xboxscene.org forums

Xbox360 Forums => Xbox360 Online Gaming and other Services => Xbox360 LIVE => Topic started by: Xbox-Scene on August 28, 2008, 09:01:00 PM

Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: Xbox-Scene on August 28, 2008, 09:01:00 PM
Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Security
Posted by XanTium | August 28 22:25 EST | News Category: Xbox360
 
From mtv.com:
Quote

Earlier this month, a hacker bragged that he'd gained access to the Xbox Live identity -- or gamertag, as it's known -- of "Halo 3" multiplayer producer Joe Tung. This allowed him access to Tung's account and personal information. Tung isn't alone.

For almost three years now, dozens of gamers who believed their Xbox 360 online identities were safe and secure have taken to message boards and Web sites to report gamertags stolen by zealous hackers. The practice has become prevalent enough that tutorials about how to do it have popped up across the Internet, heightened after the release of Bungie Studio's sci-fi online shooter "Halo 3."

"People don't hack accounts by using programs and any other bullsh-- that you hear around [Xbox Live]," the hacker claimed. "It's as simple as picking up the phone."

The hacks are typically accomplished through a popularized technique called social engineering, when someone is unknowingly coerced into revealing confidential information. This isn't the first time it's come up with "Halo 3." It was widely documented by technology sites in March 2007, then again last December and, based on the evidence surrounding Tung's account and others, remains a prominent form of abuse.

The danger stems from the apparent failure of Microsoft customer service to keep track of repeated account access, our expert said. This allows hackers employing social-engineering tactics to call support lines without being tracked. A hacker can then use this information to gain access to a user's Xbox Live gamertag, which typically has a credit card attached.

Full Story: mtv.com



Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: BasicAir on August 28, 2008, 11:07:00 PM
LOL

Every "guide" on how to hack an XBL account on the internet is either:

1. A b.s. phising attempt to hack YOUR account (such as send an email to [email protected] with this copy/pasted info along with random characters and your own liveid and password).

or

2. A common-sense tutorial saying "get the person's liveid and pass" and go to "recover gamertag" on your 360. DUH!

Is MTV or their writers really that stupid that they think that's sufficient enough to make a claim in their article that "tutorials on how to do this are up on the internet right now" ?? That's hilarious.


Nonetheless, the bottom line is the way to hack an XBL account is no different than hacking other types of accounts all over the internet. That answer is, as the article puts it, social engineering. Yet "phishing" is still a less-common tactic that is still used though usually fails unless it's being conducted by a very skilled person.

With that said, there is no bigger threat to getting your XBL GT hacked than there is to getting your itunes account hacked, your AOL/AIM sn hacked, or your SteamID hacked, along with millions others. What does this mean? This means this article is both amazingly stupid and full of bullshit both at the same time.

Talk about ringing a false alarm here...

And btw, since this is really more or less about social engineering, let me say that it's not as easy of a tactic as it sounds. 10 years ago I engaged in a lot of social engineering myself so I speak from personal experience. 10 years ago I was about 18 years old and did other stupid things too so go figure. But anyway, social engineering takes practice, time, patience, and skill. You can literally spend 100 hours calling a support hotline for say, AOL, before really getting anywhere with your attempts to hack into an account. Sometimes less and sometimes more. Though it's a lot harder than many think, it's sometimes your only hope to hack an account on an extremely secure network such as XBL.

Anyway, thanks for the entertaining article X-S. MTV continues to surprise me with idiotic articles.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: 82_Z28 on August 29, 2008, 03:57:00 AM
the main difference with xbox live accounts being hacked is credit cards are often associated with the account and easily exploited with little to no verification.....

why xbox live can't simply ask for the 3 digit # on the back or an expiration date or SOMETHING is beyond me

you'd think something like this would have some serious problems with security but I guess it'll take some stupid lawsuit before m$ wakes up.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: bucko on August 29, 2008, 08:00:00 AM
Anyone that gives out there login Live info deserves to be hacked.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: 1nsan3 on August 29, 2008, 08:53:00 AM
CODE
Anyone that gives out there login Live info deserves to be hacked.


I agree fully!

My live account is not connected to any credit cards, i renew every year with the m$ card.. and i buy points cards..i never leave points hanging in my account.. i buy the points and use them right there.

if ya dont want your acct hacked then its easy keep your cake eater shut.

to the hackers out there doing this: get a job ya freaks.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: Landlocked on August 29, 2008, 09:06:00 AM
My Live account automatically renewed this past Spring but then I was locked out a few weeks later when the card on file expired. Tell me why I need a valid card on file to let me play on a service that's already paid for?

When are we going to get the option to remove via web or dash our credit card information?? Maybe they've added it since I last check. But major BS if not.  (IMG:style_emoticons/default/blink.gif)
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: Knasen on August 29, 2008, 03:02:00 PM
QUOTE(1nsan3 @ Aug 29 2008, 03:53 PM) *

My live account is not connected to any credit cards, i renew every year with the m$ card.. and i buy points cards..i never leave points hanging in my account.. i buy the points and use them right there.


 I do exactly the same and feel really secure. If people think before acting they should realize there are better ways than supplying MS your creditcard info.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: Agent ME on August 29, 2008, 04:43:00 PM
QUOTE(bucko @ Aug 29 2008, 07:00 AM) *
Anyone that gives out there login Live info deserves to be hacked.

Except that it seems to be possible, or used to be possible, for someone to call the 1-800 support line, and trick the person into giving access into the account. That's not the user's fault and is something to complain over.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: unistyle on August 29, 2008, 06:30:00 PM
QUOTE(bucko @ Aug 29 2008, 03:00 PM) *

Anyone that gives out there login Live info deserves to be hacked.


while i agree completely with this statement, the article makes it sound like the hacker is calling the customer service line and getting the information directly from them, which if that is the case it is no fault of the user and is a pretty big concern.  if i'm the idiot who gives my info up then i deserve it, but if some other idiot gives my info up then that shit ain't right.
Title: Reports Of Hacked Xbox Live Accounts Stir Concerns Over Gamers' Securi
Post by: Steve-0 on August 30, 2008, 01:45:00 PM
lol, what about the fools who do the achievement glitches with gamesaves always passing their accounts around so the can be "u83r 1337z" with their super gamer score, they are the people who deserve to be hacked, not the average joe who thinks he just made a new friend.