PlayOnline Exploits

Quote:

---

Originally Posted by Alhanelem

Except, his previous attempsts didn't fail in any way. Not getting a response != a failed attempt. They don't and shouldn't respond to issues like this until they are fixed.

---

While I agree on that they should not respond with any details until fixed, I do think they should respond with /something/. Like, "thank you for the report, we will definitely look into it!".

Quote:

---

Like I said above, this thread has been seen by staff as has any interaction with support.

---

I slightly doubt that since this has not been moved to "not a bug report" or other yet. :]

Quote:

---

Originally Posted by Alhanelem

Except, his previous attempsts didn't fail in any way. Not getting a response != a failed attempt. They don't and shouldn't respond to issues like this until they are fixed.

Like I said above, this thread has been seen by staff as has any interaction with support. If they (or anyone else) is expecting a magic wand to be waved to instantly fix the problem, they're setting themselves up for disappointment.

---

I was never demanding that SE should answer right now, but this info SHOULD be posted, widely and often, until it's acknowledged. Until that time, it should be assumed the info hasn't made its way to the development team.

Quote:

---

Originally Posted by Catmato

I was never demanding that SE should answer right now, but this info SHOULD be posted, widely and often, until it's acknowledged. Until that time, it should be assumed the info hasn't made its way to the development team.

---

It absolutely should not be assumed at all. You do not comment on sensitive security issues unless you have a resolution or at least a workaround action that can be taken for safety. You do not stir your playerbase into a panic without a really good reason


And frankly, this is all under the assumption that this threat is real. Anyone can just come on here and say "THERE'S A SECURITY THREAT!". Which is why I wouldn't stress over it. If it's real it will be taken seriously and they're already working on it.

But there's something odd about this whole thing. The advice givern is to change your POL password. This implies someone has obtained this information from some source and is actively using it against others. If it was an actual bug or issue with the POL client itself, I don't think simply changing your POL password would protect you from it.