SRL Archive - News and General

Very Interesting


SailorJerry

2012-09-26 07:09:40

Hi, I joined this forum around February this year. Just want to say first off I loved this place and had a lot of fun at one time. I trust everyone here for the most part. Got bored with it though and left because RS just got boring in general. I'm not accusing anybody or anything but somehow, someway my account got hacked. I use my computer regularly and nothing else on my computer has been touched for any accounts, emails, even bank account info etc. I honestly don't really care either. Interestingly enough only the gp was taken off the account, but that's because it's f2p now and I'm assuming the person who did it didn't feel like paying for p2p to get the rest of the stuff. My password for the forum was also the same as my RS password too, (changed now) but my forum name is not. Soooo, not accusing anybody but the evidence points to somebody at this forum.

But yeah, just letting SRL members know that this forum might not be as safe as you think. :)

Footy

2012-09-26 07:12:33

I can assure you there is 0 malicious code in SIMBA or SMART. Both are open source, so you can read the code if you want. Do you have the IP of the hacker? A mod can do an IP check to see if it was anyone at these forums.

P1ng

2012-09-26 07:20:11

Unless you gave (or left) your details in any message sent to a user on this forums, it is impossible it was anybody here. If a script is written that may potentially steal your details (has happened previously) the users/staff here pick it up really quickly and it is removed ASAP.

Therefore - Simba, SMART and any scripts written here have no way of stealing your information.

So, without you giving (accidental or otherwise) your information to someone here it is not do-able.

SailorJerry

2012-09-26 07:22:04

No I forgot to get a pic of the IP when I logged in, as I know my computer is secure wasn't expecting that. I know you can, but I know anything with coding there are ways around stuff. I just don't know enough about it, and I used a lot of scripts without reading through the code at all sometimes.

P1ng

2012-09-26 07:30:04

If you logged on using SMART there will be a screenshot of the IP screen.
If not then there is little anyone here can do to help you and all anyone can do is speculate.
If the script was uploaded to this site and the thread wasn't filled with people warning you that it was malicious (these threads usually only last ~10mins anyway - thanks to our staff) then it would not have been the script.

If you are worried, you can try running all of the scripts you have used with the security extension enabled. If the script tries to write anything to a file/send information to another location it will block it and warn you.

SailorJerry

2012-09-26 07:34:32

Exactly. I used the regular RS browser. Not much I can do, and I'm not blaming anybody here, that's just the conclusion I've come to. If I knew the answer I'd not even be posting here, unless it was from here of course. But this is the only thing that comes to mind, and especially since I had the same password for RS and here, it's suspicious.

I honestly don't care, just thought I'd inform people and let them be more aware of what they're doing. Uninstalled everything with simba anyway, and I was already quitting RS so it kind of just helped.

Leonardo Da Vinci

2012-09-26 07:49:44

Maybe a RAT?

Main

2012-09-26 07:51:20

sorry bud. But it ain't simba.

#1 yes you can read the source code. If you use built in simba updater then your srl is clean.

#2 assume you've simba from wizzup.org/simba. THen the only chance of simba ever hacking you is if you used a script that is privately sent to you as all public scripts are checked by members very frequently to assure no hacking material.

#3 been using scar and simba since 07 and 09. No problems what so ever and I've never used a single anti virus/ firewall.

SailorJerry

2012-09-26 08:10:11

Yeah well the facts are there. Other people will decide what they wanna believe. I'm not accusing anybody. But my password for the forum was the same as my RS password, so yeah put two and two together. I think somebody would wanna steal my bank account info more than RS gold, and I literally just use my computer for FB and email..I also scanned my computer with 3 different AV and nothing came up, at all..not even toolbar search spam. If anything this is just a thread to remind people to be careful of what they do.