Rift hacked, user information stolen
If you've played Rift, be aware that an account database of developer Trion Worlds has been hacked. The naughty hackers have made off with personal information including addresses and dates of birth, but Trion insists credit card details are safe.
If you've played Rift, or even its open beta, be aware that an account database of developer Trion Worlds has been hacked. While the naughty hackers have made off with personal information including addresses and dates of birth, Trion insists that, "There is no evidence, and we have no reason to believe, that full credit card information was accessed or compromised in any way."
Trion explains, "The database in question contained information including user names, encrypted passwords, dates of birth, email addresses, billing addresses, and the first and last four digits and expiration dates of customer credit cards."
If you use that password anywhere else online, you may want to change it. As seen when Battlefield Heroes was hacked, encrypted passwords and not necessarily secure.
"We have already taken further action to strengthen our systems, even as we, with external security experts, continue to research the extent of the unauthorized access," Trion says.
Account holders will need to change their password and security questions when they next log into Trion's website. By way of apology, Trion will then give your account an item to boost in-game gold game and, if you own Rift, three days of free game time.
-
Alice O'Connor posted a new article, Rift hacked, user information stolen.
If you've played Rift, be aware that an account database of developer Trion Worlds has been hacked. The naughty hackers have made off with personal information including addresses and dates of birth, but Trion insists credit card details are safe.-
-
-
-
-
-
-
-
-
-
They don't prioritize or take the matter as seriously as making and shipping the game on time. Even developers who do web sites have an appalling lack of understanding of minimizing surface area for attack vectors and ignore even simple best practices because they are minor inconveniences during prototyping and design phases. There are a staggering amount of security warnings in most C++ game code bases that are simply ignored, and this culture of dismissing or deprioritizing seeps into all aspects of work-- hiring, training, testing/QA, dev, IT/Ops, etc.
-
Sad but true.
Unfortunately even as a developer if you are aware, willing and capable of preventing these problems, and can see obvious flaws and lack of best practices, quite often your company/boss/employer doesn't share your view.
Security is the most overlooked aspect of software development; I just imagined a wild possibility that some of these attacks are by security professionals trying to increase demand for security professionals.
-
-