Origin Hacked - Change your passwords. - Polidicks

[url]http://www.geek.com/articles/news/origin-accounts-hacked-login-information-changed-20121114/[/url] [quote]Update – 11/15/12 1:40PM EST: After having previously stated they were escalating the matter after it was brought to their attention, EA has issued a statement saying they have no reason to believe Origin was hacked. Regardless of EA’s stance, it’s still a good idea to change your login information. EA’s Origin, the digital games storefront that everyone loves to hate, has been hacked, with numerous accounts being hijacked and login information being changed. Users whose accounts were hijacked were alerted through automatic emails from Origin stating account credentials were successfully changed. Origin doesn’t have any kind of secondary security protocols, such as a separate password, in order to prevent account changes — a hacker simply needs to know the login and current password in order to change them. Unfortunately, Origin’s login details are the same as the ones used for a user’s EA profile, so a hacker could use the hijacked Origin login information to log into a user’s EA profile and change the email address associated with the account. Anyone who holds that meager amount of information can also change an account’s Origin ID. So, by changing the login and password information, the associate email address, and the Origin ID, a hacker can change an Origin account into a virtually different account. Though a user can store credit card information on his or her account, Origin mercifully doesn’t store a credit card’s security code, so there’s at least one layer of security preventing a hacker from buying everything on Origin with a hijacked account. However, as anyone that has stored their credit card information online is fully aware, billing addresses are stored along with the card’s information for a quicker purchase. So while a hacker may not be able to decipher the card’s security code, they could stop by your apartment and get it out of you. Details of how the account information was obtained have either not yet been disclosed, or aren’t yet known, but it’s disconcerting that users were alerted to it from an automated email of a routine account change, rather than something or someone announcing something was amiss. A clever user has found a tedious, yet uncomplicated method for discovering the email address of who changed the account details.[/quote]

-snip-

I dont care what happens to my origin account, BF3 was such bullshit anyway

No secondary security protocol? They might as well be handing out peoples logins. (If they don't already.)

Oh no people will lose their games that they got for free because of [i]other[/i] Origin errors!

So this really doesn't change anything; Their statement still stands. While their security measures are complete and utter shit, they have no reason to believe that account details were leaked.

What if i don't have an Origin account? :v:

gee, thanks EA

before everyone goes off on a tangent about how Origin sucks because of this, keep in mind Steam got hacked a few months back. Could've happened to anyone.

[QUOTE=Schmaaa;38464838]before everyone goes off on a tangent about how Origin sucks because of this, keep in mind Steam got hacked a few months back. Could've happened to anyone.[/QUOTE]Steam wasn't destroyed as badly. It also had SteamGuard. Passwords were encrypted and salted, billing information was not leaked, either.

[QUOTE=RyanH;38464797]What if i don't have an Origin account? :v:[/QUOTE] You do now.

[QUOTE=Schmaaa;38464838]before everyone goes off on a tangent about how Origin sucks because of this, keep in mind Steam got hacked a few months back. Could've happened to anyone.[/QUOTE] yeah but steam actually somewhat tries to keep your data secure

[QUOTE=Fatfatfatty;38464765]I dont care what happens to my origin account, BF3 was such bullshit anyway[/QUOTE] you should give me your account then, i would LOVE to play bf3

[QUOTE=Cheeseist;38465246]you should give me your account then, i would LOVE to play bf3[/QUOTE] play dota2 instead

i would play dota 2 if i could

Pft, Dota 2, I'd prefer Battlefield 3 over it any day.

[quote=Title]Origin Hacked[/quote] [quote=First paragraph of article]EA has issued a statement saying [b]they have no reason to believe Origin was hacked.[/b] [/quote] ???

[QUOTE=Gekkosan;38465323]play dota2 instead[/QUOTE] from my experience, dota 2 managed to be even worse than BF3

[QUOTE=Yogkog;38464776]Oh no people will lose their games that they got for free because of [i]other[/i] Origin errors![/QUOTE] Most of the games I have on origin I purchased, that was when Origin was called EA Download manager.

I read the title and I could only exclaim "Son of a bitch"

[QUOTE=SPESSMEHREN;38465484]???[/QUOTE] Just goes to show you people in this section only read the title and throw a fit

OP what the fuck, " Update – 11/15/12 1:40PM EST: After having previously stated they were escalating the matter after it was brought to their attention, EA has issued a statement saying they have no reason to believe Origin was hacked. Regardless of EA’s stance, it’s still a good idea to change your login information." Ugh.

[QUOTE=SPESSMEHREN;38465484]???[/QUOTE] Not only that, but this article was from yesterday

they probably weren't "hacked;" the people whose accounts were compromised probably had shit passwords. and as I'm sitting here trying to change my password, I just realized that EA makes it incredibly difficult to create a secure password. I created a new password and tried entering it into Origin's "Change Password" dialog, and it tells me "Invalid Password" several times. What it didn't tell me was that it was too long. Okay, I'll cut it down then (which would affect my ability to remember the password). Now it says: "Your new password must be 8-16 characters in length, and contain an upper-case character, a lower-case letter, and a number." Oh, my password meets those requirements. Why the fuck are you not letting my password though??? Apparently Origin [i]only[/i] supports letters and numbers - not symbols. Not that it'd tell me that of course, I had to spend ten minutes trying to enter a password it would accept. ANd it was a shit password, so I guess I'm not changing it. This is the exact same thing that caused BF3 to stop working for a whole day. I created a strong Origin password when I first bought the game and created an account, but then EA out of the blue decided to implement the "new" dumb password format. Except DICE didn't get the memo, so I could log into Battlelog, but not Origin.

why would you use a symbol in a password, almost no service accepts symbols.

[QUOTE=laserguided;38465662]why would you use a symbol in a password, almost no service accepts symbols.[/QUOTE] Every single service I've signed up for accepts symbols. GMail, Facepunch, Reddit, university shit, any phpBB/vBulletin forum, etc.

[QUOTE=laserguided;38465662]why would you use a symbol in a password, almost no service accepts symbols.[/QUOTE] Just about every password I have uses a symbol. It's rare that I find one that won't allow me to use one. ninja'd

[QUOTE=Fatfatfatty;38465485]from my experience, dota 2 managed to be even worse than BF3[/QUOTE] What kind of comparison is this anyway?

[QUOTE=Gekkosan;38465323]play dota2 instead[/QUOTE] BF3's ingame community is better than MOBAs in general by fucking far. And that's saying something.

[QUOTE=Fatfatfatty;38465485]from my experience, dota 2 managed to be even worse than BF3[/QUOTE] so is that a no to me getting the account?