Current Security Issues Discussion

czskrazzi · **Posted:** April 22nd, 2005, 1:26 pm

Ok today jagex had posted a security warning about fansites. This post is for all of us to give some tips on how to keep your computer safe from any hackers.. *** feel free to add any tips you have ***

So ill start with my tips..

ANTI KEY LOGGER: MUST READ: http://www.download.com is apart of cnet and is trusted.. this is no site to do with runescape or anything. This will be the best place to find anti virus programs, firewalls, and anti key loggers..

Anti Key Logger 6.0.1 (new): downloads (16k+), Publisher: Raytown, Date Added: April 18 2005, License: free to try, $59.95 to buy, Minimum requirements: Windows 2000, XP.

Software Publisher's Description

Anti-keylogger provides every computer with strong protection against most types of the keylogging software, both known and unknown. Anti-keylogger blocks keylogging programs activity without using of signature bases in real-time. It is capable to buck various types of keylogging programs possibly included in any commercial, shareware, freeware products, as well as in Trojan horses, viruses of very different operation principles. Due to the Anti-keylogger's protection spy software will not be able to record and steal your sensitive information, passwords, logins, PIN (Personal Identification Number).

Version 6.0.1 features: errors, which could lead to BSoD on newest Pentium IV processors are fixed; improved support of multiprocessor platforms and hypher-threading architecture; a new submodule for protection against a method of low-level keyboard interception is added; flaws in self protection and integrity control are fixed, plus some other bug fixes.

here is the link to the information page where you can choose to download anti keylogger: http://www.download.com/Anti-keylogger/ ... ?tag=tid_s

More Tips:
Get yourself an antivirus program. Norton Antivirus is one of the best. Also please can some ppl post some links for free anti virus programs.. I currently dont have time to get all the links.

DO NOT download anything to do with runescape that is not officially from http://www.runescape.com Im saying this because 3rd party software is very prone to virus attacks. Even if you have the best firewall and anti virus, that will not always protect you. These program can disable and get through firewalls and anti viruses..

Also please do not complain about being hacked if you downloaded something a friend sent you, or from a website. Lets be serious about this ppl. All of you against the idea of hacking other ppls account should post here.

Whatever you do, do not give out your runescape password to anyone, not even your best friend in real life. You are risking losing it by doing this.. I will let everyone else add what they want to now. please help make rsbandb and runescape a safer place for all of us

Adbot · **Posted:** April 22nd, 2005, 1:26 pm

Athelus · **Posted:** April 22nd, 2005, 1:42 pm

wow u managed to word all that very well! that's all good information- plus the fact jagex has taken note of this probably does mean hard times for people playing runescape

edit: here is the link for microsoft's reccomened antivirus software makers http://www.microsoft.com/security/partners/antivirus.asp, dosent give a free download, but im looking for a page i found with free antivirus trials on microsoft- it was very good, with full versions that last up to a year, very useful on a budget so i'll go looking for that now...[/url]

Huitzi · **Posted:** April 22nd, 2005, 1:51 pm

Yeah, I already scanned my pc etc, but has this anything to do with a topic on this forum that gossiped about corrupted admins on some forums that put keyloggers on their own forum?

Athelus · **Posted:** April 22nd, 2005, 2:18 pm

ah looks like the new forum explains all...

czskrazzi · **Posted:** April 22nd, 2005, 2:26 pm

i just wanted ppl to have an idea of my knowledge, some of it anyway.. just trying to keep ya guys safe, and myself safe.

Athelus · **Posted:** April 22nd, 2005, 2:28 pm

yes thank you i knew all that, but it is very well put, and so my thanks, i hope everyone gets a chance to see this

Adbot · **Posted:** April 22nd, 2005, 2:28 pm

ASadEmoKid · **Posted:** April 22nd, 2005, 3:22 pm

That's all so crazy, like a hurricane that hits your house. You never expect it to come so close to you, huh? With over 200 Mil in items stolen, I'm sad to say I would have been on that list had I not logged in when he was changing my character's world. I logged in with all my items in my inventory! :!:

The fact that he confessed leaves a good feeling inside. For everyone that already hasn't, make your RSBandB and RS passwords different. So different nobody can guess at a simple 'number' difference or something like that. I did and it's kept me safe so far.

czskrazzi · **Posted:** April 22nd, 2005, 3:25 pm

exactly, also maybe them very hard to guess using numbers and letters

Athelus · **Posted:** April 22nd, 2005, 3:26 pm

wow im amazed at how it was this forum and how it has affected so many people here!

czskrazzi · **Posted:** April 22nd, 2005, 8:11 pm

its sad to hear rsbandb was hacked.. Im glad the forums are back up and would like to say good job to those who helped get the forum back up..

Jeff · **Posted:** April 22nd, 2005, 8:43 pm

The admins shutted down the forums to check security errors.
Anyways, if you read about this article Jagex said, you'll know that even a jpg file is not safe.
Pretty scary huh?

czskrazzi · **Posted:** April 22nd, 2005, 8:47 pm

ya that is pretty scary..lol I was wondering when this was gonna become more popular, i have friends who are hackers, but hack for a living. or some crap. anyways, my point is that they would do testing on these things, and the picture perile has been used by few hackers untill the last year or so.. this is not 100% accurate, going by memory here. either way, not a good thing.

Question: So a picture uploaded onto image shack can now be compromised? With this patch or hidden program or link in the picture. whatever it is.

Jeff · **Posted:** April 22nd, 2005, 8:50 pm

czskrazzi wrote:

ya that is pretty scary..lol I was wondering when this was gonna become more popular, i have friends who are hackers, but hack for a living. or some crap. anyways, my point is that they would do testing on these things, and the picture perile has been used by few hackers untill the last year or so.. this is not 100% accurate, going by memory here. either way, not a good thing.

Question: So a picture uploaded onto image shack can now be compromised? With this patch or hidden program or link in the picture. whatever it is.

Well, I'm not really sure about that .. Cause you know me, I don't do that kind of stuff

Ok, back to your question, I think they have to add a script to the jpeg file. So just uploading an file to Imageshack won't do any harm. Or viewing a image from imageshack's website.

czskrazzi · **Posted:** April 22nd, 2005, 8:54 pm

kk i read that article, kinda scary, and very hard to do.. I dont do this stuff either.. but i know how to, not with anything advanced, i dont even friggin know html, java, php, or any codes like that..lol but yeah.. anyways.. in that article is explains that all operating systems are at risk, and that its .jpeg format images. I take it .bmp .png .gif and others cant be scripted like that?

Jeff · **Posted:** April 22nd, 2005, 8:59 pm

They got this Jpeg. file keylogger around is because they are abusing the bug.

Quote:

The JPEG bug rounds out a growing menagerie of vulnerabilities in code that displays image files. Mozilla developers last month patched the open-source browser against a critical hole discovered in a widely-deployed library for processing PNG images. And last July, Microsoft simultaneously fixed two image display holes in Internet Explorer: one made users potentially vulnerable to maliciously-crafted BMP images, the second to corrupt GIF files. The GIF bug had been publicly disclosed 11 months earlier.

See they had the bugs for gif. , png, and bmp. before . And they fixed it.
If you look closer into that article, you will see it talks about 'Microsoft Windows' at risk.

P.S. This aticle was published Wednesday 15th September 2004 07:39 GMT. So we don't know if Microsoft or Mozilla developers fixed it yet.