Gamigo hacked - accounts compromised/deactivated?

[Seher]

Originally Posted by kmdk

Only if you use a untouched version of vBulletin exploits are avaible.
Any admin tweaks this kinds of forum/blog/database.

I don't think Gamigo has heard of this thing called "admin". At our lovely GEMA they haven't, either.

http://img1.imagebanana.com/img/y9w4hc23/calvin.png

[Pakos]

Originally Posted by Babylou

Holas a todos

Solidaridad para los jugadores Nemon

Estas personas han tambien contribuido financieramente al desarrollo de este juego.(ximes)
Ellos están en un callejón sin salida.
Por falta de dirección de correo electrónico.
Se debe proporcionar a Gamigo: Prueba de identidad...
Fotocopia de la cédula de identidad, pasaporte... para restaurar la cuenta al jugador
Los datos personales, ya han sido robados en la base de datos
Los usuarios pueden confiar en ellos?...

Una situación excepcional...exigen medidas excepcionales para reparar la culpa.
Ejemplo: (imágenes de sus personajes, dirección conexión (IP)...)
Nada de lo que toca las vidas de las personas privadas.

Muhahaha ... También pidieron a la fecha de creación de la cuenta y la dirección de correo electrónico de éste cuenta perdido.

NGD acudir en su ayuda por favor

dude wrong language ;o

[Babylou]

Hello all
In solidarity with the players Nemon
These individuals also contributed financially to the development of this game (ximes)
They are in an deadlock.
They must provide at Gamigo: Evidence of their identity...
Photocopy of identity card or passport ... for to restore their account
I remember that personal data were stolen from the database Gamigo.
Users can they be trusted?...
An exceptional situation does not require exceptional measures to repair the fault? (Example: photos of their character or IP connection address....)
Y was he not a way to prove things without going into the private lives of people?

Muhahaha...They also asked the date of registration of the account and the e-mail lost.

NGD Help them please


Sorry error ...Pakos for the wrong language.

My English is not good so I use a translator

[Ilakagina]

Originally Posted by Babylou

Y was he not a way to prove things without going into the private lives of people?

At least according to the announcements Gamigo made in the german forums you have the choice between sending them account information (screenshots, items you posses, gold, wm coins, whatever) or sending your identity card.

That's the theory, in the practical usage the Gamigo support staff will always ask your for the ID - at this point you have to say "No, I will send you ingame information instead"; if they don't want to accept it tell them that their gamigo product manager offered this way in the forums. Going that way will slow down the process, no doubts about it.

The point is that they have to check the ingame data you provide them. When you send them the ID card they don't even look at it; there are several cases where they changed the accounts email (that means the same as changing the account owner) without checking the name of the sent ID card - yeah, they assigned wrong accounts ... that's Gamigo

Originally Posted by Babylou

I remember that personal data were stolen from the database Gamigo.
Users can they be trusted?...

No, they can not be trusted.
Beside the already mentioned wrong assignation of accounts that brings a bit of light into the caotic situation at gamigos help desk there were more incidents AFTER they have been hacked.

For example last Friday players were able to reset their GAS (gamigo account system) password, however players who tried do to the same the next day (saturday) were unable to login. Gamigo could not solve the issue during 6 hours.
Then a player found the error, newly (on saturday) registered players had to create a MD5 Hash with their password and insert the MD5 hash into the pasword login field to connect to the system.

Nice, anybody who worked a bit with databases knows what this means. Old passwords were stored as plain text in the SQL database while passwords created on saturday or later were stored using unsecure MD5 encryption. An absolute no go!
They appearently have no clue what they are doing at Gamigo.

[Cuchulainn]

Originally Posted by Ilakagina

...
No, they can not be trusted.
[...]

Gamigo cannot be trusted indeed. Gamigo is owned by Axel Springer AG, which is one of the largest multimedia companies in Europe. This doesn't help with their credibility IMHO.

[Ilakagina]

Great, after a complete shutdown of all services for several hours during the morning Gamigos system is offline again - second time just today.