Entire cities dead on some World of Warcraft realms
wow.joystiq.com
wow.joystiq.com
Seriously, though: you almost certainly have one if you run a software business. Client side SSH certificates are your friend. If you're not able to do that, because it is really annoying, separate it from the main app and lock it down as much as possible. (Separate authentication from the main site/app's authentication scheme. Lock down access, ideally at the network level. Strongly consider two-factor auth.)
[1] http://massively.joystiq.com/2012/02/29/blizzard-announces-l...
[2] http://kotaku.com/5933454/blizzard-network-breached-change-y...
[1]: http://www.howtogeek.com/121650/how-to-secure-ssh-with-googl...
Of note, if you do use a client-side SSH cert, disable username and password auth.
So you have folks administering the servers. A certain percentage of them need root access. One of them gets his certificate revoked and then laid off -- in that order -- but he already installed a back door account. Okay, so you're a good admin and you check the logs and make everyone use "sudo" for everything.
* But maybe it won't even show up in the logs. Maybe he was editing a file in sudo with vi and ran ":! bash". Okay, so you're a good admin and disabled that.
* Maybe he was editing crontab one day and added a one-shot script to create a nefarious account. Okay, you are a good admin and you have tripwires.
* Maybe he knows where your tripwires are. Do you honestly think you know every possible attack vector someone with legitimate sudo access could use?
It's really hard to stop an inside job. The principle of least privilege is a nice maxim, but there's a cost to figuring out exactly what the least privilege is, and there's a cost to giving someone too little privilege -- downtime when they can't fix something they're supposed to fix.
Ah, yes, works on a default Ubuntu desktop install provided you have vim installed (not the usual tiny-vim package that uses nano for visudo editing).
2) You can disable sudo -s, sudo su, and sudo bash. Maybe the people with root access only need to run a few commands and edit a few files as root, so you whitelist those. But as I mentioned, if they need to edit crontab you've probably given away the keys to the kingdom right there.
There are more attack vectors you can enable without knowing about it and you've got a business to run, so you make a cost/benefit analysis -- it's always a trade-off between efficiency and security.
:sp /bin/vi
...
:wq
Yes, I wasn't very clear when I said the following...
> Okay, so you're a good admin and disabled that.
What I mean is that you disable "sudo vi" access, and allow "sudoedit" access. Suddenly you only have write access to certain files. But which files? These people need to administer the server, but at the same time you want to prevent them from creating a backdoor, or at least you want to know about it if they do.
/etc/crontab is just an obvious example. Maybe you can get suborn a filter somewhere that runs as root, or poison the environment variables of a legitimate script.
This doesn't cure everything, of course. There are a lot of places in many server environments where a determined miscreant can hide time bombs. (Oracle DBMS_JOBs anyone?) But it can be a useful component of defense in depth...
What are those? We're talking key-based ssh authentication? Or something else?
The GM interface requires a special build of the WoW client, a specially flagged account, and a two factor auth token to login. It's pretty hard to emulate the client as opcodes are randomly shuffled based on the hash of the binary itself.
And of course the spies! Their activities went so far as cutting an important fleet commanders electricity so his thousand-of-real-world-dollars titan could be shot down.
EVE is fascinating!
Even so, in eve there are only small aspects that span servers simultaneously (the market place, and maybe other things too--I haven't played in a year or so).
The unique thing about eve is being able to jump between "realms" or servers or "shards." That gives the illusion of playing together in a much larger world.
I've never played WoW, so I don't know if you can jump between shards or realms, or if they are treated more like parallel dimensions.
As you suggested, it refers to multiple "parallel dimensions" between which the playerbase is split to avoid overpopulation; that's how almost all other MMOs work. Whether each of those runs on a single physical computer is irrelevant to anyone except the host.
Thanks a lot!
I don't play the game though, so I might be wrong :)
Eve is an single "shard" MMO with a starship piloting theme. Similar in ways to Elite http://en.wikipedia.org/wiki/Elite_(video_game) The economy (and related such as production, resource ownership, politics, warfare) are, to an extent not found in most MMOS, player driven. That is what sets Eve apart.
People are a varied lot and thus like it for varied reasons. There are several ways to enjoy game.
Unlike WoW, there are no raids and bosss. There are NPC spaceships that you can kill for loot, but that sort of thing is small potatoes--there's no equivalent to a 40 man raid grouping up for a boss fight to get good loot. EVE has no stated goal, there's no endgame, except for what you make of it. Also, the mechanics of EVE let player created alliances control territory, in the form of star systems. Right now, I understand that Reddit and SomethingAwful are the two giants in the galaxy (Test Alliance Please Ignore, and Goonswarm Federation in the map I linked above). There's also a bit of the galaxy set aside for NPC space, where people are somewhat safe from other players, which is the bit in the middle of the map I linked.
Another interesting aspect of EVE is the economy, which is quite a bit more in-depth than other MMOs. Since I don't play EVE myself, I can't say much about it, but I do know that people can become fairly wealthy in-game, just by playing the market, even to the point of paying for their subscription. I'll just say that EVE is noted for it's economy, and leave it at that.
But the most notable thing about EVE is the politics. Because everyone is in the same game world (again, unlike WoW, where there are hundreds of identical Azeroths on different servers), the stage is set for conflicts on a huge scale. Also, the developers are notoriously hands-off. A spy infiltrated your alliance and stole your entire treasury? It's happened before, and it will happen again.
If you have the time, I think you should consider reading a little bit of this: http://www.teamliquid.net/forum/viewmessage.php?topic_id=881..., which is a snapshot of an interesting event in EVE, that I put together from various sources a few years back.
test post please ignore
http://www.reddit.com/r/pics/comments/92dd8/test_post_please...
You're a capsuleer. A capsuleer is someone who can pilot certain specially designed ships. As someone who has ascended into virtual godhood by the benefit of effective immortality, you have entered a new plane of power dynamics. And because you're a gamer, the galaxy is an oyster to exploit for your amusement.
The simplest play is to fly around and shoot things. There are pirates, other players, other factions. They all shoot back, probably. Some of them do it better than others. Eventually, you run out of ammo, or your ship is destroyed, or you want something bigger and badder. That gets you to start thinking about how you shoot things and how to do it efficiently and effectively. That gets you thinking about which ship to fly, which guns to put on it, and so on... and how to get all those things cheaply, or at least for a smaller cost than it takes to make money with it.
The ships, the guns, the ammo: these all come from somewhere. Other players make it. They do it by stripping asteroid belts of resources, holding territory where they can conduct R&D, and build every bullet you expend, every ship you pilot. Some of those resources are more elusive: they come from gas clouds which are hard to detect, or components found in uncharted systems. There are ways to get there and exploit those resources, too.
And naturally, with so many moving pieces, so many different agents, you get hierarchical organizations, larger infrastructure, traders conducting arbitrage and moving freight, bigger and badder ships and bigger and badder groups to hold vaster tracts of territory. And with that comes opportunities to scam and con others, opportunities to be a leader or a spy, and so on.
And all of that is supported by the game. You're constantly going to have to deal with the social repercussions of whichever path you take: a lone pilot won't have support infrastructure from their corporation; an alliance leader has to maintain the interest of his members; time spent shooting things is time not spent mining asteroids; and so on.
What sounds cool? What do you want to do? Can you stomach what it'll take to be in that role? Can you understand mechanics and people well enough to make it happen? Then you can probably do it. That's EVE.
But I wish you hadn't responded! I suddenly want to be 14 again so bad it's hard to get back to work on the app I'm building ;-(
EVE will be around for a few years, I hope. And by then I should be able to play it.
I did finally run a trial of it earlier this year, after I had tired of Rift and SWTOR, and it was about as vapid as I expected; I got to level 20 and stopped.
With Rift, the invasion mechanics feel like something I'd enjoy, but that's probably it. I find myself feeling a bit lost about the mix-n-match class structure, but that is more a lack of research on my part than Trion's fault. The invasion mechanic is probably just like EVE's incursion mechanic. Neither was novel to me, though I had never seen it done in formal phases before. (I have experienced masses of suddenly-spawned enemies in GM-directed waves.)
And in WoW... all I experienced was the 1-20 grind of quest lines and vague storyish backdrop. I didn't have a build worth remarking on or any hint of the endgame, so I'm sure my experience is easily dismissed by people who believe you need to be level 80 before you're fit to judge the game. /shrug
I've never tried Hellgate. I did try out The Secret World for a little, but horror as a genre bores me (existential terror doesn't really do anything for me), and I found it hard to figure out what to do in a lot of cases. I didn't put a lot of effort in it.
Setting aside all the inaccuracies and misunderstandings of basic game mechanics in it (which is in part due to the steep learning curve of the game I admit, so it's somewhat understandable) EVE Online at it's core is ultimately a geek social hierarchy with a thin veil of "science fiction video game" masked over it.
Nowhere in the post did it mention ever interacting with other players, let alone leaving the safety of high security space to join one of the established social powerhouses in player controlled space. This is where the real "game" takes place and which is why the retention rate of new players is so extremely low, they don't get to see it.
If you are wondering why people keep playing this game, it isn't because they are stuck in some kind of "WoW-like" grind trance and just want to see a progress bar inch forward. It's ultimately the chance to ruin another social groups day and proclaim that your social group or culture "is better then theirs". You can visibly view a generated map of player controlled space[1] and say "we own this, we took it from you". The large super capital ships used in these battles are also worth upwards of $1,000 USD. A battle not long ago[2] resulted in the destruction of somewhere around 13 to 15 thousand dollars worth of capital ships.
Ultimately, EVE Online is a social experiment first, a war simulator for privileged first world geeks second, and a science fiction video game somewhere down at the bottom of the list.
[1] http://go-dl1.eve-files.com/media/corp/Verite/influence.png
As an aside:
Way back in the early 80s, I was acquainted with a fellow who ran a worldwide play-by-mail game called "Cluster II", and a number of my friends were players. There had been an earlier game whose title I leave as an exercise to the reader. The game was run using Australian Tax Office mainframes in downtime. It was conceptually kind of a gigantic interstellar conquest run using Traveller's "High Guard" combat rules, and it allowed players to operate as corporations, spies, or straight out interstellar empires.
My point: the experiment has been run before.
Good job on having 20k players. I'm impressed your email system was able to handle that.
Who said anything about email? This was play by mail. Each turn comprised getting a combination state-of-your-holdings/order-form on computer fanfold, filling in and tearing off the order section, and sending it back. Some aspects needed to be handle out-of-band (e.g. if you designed new warships I believe they were verified legal manually -- one of my friends was given free play in exchange for verifying ship designs -- and then entered into the system).
And as long as there are new generations that want to spend their free time with such an experiment, history will repeat itself. Not to mention experiencing it in a new medium (heh, play-by-mail) and taking it to another scale. Hell, our alliance has it's own custom authentication application that strings together dozens of various applications that serve our coalition. We have a small team of system admins that run our services. A single jabber broadcast for a fleet reaches thousands of members instantly, followed by a flurry on logins to the game server.
As far as the "initial experience" being terrible, I completely agree with you on that one. CCP have put a lot of effort into improving the new player experience but it's still extremely lacking and I honestly don't think this will ever change.
I also admit choosing "war simulator" may not of been the best phrase. You're right, it's a simulator of something, but when you are in a science fiction setting where spaceship pilots are immortal, it's never going to represent any war we are familiar with. You're wrong about it not being interesting though, if it wasn't interesting, thousands of us wouldn't log in at one time to take part in a battle over a bunch of pixels.
In regard to your comment about it not being sold as a "social experiment", you'd be surprised. CCP went in that direction with their marketing material for a few years:
"The Butterfly Effect" - http://youtu.be/08hmqyejCYU
"Causality" - http://youtu.be/uGplrpWvz0I
"I Was There" - http://youtu.be/OSxSyv4LC1c
I'm stop posting about EVE now. I fear about coming across as overly defensive about the game, when that isn't really my intention.
The learning curve at the start of Eve is pretty steep and just keeps getting steeper as it goes along. The first time you get your brand new cruiser that you mined rocks for 5 hours to afford destroyed by a pirate you might want to cry (Stuff that is destroyed in the game generally stays destroyed).
I'm not sure about "social experiment" but I do remember thinking Eve looked a lot like what I imagine an anarcho-capitalist society would look like. There is literally a price tag on anything.
I do think that Eve is something best played with others, even towards the beginning, if you want to survive it is best to hang around with a few "mentor" types who can help you get through the jump gates to low sec where all the interesting stuff is (the gates are usually camped by some alliance or other who tend to be trigger happy).
I quit playing the game because the time investment was not worth what I felt I was getting out of it but I don't think it's really fair to write it off as just another MMO.
Thing is that the 60% is actually pretty fun too if you find people you like to hang around with and if you like thinking about how to optimize stuff and achieve goals. So all-in-all I enjoyed it a lot. But I don't recommend it unless you figure out who those people will be before you start.
My chief advice for playing is to find a good group of people with whom to try to achieve something specific and ambitious. You're probably not going to make any headlines, but you're a lot more likely to have fun despite the grind.
http://www.simulation-argument.com/
An interesting read by world-renown philosopher Nick Bostrom.
I am going to wrote allmy papers like this, "Either some ridiculously unlikely scenario will never be reached, or some other unfalsifiable scenario is true."
In MMO terminology "server" seems to refer to a single self contained game world.
http://www.ownedcore.com/forums/world-of-warcraft/world-of-w...
this isn't the first time Blizzard have messed up like this: they originally set the "Game Master" access level by a bit transmitted client side, and the same socket bit twiddling could be used to get into their private alpha servers...
Could be a similar sort of thing, or it could be a hack.
Plenty of things happen every single day that affect millions and are covered in multiple world news sources. They don't have their own pages, so clearly that's not the standard.
Multiple published research papers, not proposals. Over 600 Google Scholar results. It also made its way into several books.
Should you wish to discuss the event and the research it spawned, I'm sure you can find a discussion group for that. I'm not your research assistant, and I doubt the sincerity of your interest, given you dismissed these papers' existence outright mere hours ago.
You seemed to be saying there was actual research based on the incident, and I wondered if you had found something different. I assume you did not.
Also, to directly quote the wikipedia page on Notability: "Notability is the property of being worthy of notice, having fame, or being considered to be of a high degree of interest, significance, or distinction."
"Determining notability does not necessarily depend on things like fame, importance, or popularity—although those may enhance the acceptability of a subject that meets the guidelines explained below".
I also note the page has been marked for merging, so I'm hardly alone in my opinion.
I'll make one final point and then let it go. If you want the last word, it's all yours.
Two mentions in any medium is definitely not the standard for notability on wikipedia. Read the very page you linked for confirmation of that, there's quite a bit more about the standard there.
How many will pick up a book, or go for a walk, now that they no longer have their go-to fix of virtual reality. How many WOW addicts will have time to think "never again" and follow through.
Equivalent to all the cigarettes in the world vanishing for a few hours? Possibly. And equally as effective I say.
Somewhere between -infinity and zero.
Statistically, Zero. Trust me, they are all madly typing on forums, mashing refresh, trying to find out / talking about what happened.
> How many WOW addicts will have time to think "never again" and follow through.
A few.
Granted the time invested is likely a little different.
/posting from my kid's room while she falls asleep.
Who the fuck are you to tell people how they get their enjoyment out of life?
It's the same fucking thing. They use the same mechanics to tickle your dopamine receptors so you'll come back instead of looking out in the outside world for that same feeling of reward - family, friends, relationships all get fucked up because you spend your time seeking reward from {cigs, booze, drugs, WoW}.
Look, I'm sorry you've had a bad time and got addicted to WoW. That doesn't make it an inherently addictive thing. Some people can play it in their spare time without issue; others can't. Not everybody is the same.
Me, I can play a video game for 20 minutes and stop and go on to something else and not care. My husband used to play WoW for hours and hours at a time at the expense of work and family, to the point that it was having a negative impact on his health, his relationship with our child, and putting a huge strain on our marriage.
But I think WoW was just feeding the problem, not causing it. I think it was a reaction to a deeper depression and WoW was just something to get sucked into and escape reality.
He stopped playing WoW, switched jobs, and is going back to school, has friends over on a regular basis for some real interaction and is happier than he's been in a long time.
Now he sits down some nights and games for an hour or two after the kid's in bed and that's that, unless we have something else planned, and then he doesn't. The tendency to get sucked in for hours at the expense of all else has disappeared.
I think, in the wrong circumstances, that escape that WoW offers can be addicting, dangerous and damaging, but I think it's less often the game that's the actual root cause of the problem.
Like anything, which is why it's not helpful in this context to cast the net so wide as to include cigarettes and all the other stuff that the above poster tried to shovel into his point.
In 10 years time certain types of video games that leverage addictive elements to hook users will be widely understood to be just as addictive as your average slot machine. They will have comparable awareness groups, treatment programs, etc as those seen for gambling or prescription drug abuse.
While I can emphasize a bit (I used to play WoW, but "grew away from it" and now spend a large portion of my time in search and rescue and musical performance), I have to say that this is a very judgmental POV to take. You're seriously going to compare playing WoW to smoking? Even in the worst case, at least playing WoW is a step up from watching some inane TV show with no interaction. It's not like anybody suffers from second-hand MMORPG.
And you can always play moral superior: instead of reading a book, why don't they start their own company? Instead of going for a walk, why don't they run a marathon? Hell, I could see how someone could look down on the activities I choose ("why rescue idiots who got themselves into trouble? Let natural selection sort it out!" or "why perform music that's already been performed thousands of times before by better performers?"), but FFS, sometimes "wasting time" is some of the best time well spent.
"It's not like anybody suffers from second-hand MMORPG."
this is flat out wrong. Kids suffer when their parents can't bother to change them because they are in the middle of a raid and this boss hasn't been killed yet. Spouses suffer when the amount of time they can spend with their WoW playing spouse dwindles to zero. Parent's suffer when their kids grades head to zero.
So any behavior that can warp your life to that extent is a relatively poor choice with respect to any other behavior that does not.
Addicts always say they're making a personal choice that doesn't affect anyone else, whether it's WoW or booze or blow. And they're always wrong.
The last AA meeting I went to, someone spoke for the first time and told a story about a typical night at the bar. Drinking, watching the game and minding his own business. Just like every night. Except this time, 8 beers deep, his daughter walked from home to the bar and tugged on his sleeve - there was nobody at home but her and she was scared.
Bet you'd never heard of "second-hand drinking" either.
Until someone gets a case of cirrhosis of the liver from someone else's drinking, there is no such thing as "second-hand drinking", just as there is no such thing as "second-hand carpal tunnel syndrome" from someone else playing too much WoW. I'll be the last to say that addiction doesn't affect others, and yes, I will agree that people can spend too much time playing video games (or getting drunk). But much like the alcoholic telling someone else they should never drink because it's "Evil", I won't take my advice from someone who obviously thinks that WoW is inherently evil.
http://us.battle.net/wow/en/character/nordrassil/Spink/advan... is my main WoW toon (already level capped for the current just-released expansion and raiding), with weeks of /played time.
http://www.goodreads.com/review/stats/2444699-jane is the last couple of years worth of books I've read. How many people do you know read 50+ books a year?
I prefer to run, and I sustain an average of 8 minutes per mile in 5ks so I'm not an unfit slob. I don't run marathons though, I just run and swim for fun and exercise's sake.
I do all of this because it's fabulous stress relief, it's a great time-filler when I don't have the space/time to work (e.g. cooking/restaurants, boarding flights, random 5 minutes at places, right before bed), and WoW in particular enables me to spend time with friends no matter where they're located. I can do this in the first place because I don't do things many people do such as watching TV.
It's funny how people are incredibly judgmental about WoW but they find it incredibly impressive I read a lot of books and sustain reasonable times in runs. I find more rational reasons to play WoW (reasonably, that is, and not by ignoring people to do so) than to read. They're both hobbies. Take anything to an extreme and it's bad. But WoW overall is not as bad as the one off horror story you'll read about about parents ignoring their kids to raid.
How do you play for 5 minutes? Don't you have to fight big complicated battles with lots of people at a scheduled time?
Stereotypes are fun, aren't they?
Mayans knew this.
If they have the account information on this, I have to wonder if they could actually sue someone (instead of just banning them) for using this hack?
As some of the MMORPGs have multi-million dollar economies, they'll need to increase their PCI level compliance.
This reminds me of Charlie Stross's Halting State[1].
I hate this kind of crap.
Nothing too impressive to this "hack"...
No doubt this is related to this problem :http://kotaku.com/5933454/blizzard-network-breached-change-y...
1. Wait -- was I just teleported into my favorite South Park episode?
2. I can't wait to see the civil lawsuits for psychological injury against the perpetrator of this outrage.
3. Don't these people do nightly backups? It's not as though WOW isn't an important cybernetic resource meriting industry best practices.
This is kinda funny.
WoW forums appears to be down too..
Asuming they have backups.
Edit to add: Players who get killed by this aren't going to lose anything, which is what the link was talking about, but I guess its letting people who are in on it exploit content too - some of them may be rolled back, banned, or otherwise dealt with other than just the thing getting fixed, whatever it is.