Posted 15 years ago
·
Author
Following these tutorials and knowing these counters should allow you to simply ignore most claimed hackers who threaten your family. Always remember, peace is greater than war.
Weapons the h4c|<7r may try to use:
IMVU system abuse - When a h4c|<7r tricks IMVU into deleting an account by reporting and flagging it for every little thing it does against IMVU's TOS, which is allot of possibilities, considering all of the hp codes and content that IMVU's TOS says is not allowed.
Host file hijacking - There is a file in you computer that tells it what to do when it meets certain ip addresses. For example, schools will often tell this file to bounce the ip's of common porn address and ad's. Other people try to block ads with this file. Hackers how ever use this file to ban people with sites, and may add IMVU'ss ip to this file in order to cut off all connection to IMVU from your PC.
Billing Fraud - Hackers will often steal credit cards, buy credits for an account, and then back charge the money, taking the money back, and making IMVU mad. IMVU will almost always immediately disable the account the credits were bought for.
Password resetting - Hackers may force an account to re-set its password, confusing the owner of the account. Neither the h4c|<7r nor the owner has the password, but the owner normally freaks out and does not figure out what is happening till weeks latter after a help ticked with IMVU has been passed. If you find yourself unable to access your account or locked out of your account; you should always attempt a password reset.
Brute Force - This is when a h4c|<7r programs his computer to guess your password till it gets into your account
Phishing - Only stupid people normally fall for this, but since many novice hackers will try to do this to you, we have to go over it. Phishing is when a h4c|<7r tricks you into giving your password. They will often do this by pretending to be staff, offering you credits for it, or creating a IMVU login page that asks for your password
Traffic Sniffing - A h4c|<7r can intercept your password on its way to the IMVU servers by many different methods if they have access to your home network
Login DDOS - It is possible for a h4c|<7r to temp lock an account by trying to login to the account with the wrong password too many time. You can reset this temp lock by simply changing your password right before logging it. The process can be annoying, but your account is fine.
-------------------------------------------------------------------------------
How to counter these weapons:
IMVU system abuse - Either study the IMVU TOS and follow it, or set everything on your hp to buddies only. Keep off IMVU backups of your groups (copies of posts & member lists). Never own the group of your mafia, always set the owner of your group to a dummy account. The dummy account may then be made invisible and its hp turned off, to reduce the chances of hacking. Groups / mafias may also be moved to their own web site to avoid IMVU TOS and system abuse all together. If you need help developing your own website, the IMVU Mafias are more than willing to help.
Host file hijacking - if you find that you are not disabled, unable to log into IMVU, and not able view the IMVU web site:
1) http://www.dslreports.com/faq/10131
2) turn off your fire wall
3) clear your cookies
Billing fraud - Keep a close eye on your credits, if you happen to suddenly have a large amount of new credits without cause, extra credits appear in your account out of no where, contact IMVU immediately and ask for verification that the credits are legit and safe to use, also check your credit balance records under account setting, so you know where the credits were bought from, in case you have to contact a re-seller.
Password Re-set -
Just ret-set it again here: https://secure.imvu.com/catalog/password_forgotten.php
It will send a reset link to your e-mail.
If the h4c|<7r changed the e-mail for the account, then an e-mail should have been sent to your e-mail account, with a confirm link, and a link that will automatically change you e-mail back. Just hit the change e-mail back link that comes with it.
I always keep an auto change e-mail back + password reset link for my account at all times; in case I have to use it.
Brute Force - Make sure your IMVU and e-mail passwords are different and at least 10 characters long.
Generate a strong IMVU Password here: viewtopic.php?f=2&t=11041
Check how long it would take to brute fore your password here: http://www.unwrongest.com/projects/password-strength/
Phishing - enable anti phishing in IE, never give your password to anyone for any reason at all, and only login on IMVU’s main login page, check your URL bar to make sure you are on the right page
You can help prevent phishing / browser hijacking via browser add-ons : viewtopic.php?f=2&t=11040&hilit=blocker
Traffic Sniffing - always log into IMVU through the following secure page: https://secure.imvu.com/catalog/login.php
-------------------------------------------------------------------------------
WARNING : This guide will not protect you from our own hackers. The IMVU Mafias do however have a policy to never h4c|< a fellow IMVU Mafias' member, so play nice.
Weapons the h4c|<7r may try to use:
IMVU system abuse - When a h4c|<7r tricks IMVU into deleting an account by reporting and flagging it for every little thing it does against IMVU's TOS, which is allot of possibilities, considering all of the hp codes and content that IMVU's TOS says is not allowed.
Host file hijacking - There is a file in you computer that tells it what to do when it meets certain ip addresses. For example, schools will often tell this file to bounce the ip's of common porn address and ad's. Other people try to block ads with this file. Hackers how ever use this file to ban people with sites, and may add IMVU'ss ip to this file in order to cut off all connection to IMVU from your PC.
Billing Fraud - Hackers will often steal credit cards, buy credits for an account, and then back charge the money, taking the money back, and making IMVU mad. IMVU will almost always immediately disable the account the credits were bought for.
Password resetting - Hackers may force an account to re-set its password, confusing the owner of the account. Neither the h4c|<7r nor the owner has the password, but the owner normally freaks out and does not figure out what is happening till weeks latter after a help ticked with IMVU has been passed. If you find yourself unable to access your account or locked out of your account; you should always attempt a password reset.
Brute Force - This is when a h4c|<7r programs his computer to guess your password till it gets into your account
Phishing - Only stupid people normally fall for this, but since many novice hackers will try to do this to you, we have to go over it. Phishing is when a h4c|<7r tricks you into giving your password. They will often do this by pretending to be staff, offering you credits for it, or creating a IMVU login page that asks for your password
Traffic Sniffing - A h4c|<7r can intercept your password on its way to the IMVU servers by many different methods if they have access to your home network
Login DDOS - It is possible for a h4c|<7r to temp lock an account by trying to login to the account with the wrong password too many time. You can reset this temp lock by simply changing your password right before logging it. The process can be annoying, but your account is fine.
-------------------------------------------------------------------------------
How to counter these weapons:
IMVU system abuse - Either study the IMVU TOS and follow it, or set everything on your hp to buddies only. Keep off IMVU backups of your groups (copies of posts & member lists). Never own the group of your mafia, always set the owner of your group to a dummy account. The dummy account may then be made invisible and its hp turned off, to reduce the chances of hacking. Groups / mafias may also be moved to their own web site to avoid IMVU TOS and system abuse all together. If you need help developing your own website, the IMVU Mafias are more than willing to help.
Host file hijacking - if you find that you are not disabled, unable to log into IMVU, and not able view the IMVU web site:
1) http://www.dslreports.com/faq/10131
2) turn off your fire wall
3) clear your cookies
Billing fraud - Keep a close eye on your credits, if you happen to suddenly have a large amount of new credits without cause, extra credits appear in your account out of no where, contact IMVU immediately and ask for verification that the credits are legit and safe to use, also check your credit balance records under account setting, so you know where the credits were bought from, in case you have to contact a re-seller.
Password Re-set -
Just ret-set it again here: https://secure.imvu.com/catalog/password_forgotten.php
It will send a reset link to your e-mail.
If the h4c|<7r changed the e-mail for the account, then an e-mail should have been sent to your e-mail account, with a confirm link, and a link that will automatically change you e-mail back. Just hit the change e-mail back link that comes with it.
I always keep an auto change e-mail back + password reset link for my account at all times; in case I have to use it.
Brute Force - Make sure your IMVU and e-mail passwords are different and at least 10 characters long.
Generate a strong IMVU Password here: viewtopic.php?f=2&t=11041
Check how long it would take to brute fore your password here: http://www.unwrongest.com/projects/password-strength/
Phishing - enable anti phishing in IE, never give your password to anyone for any reason at all, and only login on IMVU’s main login page, check your URL bar to make sure you are on the right page
You can help prevent phishing / browser hijacking via browser add-ons : viewtopic.php?f=2&t=11040&hilit=blocker
Traffic Sniffing - always log into IMVU through the following secure page: https://secure.imvu.com/catalog/login.php
-------------------------------------------------------------------------------
WARNING : This guide will not protect you from our own hackers. The IMVU Mafias do however have a policy to never h4c|< a fellow IMVU Mafias' member, so play nice.
Last edited by Don Von Alpha Dom on Thu Feb 18, 2010 9:48 pm, edited 1 time in total.