Fiesta is it safe or not?

[poolplayermaster]

I find myself asking myself this everytime i hear from a friend about there accounts getting hacked and losing stuff.

Things like characters they had put alot of hard work in to, sometimes even sparkcash items that they had on these characters when the character gets deleted so do the items they had on them, money and equipment, sums as large as 5 gold sometimes and +9 equips or rare items like blues.

What good is antihacking software if it apparently doesn't stop the hacking.

I know what your all gonna say it happens so stop your ranting, but look at it this way how would you feel if it was you who lost that +9 you worked so hard for, or payed so much for would you be saying meh 10g down the drain or 12000 sc (almost $20) oh well no big deal.

Of course you would because of course they will put it back just like other games do "oh no my account was hacked i lost everything...customer support can you fix...yay i got it back" wrong not here nope sorry they don't do that here oh you lost your level 89 that had full +9 equips and +9 blues and $30 worth of sparkcash items oh and you had comp and decomp as high as it could go plus 1 gem (exagerating of course) well thats just too bad there is nothing we can do about it guess you will have to just start over.

Now are you still saying stop ranting? Has this happened to me yet? No. But it has happened to alot of friends who have lost many of the things listed maybe not to that extent but still does it matter how much they lost? Just the fact that they lost something by no fualt of there own and won't be getting it back even though they did nothing wrong is enough.

So i ask you is Fiesta truely safe? You decide vote on the poll.

You may vote safely however your vote is not shown to the public.

[Serric]

Hacks happen. When they do, the CSR team is on it. Any, and I mean ANY, report of a potential hack gets sent to the CSR team and they begin a tedious manual data search to expose the truth. One thing to keep in mind, however, is that although genuine hack issues do happen, they are rare. How rare? 99.9% of all "hacked" account issues turn out to be an issue of a user either:

a) sharing their personal information
b) using a public computer and having the system remember their login
c) allowing other people to play their characters

there are traps to avoid in the game. This is true for any mmorpg. People will try to plead with you, promise you things, pretend to be what they are not and offer you wondrous items and abilities. But the only way they can get your information is if you give it to them.

Again, the event of a genuine hackled account is extremely rare. The CSRs know what to look for when reviewing an account and know what is a hack and what isn’t.

If you gave your info to anyone for any reason, it isn’t a hack. If someone forces your info from you through alternate means (spybot, 3rd party software, keylogger, etc.) that is a hack. The latter is much harder to accomplish and is still dependant on your actions as the account owner.

[Asmodejjj]

PPM! Haven't seen you forever! <3

[Devilboy83]

Yes Fiesta is safe, I have yet to hear of a true account hacking occur. The majority of these people either willingly share their account information with friends/family or hand over account info to gold selling/power leveling websites and have their accounts seized by these sites.


Edit: CL Serric beat me to it.

[joecracker]

yes and OS staff will never ask you your info

so if someone claims to be a GM or CSR and Staff in game and asks for your info please report that person

[poolplayermaster]

hey asmode hows it going just heard from another good friend and decided it was time for a rant.

Unlike most rants however i decided to be mature about mine and not flame anyone jsut point out basic facts and points of views.

Incidently this most recent report i've heard from a friend who by there request and for aobvious reasons wishes to remain nameless, had just recently changed there password and login because it isn't the first time they have ben hacked and ha been regularly changing it for this reason, guess what yeap just changed it only a couple days ago hadn't even been on to play since they changed it and when they login today what do they find characters are missing gold is missing. I know for a fact that they have never once trusted a gold site becaue i speciffically warned them about it when they first started playing Fiesta and yet it happens anyways though they have taken every precaution.

[Asmodejjj]

I think it's safe..........are you coming back?

[poolplayermaster]

I have been playing here and there but i just couldn't resist making this post because it just infuriates me so much.

I also respect that the person this happened to recently didn't go off on a rant flaming outspark. I know if it had been me i would not of been so nice but then again here is my rant just a mature one.

But i am truely sickened sometimes by the things OS does, especially these announcements every 10 minutes about new items in the shop, and the fact that the only way your allowed to grind in an abyss is if you are stronger then they are or if there is mature players who aren't just gonna kill you on sight so that they can get on the kill point leader board. That is what we have pvp zones in each town for zones that should be level restricted just like the abyss dungeons are, so that it is fair for everyone so that if a lvl 50 walks into 50 abyss they aren't instantly being slapped and losing exp because a lvl 65 wants them kill points.

on a side note fiesta in 1680x1050 rez is awesome

[Asmodejjj]

I have been playing here and there but i just couldn't resist making this post because it just infuriates me so much.

I also respect that the person this happened to recently didn't go off on a rant flaming outspark. I know if it had been me i would not of been so nice but then again here is my rant just a mature one.

But i am truely sickened sometimes by the things OS does, especially these announcements every 10 minutes about new items in the shop, and the fact that the only way your allowed to grind in an abyss is if you are stronger then they are or if there is mature players who aren't just gonna kill you on sight so that they can get on the kill point leader board. That is what we have pvp zones in each town for zones that should be level restricted just like the abyss dungeons are, so that it is fair for everyone so that if a lvl 50 walks into 50 abyss they aren't instantly being slapped and losing exp because a lvl 65 wants them kill points.

on a side note fiesta in 1680x1050 rez is awesome

Unless it happens to be a cleric by the name of Asmodejjj :P

[poolplayermaster]

Well of course i know you would never do something like that but so many fighters do and when an archer is running through and kiting and accidently hits someone even though they say sorry and the one hit knows it wasn't there fault they still go running after them and stun them and of course the kiting archers dies when the mob of 20 catches up to them

[laady]

IMO, it's as safe as you make it. You choose your password and you choose who you trust with your information and how much you trust them with. I don't know if anyone even knows my email for this account so that would be the first obstacle for a hacker to get around right there. You learn this sort of thing in a Security class. Make your passwords insanely hard. I believe the ideal password is supposed to be at least 15 characters long. XD And maybe make an account specifically for Fiesta that you don't use for anything else, I don't know. Oh, and you're supposed to change your password every few months. I think it's like every 120 days here or something. Anyways, basically, there are ways to protect yourself that most people don't follow, myself included despite knowing of them. XD

[poolplayermaster]

password is a password no matter how hard you make it it just means it will take longer.

[Bebellicious]

Well...i really don't know what to vote srsly xD
I'm really worried about all the hacking on apoline
(i have no clue what is happening on the other servers :O)
my friend told me the other day that like 2 or it was 3? or her friends got hacked this month,sad.

people gotta work for the stuff they want to have...i think this,means everything =]
And i don't see how someone can be proud to "obtain" hacked items/money,geez

[poolplayermaster]

It is sad and what makes it even sadder is that in the event of these so called rare "true hacks" do you get you stuff back no of course not wether the hack is really a hack or careless use of your own information it doesn't seem to matter you still have to be out whatever you lost.

Is it fair to someone who put all the time in to lets say worst case scenario to have,

1.full crew of lvl 89's mage archer fighter and cleric
2.godlike +9's for all of them and rarest of jewelry
3.pot scroll stone comp and decomp maxed out
4.1 gem between all characters
5.$100+ worth of SC items i,e, permanent iron case and costumes/mounts for all

lost just becuase some greedy person decidedto hack the account steal all valuables and then delete the characters just for good measure.

[Yoruko]

password is a password no matter how hard you make it it just means it will take longer.

Well that kind of depends. The trick is making the maximum possible combination of characters for your password. People who use just dictionary words or common things like their street name are at great risk for hacks because those attacks have been perfected to be quick. length of the password creates exponential growth, 8 character passwords that arn't purely dictionary words are considered secure because even fast computers can't brute force break them in a reasonable about of time. 12 character ones are even better cause it takes years running hacks on it to break.

When I say years I mean that literally, a computer running something like 1 password a nanosecond will have to run for years to break it. As said earlier most "hack" arn't real hacks, the people who got hacked either told their password to someone or were using an unsecure password.

[poolplayermaster]

theres one thing that so many people don't know is that hacking accounts is just as easy as cracking a password. there are programs out there that will use a random number letter and symbol generator there are huge password lists and it will try each one there are password lists some as long as 1 million passwords and these generators will run through that entire list anywhere from between 1 day to a week. Trust me i know look at yahoo anyone who goes into chat and has heard anything about this there are thousands of people who lose there accounts everyday by crackers and no i don't mean the racial slur i mean a password cracker not a hacker but int his sense are almost the same.

[Yoruko]

theres one thing that so many people don't know is that hacking accounts is just as easy as cracking a password. there are programs out there that will use a random number letter and symbol generator there are huge password lists and it will try each one there are password lists some as long as 1 million passwords and these generators will run through that entire list anywhere from between 1 day to a week. Trust me i know look at yahoo anyone who goes into chat and has heard anything about this there are thousands of people who lose there accounts everyday by crackers and no i don't mean the racial slur i mean a password cracker not a hacker but int his sense are almost the same.

It's not easy to break a properly designed password, in fact it's nearly impossible. The problem is people use obvious password like words or names those are easy. A million passwords is the obvious list, most people use poorly picked passwords that are extremely obvious and actually not that hard to guess. When it's not of that list it's a good password and those take so long it's not realistic, you need to get key loggers on their system or intercept the password somehow(course encryption generally prevents that). A password is not an easy thing to break, I'm a computer engineer I know how computers work and I also do ethical hacking. People lose passwords because they tell someone or pick an obvious password. It's rare a password is truly hacked, specially for something as insignificant as a game like this.

[sakuraishott]

But i am truely sickened sometimes by the things OS does, especially these announcements every 10 minutes about new items in the shop

Woo someone who feels the way I do about the cash shop spamming :o

I know if I got hacked I wouldn't just nicely ignore it and make a new account either... I'd probably send 30 tickets about being hacked to OS within five minutes then get the ban hammer for spamming tickets or something lol xD

[ahtai]

If Amazon can get hacked and lost their customer's credit card number, how will you think a company much smaller be ever save?

[Yoruko]

If Amazon can get hacked and lost their customer's credit card number, how will you think a company much smaller be ever save?

It all depends on the hack and what's involved, there's different types of hacks. Believe it or not not all websites encrypt their database, some don't have proper security against sql injections, and numerous other hacks. Nothing is hack proof, and I'm sure some fiesta accounts have actually been hacked but it's not a simple process if the password is properly created. One major thing fiesta has going for it is it's irrelevance, most people wouldn't even try to really hack a password because it's a felony offense. I mean really you steal some silver and some items and go to jail for 10 years, not exactly a good trade off.

I still can't say this enough, passwords are more often stolen than hacked. Someone has loose lips, or uses a stupid password like "hello". Email scams work wonders on the stupidity of the general public, oh we're your bank follow this link and log in we need to update your account. Stolen password. I guarantee there's email scams out there that look like official outspark email. That's not hacking that's theft.

[poolplayermaster]

Obviously you don't understand the minds of htese little cript kiddies. Accoutns on many games are hacked daily by little 13 script kiddies who are more often then not caught becase they go boasting about it.even WoW i multi-international mmorph that has over 11 million customers that play monthly get there acounts hacked. Grant it they get them put back the right way the and hackers is almost always caught but it happens daily.

[Yoruko]

Do you not understand that you are talking to programmers and hackers? I know about computers, they're my life. This isn't the movies, actually hacking a system is not sitting down at a terminal and 5 min later you've taken over the whole system. Trust me if passwords were as easy to hack as you seem to believe they would not be used at all. It's only easy to hack a password when it's stupidly designed, anything under 6 characters is a joke to hack, anything that's a common word is a joke to hack, but a password that is 6 or more characters and uses both letters and numbers is difficult to hack, and every character added over 7 only increases the difficulty exponentially(look up exponential growth if you don't know what it is).

I don't get this topic, you asked a question but now it's more like you're making a statement. You don't seem to actually want an answer, or do you believe you know more than people who are in fact programmers and hackers? True no system is hack proof, but then again no building is breaking proof. However, that doesn't mean hacking is something easy to do, and there's a world of difference between hacking and scamming a password out of someone.

[poolplayermaster]

no i actually want to know what people think but when somene comes in who jut becuase hes got knowledge of stuff and trys to say that your password must suck is why. does it really matter either way wehter there password is 123456 or say something like there account name. Doesn't mean it wasn't hacked it was still hacked regardless of the simplicity of it. and do you really beleive that kids who play this game of the age of 13 ish are goign to say hmmm i know i'll use AsdG234%# for a password no there going to use something they can remember

[Yoruko]

no i actually want to know what people think but when somene comes in who jut becuase hes got knowledge of stuff and trys to say that your password must suck is why. does it really matter either way wehter there password is 123456 or say something like there account name. Doesn't mean it wasn't hacked it was still hacked regardless of the simplicity of it. and do you really beleive that kids who play this game of the age of 13 ish are goign to say hmmm i know i'll use AsdG234%# for a password no there going to use something they can remember

Does it matter? YES. Why do you think so many sites warn you about using common things and some even force password length. You don't seem to get it, you don't have to use something hard to remember, you just don't use things like your name or other real words. The first password I ever had to create I did when I was 12, I knew then not to use common words. Furthermore if you're a minor you have to have parental permission to sign up, these are some of the reasons. Granted I know most don't but that doesn't change anything. If someone ignores warnings it's not my fault.

I'm sorry but when you obviously know very little about hacking you arn't exactly qualified to say how easy it is to hack passwords. I don't mean that to be insulting but you simply don't understand this stuff. People will call it a hack when they lose their info to an email scam or something similar, but it's not a hack. When it comes to passwords it's as secure as you make it. Passwords are secure if made correctly, if yours is not you have no one to blame but yourself. Computers are no as fast as people think they are, even doing a calculation a nano-second you can cause a computer to literally take years to solve a problem if it's sufficiently large.

[poolplayermaster]

As it is you have turn this into a flame about what hacking is and isn't but let me just say one more thing.

Having yoru account hacked if someone hacks into outspark is what would be called hacking.

Having your password cracked is what happens to most people and im sorry to say but there are programs specifically designed for just that purpose.

You may know all you want about hacking and computers but until you learn about many programs that i know of and have used before to get rid of child predators and pedofiles from yahoo many that will kick the person off of yahoo messenger and even lock there account or crack the password and steal the account.

And please don't say its not possible becuase there are many websites out there designed to give the tools to do this and tools to try and prevent it.

[Yoruko]

Who's turning this into a flame fest? Computer security depends on making the algorithm run time so long it's not practical. You can break any encryption using a weak key in seconds but that doesn't mean encryption isn't secure. Similarly you can break a 4 character real word password in a matter of minutes but that doesn't mean passwords arn't safe. We wouldn't be using passwords at all if they are as easy to break as you seem to think. Also I never said it's not possible to break a password, just that it's extremely difficult when done right, try to read more carefully.

[Kyo_Sama]

actually anything below 8 characters is a joke to hack simply because of how most password decryption tools work. if you instead used a passphrase instead of a word

ex. 0nf3Btw09itSMyDAy

it would take a hacker way to much time to care. ;)

oh and for anyone dumb enough to think thats my password im giving out its not.

[A_geezy]

Having your password cracked is what happens to most people and im sorry to say but there are programs specifically designed for just that purpose.



please lol... that's so wrong it's not even funny.

Most people get their accounts hacked because they were taking part in some scam they thought would get them gold, new weapons, etc. I've seen quite a few scams, some more unique than others, meant to lure people into dropping their account info.

Aside from the straightforward, "give me your password and you'll get ______," approach, I had a dude try and add me on msn saying he had a hack program that integrated seamlessly in with the game's client software--all I had to do was log into his program with my OS logins and enter how much gold I wanted... LOL.

The funny thing is, these scams are out there because 1 in 25 gamers will actually give away their info in scams like this. Over Christmas we had a spike in Fiesta's newbie population and I enjoyed starting a new char to go recruit for my epic guild. I was amazed to find that in gold hill, every run, there were two and three people who were trying to buy +9 lvl 3X stuff (shouting for it in KQ lol) for 3-4g each.

Do a google.com search for "buy fiesta gold," there are sooo many sites selling gold now because there are so many people buying the stuff. OS has a list of rules that everyone signs upon registering a new account--it's called the Terms of Service. If you follow these your account will never, never ever get hacked- period.

As Seric said- 99.9% of all "hacked" cases aren't hacks at all, but rather user-initiated breaches of the ToS.


P.s. password strength shouldn't matter if you're not putting your account in a position where hackers would be interested in targeting you (it's implied by the above, just thought I'd say it again).

[laady]

password is a password no matter how hard you make it it just means it will take longer.

Hey, I'm just telling you what I've been taught. I'm a tech student so internet/password/etc. security is big here and our account passwords are to be a minimum of 15 or 17 characters long (mine is 17 although I think 15 is the minimum requirement) and must contain at least one number and one symbol like ~ or @ or %. It's changed about once every quarter, that's the standard I was taught in my Security class and that's the standard the school follows and it's the standard that I was told to follow during a security lecture by a former cop who investigated cyber crime. I never said, "Having liek a total long passwerd will lek maek you invincable." Of course there are programs out there used to crack passwords but that doesn't mean you make your password something easy like "password". You still put effort into it, if someone is going to hack you, make them use the software, make them work for it, basically don't hand it to them. In order for you to crack my school account, you'd just about have to use some sort of software, that or get me drunk enough to tell you what it is myself, there's a very small chance of you being able to guess what my 17 character long password is and that's sort of the point.

In short, common sense would tell any dingbat that you're pretty much never 100% safe. Even virus definitions are behind by two hours so if I were to update mine now, I'd be behind by two hours. But that doesn't mean you say, "Oh, there's software out there that can hack me, why try." or "I'm two hours behind on my virus definitions, I'm not safe, why bother." You take every precaution because each one blocks something. Like having a long password. That may not keep me safe from people who use software to hack people but it keeps me safe from that jerk in-game who hates my guts and wants to attack me by trying to guess my password like a nub or that crazy ex who just won't go away (I've actually had experience with this and a long, unpredictable password and fake account info generally stops this >.> ). XD Avoiding being hacked via a program is harder, naturally, but a good start would be not going to unreliable sites and being very careful about who you talk to, what you tell them, and where you enter your account information. But, again, I'm well aware that you're never entirely 100% safe but how you set up your account could make a difference.

[borednl]

Here is what happens.

Someone advertises in guild chat (because they trust their entire guild): "My username is IgotHaxored@yahoo.com, password is 'Hello.'"

*account gets taken over*

Then the person tries to log in but can't.

So what do they do? The come to the forums and say, "OH NOES! I GOT HAXORED!"

And, that's about it.

[snowspirit]

I've played many different MMO's over many years, and have programmed computers in a senior position for over 25 years, and there is one truth to all this I can promise you: There are no genuine hacks to gain access to someone else's account.

The user either gave his or her log info to someone (either a so-called "trusted" friend, or a scammer offering false promises), or they used a public computer (which opens a whole world of possible ways you can get scammed), or they downloaded a key-logger trojan or some such thing (usually when downloading supposed hacks for the game, in which case you deserved to be hacked!)

And no matter which the case is, the person who got "hacked" will almost invariably deny having done any of these actions out of pure shame.

And as for software that tries all possible passwords until they get the correct one, OMG do you have any idea just how LONG that would take?! They'd be dead and long forgotten before they stumbled on the correct password. And even if they DID do that, what good is a password without the login name? So now they have to try every possible password with every possible login name. Well good luck with that! :p

[poolplayermaster]

i'll admit that yeah most people are foolish enough to give out there login info to get ahead. Just like alot of guild and clan leaders give out there info on many games that don't have admin rights to individual players to kick or ban from clans or whatever, so that if a problem arises it can be taken care of.

Which is the same reaosn that only the guild master can take stuff out of the guild storage sot hat if someone for some rediculous reason dumps in a full set of level 70+ fighter blues that are +9 someone who just joined they guild can't go in and say hmm wow thats nice yoink.

And i know a think or two about password security i used to work at a place where w had to memorize 4 seperate passwords and login i'd's just to work.

and the password was one of those must be a certain amount of characters long has to have numbers capitals and symbols type passwords and they were changed once every month. Became a royal pain actually especially because once a password was used you were not allowed to use it ever again. over the course of my 17 month term of working there i had to come up with over 68 passwords that were unique (talk about a pain) and i've since found out that now they have a 5th password. going int his order 1.pw to turn the pc itself on. 2.pw to log in to windows 3.password to elt you open the program. 4 password to let you log into the program. 5 password to let you login to the database the program uses.

But even with all that we have had our systems hacked by an outside source.

But ah well my point has been made and the poll has run long enough

Over half feel safe a quarter don't and there are some who either jsut don't care or aren't sure yet.

So i thank you all for you votes and maybe who knows this will shed some light to those who were thinking about doign some of these things that coudl potentially get yoru accounts stolen. And will maybe even encourage some to think about there security and password strength better.

And if it does well then i think this thread has accomplished something and that makes it a win for all.