Fort Knox level account security

basilmarket.com forums : Maple Story Tech Help & Patches | 10 posts archived

thread starter arbiter0079 Feb 21 2010 + PM | QUOTE | PERMALINK | REPORT

Fort Knox level account protection here All credits go to spideyjvc of northperry. Hello, friends. After running into a little bump on the road, I've thought up of a way to "lock" your account. That is, this method makes it so that nobody can go onto your account, provided they don't have access your username, birthday, and email account. If someone knows all of that information about you, then you're pretty much screwed hard. In any case, I'm making this thread simply because of all the people dumping loads of NX into locking their items and such due recent events. Weeks ago I passed it off as just another hack scare because most of the time hack "attacks" are just fads in which those who lost their accounts due to their own gap in judgment place their blame on someone else. However, I will admit that there does seem to be quite a bit more people this time around claiming the same thing, as well as this "Vent" dude spilling a list of stolen account info. I will admit that there's a pretty alarming possibility of some exploit existing. Because of this, I tried thinking of a way one could "lock" their account. Before, what one would do to lock their account would be to request a password reset and keep their temporary password until they need to log back in. This would make a randomly generated passphrase every time the user was done with their account. However, many believe that the recent account stealing have to do with a database exploit. If this is the case, while a temporary password may give you a little more protection, it becomes worthless if you crap out on luck and get a password that the group behind this can crack. So what do you do? Create a password that cannot be used, even if it was cracked. Initially, my theory was to use a password with special text characters in it. This would make it EXTREMELY difficult to crack, if this group has the MD5 hashes. However, you cannot copy+paste into the Maplestory client, so that part of my plan was ruined. But then I realized that this password didn't work even on Nexon's site. That's right, using a password with special characters makes it impossible for your account to be logged into. If you try to log into said account in question, you'll simply be redirected to the portal page of Nexon.net, without being logged in or receiving any error messages. So then, even if the group did manage to crack this password (believe me, including special characters really increases the difficulty level on this) they wouldn't even be able to use it. It'd be completely useless to them. This is your key. Use it to lock your account whenever you need, and only open your account with a password reset request. When you sign off from Maple, change your password back to your unusable one. Let me give you some examples. When I say special characters, I don't mean !@$%(etc.), what I mean are characters such as �� and ��. So if you make a password like "FlyMe2DaM9770;on", or "��LetMeSing��", or "��ڪ�ު��ê��", they

My Characters: cloud5478 - 81 Scania I/L Mage

SlyOne 02/21/10 + PM | QUOTE | PERMALINK | REPORT

I guess this might work?

My Characters: KingStrafe - 74 Khaini Sniper

JokersRegale + PM | QUOTE | PERMALINK | REPORT

very very interesting find. thank you for putting this on basil this could prove useful on more than just maple too, actually.

My Characters: UndeadMusic - 37 Scania Assassin

Xerepic 02/21/10 + PM | QUOTE | PERMALINK | REPORT

[quote] arbiter0079 : That's right, using a password with special characters makes it impossible for your account to be logged into. If you try to log into said account in question, you'll simply be redirected to the portal page of Nexon.net, without being logged in or receiving any error messages. [/quote] [quote] arbiter0079 : This is your key. Use it to lock your account whenever you need, and only open your account with a password reset request. When you sign off from Maple, change your password back to your unusable one. [/quote] How would you log on to get the password reset then?

My Characters: Syndalix - 50 KradiaGMS Wind Archer

Gamerkid7 02/21/10 + PM | QUOTE | PERMALINK | REPORT

Also a good way to limit maplestory playing, i suppose

My Characters: IDevilsHeart - 86 Khaini Chief Bandit

JokersRegale + PM | QUOTE | PERMALINK | REPORT

[quote] Xerepic : How would you log on to get the password reset then? [/quote] isn't there a 'forgot password' option or something? where you insert your birthday and you get sent an email with a new, temporary password?

My Characters: UndeadMusic - 37 Scania Assassin

Xerepic 02/21/10 + PM | QUOTE | PERMALINK | REPORT

[quote] JokersRegale : isn't there a 'forgot password' option or something? where you insert your birthday and you get sent an email with a new, temporary password? [/quote] I wouldn't know.

My Characters: Syndalix - 50 KradiaGMS Wind Archer

arbiter0079 02/21/10 + PM | QUOTE | PERMALINK | REPORT

[quote] Xerepic : How would you log on to get the password reset then? [/quote] Well, ask spidey for details, but there HAS to be a "forgot password" of sorts, and now that I think about it, I am SURE there is, just use that to bring a random one to your email, you can then change it to your normal one, or just keep the emal with the random password.

My Characters: cloud5478 - 81 Scania I/L Mage

SmokeyTheBear 02/21/10 + PM | QUOTE | PERMALINK | REPORT

If this method becomes popular (thinking like a hacker here), I'd make a modified client that accepts special characters (assuming there's a password cracker) and put my work back in track, but for this I'd have to either do it myself (which would take a considerable amount of time) or bring this idea to the open. If it were an exploit to the database.....I'd find a way to either change your password via my hack or change your email....and resend your password....change it....resend your pin....and make your life miserable by dropping all of your mezars and godleh items....

My Characters: lVlagicks - 49 Bera I/L Wizard

JokersRegale 02/21/10 + PM | QUOTE | PERMALINK | REPORT

[quote] SmokeyTheBear : If this method becomes popular (thinking like a hacker here), I'd make a modified client that accepts special characters (assuming there's a password cracker) and put my work back in track, but for this I'd have to either do it myself (which would take a considerable amount of time) or bring this idea to the open. If it were an exploit to the database.....I'd find a way to either change your password via my hack or change your email....and resend your password....change it....resend your pin....and make your life miserable by dropping all of your mezars and godleh items.... [/quote] ..i thought modified clients only worked with pizza slices :/

My Characters: UndeadMusic - 37 Scania Assassin