the code, email support, they are awesome and try to get back to you very quickly.