Major runescape hack!

Aquw VettelS 776 · **Posted:** December 28th, 2009, 1:02 pm

Of course this is technically possible, but such a large security hole would surely have been noticed a long time ago. Then again, nothing is ever 100% secure.

Assuming this does all go through and the guy manages it- I think we're all in agreement that there would be a rollback the following day, what with 1 million accounts supposedly involved.

Frankly, however, I think this is a fake. And even if isn't, it will be of no real consequence so long as Jagex manage it well.

Adbot · **Posted:** December 28th, 2009, 1:02 pm

Brimmk · **Posted:** December 28th, 2009, 1:47 pm

I don't see any way to view it in my browser, any other links where i can view and not download?
Anyway, i also think it's an exploit, if anything, there's no way to brute force both passwords and pins. But this shouldn't even be a problem with rollbacks.

edit: Thankfully, I'm not on the list.

Warren · **Posted:** December 28th, 2009, 7:29 pm

*******, I'm on that list twice!!

Jasonmrc wrote:

Hello5000 and Damage INC sound familiar. Were either of them related to the Durial incident?

Hello5000 is a RSBANDB x-mod (also previously banned until phpbb3) - memberlist.php?mode=viewprofile&u=479 (idk how you can go from dragon member to 600 posts XD)
And Damage Inc is a very very very well known RS clan :S

dafin0 · **Posted:** December 28th, 2009, 9:15 pm

Iron Maiden wrote:

Ah ok, I was only suspicious because you had to download.

EDIT: I'm not in it lol. Huzzah for me. Oh and the following members are listed

Shane
Mike
Southrend
Trekkie
Xbladez
The Killer
ZEZIMA! LOL!
THE OLD NITE! LOL!

Probably a fake lol. Zezima lol.

I am asking the moderators to lock this topic simply because i think that this topic will cause alot of unneccesary confusion amongst the 'b&b' community. Here's were they went wrong. First off, the list starts of non-alphabetical. then all of a sudden, it starts from all the accounts with "a" right through to "z". I have spent hours searching this document. I'm not mentioning names. But, there are people that are on the list that said they weren't (including me )

To see if your name is on the list, simply click the link alex_SE put in this topic. Go to your internet explorer bar. (on the page that has the document opened) Then click the edit button and go to "find on this page". Then type your name in the "find what" area and then, click "find next". If it says "finished searching the document", then your name is not on the list.

:twisted:

I am angry that i have helped this idiot get rapidshare points :evil:

Cheers, dafin0 :lol:

Jasonmrc · **Posted:** December 29th, 2009, 12:27 pm

Warren wrote:

*******, I'm on that list twice!!

Popular nowadays, eh?

Warren wrote:

Jasonmrc wrote:

Hello5000 and Damage INC sound familiar. Were either of them related to the Durial incident?

Hello5000 is a RSBANDB x-mod (also previously banned until phpbb3) - memberlist.php?mode=viewprofile&u=479 (idk how you can go from dragon member to 600 posts XD)
And Damage Inc is a very very very well known RS clan :S

Ahh, that explains it. I guess I remember Damage Inc from my Fishing Guild days when everyone would talk about their clans. I used to know the top 10 clans then, now I barely remember their names, lol.

dafin0 wrote:

First off, the list starts of non-alphabetical. then all of a sudden, it starts from all the accounts with "a" right through to "z".

I haven't looked at the list, but I would assume the ones listed first are the major targets.

Question: Why would a hacker post a list of their targets? Anyone who was really scared by the list would change their password everyday and would be almost unhackable. The only reason to post a list is to scare people and try to get people to lock themselves out of their account (by changing the password to something and then forgetting).

Another Question: If he does hack the accounts, what's he going to do? He can't take the items. He can only drop them and/or change the pass of the account. The password can be recovered if security questions have been set. The items are more annoying to get back, but they can be gotten again.

Only way he can really benefit from this(aside from all the popularity he'd get/is getting) is if he's been stockpiling major items and rares (godswords, bandos/armadyl armor, phats, etc) and will then sell them a few weeks after the hack when everybody will be trying to buy their items back. Since there'd be so much less supply and so much more demand prices would rise rapidly. Once they reached the amount he wanted he'd sell and have tons of money.

But if Jagex did a rollback (which we're all 99% sure they would) then he would've gained nothing except popularity.

Alex_SE · **Posted:** December 29th, 2009, 1:46 pm

Jasonmrc wrote:

Only way he can really benefit from this(aside from all the popularity he'd get/is getting) is if he's been stockpiling major items and rares (godswords, bandos/armadyl armor, phats, etc) and will then sell them a few weeks after the hack when everybody will be trying to buy their items back. Since there'd be so much less supply and so much more demand prices would rise rapidly. Once they reached the amount he wanted he'd sell and have tons of money.

But if Jagex did a rollback (which we're all 99% sure they would) then he would've gained nothing except popularity.

That's why most hackers hack. For popularity.
That's why we have computer viruses. 95% of them are not made for profitable reasons. They don't win anything by deleting other peoples files or by crashing their OS (probably a few laughs...).
Just like in runescape, hackers don't win anything by dropping all the victim's items.

dafin0 wrote:

First off, the list starts of non-alphabetical. then all of a sudden, it starts from all the accounts with "a" right through to "z".

I noticed that too. I'm pretty sure now that it was a copy paste from the high-scores and then it was sorted by name.

However... I did notice something strange.
A friend of mine called "loiiiisa" is not ranked and appears on the list.

Adbot · **Posted:** December 29th, 2009, 1:46 pm

rs josec78 · **Posted:** December 29th, 2009, 2:08 pm

How did you find yourself....? Not in order? :s

Skate_Ilkley · **Posted:** December 29th, 2009, 3:06 pm

Use Ctrl+F

I don't appear on this list and I think it's fake.

addiv · **Posted:** December 29th, 2009, 3:08 pm

My name is on the list twice as well, one is first letter capped while the other is not. I have a strong pass, anti-virus, and update the OS regularly so I'm not too worried.

The Killer · **Posted:** December 29th, 2009, 4:23 pm

can't download both mirrors because it's rapidshare and also because the other mirror has a waiting time of 18 minutes for me.

if my name is up there like Maiden says, then ****, does this mean i have truly become famous?

Alex_SE · **Posted:** December 29th, 2009, 5:29 pm

addiv wrote:

My name is on the list twice as well, one is first letter capped while the other is not. I have a strong pass, anti-virus, and update the OS regularly so I'm not too worried.

Your account isn't stored in your computer. It stays in the jagex's servers. Assuming the hack is real (which isn't): you could have the strongest password, the best protection and you could still loose your account.

rs josec78 wrote:

How did you find yourself....? Not in order? :s

I couldn't find Josec78 nor J Blighted. :mrgreen:

Iron Maiden · **Posted:** December 29th, 2009, 7:29 pm

The Killer wrote:

if my name is up there like Maiden says, then ****, does this mean i have truly become famous?

I saw Crazy Kebbit but not SaN KebbiT, so I don't know what to think :/

Tim · **Posted:** December 29th, 2009, 10:16 pm

I guess everyone should be worried, I sort of am, but I got a pin so I hope I'm good, going to be up all night maybe so we'll see, but could someone check to see if I am on the list?

King Kulla · **Posted:** December 30th, 2009, 5:22 am

omgwtfh4x.

Nah, I'm calling it a hoax, not a hax. Publicity stunt, probably. I wouldn't be losing sleep over this, guys. (As I type this at 4:22am, nice)

Arb 67 · **Posted:** December 30th, 2009, 6:10 am

Lol im to crappy to be hacked im not on there