Print

[Xbox-Scene]

Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Security Posted by XanTium | August 28 22:25 EST | News Category: Xbox360

From mtv.com: Earlier this month, a hacker bragged that he'd gained access to the Xbox Live identity -- or gamertag, as it's known -- of "Halo 3" multiplayer producer Joe Tung. This allowed him access to Tung's account and personal information. Tung isn't alone. For almost three years now, dozens of gamers who believed their Xbox 360 online identities were safe and secure have taken to message boards and Web sites to report gamertags stolen by zealous hackers. The practice has become prevalent enough that tutorials about how to do it have popped up across the Internet, heightened after the release of Bungie Studio's sci-fi online shooter "Halo 3." "People don't hack accounts by using programs and any other bullsh-- that you hear around [Xbox Live]," the hacker claimed. "It's as simple as picking up the phone." The hacks are typically accomplished through a popularized technique called social engineering, when someone is unknowingly coerced into revealing confidential information. This isn't the first time it's come up with "Halo 3." It was widely documented by technology sites in March 2007, then again last December and, based on the evidence surrounding Tung's account and others, remains a prominent form of abuse. The danger stems from the apparent failure of Microsoft customer service to keep track of repeated account access, our expert said. This allows hackers employing social-engineering tactics to call support lines without being tracked. A hacker can then use this information to gain access to a user's Xbox Live gamertag, which typically has a credit card attached. Full Story: mtv.com

[BasicAir]

LOL

Every "guide" on how to hack an XBL account on the internet is either:

1. A b.s. phising attempt to hack YOUR account (such as send an email to [email protected] with this copy/pasted info along with random characters and your own liveid and password).

or

2. A common-sense tutorial saying "get the person's liveid and pass" and go to "recover gamertag" on your 360. DUH!

Is MTV or their writers really that stupid that they think that's sufficient enough to make a claim in their article that "tutorials on how to do this are up on the internet right now" ?? That's hilarious.


Nonetheless, the bottom line is the way to hack an XBL account is no different than hacking other types of accounts all over the internet. That answer is, as the article puts it, social engineering. Yet "phishing" is still a less-common tactic that is still used though usually fails unless it's being conducted by a very skilled person.

With that said, there is no bigger threat to getting your XBL GT hacked than there is to getting your itunes account hacked, your AOL/AIM sn hacked, or your SteamID hacked, along with millions others. What does this mean? This means this article is both amazingly stupid and full of bullshit both at the same time.

Talk about ringing a false alarm here...

And btw, since this is really more or less about social engineering, let me say that it's not as easy of a tactic as it sounds. 10 years ago I engaged in a lot of social engineering myself so I speak from personal experience. 10 years ago I was about 18 years old and did other stupid things too so go figure. But anyway, social engineering takes practice, time, patience, and skill. You can literally spend 100 hours calling a support hotline for say, AOL, before really getting anywhere with your attempts to hack into an account. Sometimes less and sometimes more. Though it's a lot harder than many think, it's sometimes your only hope to hack an account on an extremely secure network such as XBL.

Anyway, thanks for the entertaining article X-S. MTV continues to surprise me with idiotic articles.

[82_Z28]

the main difference with xbox live accounts being hacked is credit cards are often associated with the account and easily exploited with little to no verification.....

why xbox live can't simply ask for the 3 digit # on the back or an expiration date or SOMETHING is beyond me

you'd think something like this would have some serious problems with security but I guess it'll take some stupid lawsuit before m$ wakes up.

[bucko]

Anyone that gives out there login Live info deserves to be hacked.

[1nsan3]

CODE

Anyone that gives out there login Live info deserves to be hacked.

I agree fully!

My live account is not connected to any credit cards, i renew every year with the m$ card.. and i buy points cards..i never leave points hanging in my account.. i buy the points and use them right there.

if ya dont want your acct hacked then its easy keep your cake eater shut.

to the hackers out there doing this: get a job ya freaks.

[Landlocked]

My Live account automatically renewed this past Spring but then I was locked out a few weeks later when the card on file expired. Tell me why I need a valid card on file to let me play on a service that's already paid for?

When are we going to get the option to remove via web or dash our credit card information?? Maybe they've added it since I last check. But major BS if not.  (IMG:style_emoticons/default/blink.gif)

[Knasen]

QUOTE(1nsan3 @ Aug 29 2008, 03:53 PM)

My live account is not connected to any credit cards, i renew every year with the m$ card.. and i buy points cards..i never leave points hanging in my account.. i buy the points and use them right there.

 I do exactly the same and feel really secure. If people think before acting they should realize there are better ways than supplying MS your creditcard info.

[Agent ME]

QUOTE(bucko @ Aug 29 2008, 07:00 AM)

Anyone that gives out there login Live info deserves to be hacked.

Except that it seems to be possible, or used to be possible, for someone to call the 1-800 support line, and trick the person into giving access into the account. That's not the user's fault and is something to complain over.

[unistyle]

QUOTE(bucko @ Aug 29 2008, 03:00 PM)

Anyone that gives out there login Live info deserves to be hacked.

while i agree completely with this statement, the article makes it sound like the hacker is calling the customer service line and getting the information directly from them, which if that is the case it is no fault of the user and is a pretty big concern.  if i'm the idiot who gives my info up then i deserve it, but if some other idiot gives my info up then that shit ain't right.

[Steve-0]

lol, what about the fools who do the achievement glitches with gamesaves always passing their accounts around so the can be "u83r 1337z" with their super gamer score, they are the people who deserve to be hacked, not the average joe who thinks he just made a new friend.