Tricky password hack ?

[fabricius]

I've been using the same WoW installation to code some personal modifications to Moonscript instance DLLs.
As a server, I've been using the ascent installations.

Yesterday I installed a few "official" ascent files posted in the stickies on this forum section, started the server and went on to my business.

Sometime later, I forgot my realmlist.wtf was still pointing to the private server and I entered my "real" Warcraft account and password.

It failed, I realized my mistake and again entered the private server account data.

Today, I've just gone for some my Real WoW and guess what, my real password was not working anymore.

I wonder if my ascent-logonserver.exe ( I did not compile this one, used as downloaded) is sending the entered account data out and a smartass changed it ?

Tricky ...

[MentaL]

[Juggalo90]

Lmao i doubt that

[beileroord]

Well using repacks is always dangerous since u cant verify if someone added some own code in it...

[Juggalo90]

Thats very true...
What repack you using?

[emerged]

lol, HIGHLY doubt it....imagine how many accounts login VIA loginserver.exe? around maybe 20,000+ an hour? so lets see here...480,000 every 24 hours....not possible the server load on that would be either A. Be shutdown B. used for a business it just doesnt seem plausible....at least i hope it doesnt cause...well.....the amount of time it would even take for a person to go through 3360000 a week....even though my numbers are just estimates they would actually probally be smaller than whats actually the correct number

[Juggalo90]

well actually they could have made a script to connect to wow.com and check if its right...
I've actually done that before with a Wrath of Lich King beta signup page XD

[emerged]

true...they could...but with the amount of data being pushed through it would still take a LONG time to find out with the amount of accounts it needs to check, variables including Internet speed/WoW.com uptime etc etc the list could go on, wouldnt take a night.

-Emerged

[Juggalo90]

True...this would take weeks to months

[mgX^]

true...they could...but with the amount of data being pushed through it would still take a LONG time to find out with the amount of accounts it needs to check, variables including Internet speed/WoW.com uptime etc etc the list could go on, wouldnt take a night.

-Emerged

the thing is....the accountinformation is hashed in the client...think its a standard SHA1 if i remember correctly... would either have to be bruteforced, or they would need some massive rainbow tables to look that up in... ..dear lord sounds unlikely...sounds more like a simple keylogger lol...