Can we get some acknowledgement from the devs about account hacks and improper logins? This is serious, and not something to 'wall of silence' us for.

[Falkor]

This is serious and the usual wall of silence will not work. People are losing money, having accounts compromised, and characters deleted.

It's been happening much more frequently since the 64 bit transfer.

You want some good will and to rebuild some trust with the community ? DO SOMETHING.

 

[DBZ]

Good luck expect nothing and still be dissapointed around here

 

[Falkor]

Yep. That's pretty much what I expect, but maybe someone will be professional enough to do their job.

How anyone can support this company and their on-going disrespect and treatment of players is beyond my understanding. They are literally enabling fraud, and doing nothing to stop it.

And the fact they use 2FA to control their discord server, yet have zero protections for players, really shows the priority of control over actual customer service.

 

[Sylvado]

I also suggest that when it happens that people collect data, login time, the name of the characters etc.

 

[Rusty_helmet]

Yep. That's pretty much what I expect, but maybe someone will be professional enough to do their job.

How anyone can support this company and their on-going disrespect and treatment of players is beyond my understanding. They are literally enabling fraud, and doing nothing to stop it.

And the fact they use 2FA to control their discord server, yet have zero protections for players, really shows the priority of control over actual customer service.

Discord has their own MFA that they just have to turn on. They don’t have the will or ability or both to do it for the launcher. The fact is that it is not a password/authentication problem. It’s a traffic issue and they have no idea how to prevent it (like many issues).

They were completely stumped when it happened to me and they shut the store down for a week. Their best guess was the login server and instance server crashing at the same time. But I was shunted into the other account as I went from running in a dungeon to someone else’s character login screen.

The terrible thing is that you can log in as the other person (as has now been shown) and people could delete or trade all your stuff.

This game has a lot of issues.

 

[Smokewolf]

This is serious and the usual wall of silence will not work. People are losing money, having accounts compromised, and characters deleted.

It's been happening much more frequently since the 64 bit transfer.

You want some good will and to rebuild some trust with the community ? DO SOMETHING.

Being serious, the best way to get SSG to notice the issue, us to simply stop logging on. At a certain point, they'll either be forced to add 2-factor ID or the game will quietly slip into oblivion.

 

[FaceDancer]

I'm not sure they will acknowledge the issue. It doesn't mean there isn't a concern or is something that isn't being addressed by them, just not externally. To me, that isn't the right way to handle things, but then again it isn't my company.

 

[Falkor]

They way they handle this, and so many other issues, inspires zero confidence or trust.

It's why I've not spent $$ on this game in five years, and play a few hours on a weekend and raid for grins, rather than daily to grind and level.

It'd be nice to see some change.

Couldn't they start tracking which auctions are buying up otto's boxes in bulk and identify the accounts offering these exploits? This stuff has been going on for well over a decade, with zero action.

Hard to care about a game when it's own developers don't.

 

[Sarlona Raiding]

Everyone should change their ddo password. I received a message from google that the id/pwd I only use for DDO was part of a data breach.

 

[Lagin]

A good friend of mine got hacked for $1500. They basically told him it was HIS problem.

NOT a good look SSG

 

[Br4d]

We definitely should have a firm statement about add-ons, UI upgrades, etc. I think if you are using anything beyond the packaged software you're asking to be hacked and some people are getting hacked.

Also a pointed reminder that if you give out your account information to anybody for any reason you are breaking ToS and increasing your risk of being hacked at the same time.

I know people will react to these suggestions negatively and that is what it is.

If you've been hacked without doing any of the above I'm sorry that happened to you however I'm guessing most people who have been hacked opened the door for the hackers by some combination of the above.

 

[Falkor]

Ah, right ... it's entirely the players fault. Of course! Thank you for elucidating. If anything, your speculations illustrate exactly why real communication from the devs is essential at this point.

We can speculate all day long. It'd be helpful to know if the hacked accounts are using third party installs. Or if they were buying dupes, or any other sorts of data that may help pinpoint that. What if its only multi-boxers experiencing this? We could speculate forever! I blame the kobolds.

IP addresses and logins can be tracked, right? Wouldn't malicious activity be noticeable? Couldn't the dev's give us a heads up and communicate some actionable steps and give an inform that this is being looked into? Isn't that the professional thing to do?

And what's up with people logging in, and it not being their account?

And why can't we have a method to track who is purchasing and selling otto's boxes in bulk, easily revealing the exploiters?

It still illustrates a need for action and communication from the developers. And we are getting silence and inaction.

And a customer service team that is utterly lacking. SSG is literally enabling fraud.

 

[Smokewolf]

A good friend of mine got hacked for $1500. They basically told him it was HIS problem.

NOT a good look SSG

He could simply have his bank reverse the charges, then walk away from DDO. Let SSG eat the $1500, and maybe they'd come to the realization that their current system isn't sustainable or safe.

 

[rabidfox]

He could simply have his bank reverse the charges, then walk away from DDO. Let SSG eat the $1500, and maybe they'd come to the realization that their current system isn't sustainable or safe.

If I got hacked and charged like that, I'd have a police report filed, a CS ticket in with the police report number, and would reverse the charges for the money. Not a chance in hell I'd eat even $100 in fraudulent charges let alone $1500.

 

[MrBill]

I'm not sure they will acknowledge the issue. It doesn't mean there isn't a concern or is something that isn't being addressed by them, just not externally. To me, that isn't the right way to handle things, but then again it isn't my company.

yeah to admit there's a problem means you can be held responsible, so just clam up.

 

[Smokewolf]

Discord has their own MFA that they just have to turn on. They don’t have the will or ability or both to do it for the launcher. The fact is that it is not a password/authentication problem. It’s a traffic issue and they have no idea how to prevent it (like many issues).

They were completely stumped when it happened to me and they shut the store down for a week. Their best guess was the login server and instance server crashing at the same time. But I was shunted into the other account as I went from running in a dungeon to someone else’s character login screen.

The terrible thing is that you can log in as the other person (as has now been shown) and people could delete or trade all your stuff.

This game has a lot of issues.

So what was it like playing Trolls toon?

 

[Vua]

He could simply have his bank reverse the charges, then walk away from DDO. Let SSG eat the $1500, and maybe they'd come to the realization that their current system isn't sustainable or safe.

SSG could still fight the chargeback but not sure what chance they'd have to win it. But since it only costs about $70 for them to file, I'm sure they would.

 

[Smokewolf]

SSG could still fight the chargeback but not sure what chance they'd have to win it. But since it only costs about $70 for them to file, I'm sure they would.

Doubt it... Customer could easily prove the charges were falsified.

 

[Kimbere]

If I got hacked and charged like that, I'd have a police report filed, a CS ticket in with the police report number, and would reverse the charges for the money. Not a chance in hell I'd eat even $100 in fraudulent charges let alone $1500.

This. 100% this.

 

[Vua]

Doubt it... Customer could easily prove the charges were falsified.

Doubt what? SSG would win? I already said that. Doubt they would spend $70 to try and retain $1,500? Of course they would. You'd have to be an idiot not to, especially since a fine can and most likely would be issued with the chargeback. Even if they just prevent the extra fine it would be worth it.