|
| View previous topic :: View next topic |
| Author |
Message |
ievilstar
Joined: 23 May 2009 Posts: 4 Location: United Kingdom
|
Posted: Sun Jul 04, 2010 10:13 am Post subject: People who know how to HACK should be STOPPED!!!!! |
|
|
Some users on IMVU know how to hack people and steal the credits in our account.
It's not fair that they know this and everyone are scared of being hacked so they can't even dislike that person who knows how to hack.
Some claim they know. But I know people who know, it's like we can't enjoy IMVU (freedom) instead we have to like someone we don't otherwise they will hack us and disable us. I even have proof.
How do I let IMVU know? This is an unacceptable behaviour. IMVU should change their ways of disabling people. Or tell these people who know how to hack to STOP! Or IMVU should disable them so people don't fear them again.
Seriously, how do I let IMVU know? |
|
| Back to top |
|
 |
ievilstar
Joined: 23 May 2009 Posts: 4 Location: United Kingdom
|
Posted: Sun Jul 04, 2010 10:16 am Post subject: |
|
|
Should I file a help ticket? But this is serious, my friends are being disabled and it's not even fair.
I even have the names of the people who know how to hack. |
|
| Back to top |
|
 |
Invictus
Joined: 19 Jan 2008 Posts: 131 Location: USA - TX
|
Posted: Sun Jul 04, 2010 10:23 am Post subject: |
|
|
I totally feel you on this. I am extorted constantly. Infact recently I had a user order me to comply with his wishes or he'd damage my sales. I reported the conversation. Nothing was done about it. Later, nasty reviews are left on over 3 dozen products from a mule account. Nothing was done about it. In his group a boycott was organized. Nothing was done about it. A help ticket was filed. Not only was nothing done about it but I got nothing but pre-typed responses from (name removed by Mod).
If you're wanting security, accountability and competence, you won't find it here.
There are ways you can prevent being hacked though. Try these steps:
1. don't save your password in client or previewer
2. don't set your password to "remember" on your web browser
3. Have your email account on IMVU top secret. Make an email that no one knows of, don't distribute it, don't even tell anyone you have it. Make the password different from your email account.
4. On passwords for your IMVU account and email account, generate a random 16 character password using a mix of characters (letters, numbers, and signs) and in mixed case. Even using brute force will take forever to figure that one out. _________________
 |
|
| Back to top |
|
 |
LordRiccardo
Joined: 30 Jan 2009 Posts: 13707 Location: United Kingdom
|
Posted: Sun Jul 04, 2010 10:23 am Post subject: |
|
|
You report them whilest in the chat under the safety feature. _________________
“We are masters of the unsaid words, but slaves of those we let slip out” |
|
| Back to top |
|
 |
ievilstar
Joined: 23 May 2009 Posts: 4 Location: United Kingdom
|
Posted: Sun Jul 04, 2010 9:22 pm Post subject: |
|
|
| Invictus wrote: | I totally feel you on this. I am extorted constantly. Infact recently I had a user order me to comply with his wishes or he'd damage my sales. I reported the conversation. Nothing was done about it. Later, nasty reviews are left on over 3 dozen products from a mule account. Nothing was done about it. In his group a boycott was organized. Nothing was done about it. A help ticket was filed. Not only was nothing done about it but I got nothing but pre-typed responses from (name removed by Mod).
If you're wanting security, accountability and competence, you won't find it here.
There are ways you can prevent being hacked though. Try these steps:
1. don't save your password in client or previewer
2. don't set your password to "remember" on your web browser
3. Have your email account on IMVU top secret. Make an email that no one knows of, don't distribute it, don't even tell anyone you have it. Make the password different from your email account.
4. On passwords for your IMVU account and email account, generate a random 16 character password using a mix of characters (letters, numbers, and signs) and in mixed case. Even using brute force will take forever to figure that one out. |
So by informing IMVU is a bit pointless. But this is a serious matter. I can't do nothing on IMVU, always there's people threatening you.
And thank you for the tips on how to 'prevent' it.
Would it be helpful if I just inform IMVU about the user's who can? |
|
| Back to top |
|
 |
ievilstar
Joined: 23 May 2009 Posts: 4 Location: United Kingdom
|
Posted: Sun Jul 04, 2010 9:23 pm Post subject: |
|
|
| LordRiccardo wrote: | | You report them whilest in the chat under the safety feature. |
It wasn't a chat. It's via messages, I even saved them. |
|
| Back to top |
|
 |
Auntiepjl Moderator
Joined: 27 Mar 2008 Posts: 25912 Location: United Kingdom
|
Posted: Sun Jul 04, 2010 11:03 pm Post subject: |
|
|
report the messages please.
you can do this either from the client or the panel on your homepage or the old inbox,
http://www.imvu.com/catalog/web_messagebox.php
depending on which you use there will be either a 'report' or a 'safety' link beside or under the message.
IMVU does disable people who scam and threaten to hack, but they have no way to stop them making a new account.
As already said, use a strong password with symbols and capitals and numbers, NEVER tell anyone what it is. Do not use one that ca be guessed by someone who knows you. Don't use the same password for different sites.
If an offer seems too good to be true, then it is a scam. _________________
Check out my contests in the contests forum. |
|
| Back to top |
|
 |
B3Y4Z1D_disabled_30853241
Joined: 25 Oct 2008 Posts: 12 Location: Turkey
|
Posted: Mon Jul 05, 2010 4:10 pm Post subject: Surprise,surprise... |
|
|
IMVU moderators and admins lack some vital info,I think...
"As already said, use a strong password with symbols and capitals and numbers, NEVER tell anyone what it is. Do not use one that ca be guessed by someone who knows you. Don't use the same password for different sites.
If an offer seems too good to be true, then it is a scam."
What about cookies & log files,my dear friend?
Funny how hackers know more about IMVU than the admins... |
|
| Back to top |
|
 |
Nimit
Joined: 09 Apr 2010 Posts: 614 Location: USA - IL
|
Posted: Mon Jul 05, 2010 4:28 pm Post subject: |
|
|
| Quote: | | IMVU moderators and admins lack some vital info,I think... |
I would suggest being a little respectful on that. They are imvu admins / mods for a reason. Not cause they are family members for CEO of something. Cookies and log files are also important but not for everyone to understand. All momma did was explain in a simple language what can do to prevent this from happening.
| Quote: | | Funny how hackers know more about IMVU than the admins... |
There is no site in the world that has 100% security. Even if they do there must be a backdoor to getting in. The only way people get hacked are cause of their own mistakes. The fall for phishing, scams, and other stuff like sendind javascript emails. There is no direct hack. So you words are fake, dont make sense. And if that were true, hackers would be running IMVU and not the admins my friend. _________________
Married 8/7/2010. I love you my angel  |
|
| Back to top |
|
 |
DiaaNeumos
Joined: 22 Nov 2007 Posts: 428 Location: USA
|
Posted: Mon Jul 05, 2010 7:49 pm Post subject: |
|
|
I agree these people should be disabled, so I'm not saying what you say is BS or anything. What I do have to say in opposition to your thread, though, is that IMVU, or any other online company for that matter, can't stop EVERY hacker in the world... What can they do? Put up a question on the registration that says, "Do you know how to hack others? oYes oNo"? LOL!
Now, what I would LIKE very much to see from IMVU, as I have stated before, is IP bans for those who are found to have hacked or threatened to hack. That would at least work towards preventing the issue... I know, I know, there are IP changers and a lot of ISPs change your IP every time you log in etc etc... but it would weed out at least SOME of them. And so what if that would prevent others using the same IP from getting on... imo I'd rather see an innocent get banned along with the guilty than have hundreds of people's accounts disabled from the guilty just so the innocent can stay on. Maybe that would weed out some more, too, i.e. if a family member would get banned along with them, it might make them less apt to hack in the first place. |
|
| Back to top |
|
 |
Auntiepjl Moderator
Joined: 27 Mar 2008 Posts: 25912 Location: United Kingdom
|
Posted: Mon Jul 05, 2010 11:09 pm Post subject: |
|
|
IMVU will not ban IPs because there are many people who share IPs (schools, colleges, family homes,)
As you said, the IP is changed so easily that if blocked the scammer is back in ten seconds.
Anyone who knows how to scam, and especially those who know how to hack, will not be inconvenienced even slightly by an IP block.
The vast majority of people who lose their accounts to others, do so because they told them their password themselves. (some fall for the 'you won a lot of credits scam', some think they are going to have their hp redesigned, some give it to their best friend and then fall out, some fall for the 'we are investigating your account tell me your password to prove that you own the account' scam.)
Yes, some are genuinely hacked by keyloggers (which they have to have been tricked into downloading) or clicking on the wrong link and getting a cookie stolen on the wrong site, but most scammers do not bother with such techniques because scamming is so much easier.
A good antivirus, malware program, script blocking addons on your browser and a sandbox are the best way to keep safe from hacking, while lkeeping your password strong and secure and SECRET is the best way to keep safe from scammers.
_________________
Check out my contests in the contests forum. |
|
| Back to top |
|
 |
Marilena
Joined: 23 Dec 2006 Posts: 4863 Location: Italy
|
Posted: Tue Jul 06, 2010 1:12 am Post subject: |
|
|
i agree with you  _________________
 |
|
| Back to top |
|
 |
B3Y4Z1D_disabled_30853241
Joined: 25 Oct 2008 Posts: 12 Location: Turkey
|
Posted: Tue Jul 06, 2010 1:38 am Post subject: |
|
|
| Quote: | | I would suggest being a little respectful on that. They are imvu admins / mods for a reason. Not cause they are family members for CEO of something. Cookies and log files are also important but not for everyone to understand. All momma did was explain in a simple language what can do to prevent this from happening. |
She could do better,but she probably doesn't know more loopholes,that is what I'm saying.But I don't blame her for it,she's doing her job and she should have credit for it,but the fault is IMVU's for not researching this properly and informing.If it was up to me,I would disable cookies for users.Its like carrying a seatbelt in the car:It sux and you may complain alot,but you will regret not having it on when that carcrash occurs...
Regarding the other errors in your post:
1.Cookies and logs are simple to understand.What you meant is it can be difficult for most people though,is to read cookies and logs.But I doubt they have to in order to secure themselves.
2.There is more to explain when it comes to hackers,I don't expect admins to tell us all details,but wouldn't it then be easier (for IMVU)to consult an actual hacker about it for possibilities and thorough explanations?
Hackers are witty and yes there are many ways to hack somebody's account.But they depend on the victim in cases such as IMVU,as IMVU is an application running on your local harddrive but connecting through a third party(if not proxy) server to some extent to retrieve info such as the ammount of credits one posesses etc.
Furthermore,I think DiaaNeumos has a point in what she is saying.Anyone can become a hacker easily,so it would be absurd to ban for the knowledge.
Once again I say Auntieplj is good at what she does and I could just plant a big wet one on her forehead for saying that IP-bans aren't effective,however I doubt she and other mods and admins have been through all of the js,php,asp,html and other codes that make IMVU what it is.
Real hackers read all they see and understand it.Most of these hackers that come on IMVU and steal passwords to get others' credits are very petty people and don't really know much about hacking,they see some tutorial and get hubris for discovering a way to possibly hack someone.So IMVU isn't exactley facing the "H4XX0R L3G10N OF D00M!",and they could solve it if they wanted to,with all the money they generate. |
|
| Back to top |
|
 |
Auntiepjl Moderator
Joined: 27 Mar 2008 Posts: 25912 Location: United Kingdom
|
Posted: Tue Jul 06, 2010 10:32 am Post subject: |
|
|
mod hat off
..............
I'll pass on the big wet one if you don't mind.
fyi Mods are not admins. We are just volunteers who try to keep order in the forums, and pass on whatever tips we have managed to learn over a few years of being here. (And pass issues over to staff if we can't help.)
We have no input into IMVU's systems or security. If you have any detailed knowledge of how the real hacking is done then posting a detailed breakdown of it to a member of staff might get somewhere. Try one of the techs who post in the feedback thread.
mod hat back on
Please don't post specifics in the forums though, cos we don't want to give people tips on hacking. _________________
Check out my contests in the contests forum. |
|
| Back to top |
|
 |
Nimit
Joined: 09 Apr 2010 Posts: 614 Location: USA - IL
|
Posted: Tue Jul 06, 2010 10:43 am Post subject: |
|
|
| Quote: | | and they could solve it if they wanted to,with all the money they generate. |
Money doesnt buy u anything. hotmail is a billion dollar site, yet its security sucks more than any other email sites. Only problem imvu facing is that their site isnt made from scratch. Hopefully soon they will change that too. And its not imvu's fault people are getting hacked. Its peoples fault. If IMVU was easy to hack, then hackers would get as many creds as they want. They can control the server if they want to hack cause thats where the creds come from.
| Quote: | | Real hackers read all they see and understand it |
Those are not hacker. Those are called scammers. Hackers are people who can hack the site itself and server, as there is no way to hack account like a software or anything they are called scammers.
| Quote: | | Anyone can become a hacker easily,so it would be absurd to ban for the knowledge. |
No one can become a hacker so easily. If so none of the sites in the world would be up right now. Anyone can be a SCAMMER but there is not a hacker.
| Quote: | | I doubt she and other mods and admins have been through all of the js,php,asp,html and other codes that make IMVU what it is. |
If this were true you wouldnt have been here posting right now my friend ^^. The only reason imvu codes get messed up is cause of open source. Rest they have been through all or you wouldnt have been here posting  _________________
Married 8/7/2010. I love you my angel  |
|
| Back to top |
|
 |
|
|
|
Hide ads? Get VIP!
|
|
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|
| |
|