Official Everybody Edits Forums

Do you think I could just leave this part blank and it'd be okay? We're just going to replace the whole thing with a header image anyway, right?

You are not logged in.

Advertisement

Hello, visitor! These forums are run off of the revenue generated from these ads. If you'd like to support us, please whitelist us or consider donating:

#26 2019-03-24 03:13:05

2B55B5G TNG
Member
From: Levitation Planet
Joined: 2016-08-27
Posts: 1,173

Re: Recent Events & Accounts Restored!

Eh maybe I’ll still play EE. Idc my social media getting hacked or my own information getting spread. As long as my life doesn’t have risk it’s fine


6vgEiC7.png

Offline

Wooted by:

#27 2019-03-24 08:24:24

Anatoly
Member
From: Germany, Bavaria, Munich
Joined: 2015-07-31
Posts: 5,975

Re: Recent Events & Accounts Restored!

2B55B5G TNG wrote:

Eh maybe I’ll still play EE. Idc my social media getting hacked or my own information getting spread. As long as my life doesn’t have risk it’s fine

it can be pretty serious, so id suggest not taking unnecessary risks. don't forget you could have viruses installed, etc...


tVc2SI8.png

Offline

#28 2019-03-24 08:54:57

2B55B5G TNG
Member
From: Levitation Planet
Joined: 2016-08-27
Posts: 1,173

Re: Recent Events & Accounts Restored!

My PC was already broken from last year anyway


6vgEiC7.png

Offline

Wooted by:

#29 2019-03-24 10:36:58

PTU
Formerly Pipec
From: Mailboxٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴ
Joined: 2017-04-15
Posts: 827

Re: Recent Events & Accounts Restored!

Anatoly wrote:

viruses installed

How are viruses related in this case?

pls


M2my8OF.png M2my8OF.png M2my8OF.png

UUCFFj2.png UUCFFj2.png UUCFFj2.png

Offline

#30 2019-03-24 11:17:35

Gosha
Member
From: Russia
Joined: 2015-03-15
Posts: 5,739

Re: Recent Events & Accounts Restored!

cool stuff

Offline

#31 2019-03-24 11:18:17

Anatoly
Member
From: Germany, Bavaria, Munich
Joined: 2015-07-31
Posts: 5,975

Re: Recent Events & Accounts Restored!

PTU wrote:
Anatoly wrote:

viruses installed

How are viruses related in this case?

pls

did you read what processor said? Even staff agreed that playing the game right now is fatal. The game could simply upload to your computer viruses to get even more information. The hackers have power to edit game files.


tVc2SI8.png

Offline

#32 2019-03-24 13:36:38

Different55
Forum Admin
Joined: 2015-02-07
Posts: 15,891

Re: Recent Events & Accounts Restored!

Anatoly wrote:
PTU wrote:
Anatoly wrote:

viruses installed

How are viruses related in this case?

pls

did you read what processor said? Even staff agreed that playing the game right now is fatal. The game could simply upload to your computer viruses to get even more information. The hackers have power to edit game files.

We don't know that they have access to game files. Again, in my own personal opinion with 0 internal insight into how the game works or literally anything at all, I think it's very unlikely that they do. They're clearly doing everything they can to get attention, and leaking hashed (irreversibly encrypted) passwords and editing the client would be the exactly the kind of flashy things they'd go for if they could. Since they're only leaking emails and inboxes, it seems like that's the worst they can do at this point.

But, even though it seems unlikely, until we know it's *impossible* we should assume that they have ability just because it'd totally suck to be wrong.


"Sometimes failing a leap of faith is better than inching forward"
- ShinsukeIto

Online

Wooted by: (4)

#33 2019-03-25 00:37:40

HeyNK
Member
Joined: 2017-04-07
Posts: 1,295

Re: Recent Events & Accounts Restored!

Anatoly wrote:
PTU wrote:
Anatoly wrote:

viruses installed

How are viruses related in this case?

pls

did you read what processor said? Even staff agreed that playing the game right now is fatal. The game could simply upload to your computer viruses to get even more information. The hackers have power to edit game files.


ITT: blatant fearmongering from someone who does not know how computers work tbh

Offline

#34 2019-03-25 01:08:17

XxAtillaxX
Member
From: Canada
Joined: 2015-11-28
Posts: 3,943

Re: Recent Events & Accounts Restored!

It is fully valid to state that the Adobe Flash Player plugin may (and most likely does) contain vulnerabilities that could run arbitrary code outside of a sandbox environment.

It is pure speculation as to whether such a vulnerability is within the scope of their ability, although baseless assumptions shouldn't be made in lieu of a false sense of security either, and so I would side with Yonom and Anatoly in this instance and advise people to isolate the game client (ideally in a virtual machine or external computer) if they really wish to play in the meantime, even though relatively few would do so and so that advice only applies to people who sport a tin foil hat.


atill.gif

Offline

Wooted by: (3)

#35 2019-03-25 09:03:48

peace
Member
From: admin land
Joined: 2015-08-10
Posts: 5,145

Re: Recent Events & Accounts Restored!

or you coudl just chage your password i did it just to be safe but i still dont get hoe thye gto to see passwords thats clearly PIO's fault as its PIO's resposebility to sotre passwords safe and none ever gets to see them not even the staff


OeaNm9Q.png              MYaIIs9.png
ty anatoly and nikko99 for a golden sig and blueclued for avatar and daneeko for pixelating my sign //forums.everybodyedits.com/img/smilies/cool3bluekeys.png

Offline

#36 2019-03-25 18:29:07

Crybaby
Formerly minimania
From: Wilted
Joined: 2015-02-22
Posts: 3,985

Re: Recent Events & Accounts Restored!

Different55 wrote:

We don't know that they have access to game files.

LukeM wrote:

We're as sure as we can be that the attacker does not have access to new account information, but we know that the attacker still has access to the database.


unknown.png
(Click to see my graphics topic)

Online

Wooted by:

#37 2019-03-25 18:44:23

Different55
Forum Admin
Joined: 2015-02-07
Posts: 15,891

Re: Recent Events & Accounts Restored!

Crybaby wrote:
Different55 wrote:

We don't know that they have access to game files.

LukeM wrote:

We're as sure as we can be that the attacker does not have access to new account information, but we know that the attacker still has access to the database.

by game files I mean client files and by access to the client files I mean the ability to modify them, which is one of two ways that they could possibly get their hands on passwords.


"Sometimes failing a leap of faith is better than inching forward"
- ShinsukeIto

Online

Wooted by:

#38 2019-03-25 20:04:26

peace
Member
From: admin land
Joined: 2015-08-10
Posts: 5,145

Re: Recent Events & Accounts Restored!

Different55 wrote:
Crybaby wrote:
Different55 wrote:

We don't know that they have access to game files.

LukeM wrote:

We're as sure as we can be that the attacker does not have access to new account information, but we know that the attacker still has access to the database.

by game files I mean client files and by access to the client files I mean the ability to modify them, which is one of two ways that they could possibly get their hands on passwords.

passwords are not in the client im aware of ( i think)


OeaNm9Q.png              MYaIIs9.png
ty anatoly and nikko99 for a golden sig and blueclued for avatar and daneeko for pixelating my sign //forums.everybodyedits.com/img/smilies/cool3bluekeys.png

Offline

#39 2019-03-25 20:08:51

LukeM
Dev Team
From: England
Joined: 2016-06-03
Posts: 2,768
Website

Re: Recent Events & Accounts Restored!

Just clearing up some terms:

The "DB" (which they have access to) refers to the PlayerIO game BigDB, which is what stores in-game information like worlds, campaign progress, mail, reports, bans, last known IP addresses, etc. (although for the time being we've disabled mail and the collection of IP addresses)

The "backend console" (which we strongly believe has been secure since early January, when the export was made) is what is used to upload new versions of the client and server, and can be used to access account emails / FB names.

peace wrote:

passwords are not in the client im aware of ( i think)

The idea is that if they managed to upload a modified version of the client, it could send them your account info when you type it in. We are very sure that they do not have the ability to do this though, which is why we've kept the game running.

Last edited by LukeM (2019-03-25 20:10:36)

Offline

#40 2019-03-25 20:13:29

peace
Member
From: admin land
Joined: 2015-08-10
Posts: 5,145

Re: Recent Events & Accounts Restored!

LukeM wrote:

Just clearing up some terms:

The "DB" (which they have access to) refers to the PlayerIO game BigDB, which is what stores in-game information like worlds, campaign progress, mail, reports, bans, last known IP addresses, etc. (although for the time being we've disabled mail and the collection of IP addresses)

The "backend console" (which we strongly believe has been secure since early January, when the export was made) is what is used to upload new versions of the client and server, and can be used to access account emails / FB names.

peace wrote:

passwords are not in the client im aware of ( i think)

The idea is that if they managed to upload a modified version of the client, it could send them your account info when you type it in. We are very sure that they do not have the ability to do this though, which is why we've kept the game running.

yeah whatever i rarely-actualy never log otu of ee so i do not to send this infomration


OeaNm9Q.png              MYaIIs9.png
ty anatoly and nikko99 for a golden sig and blueclued for avatar and daneeko for pixelating my sign //forums.everybodyedits.com/img/smilies/cool3bluekeys.png

Offline

#41 2019-03-25 20:13:35

Anatoly
Member
From: Germany, Bavaria, Munich
Joined: 2015-07-31
Posts: 5,975

Re: Recent Events & Accounts Restored!

Different55 wrote:
Crybaby wrote:
Different55 wrote:

We don't know that they have access to game files.

LukeM wrote:

We're as sure as we can be that the attacker does not have access to new account information, but we know that the attacker still has access to the database.

by game files I mean client files and by access to the client files I mean the ability to modify them, which is one of two ways that they could possibly get their hands on passwords.

if that's the case then it looks like the entire raid was planned. (not like someone accidentally found an issue and used it).

It looks like they knew about the issue and when they found a way to bypass the security.

Then they simply prepared everything to hit Xenonetix in the heart.


tVc2SI8.png

Offline

#42 2019-03-25 20:21:59

272
Member
From: Everywhere
Joined: 2015-08-26
Posts: 330

Re: Recent Events & Accounts Restored!

Anatoly wrote:

if that's the case then it looks like the entire raid was planned. (not like someone accidentally found an issue and used it).

It looks like they knew about the issue and when they found a way to bypass the security.

Then they simply prepared everything to hit Xenonetix in the heart.

No, really? I would have never guessed.


Despite what people say, Different55 is the best mod.

Offline

Wooted by: (3)
2721553541719743600

Board footer

Powered by FluxBB

[ Started around 1561043560.8574 - Generated in 0.055 seconds, 10 queries executed - Memory usage: 1.59 MiB (Peak: 1.82 MiB) ]