Questions about compromised accounts

Printable View

February 24, 2017
howlgnir

Questions about compromised accounts

Hello,

I have been playing for two weeks (first time in a private server) and today when I tried to enter my account, I cant and I see I have an email for warmane in the email adress I used for registering the account.

I change the password and I managed to log in again... sadly gold is gone, everything else is there. Besides that, account got banned, I guess because advertising. Well of course I did not advertise anything but the account was compromised.

I have been looking for information in the forum but... well maybe I do not know how to look well enough. The thing is, I am concerned about security and compromised accounts. Before getting into it, I would like to point I worked as a GM a couple of years for Blizzard EU. So, compromised accounts were something we had to handle every day. WE were many people working there, had backups of everything and in was really easy to solve, as many of you know (I understand warmane does not have those resources, its ok).

First of all, yes, account is user responsibility IF, warmane has enough security for keeping the data safe (which is something we really dont know), so I would like to point out that as much responsability the user has to keep his pass secure, also warmane. So, First question and in regards of my experience as GM.

IF an account is proven to be compromised, checking loging IPs, etc, can some help from warmane be expected? This time I lost some gold, well 30gs for my first 28 lvl character is a lot... But I am more worried about character and items deletion, which would be something really bad.

Knowing the things I know, you can be sure I keep my PC clean, Antivirus updated and I do not visit potentially dangerous webs (in fact I just been using the computer to log into the game and check my email). After running all security measures, PC is still clean. So, I have some concerns about the security Warmane offers to the users.

I am not complaining! I know I cant spect some things but I just would like to know what would happen if I get my char deleted, for example. If is gone forever, I just cant take the risks. Yes, I know there is people who "has been playing for three years and never had an issue", but still, those issue are there, and hackers dont need something as simple as a keylogger to get in, they have other tools. So I would like to clarify that sometimes you do not need to download something "bad" to loose your account. Is not that simple.

Any way, thanks for comments!
February 24, 2017
Anyone0

You can use 2 step authentication to make sure it doesn't happen again.

Characters can be restored using a feature on website under services. For first 24 hours it's free, after that you have to use points or coins to restore character. If it's not restored within 30 days it gets deleted permanently. And you can only restore characters that are max level or close to it.

There are no logs to return missing items or gold. You can only get items you bought with coins back.
February 24, 2017
Obnoxious

No, you won't receive anything lost because you failed to properly secure your account. Some things might recovered by the player directly, as Anyone points out, but that's about it. We make sure nothing happens to compromise account information on our end and we offer multiple tools, like two-step authentication, for users to do their side of the deal.
February 24, 2017
Derpykins

Quote:

Originally Posted by howlgnir

Hello,

I have been playing for two weeks (first time in a private server) and today when I tried to enter my account, I cant and I see I have an email for warmane in the email adress I used for registering the account.

I change the password and I managed to log in again... sadly gold is gone, everything else is there. Besides that, account got banned, I guess because advertising. Well of course I did not advertise anything but the account was compromised.

I have been looking for information in the forum but... well maybe I do not know how to look well enough. The thing is, I am concerned about security and compromised accounts. Before getting into it, I would like to point I worked as a GM a couple of years for Blizzard EU. So, compromised accounts were something we had to handle every day. WE were many people working there, had backups of everything and in was really easy to solve, as many of you know (I understand warmane does not have those resources, its ok).

First of all, yes, account is user responsibility IF, warmane has enough security for keeping the data safe (which is something we really dont know), so I would like to point out that as much responsability the user has to keep his pass secure, also warmane. So, First question and in regards of my experience as GM.

IF an account is proven to be compromised, checking loging IPs, etc, can some help from warmane be expected? This time I lost some gold, well 30gs for my first 28 lvl character is a lot... But I am more worried about character and items deletion, which would be something really bad.

Knowing the things I know, you can be sure I keep my PC clean, Antivirus updated and I do not visit potentially dangerous webs (in fact I just been using the computer to log into the game and check my email). After running all security measures, PC is still clean. So, I have some concerns about the security Warmane offers to the users.

I am not complaining! I know I cant spect some things but I just would like to know what would happen if I get my char deleted, for example. If is gone forever, I just cant take the risks. Yes, I know there is people who "has been playing for three years and never had an issue", but still, those issue are there, and hackers dont need something as simple as a keylogger to get in, they have other tools. So I would like to clarify that sometimes you do not need to download something "bad" to loose your account. Is not that simple.

Any way, thanks for comments!

If the account is banned, how do you know that your gold is gone?
February 24, 2017
howlgnir

Quote:

Originally Posted by Obnoxious

No, you won't receive anything lost because you failed to properly secure your account. Some things might recovered by the player directly, as Anyone points out, but that's about it. We make sure nothing happens to compromise account information on our end and we offer multiple tools, like two-step authentication, for users to do their side of the deal.

-anyone0- thanks for the answer, very clarifying.

-Derpykins- the ban was for the chat, 24h, so I could check everything.

Well Obnoxious, you have the same proof to blame me for "failed to properly secure your account" as I have to blame Warmane for data security.

"we offer multiple tools, like two-step authentication"

As I read the forum, people with this tool got also hacked, but still you say you make sure nothing happens to an account with that system.

If I got hacked and I loose my char then I have to pay (call it donate) to get points so I can get the char back being in mind warmane does not guarantee data security, because you cant. Well, is at least not ethic and I am not going to say some other ideas I have in mind. Everything is clear now.

Thank you.
February 24, 2017
Obnoxious

Care to point a single person who verifiably had 2-step on and sill got "hacked"?

Also, yes, we can provide sufficient security. Account data is stored encrypted, meaning someone would have to not only "hack" their access into our database, as well as brute-force a password. People who would go through that much trouble have way better things to do than steal your account on a private server.
February 24, 2017
bhavey

Quote:

Originally Posted by Obnoxious

Care to point a single person who verifiably had 2-step on and sill got "hacked"?

Also, yes, we can provide sufficient security. Account data is stored encrypted, meaning someone would have to not only "hack" their access into our database, as well as brute-force a password. People who would go through that much trouble have way better things to do than steal your account on a private server.

Hey obnoxious,

i posted something important for u on this thread -> http://forum.warmane.com/showthread.php?t=348979

but after posting it said it is not visible, till some moderator will approve it.
did u got my message ? or some net problem occured xD. coz i dont want to post it again as it is something sensitive
February 24, 2017
Obnoxious

Quote:

Originally Posted by bhavey

Hey obnoxious,

i posted something important for u on this thread -> http://forum.warmane.com/showthread.php?t=348979

but after posting it said it is not visible, till some moderator will approve it.
did u got my message ? or some net problem occured xD. coz i dont want to post it again as it is something sensitive

It being someone else or Kaer doesn't changes what you were told in the past. Also, reports are checked before bans are issued.
February 24, 2017
bhavey

Quote:

Originally Posted by Obnoxious

Also, reports are checked before bans are issued.

Fine (msg too short)