ForumsSupport ForumPassword-breaking memes - VERY IMPORTANT WARNING

5 7610
JimmyDimples
offline
JimmyDimples
74 posts
Blacksmith

I discovered this on another forum, contributed by a World of Warcraft player, and I thought it was equally vital here. It might be common knowledge/sense for lurkers/non-newbs, but better to read it twice than get hacked once.

Once in a while I browse around my watchers' accounts and today I came across a certain meme. At first it seemed like fun and I was considering doing it, but then bells began ringing. Halfway through doing the meme I realized that it indirectly asks you questions like "What is your first pet's name" and "What street did you grow up in" as well as the middle names of your parents, which are questions that are commonly used in password recovery.

So yeah, I felt that someone can easily hack my accounts by simply reading my answers to that meme. Just a couple weeks ago I was talking to Blizzard's customer service regarding my WoW account, and as verification they asked me the name of my first pet. Be careful of what memes you answer! Just a friendly word of warning :3

For those who are curious, this is the meme I was referring to:


1.YOUR PORN STAR NAME: (first pet & street you grew up on)
2.YOUR GANGSTA NAME: (fave ice cream flavor, favorite cookie)
3.YOUR "FLY Guy/Girl" NAME: (first initial of first name, first three letters of your last name)
4.YOUR SPY NAME: (favorite color, favorite animal)
5.YOUR SOAP OPERA NAME: (middle name, city where you were born)
6.YOUR STAR WARS NAME: (the first 3 letters of your last name, first 2 letters of your first)
7.SUPERHEROVILLAIN NAME: ("The" + 2nd favorite color, favorite drink)
8.NASCAR NAME: (the first names of your grandfathers)
9.STRIPPER NAME: (the name of your favorite perfume/cologne/scent, favorite candy)
10.WITNESS PROTECTION NAME: (father's & mother's middle names)
11.TV WEATHER ANCHOR NAME: (Your 7th grade teacher's last name, a major city that starts with the same letter)
12.DETECTIVE NAME: (your favorite season/holiday, flower)
13.CARTOON NAME: (favorite fruit, article of clothing you're wearing right now + "ie" or "y&quot
14.HIPPIE NAME: (What you ate for breakfast, your favorite tree)
15.YOUR ROCKSTAR TOUR NAME: ("The" + Your fave hobby/craft, fave weather element + "Tour&quot


You might think "but my password has nothing to do with any of that stuff, so it's secure." WRONG. The meme doesn't help them guess your password; it lets them go into the password recovery section and answer the secret questions so they can reset your password without having to know it at all in the first place.


Another thing... I'd discovered on one site that one guy was asking questions about favorite ice-cream flavors or cookies. That set off an alarm. When I saw the guy's account was only a couple of days old, that REALLY sent up a red flag. I hope you Armor Gamers will take note, and be on the lookout for guys like that.

  • 5 Replies
Cenere
offline
Cenere
13,657 posts
Jester

A thread like that would be considered spam anyway. It is stupid, more like a chain letter than anything, and it fits better on facebook.

Second, AG doesn't use safety questions.

But good enough.

JimmyDimples
offline
JimmyDimples
74 posts
Blacksmith

AG doesn't... but the web-based e-mails for founding the accounts do.

And that guy asking those questions? It was on the comments sections of one member's profile page here. Maybe I'm paranoid and I hope I'm wrong... but I'd rather check twice than get hacked once.

Graham
offline
Graham
8,051 posts
Nomad

Giving your account away isn't hacking.

If someone completed this, who would they imagine being interested enough in reading it besides themselves? (rhetoric)

loco5
offline
loco5
16,287 posts
Peasant

I discovered this on another forum, contributed by a World of Warcraft player, and I thought it was equally vital here. It might be common knowledge/sense for lurkers/non-newbs, but better to read it twice than get hacked once.

Once in a while I browse around my watchers' accounts and today I came across a certain meme. At first it seemed like fun and I was considering doing it, but then bells began ringing. Halfway through doing the meme I realized that it indirectly asks you questions like "What is your first pet's name" and "What street did you grow up in" as well as the middle names of your parents, which are questions that are commonly used in password recovery.

So yeah, I felt that someone can easily hack my accounts by simply reading my answers to that meme. Just a couple weeks ago I was talking to Blizzard's customer service regarding my WoW account, and as verification they asked me the name of my first pet. Be careful of what memes you answer! Just a friendly word of warning :3

For those who are curious, this is the meme I was referring to:

1.YOUR PORN STAR NAME: (first pet & street you grew up on)
2.YOUR GANGSTA NAME: (fave ice cream flavor, favorite cookie)
3.YOUR "FLY Guy/Girl" NAME: (first initial of first name, first three letters of your last name)
4.YOUR SPY NAME: (favorite color, favorite animal)
5.YOUR SOAP OPERA NAME: (middle name, city where you were born)
6.YOUR STAR WARS NAME: (the first 3 letters of your last name, first 2 letters of your first)
7.SUPERHEROVILLAIN NAME: ("The" + 2nd favorite color, favorite drink)
8.NASCAR NAME: (the first names of your grandfathers)
9.STRIPPER NAME: (the name of your favorite perfume/cologne/scent, favorite candy)
10.WITNESS PROTECTION NAME: (father's & mother's middle names)
11.TV WEATHER ANCHOR NAME: (Your 7th grade teacher's last name, a major city that starts with the same letter)
12.DETECTIVE NAME: (your favorite season/holiday, flower)
13.CARTOON NAME: (favorite fruit, article of clothing you're wearing right now + "ie" or "y&quot
14.HIPPIE NAME: (What you ate for breakfast, your favorite tree)
15.YOUR ROCKSTAR TOUR NAME: ("The" + Your fave hobby/craft, fave weather element + "Tour&quot

You might think "but my password has nothing to do with any of that stuff, so it's secure." WRONG. The meme doesn't help them guess your password; it lets them go into the password recovery section and answer the secret questions so they can reset your password without having to know it at all in the first place.

Another thing... I'd discovered on one site that one guy was asking questions about favorite ice-cream flavors or cookies. That set off an alarm. When I saw the guy's account was only a couple of days old, that REALLY sent up a red flag. I hope you Armor Gamers will take note, and be on the lookout for guys like that.


i don't think those are questions that are usually put for security, besides i highly doubt someone can come up with one using that, unless you used the meme to make it
xeano321
offline
xeano321
3,152 posts
Farmer

That doesn't really make sense. On Armor Games, having your account hacked is the least of any users worry. Its not like WOW where you have all these stats and stuff in your account waiting to be hacked by someone.

In other words, someone has something to gain when they hack a WOW account, if someone hacks a Armor Games account, there is nothing to be accomplished.

Extra security questions just aren't necessary. As long as you know your email (which no one else can see) you signed up your account with (If you forget your password, a email is sent to you with a new one, i think... Don't quote me), you don't have to worry about hackers.

Showing 1-5 of 5