Regarding the recent hacking

[Jx01b]

Sythe has been secure for over 6 years and sadly it's pretty much the last good runescape site to fall. It was bound to happen sooner or later, there was no doubt about that.

There are a few things that I would like to say:
1. As far as I've heard, multiple people have the database which means it's probably going to be leaked in the near future.

2. Sythe itself shouldn't really hold any responsibility for this, it's you that has to make sure that you stuff is secure over the internet.

3. If you're using the same password on sythe as you did on your MSN at any point of time then there is a chance that your MSN / email could always be hacked. What I would recommend doing is ditching your MSN if you only use it for sythe and making a new one with completely different information and not linked to your last one.

4. I would really recommend to stop trading for the next week till all of this starts dying down, if you have traded a couple of bills, make sure that you follow step 3 in insuring that you don't have to pay out mass bills to people that get scammed.

5. If you see anyone that randomly has become active from the grave, just don't trade with them, it's probably going to end up getting you guys scammed.

6. Don't try blame this on the sythe staff, they didn't make the forum software, it was probably a small loop hole that allowed this to happen. Don't try make sythe pay for your mistakes, and your insecure shit.

Try not to get scammed in the future, good luck!

 

[Brendan]

Some good, but well known tips that the Sythe Staff are trying to enforce already. I find it a bit curious that you have so much information about the website and you joined just today.

Also if you have any information about who has the Databases, or anything related, I'm sure the Sythe Staff would love you if you could give them a hand.

 

[MMOExchange]

Some good, but well known tips that the Sythe Staff are trying to enforce already. I find it a bit curious that you have so much information about the website and you joined just today.

Also if you have any information about who has the Databases, or anything related, I'm sure the Sythe Staff would love you if you could give them a hand.

Actually I think I might!!!!

I typed in 'sythe databases' or something like that (I can't remember) into google. I remember on my iphone I read something on the hackforums. Apparently this was setup and there might be an insider or something. Just saying but everyone should watch their backs or accounts in this case:love:

 

[stui]

some people on bugabuse have it as well

 

[Laptop65]

some people on bugabuse have it as well

The Owner of Bugabuse was the person who did us in the first place, he was going to sell for $7k but in the end decided to just dump it, given why we've suddenly had all these account "hackings" in the past few days. He was also the same person who did RS2006.

 

[Kristian4th]

It definitely was bound to happen, Sythe is one of, if not the most known trading websites, not just including RuneScape but various other RPGs. The only thing users can do is secure their accounts.

 

[Alma Mater]

can someone clarify or explain #5 more...?

 

[DMR]

#5 means that people who have gone inactive for a long period of time come back to trade all of a sudden. They are most likely hacked accounts that will cause you to get scammed if you attempt trading with them.

 

[Sterblich]

i hate when you trade with someone 200 + donator and get scammed.
After reporting him ... it wont get banned because it was hacked
I'm not sure if this is a game or not ... but is sux ...

 

[Brendan]

i hate when you trade with someone 200 + donator and get scammed.
After reporting him ... it wont get banned because it was hacked
I'm not sure if this is a game or not ... but is sux ...

If you still have enough evidence to create a Scam Report, the member will still be banned, and only allowed to return when they've paid you and the other members the hacker scammed.

 

[T V]

So...is this the end of Sythe?

 

[Jx01b]

Sythe will only die if the admins give up on it, hopefully this wouldn't end up happening because that would be sad.

To everyone wondering about all the MSN hackings, they are not related to (or I'm pretty sure they are not related to) the sythe database getting hacked. Over the past week, there was a vulnerability found in hotmail's reset password form that pretty much gave you the link to reset the password of a hotmail in the headers (this is what I've heard). So, the MSN hackings are probably not sythes fault in any way, it's probably just some 12 year old fapping over scamming thousands of dollars.

 

[NameUser]

Multiple people on bugabuse and other websites have the database, they probably are going to leak it after it's cleaned.
Also some msn's of big gold sellers have been hacked using a private exploit.
http://www.youtube.com/watch?v=1kOCryG2sGY

 

[Brendan]

So...is this the end of Sythe?

The database has been hacked before and the website continued to run, I don't see it being any different this time.

Multiple people on bugabuse and other websites have the database, they probably are going to leak it after it's cleaned.
Also some msn's of big gold sellers have been hacked using a private exploit.
http://www.youtube.com/watch?v=1kOCryG2sGY

I'd remove the link to that video, just in case the method still works, I'm sure the staff don't want it being advertised.

 

[NameUser]

I'd remove the link to that video, just in case the method still works, I'm sure the staff don't want it being advertised.

Nah, the method does not work anymore, nobody would post it on youtube if it still worked. Some people were selling this method for $400 on other forum, now they have closed their threads saying that it was patched a few days ago. Posted the video, because I thought that it would be interesting to see how it was done.

 

[Brendan]

Nah, the method does not work anymore, nobody would post it on youtube if it still worked. Some people were selling this method for $400 on other forum, now they have closed their threads saying that it was patched a few days ago. Posted the video, because I thought that it would be interesting to see how it was done.

Ah okay, that's fine then haha. So the method is patched completely by Microsoft, so Sythe shouldn't need to fear any more MSN hackings?

 

[Annex]

Sythe has been secure for over 6 years and sadly it's pretty much the last good runescape site to fall. It was bound to happen sooner or later, there was no doubt about that.

There are a few things that I would like to say:
1. As far as I've heard, multiple people have the database which means it's probably going to be leaked in the near future.

2. Sythe itself shouldn't really hold any responsibility for this, it's you that has to make sure that you stuff is secure over the internet.

3. If you're using the same password on sythe as you did on your MSN at any point of time then there is a chance that your MSN / email could always be hacked. What I would recommend doing is ditching your MSN if you only use it for sythe and making a new one with completely different information and not linked to your last one.

4. I would really recommend to stop trading for the next week till all of this starts dying down, if you have traded a couple of bills, make sure that you follow step 3 in insuring that you don't have to pay out mass bills to people that get scammed.

5. If you see anyone that randomly has become active from the grave, just don't trade with them, it's probably going to end up getting you guys scammed.

6. Don't try blame this on the sythe staff, they didn't make the forum software, it was probably a small loop hole that allowed this to happen. Don't try make sythe pay for your mistakes, and your insecure shit.

Try not to get scammed in the future, good luck!

To think sythe has been secure for 6 years is quite ignorant to say the least. There have always been people in power who decide to take advantage of what they have for runescape gold.

There were many times where the server was compromised whether by a DDoS or whatever other method you wish. I contributed to preventing that many years ago through direct code patches and through other methods that I now believe are bannable offenses. I think I still maintain a backup database dump from 2007 too on one of my older phones.

Anyways thinking the website has been secure for that long isn't true. Well best to assume so anyways.

 

[n4n0]

http://www.sythe.org/showthread.php?t=1386938