ESR - Is QL so easy to hack into? - Quake Live Forum

ESReality - Where Gaming Meets Reality

About | Contact | Guide | Filters
Users | Preferences | Search | FAQ

News | Forums | Columns
Journals | Articles | Polls | Wiki

Files | Galleries | Demos
Events | Coverage | Movies

ESR Shop | Betting Fixtures

Not Logged In | Login | Register

01:11 CST - 1413 users online

ESR Discord Channel

no live streams found

Scheduled Listings

Other QL threads

Latest Threads

Latest Comments

News Frazer "Fraze" Hockley has passed away (6)
News Learn to play quake live with FraZe (89)
News HoQ TDM 4v4 Winter Season 2025 (2)
News Cooler Interview 9.8.24 (1)
News World's Greatest Gamer Event - QC - Punk vs Leffen (1)

Latest Forum Threads

OT Donald "Trump" Trump wins Elections 2016 (582)
QC =]<o~~~ Possible Scenarios for Quake 5! =]<o~~~ (23)
Q4 all pk4 files collected so far (2)
GG Need maps for q4 (0)
Q3 Why cant id learn from Valve's CS2 and give us an updated Q3 (55)

Latest Journals

2z faye (22) by stpbozin
Why this game sucks to hard? (28) by The_Sh33p
Mars died as his temple burned. No new gods of war exist. (57) by ShadyVoltaire
TEnEP ETO PYCCKu CAuT (2) by stpbozin
How to sporadically play multiplayer games? (7) by cx

Hot Topics

News Frazer "Fraze" Hockley has passed away (6)

ESR Virtual Betting

Lamur
E$ 238,131

E$ 176,304 omek
E$ 129,238 fazz
E$ 61,723 lithz
E$ 58,635 nsx0r
E$ 57,658 nk121

Forums > Quake Live Forum

Is QL so easy to hack into? (30 comments)

( Forum: QL)

Posted by crims @ 05:30 CST, 2 March 2013 - iMsg

Was just playing a duel with a random guy, I was winning, he called me "cheater", I called him "noob". Nothing more than a little teasing, pretty standard in QL...

The next day I find my account has been hacked into, my password has been changed and my profile bio changed to "nono, YOU noob".

Pretty damn obvious that this guy I played a day ealrier - "shawbo" - is responsible. But really no harm done, I was able to restore my account quick and easy, so I take it just as a bit of teasing, and probably so does this guy.

The bigger issue is this - how easy must it be to hack into QL accounts? Somehow I doubt he would spend hours of sophisticated work just to tease me for a few minutes. This was a random guy who knew nothing about me, except my in-game nickname.

8581 Hits

<< prev QL thread || next QL thread >>

<< Comment #1 @ 06:11 CST, 2 March 2013 >>

By

byce

What's your password?

<< Comment #2 @ 06:22 CST, 2 March 2013 >>

By

melechesh '

What makes you so sure he's a random guy who knows nothing about you? That's a very naive way of thinking, suggesting you may have also been naive in the past regarding your password's secrecy and/or strength. A recipe for disaster!

Edited by quake is potat at 06:24 CST, 2 March 2013

<< Comment #3 @ 06:28 CST, 2 March 2013 >>

By

crims - Reply to #2

I dont even consider this as a possibility. I have very few close friends in QL and I know them very well. This guy, on the other hand, has 3 months of play time on his account since 2009.

BTW - just looked on his account and here is what it says:

This account is currently disabled, possibly for one of the following reasons:
* Malicious activity
* Harassment of players
* Other Terms of Use violation

<< Comment #5 @ 06:36 CST, 2 March 2013 >>

By

melechesh ' - Reply to #3

Might have been a brute force attack, rainbow tables or whatever, I can't imagine any password security vulnerability issue on QL and nobody being aware of it until now. If it were easy many high-profile accounts would have been hijacked.

<< Comment #7 @ 06:38 CST, 2 March 2013 >>

By

crims - Reply to #5

Still, surprising to see someone bruteforcing QL just because he was called a "noob" in game, lol

<< Comment #9 @ 06:40 CST, 2 March 2013 >>

By

melechesh ' - Reply to #7

tbh... I'm not surprised :D

<< Comment #19 @ 09:25 CST, 2 March 2013 >>

By

sothis - Reply to #9

But.. I am surprised!

<< Comment #24 @ 11:24 CST, 2 March 2013 >>

By

2pak - Reply to #5

rainbow would only work if the guy has access to the QL user/pass database, which would be a serious vulnerability.

<< Comment #25 @ 11:32 CST, 2 March 2013 >>

By

melechesh ' - Reply to #24

ah sorry, was thinking of something else

<< Comment #4 @ 06:34 CST, 2 March 2013 >>

By

B4ZE

http://www.quakelive.com/#!profile/summary/shawbo

ROFL shawbo banned, maybe QLranks guys could clean up the database and remove all the banned accounts from the list : http://www.qlranks.com/ca/player/shawbo

<< Comment #6 @ 06:37 CST, 2 March 2013 >>

By

melechesh ' - Reply to #4

Not remove them as such, simpy add them to a Hall Of Shame

<< Comment #8 @ 06:39 CST, 2 March 2013 >>

By

Harps - Reply to #4

Sirax said he will do this soon, he is just a little busy right now :)

<< Comment #14 @ 07:40 CST, 2 March 2013 >>

By

sirax - Reply to #8

I have time now!!!.. just waiting to replace the streaming computer (my development computer was taken by the stream)

Then I can write code again properly

Woohoo!

<< Comment #15 @ 07:43 CST, 2 March 2013 >>

By

B4ZE - Reply to #14

:D ty man!

<< Comment #16 @ 08:03 CST, 2 March 2013 >>

By

frs - Reply to #14

dont forget to add terminatria to tdm map pool :f

<< Comment #26 @ 14:37 CST, 2 March 2013 >>

By

sirax - Reply to #16

terminatria now added to qlranks map pool :)

Sorry about the delay!

<< Comment #10 @ 06:48 CST, 2 March 2013 >>

By

kevz

something tells me you need to faceroll your keyboard more in order to create a password. at least 12 characters long too.

<< Comment #11 @ 06:54 CST, 2 March 2013 >>

By

fau - Reply to #10

Sentence > faceroll

<< Comment #12 @ 07:15 CST, 2 March 2013 >>

By

T1E '

I beat him a couple of days ago, should I be afraid?

<< Comment #20 @ 09:26 CST, 2 March 2013 >>

By

sothis - Reply to #12

You should be VERY afraid.

He will... Wait for it.

WAIT FOR IT...

T1e up your account!

<< Comment #29 @ 19:54 CST, 2 March 2013 >>

By

function9 - Reply to #20

sothis is what you've been doing with your time...

<< Comment #30 @ 07:05 CST, 3 March 2013 >>

By

sothis - Reply to #29

No, I stopped function9g

<< Comment #13 @ 07:19 CST, 2 March 2013 >>

By

QuM0

I always suggest people to create passwords like:

"ThisIsMyPasswordForAccount_NameAtThe_site_where_im_loggin_in1234"

So you wont have repeated passwords and usernames around sites on the web and you'll be able to remember them all.

Seems that, in case you have been using your password and account name in minor sites, they might be susceptible of hacking thus gaining access to other site accounts with same password and username.

Probably that`s how it happened or as Potat pointed out bruteforce or other simple attack might have been used; that would explain banning statement on his account.

Hope that helps.

<< Comment #17 @ 08:18 CST, 2 March 2013 >>

By

melechesh ' - Reply to #13

It's pointless applying such a long nomenclature when many sites restrict password length to just 12 chars.

<< Comment #27 @ 15:05 CST, 2 March 2013 >>

By

FlashSoul - Reply to #17

"Your password must have exactly 8 characters and must not contain any special characters."

<< Comment #18 @ 08:44 CST, 2 March 2013 >>

By

anvi

Use programs like LastPass or KeePass, generate a long random password for every website; long is >= 16 chars. Apply generic common sense when using Internet. Beware of spyware, run AV if you are on windows. Always update all software to the latest versions. Etc etc etc.

<< Comment #21 @ 09:30 CST, 2 March 2013 >>

By

sothis - Reply to #18

General caution is enough. I've had a grand total of 1 viral infections that I know of, that have also crippled my machine somewhat, and that was a good 8 years ago now. Also I've never had antivirus software installed for more than a day or two at a time. The only reason being that I only want to check if my PC is slower than usual and other possibilities are ruled out, but otherwise I keep it off my machine.

So yeah, general caution.

<< Comment #22 @ 10:35 CST, 2 March 2013 >>

By

T1E ' - Reply to #21

could be any random ad on a mainstream page that could infect you..

<< Comment #23 @ 11:08 CST, 2 March 2013 >>

By

zealot - Reply to #18

this, lastpass is awesome :)

<< Comment #28 @ 15:16 CST, 2 March 2013 >>

By

doped

shawbo, im not suprised. He's a total ass ingame, not even a troll, just an asshole :/

Reply to:
[Reset]

Formatting:

Content:

Enter Text:

Or if you already have an account:

Username:

Password:

Read the Posting Guidelines

Non-HTML tags: [b]bold[/b], [i]italics[/i], [u]underlined[/u]
[small]small[/small], [q]quoted[/q], [s]~~strikethrough~~[/s]
[url=www.url.com]link[/url] or type www.url.com
[flag=country] (list), [avatar=name] (list)
[map=mapname gamename] (list)

Conceived and created by Sujoy Roy (Legal Notices)
RSS Feed Information, Link Buttons and Banners