test content
Logo
What is the Arc Client?
Install Arc
cyber attacks - our account info secure?
ultimateblu
Member Posts: 28 Arc User
hi, i just started playing and i was wondering what is the nature of these cyber attacks? is someone trying to get our account and payment info?
0
Comments
"Great men are almost always bad men."
“If God is all-powerful He cannot be good, if God is good He cannot be all-powerful!”
A "hack" and a DDoS are two different things. Someone who knows more about it can tell you more than I can, I'm afraid.
once it get full, it crashed. so it made server to "reboot it self" with empty server.
i hope i explain best i could.
Typical infrastructure practice 10 years ago is to put say, x number of servers behind a virtual IP, or a set of IPs (public facing IPs in both cases). In this case it appears its behind either single or contiguous set of IPs that is easily obtained by just watching an app's login traffic.
But that's 10 years ago...In today's world that's like putting a "DDOS ME" sign on Cryptic's back for any botter worth their salt. This is, most likely, methods employed to save money.
PWI/Cryptic in their ultimate wisdom chose to forego things like:
- Geo load balancing
- Anycasting (e.g. same IP, but announced through BGP at different parts of the world, effectively distributing the load rendering DDOS which is used to attack CENTRALIZED resources much less effective)
- Hybrid mitigation methods which uses combination of the above based on dynamic thresholds...One way is to punt by signature/traffic patterns to an extranet so that the bots continue to attack dummy services while legitimate traffic continues to flow through
They are probably working hard to combat the problem, probably started by changing VIPs/DNS records, which is not hard at all to track by good hackers. But until they can revamp their infrastructure, all attempts are just in time meaning there will be a hiccup/etc measured in minutes, unless they have the resources to automate said efforts, which would require a pretty sophisticated IIS and/or netops team that actually knows what they are doing.
Or they can just opt to adopt DDOS mitigation through cloudflare/Akamai, which costs money.
Although this is not an intrusive attack, this can be used to expose vulnerabilities while services are down, which can make assets susceptible to intrusive attacks.
Anyway expect NeverGodz to continue to have fun at PWI/Cryptic's expense until they get their act together.
3K IL WK Sabo TR
Trying to suck less @ pvp near you
took me over 2h to update the 200mb and i cant do nothing ...the lag its impossible
any solution ?
also any fix .... or just wait until neverever fix this ?
thx for help
As for the topic of whether a DDoS can take information off of the server: as others have said the answer is NO.
It is simply a flood of ping requests which overloads the system.
Another way of describing it would be to imagine juggling balls. You might be bale to juggle 3 balls effortlessly but for each additional ball it gets harder and harder. Well a DDoS attack is like throwing more and more balls for the server to juggle and eventually when it can't keep up anymore all of the balls are dropped and the system has to restart from scratch.
Nothing on the net is ever 100% secure no matter who it is that is storing it.
Your own computer is probably more at risk as most don't change there routers default admin and passphrase making it very easy for attackers to get on your network and then esculate things.............. I reccomend a look at your own firewall logs, do remember that firewalls often have Faulse alerts in there logs and not all will be malicious
they might be using anycast, the account server getting overload wont be prevented from anycast. limited server resources will always be an issue.
there are several other mitigations that could be put in. like signature checking ids/ips. and they'll stop most bot attacks, depending on how well attack was planned.
DDOSing isn't going to cause a security breach. The only thing it does is overflow the servers so that they crash and people are unable to log in. Think of it as a clogged drain.
It isn't a security atk...