How to protect yourself from Hackers

Don Von Alpha Dom
by Don Von Alpha Dom · 137 posts
15 years ago in Help & Support
Posted 15 years ago · Author
Following these tutorials and knowing these counters should allow you to simply ignore most claimed hackers who threaten your family. Always remember, peace is greater than war.

Weapons the h4c|<7r may try to use:

IMVU system abuse - When a h4c|<7r tricks IMVU into deleting an account by reporting and flagging it for every little thing it does against IMVU's TOS, which is allot of possibilities, considering all of the hp codes and content that IMVU's TOS says is not allowed.

Host file hijacking - There is a file in you computer that tells it what to do when it meets certain ip addresses. For example, schools will often tell this file to bounce the ip's of common porn address and ad's. Other people try to block ads with this file. Hackers how ever use this file to ban people with sites, and may add IMVU'ss ip to this file in order to cut off all connection to IMVU from your PC.

Billing Fraud - Hackers will often steal credit cards, buy credits for an account, and then back charge the money, taking the money back, and making IMVU mad. IMVU will almost always immediately disable the account the credits were bought for.

Password resetting - Hackers may force an account to re-set its password, confusing the owner of the account. Neither the h4c|<7r nor the owner has the password, but the owner normally freaks out and does not figure out what is happening till weeks latter after a help ticked with IMVU has been passed. If you find yourself unable to access your account or locked out of your account; you should always attempt a password reset.

Brute Force - This is when a h4c|<7r programs his computer to guess your password till it gets into your account

Phishing - Only stupid people normally fall for this, but since many novice hackers will try to do this to you, we have to go over it. Phishing is when a h4c|<7r tricks you into giving your password. They will often do this by pretending to be staff, offering you credits for it, or creating a IMVU login page that asks for your password

Traffic Sniffing - A h4c|<7r can intercept your password on its way to the IMVU servers by many different methods if they have access to your home network

Login DDOS - It is possible for a h4c|<7r to temp lock an account by trying to login to the account with the wrong password too many time. You can reset this temp lock by simply changing your password right before logging it. The process can be annoying, but your account is fine.

-------------------------------------------------------------------------------

How to counter these weapons:

IMVU system abuse - Either study the IMVU TOS and follow it, or set everything on your hp to buddies only. Keep off IMVU backups of your groups (copies of posts & member lists). Never own the group of your mafia, always set the owner of your group to a dummy account. The dummy account may then be made invisible and its hp turned off, to reduce the chances of hacking. Groups / mafias may also be moved to their own web site to avoid IMVU TOS and system abuse all together. If you need help developing your own website, the IMVU Mafias are more than willing to help.

Host file hijacking - if you find that you are not disabled, unable to log into IMVU, and not able view the IMVU web site:
1) http://www.dslreports.com/faq/10131
2) turn off your fire wall
3) clear your cookies

Billing fraud - Keep a close eye on your credits, if you happen to suddenly have a large amount of new credits without cause, extra credits appear in your account out of no where, contact IMVU immediately and ask for verification that the credits are legit and safe to use, also check your credit balance records under account setting, so you know where the credits were bought from, in case you have to contact a re-seller.

Password Re-set -
Just ret-set it again here: https://secure.imvu.com/catalog/password_forgotten.php
It will send a reset link to your e-mail.

If the h4c|<7r changed the e-mail for the account, then an e-mail should have been sent to your e-mail account, with a confirm link, and a link that will automatically change you e-mail back. Just hit the change e-mail back link that comes with it.

I always keep an auto change e-mail back + password reset link for my account at all times; in case I have to use it.

Brute Force - Make sure your IMVU and e-mail passwords are different and at least 10 characters long.

Generate a strong IMVU Password here: viewtopic.php?f=2&t=11041

Check how long it would take to brute fore your password here: http://www.unwrongest.com/projects/password-strength/

Phishing - enable anti phishing in IE, never give your password to anyone for any reason at all, and only login on IMVU’s main login page, check your URL bar to make sure you are on the right page

You can help prevent phishing / browser hijacking via browser add-ons : viewtopic.php?f=2&t=11040&hilit=blocker

Traffic Sniffing - always log into IMVU through the following secure page: https://secure.imvu.com/catalog/login.php

-------------------------------------------------------------------------------

WARNING : This guide will not protect you from our own hackers. The IMVU Mafias do however have a policy to never h4c|< a fellow IMVU Mafias' member, so play nice.
Last edited by Don Von Alpha Dom on Thu Feb 18, 2010 9:48 pm, edited 1 time in total.
Posted 15 years ago
My password is forceable in 730 years, 6 months.

Is that enough? :hehe:
Posted 15 years ago
for me its safe if it last 2 days in brute force ...
Posted 15 years ago
Toney the hardest passwords to get are the ones from the state, or national security systems, the ones that secure top secret data and acess to many things.
No way your password is that secure, any good h4c|<7r can get it, no matter how much you try :P unless you hire the FBI to secure everything you have xD
Posted 15 years ago
u cant get anybody password anyway .. this brute force as i know .. just put defult names and numbers bla bla testing password untill it find answer its extrimly slow .. best thing is make site where u ask for log in and ppl are stupid they put and u have it .. or send them some surprise on comp that will give u password thats best u can get if u are smart they cant get ur password anyway
Posted 15 years ago · Author
Since I tend to go up against other hackers, I try to keep my passwords between 16-22 characters with letters, numbers, and symbols. It would take over a million years to brute force on of my passwords. ;)
Posted 15 years ago
as i know they use word list .. and there is no way my password could get in thouse word lists . its just stupid ..
Posted 15 years ago
thats what i did muahahahahaha well i didnt :cry: maybe i should do the roman alphabeth thing
Posted 15 years ago
Thanks for all the information..I sometime forget my password when I try to make it so safe :lol:

Create an account or sign in to comment

You need to be a member in order to leave a comment

Sign in

Already have an account? Sign in here

SIGN IN NOW

Create an account

Sign up for a new account in our community. It's easy!

REGISTER A NEW ACCOUNT