NationStates Jolt Archive


Help For A Hacked Nation

Karchosia
22-02-2005, 20:14
I am coming here on behalf of my fellow nation and friend, Entsteig, who discovered today that his nation has been hacked into and his password changed. I am not sure if he still has access to the forum, but I will post for him. If any of the moderators could help, that would be great!



Hackers :mp5:
TehInterwebGame
22-02-2005, 20:26
In all probability, they didn't get "hacked" they gave their password out like an idiot.
Hersfold
22-02-2005, 20:30
You may want to file a Getting Help (http://www.nationstates.net/cgi-bin/index.cgi/41532/page=help) report. The mods will need your friend's nation's name.

BTW, unless the e-mail has been changed as well, your friend can click the "Forgotten your password?" link.
SalusaSecondus
22-02-2005, 21:02
Yup, looks like someone grabbed it.

I've rolled back the email to the original one and scrambled the password. He can get a new password by requesting it from http://www.nationstates.net/cgi-bin/index.cgi/page=forgot_password I'll verify the culprit (I'm 99% certain I know who it is) but I must ask your friend a question, "Do you have a younger sibling (or a child)?"

It looks like he left his nation logged into and someone came along to the computer, found it logged in, and changed the password.
Makaar
22-02-2005, 22:01
If I may?

Why not include a box where you have to supply your current password to change it. So:

Current password:
New password:
Confirm new password:

???
Jjuulliiaann
22-02-2005, 22:29
If I may?

Why not include a box where you have to supply your current password to change it. So:

Current password:
New password:
Confirm new password:

???It's been asked before and denied, although I agree with you. I don't know why not.
SalusaSecondus
22-02-2005, 23:24
It's been asked before and denied, although I agree with you. I don't know why not.

I'd like one, but there are concerns about people not remembering their passwords and just getting on through auto-login.
Karchosia
22-02-2005, 23:26
Yup, looks like someone grabbed it.

I've rolled back the email to the original one and scrambled the password. He can get a new password by requesting it from http://www.nationstates.net/cgi-bin/index.cgi/page=forgot_password I'll verify the culprit (I'm 99% certain I know who it is) but I must ask your friend a question, "Do you have a younger sibling (or a child)?"

It looks like he left his nation logged into and someone came along to the computer, found it logged in, and changed the password.


He does have a younger brother and sister, but neither of them has the knowledge of how to change the password because they are too young. Thank you for the help though!

P.S. Has anyone thought of making a Hacker Report forum? It might be a good idea to crack down on hackers!
Kwaswhakistan
22-02-2005, 23:27
which is why maybe an email should be required, and then if they forget the password, they just use the forgotten password link. of course then there would be a lot of people who would hat ehaving to put in an email.... but you can never satisfy everybody...
Jjuulliiaann
22-02-2005, 23:28
He does have a younger brother and sister, but neither of them has the knowledge of how to change the password because they are too young. Thank you for the help though!
I think that you may have just given away the answer. I am not sure, but I think that Sal was asking your friend that as a sort of security question. I don't think that you were supposed to answer the question, but I may be wrong.
:rolleyes:
SalusaSecondus
22-02-2005, 23:48
I think that you may have just given away the answer. I am not sure, but I think that Sal was asking your friend that as a sort of security question. I don't think that you were supposed to answer the question, but I may be wrong.
:rolleyes:

Yes, you are wrong. That question was asked along the lines of "It might be them.... though I can't tell for sure."
Jjuulliiaann
23-02-2005, 00:04
Yes, you are wrong. That question was asked along the lines of "It might be them.... though I can't tell for sure."
Hehe. Sorry then.
Majesto
23-02-2005, 00:20
Sorry about ^ :(

I'd like one, but there are concerns about people not remembering their passwords and just getting on through auto-login.
How about a security question or something? A lot of sites ask for your pets name, father's middle name, mother's maiden name, name of your school or what not in order to change your password or request a new one. Why don't we implement something like that here?
Hersfold
23-02-2005, 00:30
It would be nice to have an extra security feature. When nations sign up, they can enter a question which only they would know the answer to, and supply the game with the answer. Then, whenever they went to change anything in Settings, including the question/answer itself, they would have to answer that question.
Karchosia
24-02-2005, 21:48
It would be nice to have an extra security feature. When nations sign up, they can enter a question which only they would know the answer to, and supply the game with the answer. Then, whenever they went to change anything in Settings, including the question/answer itself, they would have to answer that question.


If they had an older sibling that bothered to answer a security question, they might know the answer too. Just a thought.
SalusaSecondus
25-02-2005, 05:52
Sorry about ^ :(


How about a security question or something? A lot of sites ask for your pets name, father's middle name, mother's maiden name, name of your school or what not in order to change your password or request a new one. Why don't we implement something like that here?

Horribly insecure. If you provide an email address you can always recover your password. I think that's the best way to ensure security.
Majesto
25-02-2005, 06:05
Horribly insecure. If you provide an email address you can always recover your password. I think that's the best way to ensure security.
An added security question would be horribly insecure, how so? An e-mail coupled security question would definatly make passwords more secure, I think, since you'd need to have access to the e-mail address and a piece of private information.

Honestly though, (for me) things are fine as they are if you take reasonable steps to keep your password to yourself and keep auto-login turned off. I've logged in on school computers more times than I can count and I've never had a problem with my nation being hacked or anyhing like that.