I was hacked

[glenh92 0]

I just made my account a few days ago, and your servers were already compromised giving away my password. Can you please recover my account?

[glenh92 0]

bump. please help.

[Erjh8765 19]

57 minutes ago, glenh92 said:

I just made my account a few days ago, and your servers were already compromised giving away my password. Can you please recover my account?

No, you have it wrong. Servers aren't compromised. You are a retard for not implementing two-factor authentication in your account. 99% of the playerbase aren't hacked. You just fail in account security.

[glenh92 0]

Hahaha, look at this child. Two factor authorization is on my account, and I am once again having issues.

[The Fapmonsoon 14]

it confuses me when i see people claim that the 2fa is on their account but they got hacked still. Wouldnt that mean that the hacker would have to be in the house? Since it IP locks??

[zincer 0]

i have same problem =(

[Shiamorah 20]

Your account can't be hacked if you have 2-factor authentication. Go to the Elysium control panel, and do recover account, if your account is compromised. But they can't log into your account if you have 2FA.

[tylerpol 1]

Damn, can't believe all the pointless vitriol in this thread/community. 

"Ohhhh some guy got his account hacked!? I know, I'll hop on the thread and call him names and tell him that had he been as smart as I am, he would have not been hacked! Boy it feels good to make fun of people who have something crappy happen to them!"

 

Seriously though, I had the same thing happen to me, it sucks but there's nothing the Elysium folks will do. My post didn't even say anything negative about the devs or demand they fix it like yours did, and people still flipped their shit because they found an example of someone not signing up for 2fa as quickly as they did. 

[Shiamorah 20]

I understand the frustration involved with losing items or your account temporarily. The issue here is very clear, however. How can you prove to Elysium staff you were actually hacked? With any degree of tolerance that the staff give to the community, there is also a degree of exploitation. Allow me to explain.

Say if you can prove your account was compromised and your items were lost, then the staff here would return all of your items. 

Now, say that I am a malicious player, looking to exploit this.

I give my friend my password, he gets rid of all of my gold/items to his level 1 account and changes my password. I claim I was hacked, they return the gold and items..?

He could easily from there just continue to send these gold/items to other accounts until it becomes a serious hassle tracking it down. Now, what is there to say I can't just use a VPN and not even have a friend, but do everything myself?

While it sucks to lose your items from a compromised account, the rules they have in place are reasonable ones. They provide you with the best possible solution, which is 2-factor authentication. This doesn't prevent your account from being compromised, but it does prevent you from losing your items. They literally cannot take your items unless they somehow have your phone as well. They frequently announce this feature via forums and server messages. At this point, it is no ones fault but the players.

[tylerpol 1]

I think using the phrase "your fault" is inaccurate though. Like I pointed out in my thread, if your house gets robbed, it's not like it's your fault because you don't have armed guards.

 

Saying it is the player's fault because they didn't sign up for 2fa is kind of a strange way to apply blame here. I have a secure password on my account and I've never bought gold or given my password out to anyone. I'm also an IT consultant and travel every week for work, so my IP address changes multiple times a week. To not have to deal with the pain of the additional login step for 2fa each time my IP change, I never signed up for it. I had no reason to think my pw could have been taken (I still have no idea how someone got it). In a quite formal sense, I had no need for 2fa on my dumb little WoW account unless my account password was somehow obtained through another site's data breach or if Elysium got hacked. In my situation then, it makes no sense to me when you say that it's my fault I got hacked. How is it my fault when I had no role in causing it? Every god damn thing can be improved with hindsight. It didn't mean every person who performs a suboptimal is at fault for everything not optimal that happens to them. You either have a very poorly thought out definition of blame and fault or you're infallible in every way and have never encountered failure. My money is on the former.

Edited February 2, 2017 by tylerpol
Typo

[Shiamorah 20]

10 minutes ago, tylerpol said:

I think using the phrase "your fault" is inaccurate though. Like I pointed out in my thread, if your house gets robbed, it's not like it's your fault because you don't have armed guards.

 

Saying it is the player's fault because they didn't sign up for 2fa is kind of a strange way to apply blame here. I have a secure password on my account and I've never bought gold or given my password out to anyone. I'm also an IT consultant and travel every week for work, so my IP address changes multiple times a week. To not have to deal with the game of the additional login step for 2fa each time my IP change, I never signed up for it. I had no reason to think my pw could have been taken (I still have no idea how someone got it). In a quite formal sense, I had no need for 2fa on my dumb little WoW account unless my account password was somehow obtained through another site's data breach or if Elysium got hacked. In my situation then, it makes no sense to me when you say that it's my fault I got hacked. How is it my fault when I had no role in causing it? Every god damn thing can be improved with hindsight. It didn't mean every person who performs a suboptimal is at fault for everything not optimal that happens to them. You either have a very poorly thought out definition of blame and fault or you're infallible in every way and have never encountered failure. My money is on the former.

Fault is on the player after staff announce very openly the possibility of account compromise, and players inability to react on it. A more accurate example of this would be the police informing you that there has been a series of breakins in your neighborhood and recommendation to lock your doors, and then you proceed to keep your doors unlocked. They can't force you to take steps to prevent your account from being compromised. They can only suggest to you and provide you with means to prevent this, which they have. Beyond that, there is literally nothing they can do. 

That is why it is the players fault, the bottom line is that it is 100% not the staffs fault that accounts are compromised. Their database is secure. If you are an IT consultant, you should understand your password is only as secure as much as you trust any website you use it on. In this case, there were websites unaffiliated to Elysium which were compromised, which is how accounts on Elysium are now being compromised. People tend to use the same passwords, which is why this is a problem. 

To suggest it is Elysium's fault in causing your account to be hacked is ridiculous. It is likely you used the same password as you did in another server. The plain and simple fact here, the basic logic, is that a majority of players go uncompromised, because they take standard and suggested procedures to prevent this. When the staff say "Hey a database has been compromised on an unrelated WoW server, you should change your password and register 2FA so even if your password is compromised, you won't lose anything", you should probably listen to it.

Edited February 2, 2017 by Shiamorah

[tylerpol 1]

Can you show me where I said or even implied that my account hacking was Elysium's fault?

 

I never said that. This is what people on my other thread did too. You can't handle an argument with nuance, so you allege that I'm making a stupid argument that I never actually made because it's easier to prove the dumb argument wrong than it is to actually formulate a response that addresses what I said. 

 

To me, neither myself nor Elysium is to blame here. Again, I didn't sign up for 2fa, but I had very good reasons to think I didn't need it. I don't blame myself or Elysium, I blame the hacker for fuck's sake. Why would you assume otherwise? It's like you're just looking for disagreement where none exists.

[Shiamorah 20]

Just now, tylerpol said:

Can you show me where I said or even implied that my account hacking was Elysium's fault?

 

I never said that. This is what people on my other thread did too. You can't handle an argument with nuance, so you allege that I'm making a stupid argument that I never actually made because it's easier to prove the dumb argument wrong than it is to actually formulate a response that addresses what I said. 

 

To me, neither myself nor Elysium is to blame here. Again, I didn't sign up for 2fa, but I had very good reasons to think I didn't need it. I don't blame myself or Elysium, I blame the hacker for fuck's sake. Why would you assume otherwise? It's like you're just looking for disagreement where none exists.

You literally said " it sucks but there's nothing the Elysium folks will do". If you don't know how that associates blame, then I don't know what to tell you.

[tylerpol 1]

Lol what? They won't do anything, that's all I said. That's a fact. It's unfortunate for me that they won't. I understand why they won't, but they still won't. Your interpretive skills are suspect man.

[Shiamorah 20]

ok

[Church420 0]

"Change your password often via the ingame command .account password #old #new #new"

Enable 2FA etc.

 

They literally tell you to do this while your playing in game to stop people from being "hacked"