It looks like Microsoft has done very little to prevent hackers from stealing Xbox Live accounts, this time somebody's account was stolen in Halo 3 because he had the ultra rare Recon Armour.
(Halo 3, Xbox 360)
wow live sounds about has safe has windows...
sad for a closed system run by the self proclaimed system experts....
edit: Point m8 no point in bragging up psn on an xbox thread but this really sucks for all of those paying users. Hope they get the message and fix it.
edit2: started a thread here on how to secure you live account (hopefully well get some good tips) http://forums.n4g.com/prote... ps if you have any sage advice please add it.
Don't bring PSM into this. XBL is a great online service, the whole point of this newsstory is to get the word out to Microsoft that they need to add more security into their service.
looks like Microsoft has done very little to prevent hackers from stealing Xbox Live accounts maybe thats because you stealing Xbox Live accounts and useing it at your house...is like goin to a police HQ and stealing a gun....(for those of you that dont know m$ know where you are down to which room in your house when ever you log into live so go ahead steal Xbox Live accounts and enjoy 10 years in jail.
lol 10 years
lol lol lol
m8 no ones ever gotten charged for stealing an M$ account and Ill guaranty M$ will never charge anyone for it.
edit it be interesting to see someone file a civil suit over it tho unlikely to ever happen.
edit @ jackwho theres a big difference between giving the cops what they have a legal right to demand and putting the money, time and negative pr into policing your own systems... Not like this is a M$ thing tho its pretty standard practice for any big corporation to avoid extra cost and neg publicity m8
ms has alredy used this to help the cops n track missing xbox360 shipment...and you think Ms will never charge anyone for it??...you need to go read the Xbox LIVE Terms of Use and Privacy Statement
What you describe isn't really the definition of phishing, but your point is a very valid one,nonetheless.Never put real world info in to insecure systems,as you imply in your post.A bubble for a very 'aware' comment.
lol hacking xbox live accounts for gaming rewards some hackers are sad. lol imagine if they catch him and he goes to jail where all the tough guys are bragging about who theyve ****ed and he comes up am here cuz i hacked someones xbox live account cuz he got an ultra rare halo armour. tut tut
i'm thinking to myself aside from MMOs, what exactly can you do by hacking a HALo account of all things?
you cant trade items, cause there arent any. you could probably make someone's rank go down by dying a lot but...who knows.
only game i can think this would be really horrible is chromehounds (give away cash to your country...which is a good thing. or sell items...but you can buy em back for same price)
Damn Sucks that Microsoft is completely ignoring the account hacking issue; the fact that he was able to get 'protected information' on the guy who hacked his account is already a bad sign.
LEts see 128 bit cryptographic military grade servers for credit card information and xbox live info....hmmm yep it was neither xbox live, nor microsofts fault it was the users.
DOnt give out your information online people, and have a password longer then abc123 or pencil on ur account.
This was not microsoft or xbox lives fault but a users.
and as you can see SOCIAL engineering throughout the forum post. therefor xbox live wasnot hacked stupid people we're.
Did you read the original posts - not the ones at Bungie.com but the original thread where the hacker replied? According to the hacker he busted the account by talking to a MS support rep. If he was able to talk the rep out of the info how is that not Microsoft's fault?
Another excellent point! Hah. Social engineering, the crackers best buddy! You are crack on sir.A good warning to all. feedback for you!
10.1 ^^^^^ I agree MS very lax and irresponsible. You make a great point,but this, as William RLBaker points out,perfectly illustrates social engineering, not a weakness in the actual security 'S/W system' as such,nevertheless a breach in the system as a whole, agreed.
@WilliamRLBaker Dude, did you even read the story? The hacker replied and said he got the info from MS over the phone. Your right, no hacking, but it is an MS screw up. I have never seen anyone defend a company like you, I hope MS pays your bills, otherwise you are a desperate loser. Jesus, I'm sure MS will rectifdy the problem, so just relax.
... at all of the people comments the only two comments that actually mentioned what the real problem is are Kigmal and WilliamRLBaker... lol... funny how DJ.. who's usually acting as he knows what he is talking about "Hacking"... xbox live was never hacked...
how can you stop someone from being tricked into giving their password?
Caller; "Hello Mr. ????.. my name is ??? and I work for your local bank... I noticed you account is showing a transaction of $300 for Sears... Is that correct?"
Victim: "uhh.. yes"
Caller: "I see... your account was locked for security reasons after that very same transaction was posted 2 times... mm.. .it seems that the sales rep at the store made a mistake... good thing our bank have a system to prevent this kind of errors..."
Victim: "ohh thanks god!"
Caller: "Nothing to worry sir. Is your credit card last 4 digits 9234?"
Victim: "wait... let me check!... yes it it.."
Caller: "OK... In order to fix this I going to need to verify your information"
Victim: "OK"
Caller: "Can you give me the 16 digits number in your card?"
Victim: "???? ???? ???? ????"
Caller: "Security code?"
Victim: "????"
Caller: "Exp date"
Victim: "??/??"
Caller: "Please hold... We are all set... we cleared the transaction and everything is in order. Is there anything else I can help you with?"
Viction: "No... Thanks.."
Caller: "You are welcome"
.... all that from a credit card recipe the caller found in the garbage...
What would you think this the victim call his bank later saying that his account was hacked? lol...
Im not sure thats the case m8 We know the 360 has been hacked for a while know and from what I know the latest 'soft' mod includes a bybass for M$ security (we know it works has they are still using it on live) imo its not a far step from that to being able to hack M$ security to get a password...
Also the original poster was pretty clear about him not giving out his info and chances of a rep giving out personal info when they get trained not too seem pretty slim...
Still hoping your right tho.
@Bladestar Read the story and then see my reply to Will above as the same applies to you. It may be a surprise to many of you but MS is fallible, they do make a mistake once in a while.
With bannings, accounts being hacked and with just general retards poluting XBL it's a wonder you people can bring yourself to pay a monthly fee for it.
*goes back to playing CoD4 on PSN where he doesn't have to worry about getting banned, hacked or dumbass 15 year old retards with achievement points* oh ya did I mention it was free?
'live' in fear So basicly any smart ten year old with a grudge can take out your account and theirs nada you can do about it? M$ cant or wont restore accounts yet they want me to pay for their online?
Doubt Ill hook mine up until they fix it...
30°
30°
120°
120°
Ad 
40°
10°
10°
10°
0°
20°
sad for a closed system run by the self proclaimed system experts....
edit: Point m8 no point in bragging up psn on an xbox thread but this really sucks for all of those paying users. Hope they get the message and fix it.
edit2: started a thread here on how to secure you live account (hopefully well get some good tips) http://forums.n4g.com/prote...
ps if you have any sage advice please add it.
XBL is a great online service, the whole point of this newsstory is to get the word out to Microsoft that they need to add more security into their service.
maybe thats because you stealing Xbox Live accounts and useing it at your house...is like goin to a police HQ and stealing a gun....(for those of you that dont know m$ know where you are down to which room in your house when ever you log into live so go ahead steal Xbox Live accounts and enjoy 10 years in jail.
lol lol lol
m8 no ones ever gotten charged for stealing an M$ account and Ill guaranty M$ will never charge anyone for it.
edit it be interesting to see someone file a civil suit over it tho unlikely to ever happen.
edit @ jackwho theres a big difference between giving the cops what they have a legal right to demand and putting the money, time and negative pr into policing your own systems... Not like this is a M$ thing tho its pretty standard practice for any big corporation to avoid extra cost and neg publicity m8
Just pathetic.
It's called phishing. People put their real info on their gamercards allowing people to hack into their Windows Live ID.
isn't really the definition of phishing, but your point is a very valid one,nonetheless.Never put real world info in to insecure systems,as you imply in your post.A bubble for a very 'aware' comment.
hacking xbox live accounts for gaming rewards some hackers are sad. lol imagine if they catch him and he goes to jail where all the tough guys are bragging about who theyve ****ed and he comes up am here cuz i hacked someones xbox live account cuz he got an ultra rare halo armour. tut tut
aside from MMOs, what exactly can you do by hacking a HALo account of all things?
you cant trade items, cause there arent any. you could probably make someone's rank go down by dying a lot but...who knows.
only game i can think this would be really horrible is chromehounds (give away cash to your country...which is a good thing. or sell items...but you can buy em back for same price)
or FF11 :/
Sucks that Microsoft is completely ignoring the account hacking issue; the fact that he was able to get 'protected information' on the guy who hacked his account is already a bad sign.
I think you are a little quick to say MS is Ignoring it.
Security is a huge issue with ANY company.
morning asking me to log into my gold account. I reported it as spam. Hmmm, makes you think.
Here phishy phishy :) Good you didn't bite :)
128 bit cryptographic military grade servers for credit card information and xbox live info....hmmm yep it was neither xbox live, nor microsofts fault it was the users.
DOnt give out your information online people, and have a password longer then abc123 or pencil on ur account.
This was not microsoft or xbox lives fault but a users.
and as you can see SOCIAL engineering throughout the forum post. therefor xbox live wasnot hacked stupid people we're.
Hah. Social engineering, the crackers best buddy! You are crack on sir.A good warning to all. feedback for you!
10.1 ^^^^^ I agree MS very lax and irresponsible. You make a great point,but this, as William RLBaker points out,perfectly illustrates social engineering, not a weakness in the actual security 'S/W system' as such,nevertheless a breach in the system as a whole, agreed.
Dude, did you even read the story? The hacker replied and said he got the info from MS over the phone. Your right, no hacking, but it is an MS screw up. I have never seen anyone defend a company like you, I hope MS pays your bills, otherwise you are a desperate loser. Jesus, I'm sure MS will rectifdy the problem, so just relax.
at all of the people comments the only two comments that actually mentioned what the real problem is are Kigmal and WilliamRLBaker... lol... funny how DJ.. who's usually acting as he knows what he is talking about "Hacking"... xbox live was never hacked...
how can you stop someone from being tricked into giving their password?
Caller; "Hello Mr. ????.. my name is ??? and I work for your local bank... I noticed you account is showing a transaction of $300 for Sears... Is that correct?"
Victim: "uhh.. yes"
Caller: "I see... your account was locked for security reasons after that very same transaction was posted 2 times... mm.. .it seems that the sales rep at the store made a mistake... good thing our bank have a system to prevent this kind of errors..."
Victim: "ohh thanks god!"
Caller: "Nothing to worry sir. Is your credit card last 4 digits 9234?"
Victim: "wait... let me check!... yes it it.."
Caller: "OK... In order to fix this I going to need to verify your information"
Victim: "OK"
Caller: "Can you give me the 16 digits number in your card?"
Victim: "???? ???? ???? ????"
Caller: "Security code?"
Victim: "????"
Caller: "Exp date"
Victim: "??/??"
Caller: "Please hold... We are all set... we cleared the transaction and everything is in order. Is there anything else I can help you with?"
Viction: "No... Thanks.."
Caller: "You are welcome"
.... all that from a credit card recipe the caller found in the garbage...
What would you think this the victim call his bank later saying that his account was hacked? lol...
We know the 360 has been hacked for a while know and from what I know the latest 'soft' mod includes a bybass for M$ security (we know it works has they are still using it on live) imo its not a far step from that to being able to hack M$ security to get a password...
Also the original poster was pretty clear about him not giving out his info and chances of a rep giving out personal info when they get trained not too seem pretty slim...
Still hoping your right tho.
Read the story and then see my reply to Will above as the same applies to you. It may be a surprise to many of you but MS is fallible, they do make a mistake once in a while.
that 3FixMe sucks! See, you pay for online service and you get nothing but aping sh!t in return. PS3 ALL the WAY!
*goes back to playing CoD4 on PSN where he doesn't have to worry about getting banned, hacked or dumbass 15 year old retards with achievement points* oh ya did I mention it was free?
cuz they use exploits in window to get your info right?
Once agin M$ fails. lol M$
So basicly any smart ten year old with a grudge can take out your account and theirs nada you can do about it? M$ cant or wont restore accounts yet they want me to pay for their online?
Doubt Ill hook mine up until they fix it...