Everyone Change Your Forum Password Now - Not a joke

Avlis Headlines - www.avlis.org

Moderator: Dungeon Masters

User avatar
Alexandru Stanicu
Legacy DM
Legacy DM
Posts: 14077
Joined: Sun Oct 20, 2002 10:59 pm
Timezone: CST
DM Avatar: The Hammer
Location: Texas

Everyone Change Your Forum Password Now - Not a joke

Post by Alexandru Stanicu » Thu Oct 30, 2008 11:13 pm

Ladies and Gents,

we the Team and you the Players have been betrayed by someone that we trusted.
While helping solve a problem, Zebranky got a hold of a PW (in a snippet of code) that he was not supposed to, and rather than report this, used that PW to access restricted areas and obtain other PW's and then to download the entire Forums DB, the Server DB, the DM PW, and copies of the server vault and all modules.

With this he has the ability to reverse the encryption on forums PWs and log in as someone else.
Everyone needs to change their forums PW ASAP, and notify the team if you see posts that are in your name that you did not make.

Worse still, with the forums DB he has the ability to reverse the encryption and read every single PM that was stored in the DB at the time of his coping it.

He is now banned from all Avlis controlled media.
Any posts made by him supposedly containing quotes from private forums or PM's need to be read with the idea in mind that he will not be happy about being banned, and by stealing our data and the intellectual property (ie Avlis modules) he has shown that he is not to be trusted.

We are sorry for this breach of your privacy, and have changed all of the PW's that were stolen, with the exception of your forums accounts. (you need to do those)

Thanks for playing on Avlis.

-Alexandru Stanicu
World Leader, Avlis Team

Speedracer
Team Member; Retired with Honors
Posts: 1721
Joined: Tue Mar 07, 2006 7:39 am
Timezone: GMT -6 year round
DM Avatar: Maleki
Location: Saskatchewan, Canada. Time never changes in the land of living skies.

Re: Betrayed

Post by Speedracer » Thu Oct 30, 2008 11:25 pm

:x :x :x :x :x :x :x

Burn.

User avatar
Pathos Street
King of Avlis Charades
Posts: 4871
Joined: Mon Oct 11, 2004 11:33 pm
Timezone: CDT (GMT -5)
Location: Hawkeye State

Re: Betrayed

Post by Pathos Street » Thu Oct 30, 2008 11:50 pm

what about the wiki?
Fergus Goodmane
White Order of the Light
-----
Xiaou wrote:Being the big bad wolf is a responsibility.

User avatar
Alexandru Stanicu
Legacy DM
Legacy DM
Posts: 14077
Joined: Sun Oct 20, 2002 10:59 pm
Timezone: CST
DM Avatar: The Hammer
Location: Texas

Re: Betrayed

Post by Alexandru Stanicu » Thu Oct 30, 2008 11:58 pm

Pathos Street wrote:what about the wiki?
Not sure, checking on it...

MadK@? Ninja?

NayalaGelbert
Scholar
Posts: 1003
Joined: Fri Apr 28, 2006 2:38 am

Re: Betrayed

Post by NayalaGelbert » Fri Oct 31, 2008 12:06 am

How do you change your forum password? Sorry if it's obvious, but I couldn't figure it out. :oops:

User avatar
Katroine
Team Member; Retired with Honors
Posts: 7723
Joined: Thu Feb 14, 2002 3:55 am
Timezone: Mountain
Location: Playing with Negarai

Re: Betrayed

Post by Katroine » Fri Oct 31, 2008 12:07 am

NayalaGelbert wrote:How do you change your forum password? Sorry if it's obvious, but I couldn't figure it out. :oops:
User control panel
Profile
Edit Account Settings
"However friendly they may seem, they must be corrupt to the core, and I must never forget that."

User avatar
jaythespacehound
Apprentice Scholar
Posts: 941
Joined: Wed Sep 22, 2004 6:52 am
Location: Hobart Australia (feels like a small island sometimes...hang on it is) GMT+10

Re: Betrayed

Post by jaythespacehound » Fri Oct 31, 2008 12:07 am

User control panel (top right)
Profile (on the left)
Edit account settings (now below Profile)

EDIT: Kat is quick :)

User avatar
Gorgon
CCC - Special Projects Manager
CCC - Special Projects Manager
Posts: 6480
Joined: Fri Oct 17, 2003 10:14 pm
Timezone: PST -8
Location: Vancouver, BC, Canada

Re: Betrayed

Post by Gorgon » Fri Oct 31, 2008 12:09 am

Please change the title of this topic to something people will notice more, like "Everyone Change Your Forum Password Now ~Not A Joke~"

*edits* Making it a global announcement might not be a bad idea either
"God not only plays dice, he throws them in the corner where you can't see them."
-- Stephen William Hawking (b. 1942) --


Sprucing up ye olde NWN | Modifying nwn.ini and nwnplayer.ini | ~Avlis Theme Song~ The only thing that matters

User avatar
Nighthawk4
Eldest DM
Eldest DM
Posts: 24503
Joined: Fri Feb 07, 2003 8:32 pm
Timezone: GMT
DM Avatar: DruEl
Location: The Home of the Bard of Avon
Contact:

Re: Betrayed

Post by Nighthawk4 » Fri Oct 31, 2008 12:13 am

Gorgon wrote:Please change the title of this topic to something people will notice more, like "Everyone Change Your Forum Password Now ~Not A Joke~"

*edits* Making it a global announcement might not be a bad idea either

Good idea - I edited the title to make it more clear.
Life is never as bad as you think it is, although that doesn't help at the time.
Orleron wrote:I think it's a fun idea if you can idiot-proof it. Problem is God always builds a better idiot. :P
Please visit:
Avlis UK, ACE Forum and SATF Forum

Image

User avatar
Ambrosia
Major DM
Major DM
Posts: 2978
Joined: Tue Oct 25, 2005 1:45 am
DM Avatar: Berryn

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Ambrosia » Fri Oct 31, 2008 12:15 am

:shock:


Do we need to change passwords for other CoPaP forum accounts as well?

What about Keys and Gamespy IDs, etc?

User avatar
Darkfire
Legacy DM
Legacy DM
Posts: 13754
Joined: Sat Feb 12, 2005 4:50 pm
Timezone: CST (-5 GMT)
Location: Missouri

Re: Betrayed

Post by Darkfire » Fri Oct 31, 2008 12:19 am

Nighthawk4 wrote:
Gorgon wrote:Please change the title of this topic to something people will notice more, like "Everyone Change Your Forum Password Now ~Not A Joke~"

*edits* Making it a global announcement might not be a bad idea either

Good idea - I edited the title to make it more clear.

No you didn't. :P
CoEMF :devil: :feuer:
WrathOG777: This is a roleplaying game. There is no such thing as winning or losing. Only playing.
Player of Dameon Nepirtas

User avatar
Grunt
Team Member; Retired with Honors
Posts: 9422
Joined: Sat Jun 05, 2004 12:37 am
Timezone: I AM A TIME LORD
Location: Boston, MA

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Grunt » Fri Oct 31, 2008 12:25 am

Ambrosia wrote::shock:


Do we need to change passwords for other CoPaP forum accounts as well?

What about Keys and Gamespy IDs, etc?
If you use the same password on other COPAP forums, change them to something different than each other. Don't make it the same as on the Hades forum, for obvious reasons.

CDkey should be safe.

GSID password, only change it if it is the same as your forum password was.
FletcherWiki

*Stepping out of a portal*
Nawen Amakiir: there he is.. *smirks* someone had to make an entrance
Fletcher Millstone: MILLSTONE! *arms held high*
Lilliana Be'letane: You're the worst, Fletcher.

User avatar
Themicles
CoPaP Ambassador
Posts: 2677
Joined: Wed Jan 29, 2003 10:45 pm
Location: Wolverine Lake, MI
Contact:

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Themicles » Fri Oct 31, 2008 12:31 am

The CoPaP.org, Tairisnadur.com and Ysgard.org forum databases are safe. However, if you used the same password on all sites, I would recommend that you change your passwords.

It would be unwise to also change your passwords on the Hades or Outlands websites to the same one you're changing the other sites to, as they are hosted by him.
A wise man does not dwell on his past. He learns from it, he grows from it, and then moves ahead into his future.

And some wise words from a wise man. :P
Orleron wrote:You have to excuse Themi. Tact, diplomacy, and softness are not his best traits, but he does not mean anything by his writing. He's a nice guy. You just get used to it after a while because he doesn't seem to learn. :)

User avatar
Gorgon
CCC - Special Projects Manager
CCC - Special Projects Manager
Posts: 6480
Joined: Fri Oct 17, 2003 10:14 pm
Timezone: PST -8
Location: Vancouver, BC, Canada

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Gorgon » Fri Oct 31, 2008 12:54 am

Also, changing your Gamespy password if it is similar to your forum one is a good idea.... :roll:

http://nwn.bioware.com/my_account/editlogin.html to change it. Same password for their site as the login in most cases.
"God not only plays dice, he throws them in the corner where you can't see them."
-- Stephen William Hawking (b. 1942) --


Sprucing up ye olde NWN | Modifying nwn.ini and nwnplayer.ini | ~Avlis Theme Song~ The only thing that matters

User avatar
Hamlet
QA/Module Lead/PH
QA/Module Lead/PH
Posts: 13190
Joined: Tue Jul 20, 2004 8:52 am
Timezone: Timeless
Location: The Void
Contact:

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Hamlet » Fri Oct 31, 2008 11:16 am

Thanks for the "Not a joke" clarification etc. At first I really thought this was a joke. Shows how much I know. :|

User avatar
jaythespacehound
Apprentice Scholar
Posts: 941
Joined: Wed Sep 22, 2004 6:52 am
Location: Hobart Australia (feels like a small island sometimes...hang on it is) GMT+10

Re: Everyone Change Your Forum Password Now - Not a joke

Post by jaythespacehound » Fri Oct 31, 2008 11:35 am

That was my first reaction too Hamlet. :(

Toadyx
Apprentice Scholar
Posts: 825
Joined: Sat Jun 03, 2006 12:55 pm
Timezone: gmt

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Toadyx » Fri Oct 31, 2008 4:55 pm

My first reaction was ... why?

As in - why would someone do that?

T

User avatar
Significant Owl
Team Member; Retired with Honors
Posts: 2978
Joined: Wed Sep 29, 2004 7:50 pm
Timezone: CET
Location: Copenhagen.

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Significant Owl » Sat Nov 01, 2008 12:53 am

Consider this a small bump.
Jesus promised the end of all wicked people.
Thor promised the end of all Ice Giants.
              • I don't see many Ice Giants around.

Snow
Team Member; Retired with Honors
Posts: 5822
Joined: Sun Jul 11, 2004 2:27 am

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Snow » Sat Nov 01, 2008 2:24 pm

This should probably be put in the Avlis announcements forums so it's on the main page. I almost missed it.

User avatar
Significant Owl
Team Member; Retired with Honors
Posts: 2978
Joined: Wed Sep 29, 2004 7:50 pm
Timezone: CET
Location: Copenhagen.

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Significant Owl » Sat Nov 01, 2008 2:32 pm

You should probably be nailed to the forums. I almost missed you.
Jesus promised the end of all wicked people.
Thor promised the end of all Ice Giants.
              • I don't see many Ice Giants around.

User avatar
Pathos Street
King of Avlis Charades
Posts: 4871
Joined: Mon Oct 11, 2004 11:33 pm
Timezone: CDT (GMT -5)
Location: Hawkeye State

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Pathos Street » Sat Nov 01, 2008 2:58 pm

Please make sticky global announcement in Avlis News.
Fergus Goodmane
White Order of the Light
-----
Xiaou wrote:Being the big bad wolf is a responsibility.

Snow
Team Member; Retired with Honors
Posts: 5822
Joined: Sun Jul 11, 2004 2:27 am

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Snow » Sat Nov 01, 2008 4:15 pm

Significant Owl wrote:You should probably be nailed to the forums. I almost missed you.
:o

o:

User avatar
Darkfire
Legacy DM
Legacy DM
Posts: 13754
Joined: Sat Feb 12, 2005 4:50 pm
Timezone: CST (-5 GMT)
Location: Missouri

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Darkfire » Sat Nov 01, 2008 4:38 pm

Pathos Street wrote:Please make sticky global announcement in Avlis News.
It was for quite a while. All day yesterday, other than that not sure.
CoEMF :devil: :feuer:
WrathOG777: This is a roleplaying game. There is no such thing as winning or losing. Only playing.
Player of Dameon Nepirtas

Jo' d
Silver Member
Posts: 1234
Joined: Wed Jun 16, 2004 3:10 pm
Location: Somewhere called Ar-Kansas (-6 GMT)

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Jo' d » Sun Nov 02, 2008 5:51 pm

Alex sez:
...Zebranky got a hold of a PW...
...With this he has the ability to reverse the encryption on forums PWs and log in as someone else.
Could we have an informative (think low level internet law savvy here) post with pertinent info, as to the legal ramifications this char 'Zebranky' has opened himself too, by his actions? Do we have anyone speaking with this person in RL? Do we know who he/she is in RL? I have changed all my PWs (copap wide), but still do not understand the tech as to what he learned and any effects it could have on my internet exp or my privacy.

Sorry for what may be lame questions, I suspect Im not alone in the community as to being a little (in truth, 'little' doesnt do me justice, 'seriously' would be closer to the mark) deficient in Techspeak literacy.

Thanks Team!

Jody
PEACE PLEASE!

Brayon
Team Member; Retired with Honors
Posts: 4087
Joined: Mon Nov 21, 2005 3:57 am
Timezone: GMT -5
Location: Tampa, Florida
Contact:

Re: Everyone Change Your Forum Password Now - Not a joke

Post by Brayon » Sun Nov 02, 2008 7:47 pm

With this in GD...

Basically Jo'd, with the Password he took, he was able to download the Databases for the forums and the Vault, and the Mods. Using other programs he could go through that DB, and get your Username, Password, E-mail address, PMs that were saved, what other accounts are attached to your IP, etc. He could then post on the forums as you, read any PMs that was attached to your account in the DB or live on the forums. Go to other CoPaP forums, try the Password/Account there, if they are the same, and do the same things on that site.

I could be wrong, but I believe in Florida that what he did falls under the Felony Fraud charges. Also, I believe Federaly, he could be arrested for Wire Fraud, due to getting this across state lines.

The most disturbing part of the above to me, is the fact he got the mods. I can only imagine seeing them posted to NWNVault... :shock: If he gets my password, and unlocks my PMs, or reads an e-mail... Then he would be quite bored.

Pleth is the Best!
AJ is Arcadia's Brother


CoPaP Ambassador for Arkaz, DM Ralyorm for Arkaz/Hala.

Locked