Unauthorized gambling

[omega_grunt666]

*edit*
Since it isn't clear enough, This thread is about the vulnerability posed by untraceable gambling bets. The transaction log exists to help solve credit theft/exploits through transfers and the gambling hall can be used to bypass it. Transfer credits, no record, no repercussions.

If you don't have anything constructive to say about that topic, please refrain from posting in this thread. Tip: If you don't like the thread, don't post it in, it will go away faster.

Note: Clearly this was posted in the wrong subforum, if it could be moved to FFR General that would be nice. (I was a little flustered at time of posting, not thinking too clearly)

So I just noticed I'm missing 475,000 credits (of the 479k I've accumulated over 9.65 years)...

First thing I did was change my password and check my transaction log, nothing. I was about to assume it was a display bug until I checked the gambling hall:

Bet Amount When Result
25,000 5 days ago Lost
100,000 5 days ago Lost
100,000 5 days ago Lost
250,000 5 days ago Lost
5,000 6 months ago Lost
5,000 6 months ago Won
50,000 forever ago Won
10,000 forever ago Lost

What the hell do I do now?

I can't prove I didn't just gamble it away, even though 250k is 5x the largest bet I've ever placed and it accounts for over 90% of my overall gambling activity. Unless the IP is tracked on bet because it sure as hell wasn't from one of the two places I access the game from. I have no idea where to even post this, or if I should be PM'ing someone. Though I have the suspicion its something that can't be fixed by mods. Its also bugging me that they are all losses, is someone using this to transfer credits without leaving a name behind to report?

[devonin]

Re: Unauthorized gambling

If your account was logged into by another IP, they have the ability to see which other accounts have also logged in from that IP, but it is pretty trivially easy to route a connection through a new IP for that purpose.

The fact that you lost all the bets is an unfortunate coincidence. Somebody using your account in this way could just as easily have won and then I'm not sure you'd be as upset :P

Having changed your password is about the best you can do.

[Arkuski]

Re: Unauthorized gambling

You can't tell who the wagers were against?

[devonin]

Re: Unauthorized gambling

Of course you realise this is really indistinguishable from "I lost a bunch of credits and now I'm hoping for a refund" unless IP checking shows something.

[Izzy]

Re: Unauthorized gambling

Good thing its fake credits and nothing that matters. Also not chit chat. This goes in ffr general talk.

[omega_grunt666]

Re: Unauthorized gambling

I would hope on the back-end its as easy to track as normal credit transactions. To keep an eye out for exploits and what not. I can understand not making that public, because some people are frankly toxic and would probably harass the people they lost credits to. But I seriously hope someone with the power to do so is looking into this, in the case it wasn't just some troll trying to upset me by betting them blindly. If someone has a history of using this to steal credits from people who aren't legitimately betting, then something should be done about it.

If at all possible, I would request some sort of opt-out from the gambling hall. I have no temptation to risk credits on something that in its history has been exploited. And all it really does for me is make my account more vulnerable in the situation it is hacked again. (I honestly have no idea how it was in the first place. Unique password never shared with anyone. Logged out on public computers, never save password.) I think it should be an option to have your account permanently blocked from the hall, if people change their mind later nothing stops them from making an alt and sending credits to it. But then at least it will be trackable with the transaction log.

[devonin]

Re: Unauthorized gambling

It wasn't hacked. If it was actually hacked in the real meaning of the term, no offence to you, they'd have had better things to do with their arbitrary access to the user base than take a couple hundred k through the gambling hall from some dude.

There are people known to have millions of credits, not to mention all the people with authority to ban users, delete content and change account information.

[omega_grunt666]

Re: Unauthorized gambling

Fair enough, Unauthorized Access =/= Hacked

I understand its extremely unlikely if not impossible to get my credits back due to the nature of the problem and its exploitability. But at least I would hope to see changes made so this doesn't happen to anyone else. (And by extension, myself if I decide to build my credits back up)

[devonin]

Re: Unauthorized gambling

To make sure that somebody who has access to your account can't use the functions of your account? Not sure how they're supposed to do that.

[DarkManticoreX2]

Re: Unauthorized gambling

I think Omega's asking for something like a back (Mod/Admin) end ability to void a gambling contract.

It'll never happen because the claims of "i've been hacked" will explode.

[omega_grunt666]

Re: Unauthorized gambling

I mean a way to opt-out of the gambling hall permanently, seeing as it can be used to bypass the normal credit transaction log. It would probably be helpful to people with gambling problems too, making it a little more difficult to bet credits (having to create an alt-transfer-etc) Or to block people who have exploited it. Since the alternative of having a betting log that includes usernames isn't viable, because people would be harassed for getting lucky.

Just a simple click, confirm, "OK, you can no longer bet credits with this account."

*edit* Hell, if it were possible to lock the credits to my account, no betting/transactions. Only purchasing songs, I would have done so in a heart beat.

[DotKritic]

Re: Unauthorized gambling

If at all possible, I would request some sort of opt-out from the gambling hall.

I would love to opt-out of the poor decisions I made in my life, but that isn't going to happen.

If the credits are the only thing that you care about, then I suggest quitting the game. Just like Izzy said, "...they're fake credits and nothing that matters." Move on.

[Arkuski]

Re: Unauthorized gambling

Wow you guys are ruthless. Let's just wait for an admin to decide what to do and not give omega a hard time

[Wafles]

Re: Unauthorized gambling

Should never have been posted anyway. PM the admins, don't make this a public issue when you simply couldn't keep your own passwords safe.

[clasko1000]

Re: Unauthorized gambling

I really dont see why everyone is slamming him so hard. He came out and asked for an admin to help him solve his issue. Its not like he just said "Give me back my fucking credits hacked hacking hax0rz", he asked someone with the power to, to provide proof that he was telling the truth. You could at least give him the benefit of the doubt and with until someone can verify the information. If its true, something can be discussed then.

I am very disappointed to see the way some of you responded.