test content
What is the Arc Client?
Install Arc

TRIBBLE through ARC? [Team is Investigating]

the1tiggletthe1tigglet Member Posts: 1,421 Arc User
I'm posting this in both games because there's something fishy going on here. I've played STO now for 4 years. I've used STEAM for 1 year for the login. I've always used the interface on STEAM and the STO launcher to type in my password, never had an issue.

1 week after installing ARC I've been TRIBBLE. What's worse is while I was being TRIBBLE on NWO I was actually logged into STO playing.

Isn't there a main login server to prevent multiple logins on accounts on ARC? apparently not!
Post edited by Unknown User on

Comments

  • thecosmic1thecosmic1 Member Posts: 9,365 Arc User
    edited February 2014
    I hope you sent in an actual Ticket to Support and are not just posing on the forums?
    STO is about my Liberated Borg Federation Captain with his Breen 1st Officer, Jem'Hadar Tactical Officer, Liberated Borg Engineering Officer, Android Ops Officer, Photonic Science Officer, Gorn Science Officer, and Reman Medical Officer jumping into their Jem'Hadar Carrier and flying off to do missions for the new Romulan Empire. But for some players allowing a T5 Connie to be used breaks the canon in the game.
  • the1tiggletthe1tigglet Member Posts: 1,421 Arc User
    edited February 2014
    Of course I did but I thought I might warn people that this is happening. I couldn't believe my eyes when I read the log and it said that someone was logged into NWO while I was logged into STO doing Zen Exchange transfers!
  • greyhame3greyhame3 Member Posts: 914 Arc User
    edited February 2014
    Not that I like Arc, but I don't think that Arc was the culprit. Largely because I've seen these kind of complaints with other MMOs when launchers have changed but the cause was rarely that.
  • grazyc2#7847 grazyc2 Member Posts: 1,988 Arc User
    edited February 2014
    There are more complaints of ARC users being acount TRIBBLE, Ive no knowledge about this all I know from twitter there were more accounts TRIBBLE last week ....
    [SIGPIC][/SIGPIC]

    "Coffee: the finest organic suspension ever devised. It's got me through the worst of the last three years. I beat the Borg with it."
  • [Deleted User][Deleted User] Posts: 0 Arc User
    edited February 2014
    If this is true, then this is troublesome.
  • jonsillsjonsills Member Posts: 10,481 Arc User
    edited February 2014
    So which is it? Does Arc lock down your account so tightly that you can't run multiple instances on different accounts on the same computer, or is it so loose that your account can be accessed from multiple locations at the same time? I'm getting confused...
    Lorna-Wing-sig.png
  • kolbrandrkolbrandr Member Posts: 266
    edited February 2014
    It would be fantastic if they directed the development resources they are pitting into this abomination into the actual games instead.
  • thecosmic1thecosmic1 Member Posts: 9,365 Arc User
    edited February 2014
    jonsills wrote: »
    So which is it? Does Arc lock down your account so tightly that you can't run multiple instances on different accounts on the same computer, or is it so loose that your account can be accessed from multiple locations at the same time? I'm getting confused...
    Everything I have read states that only one instance of ARC can run at a time - which is why some people are upset that you cannot use ARC to open two version of a STO like they currently can through the Launcher.
    STO is about my Liberated Borg Federation Captain with his Breen 1st Officer, Jem'Hadar Tactical Officer, Liberated Borg Engineering Officer, Android Ops Officer, Photonic Science Officer, Gorn Science Officer, and Reman Medical Officer jumping into their Jem'Hadar Carrier and flying off to do missions for the new Romulan Empire. But for some players allowing a T5 Connie to be used breaks the canon in the game.
  • [Deleted User][Deleted User] Posts: 0 Arc User
    edited February 2014
    jonsills wrote: »
    So which is it? Does Arc lock down your account so tightly that you can't run multiple instances on different accounts on the same computer, or is it so loose that your account can be accessed from multiple locations at the same time? I'm getting confused...

    Your post just got me thinking. Why isn't ARC using the security system STO has in place that sends a code to you when you access STO or the Gateway from another computer?
  • risingstar2009risingstar2009 Member Posts: 329 Arc User
    edited February 2014
    Arc does use the one time security key for STO. At least it did before the website migration.

    Can't say anything about NWO cause I don't play the game.
    Star Trek Battles: For those who want to Play Star Trek Online as it WAS MEANT TO BE!!!

    Our Battles
  • sparkiesoftsparkiesoft Member, Cryptic Developers Posts: 47
    edited February 2014
    The way Arc security works, means you should have been kicked out of the game if anyone else logged into your account and tried playing. Basically, it should not have been possible for you to have stayed logged into Neverwinter if someone was accessing your STO account at the same time.

    That said, we can definitely use more information, however it would be best to open up a ticket so our team can look into your account individually.

    Also please remember to never provide personal information to anyone, even here on the forums.
  • kalanikalani Member Posts: 0 Arc User
    edited February 2014
    The way Arc security works, means you should have been kicked out of the game if anyone else logged into your account and tried playing. Basically, it should not have been possible for you to have stayed logged into Neverwinter if someone was accessing your STO account at the same time.

    That said, we can definitely use more information, however it would be best to open up a ticket so our team can look into your account individually.

    Also please remember to never provide personal information to anyone, even here on the forums.

    It sounds like neither login used ARC. I know at one time it was possible with the Cryptic launcher to be logged into STO and Champions at the same time on the same account. It was even possible to log into Holodeck and Tribble at the same time with the same account.


    However, it doesn't matter how multiple loggins were achieved. What matters is how his computer was made vulnerable and ARC or whatever else it could have been didn't need to be running at the same time that TRIBBLE info was used.
    [SIGPIC][/SIGPIC]
  • tcgrandpa#3038 tcgrandpa Member Posts: 302 Arc User
    edited February 2014
    know thy firewall, know thy os, know thy router


    anything can be TRIBBLE, and it doesn't come from what you install it normally comes from what you don't install ;)

    regards,

    Robert
  • mightybobcncmightybobcnc Member Posts: 3,354 Arc User
    edited February 2014
    kalani2 wrote: »
    It was even possible to log into Holodeck and Tribble at the same time with the same account.

    Still possible, thank god.

    Joined January 2009
    Finger wrote:
    Nitpicking is a time-honored tradition of science fiction. Asking your readers not to worry about the "little things" is like asking a dog not to sniff at people's crotches. If there's something that appears to violate natural laws, then you can expect someone's going to point it out. That's just the way things are.
  • the1tiggletthe1tigglet Member Posts: 1,421 Arc User
    edited February 2014
    greyhame3 wrote: »
    Not that I like Arc, but I don't think that Arc was the culprit. Largely because I've seen these kind of complaints with other MMOs when launchers have changed but the cause was rarely that.

    Well considering I haven't typed in my password since using ARC and I've done 4 complete scans before and after the incident all with negative results, there's not much evidence for it being anything else.
  • the1tiggletthe1tigglet Member Posts: 1,421 Arc User
    edited February 2014
    kalani2 wrote: »
    It sounds like neither login used ARC. I know at one time it was possible with the Cryptic launcher to be logged into STO and Champions at the same time on the same account. It was even possible to log into Holodeck and Tribble at the same time with the same account.


    However, it doesn't matter how multiple loggins were achieved. What matters is how his computer was made vulnerable and ARC or whatever else it could have been didn't need to be running at the same time that TRIBBLE info was used.

    Actually it does matter. I've used battle.net and they specifically make it so that you cannot log into one game while logged into another as a security precaution because of this problem.

    So people here are advocating for Cryptic that this isn't a security issue that someone could be logged into another game while you're playing a different game and you are perfectly fine with them going through your things on the other game with 0 warnings 0 alarms going off at the game developer login server side?

    Unfortunately that's not what the logs are saying on NWO for transactions I didn't authorize while I was playing STO. apparently ARC doesn't do this yet according to the Cryptic Admin over at NWO, they claimed that this particular system, of kicking you off of the game you're playing if you try to login to multiple games, is not part of ARC yet and thus what happened to me is the result, How can this thing be marketed with freebies when basic security hasn't been installed into it's design yet and why is it there are two different stories on how ARC security works between two different Cryptic officials?
  • wilbor2wilbor2 Member Posts: 1,684 Arc User
    edited February 2014
    why dont u send a pm to the dev that posted about Ark being ready for feed back its under galactic news click his name in yellow or click here http://sto-forum.perfectworld.com/member.php?u=96841339000
    gs9kwcxytstg.jpg
  • the1tiggletthe1tigglet Member Posts: 1,421 Arc User
    edited February 2014
    wilbor2 wrote: »
    why dont u send a pm to the dev that posted about Ark being ready for feed back its under galactic news click his name in yellow or click here http://sto-forum.perfectworld.com/member.php?u=96841339000

    That link didn't send me anywhere that I could tell that there was a pm system of messaging the but I'll try the name in this post.
  • askrayaskray Member Posts: 3,329 Arc User
    edited February 2014
    Sending PM's for feedback to gold names actually is counter productive. They do read these posts as is obvious as spark has responded, and that is the best way to get your feedback out there to the entire team :)
    Yes, I'm that Askray@Batbayer in game. Yes, I still play. No, I don't care.
    Former Community Moderator, Former SSR DJ, Now Full time father to two kids, Husband, Retail Worker.
    Tiktok: @Askray Facebook: Askray113


  • rhoricrhoric Member Posts: 1 Arc User
    edited February 2014
    Once again you are blaming ARC, as you did this over on the NW forums also, when the games still use their individual launchers. If ARC was this big security issue then there would be way more people getting TRIBBLE like myself as I have used ARC since day 1 and play just about every PWE/Cryptic title and have put money into each game. Yet low and behold I have never been TRIBBLE in my 14 years or MMO gaming. If someone TRIBBLE your account then it is normally cause you have something on your computer, you went to a questionable site, or logged into an unsecured computer or used public wifi.
  • the1tiggletthe1tigglet Member Posts: 1,421 Arc User
    edited February 2014
    rhoric wrote: »
    Once again you are blaming ARC, as you did this over on the NW forums also, when the games still use their individual launchers. If ARC was this big security issue then there would be way more people getting TRIBBLE like myself as I have used ARC since day 1 and play just about every PWE/Cryptic title and have put money into each game. Yet low and behold I have never been TRIBBLE in my 14 years or MMO gaming. If someone TRIBBLE your account then it is normally cause you have something on your computer, you went to a questionable site, or logged into an unsecured computer or used public wifi.

    Well it is kind of fishy that I've done multiple scans now even after updates with a great AV program, anti-malware program, had a techy friend check for invisible files that these scanners would miss (which he's absolutely great with considering he does this for a living) and considering the fact that since downloading ARC it actually doesn't ask for the login and password to login except 1 time when you first download it. So there's a bunch of holes in your insisting it was something else.

    I have since received help from the support team they were exceedingly quick about this response I noticed (unusually so actually comparing it to problems I've had in the past) and everything was returned. Hopefully this issue will be addressed behind the scenes in programming quickly.
  • edited February 2014
    This content has been removed.
  • eazzieeazzie Member Posts: 4,274 Arc User
    edited February 2014
    capnkirk4 wrote: »
    That's funny. I mean, obviously not for you.

    ARC! IT'S NOT QUITE AS BAD AS OBAMACARE!

    You might want to edit.


    From TOS: e. unsolicited promotions, political campaigning, advertising or solicitations;
  • sfc#5932 sfc Member Posts: 992 Bug Hunter
    edited February 2014
    It actually doesn't ask for the login and password to login except 1 time when you first download it. So there's a bunch of holes in your insisting it was something else.
    Incorrect. ARC prompts you to sign in every time on start up or you can set it to remember password.

    If you're signed in, ARC bypasses the launcher login so you go right into the game.
  • karhaekarhae Member Posts: 25 Arc User
    edited February 2014
    kolbrandr wrote: »
    It would be fantastic if they directed the development resources they are pitting into this abomination into the actual games instead.

    No kidding! So many game bugs that have been here for months or years but are ignored while the try to reinvent steam instead of fixing them.

    Maybe we should organize anniversary events for some of the bugs. :)
  • oneandonlyrecceoneandonlyrecce Member Posts: 0 Arc User
    edited February 2014
    I would like to know what form this hack took. In your 3rd post you mention "transactions I didn't authorize", but I don't know how you noticed your account was compromised. It would help all of us it we knew what to look out for.

    I do know that when NWO first came out, people signed into the Launchers for both games at the same time, in an attempt to download NWO while playing STO. While the download while playing didn't work due to port conflicts, it does seem that it was possible to login to both games simultaneously. So Arc hasn't "removed" any security checking that was there before, it never existed and will be coming later.

    If Arc were the sole method of launching PWE games it would be easy for PWE to implement single-session sign-on. The fact that Steam will continue to a launcher for STO adds a complication. But until the existing Launchers are mothballed, I imagine that it will be possible to have an account signed on multiple times, so long as they are using running different games.

    The "Account Guard" should have protected you from someone using to credentials signing in from a new location. On the old STO website, it was possible to see and revoke your Account Guard authorisations, but this doesn't appear to be possible through the new "Arc" website. This is a step backwards.
  • rhoricrhoric Member Posts: 1 Arc User
    edited February 2014
    your post is flawed on how you take all precautions cause if you had then you wouldn't have been TRIBBLE. I have used ARC since May 28th 2013 so it can't be ARC.
  • tardis70tardis70 Member Posts: 23 Arc User
    edited February 2014
    I keep on getting a login failed massage each tile I try to log on to arc so I can play STO. I don't know what happened. I was working fine to day but now it is not letting me in. I have tried every thing and it still wont let me in. here is the error message Login has timed out. please check your network connections and try again. any help would be greatfull
  • rhoricrhoric Member Posts: 1 Arc User
    edited February 2014
    I had that earlier but I just kept at it and it got logged in. they were either doing something or there was a hiccup in the network.
Sign In or Register to comment.