Mike wrote:
There's no way one person can hack that many accounts at once without exploiting a security exploit, and I'm sure Jagex keeps their servers secure.
If someone did somehow manage to hack this many accounts at once, Jagex would surely do a rollback to a recent backup, so you have nothing to worry about.
That post is simply trolling with a copy of the top 1 million players off the hiscores organized by name.
Agreed.
1 million accounts, most of which are members, would be a large enough amount that Jagex would do a rollback from the night before. I'm sure Jagex backs up their files every night, if not more often. Yes, lots of people would complain from all the lost time between the rollback point and the hack but the amount that would complain is so minimal when compared to the amount who would complain and quit if they didn't rollback.
To hack that many it would either require an exploit like Mike said or many thousands of computers all trying to hack a few accounts each. If he wasn't using an exploit then he's probably Brute Forcing. Brute Force just runs random strings of characters in the password field until it finds the right one. My
Password article on the informer talks about brute forcing. Considering Runescape locks an account for 10 minutes after about 5 failed logins it'd be almost impossible to brute force one account in a day, let alone one million accounts.
Alex_SE wrote:
Hello5000 from Damage inc
Hello5000 and Damage INC sound familiar. Were either of them related to the Durial incident?