Slashdot Mirror
Ragnarok Online Hacked Again
An anonymous reader writes "According to a Stratics article, Ragnarok Online, a primarily Asian MMORPG, has been hacked yet again. As many people will remember , Ragnarok was hacked in late June, and a file with every user's passwords/usernames was distributed." Another anonymous reader claims: "Someone logged on as a GM, loaded arbitrary items and distributed them, used the in-game announcement system to announce their accomplishment, and was able to delete all of the official GM accounts." As yet, there's no official statement from the Ragnarok developers on this latest alleged issue.
If they just wouldn't store passwords as cleartext, this kind of thing would happen much less often. Read this interesting article for more on the subject.
Why do you think its called "Ragnarok" ...
/Erik
The old nordic mythology tales about the end of the world, and offen used (here in Denmark) as a description of when things gets out of control !!
There are no infidel hackers in Ragnarok! Never!
One of my friends is one of the Sub GM - The Korean management of Gravity has decided they want nothing more to do with the Americans who consistently cause more trouble than they are worth. There has been no announcement because the GM staff has been dismissed except for a skeleton crew. Word is office supplies and such are being boxed up for return to Korea, and iRO will shut down at the end of the week. They simply don't have enough customers left to support operations in the face of continuous attacks.
Before Rag Online came to the US, a bunch of us tried to sign up for the Korean version...
We couldn't. In Korea, almost every online game requires you to provide a valid KSSN (Korean Social Security Number). Furthermore, these numbers aren't like US SSNs. The number itself reveals such information as birth year and gender (and they tend to enforce gender in the games as well). You can't just make one up, since it either wouldn't have the proper checksum, wouldn't exist in the database, or wouldn't match the age or gender you need. Plus, the Korean government investigates "suspicious use of a KSSN." If a Korean citizen's KSSN is regularly connecting to a game server from the United States, something is likely amiss.
Granted, there are sites that will "sell" you KSSNs, but they often get shut down by the Korean government. We gave up trying and just waited for the American release. (Not that it was worth waiting for -_- Stupid macro-based boring laggy POS MMORPG...)
GeekNights!
Late Night Radio for Geeks!
I am not supprised that it was hacked. Why would you put all of the passwords in the same spot. Some other smart online games have passwords stored in several servers, not in just one file. I am afriad i cant feel bad for them. I feel that it is thire own fault...
Last time I checked, they did not even bother to upgrade their security after June's attack. But let's not speculate, and look at a known case:
Private servers.
Anybody that cared to dig up a bit the history of Ragnarok Online's private servers knows that a sizeable portion of it originated from Aegis. Aegis was the codename of the actual server software that Gravity runs on their servers. Indeed, there was a case of a few hackers in Korea beating the security (or lack of it thereof) and causing the leak of server software to public. This was in mid 2002 if I am not mistaken.
Now, let us jump 1 year forward, to June 2003. Second attack on Gravity servers. Massive leaks of account data. One may think that after the first fiasco, the security measures were strengthened. However reports show up that passwords were stored in plaintext. Therefore one must conclude that if there was not enough attention to this small (and easy-to-fix) detail, the overall security is in the same state.
Which ultimately means that nobody bothered to upgrade their security - if you check your RO client now with a sniffer, you will see that it sends login data in plaintext(?!), not to talk about actual server-side databases.
If they could not fix this in a year, almost year and a half since the first attack, what would make them magically fix it in 1 month. Therefore, attacks like this one will happen, and leaks like this one will happen. It's not a one-time occurence.
This just in, the account that was hacked has been discovered, it was
Username: Administrator
Password: Default
On the serious side though, remember Sega Japan using the excuse of America being full of nogoodniks as the reason they were going to charge twice as much for PSOv2 then they did in Japan? I guess they were right.