Slashdot Mirror


Japanese Man Arrested For Virtual Theft

Kethinov writes "The Daily Yomiuri is reporting that a 21-year-old man was arrested for "illegally accessing an Internet game server to sell a virtual 'house' owned by a woman to another game participant for 50,000 yen, police said Thursday. According to the MPD, Ryusei Sakano of Itabashi Ward, Tokyo, posed as a female game player he met online while playing 'Ultima Online,' a popular Internet-based game. Sakano reportedly asked the game's system administrator to provide the female player's entry password on the pretext that she had lost her password to the game.""

43 of 208 comments (clear)

  1. Virtual Arrest and Virtual Fine by siliconshock.com · · Score: 4, Funny

    Maybe they should virtually arrest him and give him a virtual fine or virtual jail!

    1. Re:Virtual Arrest and Virtual Fine by D+iz+a+n+k+Meister · · Score: 5, Funny

      Then he could virtually, uh, "drop the soap".

      --

      He painted a unicorn in outer space. I'm askin' ya, what's it breathin'?
    2. Re:Virtual Arrest and Virtual Fine by mooZENDog · · Score: 5, Insightful

      Maybe they should virtually arrest him and give him a virtual fine or virtual jail!

      I think the fact that real money was involved at some point (how much is ¥50k anyway?) is what's got the authorities involved. There was loads of this sort of thing with Diablo II I believe (not really an expert on these MMORPGs though, don't think real money got stolen, although there were a few auto-generated (i.e. fake - an interesting concept in a virtual world) items being sold, wern't there?).

      It seems as though this will be a new trend in/type of crime. I will be interested to see what the outcome of this one is, and let's not forget the poor sod who paid real money for this house, and got sold up the river. "I paid 50k Yen for this virtual house, and all I got was this lousy Tee-shirt!" *hehehehe* >)

      --

      ---
      "An eye for an eye leaves the whole world blind" - Gandhi
    3. Re:Virtual Arrest and Virtual Fine by Ninja+Master+Gara · · Score: 4, Informative
      ¥50,000 == $414.38

      Exchange is just over ¥120 to $1

      --

      ---
      When I grow up, I want to be a kid again.
    4. Re:Virtual Arrest and Virtual Fine by Anonymous Coward · · Score: 2, Insightful

      People who get all excited about virtual events in virtual reality online games should be sent for reeducation to an African village where real people are starving to real death, and the cost of a virtual house would feed everyone for a month.

      What a fucking waste of evolution.

  2. for the inevitable slashdotting.. by siliconshock.com · · Score: 5, Informative

    'Ultima Online' hacker arrested over 'house' sale
    Yomiuri Shimbun

    The Metropolitan Police Department has arrested a 21-year-old man on suspicion of illegally accessing an Internet game server to sell a virtual "house" owned by a woman to another game participant for 50,000 yen, police said Thursday.

    According to the MPD, Ryusei Sakano of Itabashi Ward, Tokyo, posed as a female game player he met online while playing "Ultima Online," a popular Internet-based game.

    Sakano reportedly asked the game's system administrator to provide the female player's entry password on the pretext that she had lost her password to the game.

    The police said Sakano then used the female player's password to illegally access the company's U.S. computer server for the game a total of seven times over a period of three months from September.

    According to the MPD, Sakano took advantage of the fact that the game's virtual gold pieces--used by players as a virtual currency--can be traded through bulletin boards. He sold a virtual house belonging to the female player valued at 25 million gold pieces for 50,000 yen, the police said.

    1. Re:for the inevitable slashdotting.. by Longinus · · Score: 5, Insightful
      'Ultima Online' hacker arrested over 'house' sale
      ...
      Sakano reportedly asked the game's system administrator to provide the female player's entry password on the pretext that she had lost her password to the game.

      Oh yeah, that's some 31337 h@X0r1ng right there. Well, if nothing else, it once again proves that social engineering is most effective cracking tool.

  3. 50,000 yen = about $417 (USD) by Anonymous Coward · · Score: 5, Informative


    (just in case anyone was wondering)

    -- Guges

    1. Re:50,000 yen = about $417 (USD) by forged · · Score: 2, Interesting

      Can we still speak of Virtual Theft for a matter of $400 ? That sounds like proper theft to me.

  4. Finally!!! by Sleeper · · Score: 5, Funny

    At last people are taking this stuff seriously...
    Now they just need to catch that guy who shows up here looking like me and screws up my karma.

    --
    - Back off man. I am a scientist
    1. Re:Finally!!! by Sleepr · · Score: 5, Funny
      Sleeper wrote "Now they just need to catch that guy who shows up here looking like me and screws up my karma."

      Microsoft R0X0rS! Linux sUx! In Soviet Russia, all your petrified Natalie Portman hot grits and f1rst p0sts belong to goatse.cx.

      Hrm, wait a sec... that won't work...

  5. Virtual Real Estate by sssmashy · · Score: 4, Funny

    I knew the real estate market in Japan was pricey, but 50,000 yen for a "virtual" house???

    Sounds like some frustrated Japanese are desperate become homeowners they're willing to settle for houses that don't even exist in the material world....

    1. Re:Virtual Real Estate by Anonymous Coward · · Score: 5, Funny

      So they're arresting a guy who sold a house that didn't exist, to a buyer who was willing to pay for it anyway, for a big wad of cash, and all in a day's work.

      Dude, don't lock him up! I want him to be my real estate agent.

  6. Idiot Admin by Bartmoss · · Score: 4, Insightful

    Never reset/give out passwords without 100% proof of identity. That said, this is really a non-news item, except maybe as a footnote in entertainment history. There has been trade of "virtual property" (which really isn't different from other types of data/accounts), and this is just really plain old fraud.

    1. Re:Idiot Admin by Xugumad · · Score: 4, Insightful

      Okay, how? Short of the person turning up in person with photo ID, 100% proof of identity just isn't going to happen. On the other hand, posting the new password to the user's registered address would have made a lot more sense to me, or maybe just calling back with the password. Not foolproof, but it makes it non-trivial to get someone else's password.

    2. Re:Idiot Admin by Bartmoss · · Score: 2, Informative

      For a game, using a registered (and verified during sign-up!) email address might be sufficient. For more serious issues, yes, photo-id should be required in my book. And handing out existing passwords is even worse than resetting a password, because many people re-use their passwords on other systems, or have some sort of system for their password choice, which could be guessed at by obtaining a sample.

    3. Re:Idiot Admin by Lawbeefaroni · · Score: 2, Informative

      Well that and resetting the password will also tip off the legit user something is wrong (when they go to login with their old password and it doesn't work). Ideally you would re-set the password and email the new one to the user's registered email address.

      --
      "When it rains, it pours." --Morton's Salt
    4. Re:Idiot Admin by sfe_software · · Score: 2, Informative

      Okay, how? Short of the person turning up in person with photo ID, 100% proof of identity just isn't going to happen.

      In this case, *resetting* the password (changing it to something new) would have been much more appropriate. Given that he had been accessing the account over a period of three months, obviously the real account holder would have noticed that their password no longer worked by that time.

      I say, never *give out* the current password, only reset to something new after confirmation (using the correct email address, or providing some information that was provided upon account setup -- a "security question" perhaps). Not foolproof, but it would certainly stop someone from using a hijacked account for such a long period of time.

      --
      NGWave - Fast Sound Editor for Windows
  7. This sure isn't the first case of UO house fraud by Jarnis · · Score: 5, Informative

    Anyone who has followed/played UO over the years knows that all kind of fraud happens all the time. This case is notable because the guy both illegally accessed the account of another person by social engineering the password (this is clearly illegal in most countries), and surprisingly *got arrested* for his stunt. I could dig you numerous stories of people being frauded out of their virtual possessions thru old fashioned tricks or outright password stealing using trojans and social engineering emails designed to lure the victimg to disclose his account details.

    In previous cases these incidents have usually been ignored by law enforcement, as it's understandably hard to explain how someone 'stole' stuff from you when it's all bits on some game server. So most cases are handled by EA/Origin customer support, and while sometimes the stuff is restored by the game admins, there are plenty of cases when the thief got away scot free since the situation was 'word against word' and EA/Origin decided not to interfere.

    Looks like in this case the person losing the stuff went further than EA/Origin customer support and got law enforcement onto the case - and they actually responded and arrested the guy!

  8. The world's oldest (male) profession... by ites · · Score: 3, Funny

    After virtual theft, can we expect to see virtual estate agents ("it's a real bargain, sir!"), virtual cops ("I'll track down your thief for a mere 10m gold pieces, ma'am!"), virtual lawyers ("my client was temporarily insane due to the pressure of game conformity, m'lod"), virtual punishments ("...and banished for life to MSN"), and virtual sex ("50m gold pieces and I'll tell you a nasty little secret..."). Can't wait.

    --
    Sig for sale or rent. One previous user. Inquire within.
    1. Re:The world's oldest (male) profession... by jamesangel · · Score: 3, Interesting
      Well, according to the FAQ, in the new Star Wars Galaxies game players who do not obey the laws (murdering, looting etc) can be declared outlaws. They can then be hunted down by virtual cops (bounty hunters, also other players) and get that virtual punishment (being killed).

      Such rough justice could only happen in a virtual environment, of course. Or Texas.

  9. sysadmin should be fined as well by Anonymous Coward · · Score: 4, Insightful

    In the real world, the sysadmin should get a serious fine as well! I mean he is the key keeper of that very place.
    If I loose the key to my appartment, my landlord will definitely want to see some ID and so to check if I am really the one I say I am - the tenant of that very appartment on the 15th floor. If he would give someone else the key to my appartment and my stuff would be stolen, this landlord would be in deep trouble.
    When a computer user looses his password (key) the sysadmin (landlord) must make sure the claimer is truly the user (tenant) (s)he says (s)he is, before giving out the password.

    Totally agree the one getting the password gets fined for this action.
    The sysadmin however should also be punished for this.

    Wouter.

  10. TMI in case of women. by Anonymous Coward · · Score: 3, Insightful

    Why is it that the other player was necessarily called female player twice? We already knew she was a woman. A man would hardly have been repeatedly called "a male player". I could understand it if she was "a klingon player" or something. And, this happens all the time - as if women were a rare and unique species. I wouldn't call it sexism, really, just TMI.

  11. Thinking about it.. by Anonymous Coward · · Score: 5, Interesting

    There must be some huge houses in UO. Back when I played the game, a good three years back, I saw some large houses that were full packed to the walls with stuff. All hoarded by the owners. Usually gangs of Player Killers but sometimes genuine people too. UO was such a crazy game back in the day. All the bugs that let people get into your house etc.. quite humourous. Of course, the duping period was fun too.

    Anyone remember Skunk Works?

    The point is .. UO must have some pretty major players who own *alot* of stuff if the world hasn't been wiped since I played. If people have stuck around since then, they must own lots.

    I can see the appeal of selling a good character, its like allowing someone to win the UO lottery.. for a price, they get to enjoy all the rewards they may not have been able to get.

    1. Re:Thinking about it.. by Anonymous Coward · · Score: 2, Interesting
      The point is .. UO must have some pretty major players who own *alot* of stuff if the world hasn't been wiped since I played. If people have stuck around since then, they must own lots.

      I can see the appeal of selling a good character, its like allowing someone to win the UO lottery.. for a price, they get to enjoy all the rewards they may not have been able to get.
      You're not kidding. I played for 3 years, and in July of last year I sold off my two accounts as one package. I recouped every penny I'd paid for membership fees and the copies of the game themselves. In the end, not counting the value of the time I spent playing, I essentially wound up playing the game for 3 years absolutely free.

      You might be surprised if you take a look on eBay, castles are up now and then, large towers are up for sale fairly often. $400 or so isn't unusual. There was just a new expansion released, which apparently added more land for housing, so the housing prices on eBay will probably drop for awhile. But if you can be one of the lucky ones to place (or buy with ingame gold) a larger house, you're in for some serious cash.
  12. Re:Theft? by The+Only+Druid · · Score: 4, Informative

    There's an argument in several models of jurisprudence (notably realism and Dworkinism) that fraud, when it causes economic loss, is no different from theft. Or, if its different at all, it is not a seperate crime but instead a sub-class of theft.

    In this interpretation, the definition of theft becomes something like "The deprivation of a person's rightful and legal property through illicit means." With such a definition, its clear that there's some difference between knocking you down and robbing you, and stealing your Ultima password and selling your stuff, but both would be theft.

    --
    "Stumble before you crawl"
  13. Could he be virtually imprisoned? by SoftwareTechie · · Score: 2, Interesting

    I've never played one of these games so I don't know how sophisticated they are but, aside from the actual fraud that has been (allegedly) committed, if the guy concerned had a UO account of his own, it would be interesting if his character could be placed in confinement (with guards) and not allowed to leave and resume normal activities for a period of time.

    --
    Political Correctness is doubleplusungood.
    1. Re:Could he be virtually imprisoned? by murdocj · · Score: 2, Insightful

      I've heard that done in Everquest. Apparently if you annoy the GMs enough they can dump you into a padded cell for a week, where you get to sit and contemplate your crimes. Don't know if the week is measured in real world time, or whether you have to actually be logged in for a week.

  14. It wasn't a sysadmin by Anonymous Coward · · Score: 5, Insightful

    All of the telephone support for UO is farmed out to some call center with inarticulate reps who don't actually play the game. I've called UO account support several times, and every single time wound up with someone who could barely speak English. These folks don't play UO, they don't have a clue how the game works, all they know is the scripts they've been given. They know how to enable an account, they sure know how to sell gametime codes, but if you mention "Pacific" or "Baja" (server names in UO) they have no idea what you're talking about.

    Worse, one time the rep proactively gave me the name of their internal customer tracking database (it's called "Catbert," apparently). This was without prompting. I was having a problem logging in to a specific shard, but this guy didn't have enough access to fix the problem. So he told me to call a different number and "tell them to fix your record in Catbert."

    Out of curiosity, I looked. Sure enough, catbert.owo.com is an actual host on their network. Lord only knows what kind of social engineering the word "Catbert" might allow one to get away with.

    Point being, there will always be weak links like this when your support contract goes to the lowest bidder. I seriously doubt that it was the "system administrator" who gave out the female player's password. It was more likely some guy in Singapore making $2.50/day to answer phone calls.

    1. Re:It wasn't a sysadmin by Anonymous Coward · · Score: 2, Interesting

      This wasn't always the case. EA has slowly farmed more and more support out to India over the years in an effort to reduce costs.

      Why? Because the support department is under the auspices of EA.com which contains little else other than customer support and the idiotic $150 million purchase called Pogo.com. Since all the online games are released under EA Games and the wholly EA owned studios that produced them all profits go into EA Games and then trickles to the studios. The only way EA.com "makes a profit" (theoretically since it never has) is to bill the individual studios for customer support time. And in the age old tradition of shafting employees and attempting to maximize profits they charge upwards of $40/hour for a US customer support rep to support a studio's game (while paying that rep around $10/hour or $3-$4 less than even a Dell phone tech). The Indian support team is even cheaper which is why more and more work has been farmed out to them (you will also find this at Dell if you call during off peak hours). Thus while EA as a whole posts record profits on record revenue, EA.com and the support team keeps getting whittled away.

      And you are actually wrong about the Indian guys not playing. They do play, but the their level of knowledge is not high and the language barrier is a big problem. After months of assisting custoemr they usually get as good as a newbie US support member, but at that point they are usually "transfered to another team" or some such and a new batch of clueless, language impaired newbs is forced on the US support staff.

      Knowing the name of the internal DB gets you very little, and I doubt the main article's story got all its facts right (unless the Japanese support team has begun ignoring the rules again) as very few support personnele have access to the passwords themselves. Billing verification must also be made first.

      Catbert is little more than a basic stats/usage and notation device. Most data stored in it relates to actions that have been taken against an account by the support service for violations and whatnot. If he was instructing you to have them "fix your account in catbert" it probably means that you were penalty boxed (either for bad behaviour of by accident) and a GM needed to remove the PB (if accident) and note your account as to why the PB was removed.

      Don't knock the US half of the support team (though you probably get to see less and less of them) as they are a dedicated bunch of wonderful people working their guts out trying to do the right thing.

      If you want to blame someone, go after the soul crushing company that is grinding them into dust. Rumor has it EA is ready to lay off most of EA.com to "improve profits" and shift the support team from Austin to LA (where they just crushed and relocated what's left of Westwood to).

      You think MS is evil? Try talking to an EA exec for 20 minutes. See if you can resist punching them in the mouth.

  15. Re:I don't get it... by Duds · · Score: 4, Insightful

    People buy online items for real money on occasion.

    This man fraudently obtained the online item but getting the password and then sold it for real money.

    so he's guilty of fraud for a start.

  16. Re:I don't get it... by WegianWarrior · · Score: 2, Insightful

    Easy.


    He gained access to something he didn't have a right to access, by stealing the password. He then sold - or at least got money for -something he didn't own. The fact that the property is virtual is besides the point; obviously someone didn't want it stolen, and some one else was villing to shell out hard cash for it


    There is one word for such things; Fraud

    --
    Everything in the world is controlled by a small, evil group to which, unfortunately, no one you know belongs.
  17. Re:50,000 yen = about �256 (GBP) by terrencefw · · Score: 2, Informative

    for us brits.

    --
    Like tinyurl, but one letter less! http://qurl.co.uk/
  18. Re:I don't get it... by Anonymous Coward · · Score: 3, Insightful

    The crime is due to the fact that there is no difference between someone stealing the "real" bits in your bank account that represent the time you spent flipping burgers (or writing code or whatever) and stealing the "virtual" bits in your Ultima Online account that represent the time you spent amassing game items.

    If someone obtains your password by illegitimate means and empties your account of bits, how could it be a crime with one type of account and not with another? After all, you spent time amassing the bits in either type of account.

    When time from people's lives is stolen, it's so often expressed in terms of the unit of measurement that we call money that it's easy to forget that the value of what was stolen is due to someone's investment of time. Everything you own is the result of an investment of time.

  19. It's built-in sexism by dark-nl · · Score: 2, Insightful

    Douglas Hofstadter made a point about this with A Person Paper on Purity in Language. It was published in his book Metamagical Themas (which is mainly an annotated collection of his columns for Scientific American).

  20. Re:Values and Priorities by kinnell · · Score: 2, Insightful

    Anybody that's purchasing a virtual house with real money must have a little too much time and money on their hands

    So its OK to defraud someone, as long as the're rich?

    It seems to me that real lawsuits and cases should take precedent and perhaps be more strict, than virtual ones where the victims seem somewhat luxurious

    This is a real lawsuit, because the victim was swindled out of real money in the real world. You could argue that selling some one a company which doesn't really exist is a "virtual crime", but not many people would agree with you. Personally, I have little sympathy for the victim, but she's still a victim.

    --
    If I seem short sighted, it is because I stand on the shoulders of midgets
  21. He's goin' down by royalblue_tom · · Score: 2, Interesting

    So he used a social engineering attack to illegally enter a computer system, and manipulated the data therein for his own profit.

    If this was in the US, they'dd be locking him up for 30 years as a hacker terrorist ...

  22. Try an E-Bay Search by Greyfox · · Score: 2, Informative

    Search E-Bay for "Ultima Online" or "Everquest" sometime. I've seen prices go well over $1,000 USD there for primo accounts. Bidding for 1 Million gold on Ultima Online usually starts at somewhere between $10 USD and $20 USD. We did a quick back of the napkin calculation of the worth of one virtual character based on that and decided that if he put his mind to it, he could probably sell his stuff for in the neighborhoold of $9,000 USD. I've heard of companies being formed to collect Everquest stuff for sale on E-Bay.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    1. Re:Try an E-Bay Search by Henry+V+.009 · · Score: 2, Insightful

      If he had gotten a job instead of playing EQ, how much money would he have earned?

  23. Bedroom entrepenaur by YAN3D · · Score: 2, Interesting
    I have a friend who used to play diablo II. Being the resorceful guy that he is, he figured out a loophole in the game that gave him the most powerful items in the game with relative ease. So he would sit there for hours and hours amassing powerful items and selling them on ebay for anything from $5.00 to $350 a pop. He had a really lucrative business going until someone compromised battlenet and released millions of each powerful item which made the items worthless.

    I think he said he made over $20,000 over the corse of one year selling virtual items.

  24. How about that support call? by freeze128 · · Score: 2, Funny

    *RING*

    Tech support guy: "EA Tech support. How can I help you?"

    MAN: "Yes, I forgot my password."

    TS: "Okay, what's your name?"

    MAN: "Jane Doe."


    Does anyone else see the problem with that?

  25. Re:This sure isn't the first case of UO house frau by stephanruby · · Score: 2, Interesting
    " In previous cases these incidents have usually been ignored by law enforcement, as it's understandably hard to explain how someone 'stole' stuff from you when it's all bits on some game server. [...] Looks like in this case the person losing the stuff went further than EA/Origin customer support and got law enforcement onto the case - and they actually responded and arrested the guy!"

    It probably helped that the thief put some monetary value on the stolen property as he was selling it.

    In my state, you can shoot my dog, you'll have a small fine for being cruel to an animal, and you'll have to pay me $10 for the depreciated value of the dog (assuming the dog is a mutt). But on the other hand, if you steal my dog and for some reason you sold it for $500, then that would constitute felony theft and there is a much better chance that the police and the court might be willing to get involved.

  26. People make it real. by TheLink · · Score: 2, Insightful

    UO is a game. So's Superbowl, PGA tour, NBA basketball etc.

    People invest HOURS of their life playing games. If your business depends on them continuing to play, you definitely don't want to piss them off enough to play something else.

    How about Money? You could say its not real too. Its value comes from enough people agreeing that it has value. If one day people believe the USD isn't worth anything, it isn't worth anything.

    Most of what we do is actually meaningless in itself. It's when your life interacts with other people's lives that it starts to have meaning, that is if you believe life has value (think pyramid scheme ;) ).

    You play a silly game by yourself, you're the only one giving it value. You play that silly game with others, the others make it more real. If you make other people happy/entertained whilst playing with them, that makes it good.

    You steal stuff from them, that makes it bad (unless it an agreed part of the game - includes the unwritten rules by game participants).

    --