Valhalla Legends Archive

Hey, this is probably a n00b moment for me, but a few days ago my channel was taken over because someone bruted a dumbass shaman's password. Since it had 5 ops, there was no way for a des to take place. My chieftan has a very complex password, and this one had only about 5 characters. He stayed on the shaman name, which he said was loaded on a shell. On the clan list, it said he was offline. I tried demoting him anyway, but he stayed on ops. I've never seen anything like it before. I wish I had saved a screenshot at a time, and I'll search for some logs and add them to this thread if I can find them.

So does anyone know what this guy did? Was it some type of server split that I heard about, or is he somehow on a private server?

Battle.net does this sometimes, just because its on a shell doesn't mean it will stay on battle.net forever, probably 3 days or so and it'll reconnect.

Yeah, in his case it disc'd the next morning  

Some idiot who claims to know the guy who took over my chan is saying that he can rape us through a "second server." Here's the AIM log of what he said:

KCoolBy (11:42:48 AM): steamy got bruted
KCoolBy (11:42:51 AM): but he didn't need to
KCoolBy (11:42:58 AM): all u need to do is go onto the other server
KCoolBy (11:43:00 AM): make the account
KCoolBy (11:43:03 AM): and it'll change pass

Is this true, or even possible?

Quote from: MusH on August 30, 2004, 11:06 AM
Some idiot who claims to know the guy who took over my chan is saying that he can rape us through a "second server." Here's the AIM log of what he said:

KCoolBy (11:42:48 AM): steamy got bruted
KCoolBy (11:42:51 AM): but he didn't need to
KCoolBy (11:42:58 AM): all u need to do is go onto the other server
KCoolBy (11:43:00 AM): make the account
KCoolBy (11:43:03 AM): and it'll change pass

Is this true, or even possible?

Well, a few years ago, it probably was.  Back before the servers were split into distinct clusters, there were lots of problems with out of sync account databases allowing overwrites.  Aside from that and a recent (now fixed) stupid bug with "recovering" accounts (which would let you recover other people's accounts), I don't know of any way to accomplish what he's describing.  Also, keep in mind that most of the people who make these kind of threats cannot back up the threat, which is why they're making the threat instead of using its vulnerability to actually harm you.

Whew, good. I had a feeling that this guy was lying, but it's good to be sure. Thanks  

Social Engeneering is your friend