Saturday, March 10, 2012

Methinks blogging has lost its charm....

It's been more than two months since I last posted a blog entry. For some reason I just couldn't be bothered anymore.

I've been blogging for almost eight years now. It used to be a lot of fun. Now, It just seems like a lot of work, when I can easily express myself with a few keystrokes on Facebook or Twitter.

I don't get as much visitors as I used too. No surprise there though...seems like everyone is into social networking sites.

Perhaps...for me at least, blogging has lost it's charm.

It's not that I don't have anything to blog about, quite the contrary.

I've been reassigned at work to something with a little more ooomph. Though it still remains to be seen if I went from the frying pan to the fire.

I've been out of the country a few weeks ago.

I just moved up to a Samsung Galaxy Tab 7.0 Plus.

And those are not the only things.

I've given up on online gaming, particularly an old favorite of mine, Cabal Online. After my account was hacked several months ago, I couldn't in good conscience give any more of my hard earned money to e-Games who botched up my perfectly good account. I still have a pending complaint with them and the Department of Trade and Industry (DTI), no results yet though.

In the middle of playing The Elder Scrolls V: Skyrim. It's a fabulous game, but I haven't been playing it much lately. I must be getting old, or at least the gamer in me is.

My son moved out several months ago. It's just as well, it wasn't working out for several reasons.

The point is, my life hasn't been static the way this blog is, and yet, I'm not driven enough to blog about this stuff anymore.

I don't see myself quitting though. But I don't really see myself going back to how I was during the early days, posting almost every day.

I guess I've changed. Maybe a lot. Some things still remain the same though. I still have a lot of frustrations. I still hate summers. And I'm still stuck in my mid-life crisis.

Well, maybe the charm will find itself back to me.

Friday, December 30, 2011

Second last day of the year....

It's the second last day of the year.

It's been more or less a good year I suppose...still had my fair share of hard knocks. Perhaps even more than years past. I guess things are looking up now...though my losses are still pretty apparent.

I hope 2012 turns out to be a better year than 2011.

Thursday, November 03, 2011

Hacked Cabal PH accounts: an inside job?

I cannot recommend any of their (e-Games') online games to any online gamer who values security and the integrity of their accounts.

Last November 1, around 4:00 PM, I was logged in on Cabal Online PH, a Korean MMORPG published locally by E-Games using my PC at home. With my character just idly standing in the vicinity of Bloody Ice (one of the first three towns of the game) and while I was tending to other things, all of a sudden the account logged off. Thinking it was only a network problem, I tried logging on again, only to be given the message that my account was already active. I logged on, only to be disconnected again, with the message that someone else was logging in my account. I tried logging on again, got disconnected, and tried logging again several times in succession. After several minutes I finally got my account logged on. When I selected the character I was online with only a few moments ago, it was stripped naked. Checking the inventory and personal storage, my worst fears have been confirmed. My account has been hacked, and the valuable items were stolen.

As a matter of course I filed a help ticket with Cabal Online PH's support desk, then I called up my girlfriend who's also into playing Cabal Online. Her account was also hacked...only within a half hour or so of my account being hacked. Like mine, her character lost its armor and a number of valuable items. All in all, the lost items represent quite a huge fortune if expressed in in-game currency, and possibly a small one if we're talking real money.

I guess if you've been playing Cabal Online PH yourself, no doubt you've heard of horror stories of other accounts being hacked. Maybe your account has been hacked before. Me? My account has never been hacked before. My girlfriend's account as well. I've been playing Cabal Online PH for more than three years on and off, and the same account and character of mine that was hacked was the same one I've been using during Cabal Online PH's open beta testing three years ago. My girlfriend has been playing it for slightly more than a year.

The clincher is, I don't think either of us fall within the norm for your standard hacking case.

Both of us are in our 30s, degree holders, gainfully employed, and play Cabal Online as a diversion from our daily routines. We play only on our own PCs and own internet connections. I play on my home PC or on my laptop, connecting either through PLDT DSL or through Sun's wireless broadband service. My girlfriend only plays on her laptop, also through Sun Wireless Broadband. We have never played in an internet café, on a public computer, or on any other computers other than the ones we own.

Both of us have IT backgrounds, so we know the importance of regularly scanning our PCs for viruses and malware. Before and after the hacking incident, we have scanned our computers with reputable and up-to-date anti-malware and anti-virus utilities and determined them to be free from any such malicious software.

We have never used any third-party programs, cheats, or hacks. We play the game as it was meant to be played, and enjoy the game that way.

We've never let anyone else use our accounts. Other than ourselves, no one knows our login names, much less our passwords. And our passwords aren't easy to guess for that matter.

We are aware of phishing and scam sites and have never logged on any of them, and we have never entered our login names and passwords on any other site except the official e-Games portal.

We also as a matter of course keep our inventories and storage areas locked and secured.

Yet, despite all these precautions, our accounts were compromised, and our characters' expensive items stolen.

Perhaps worth noting, is that our accounts only got hacked a couple of weeks after our characters started donning Mithril armor (the most expensive armor in the game) and the fact that our characters belong to the same guild...information, that it isn't farfetched to surmise, which can easily be gleaned from a character database using an appropriate search query.

To be honest, I've been racking my brain if there was something else I could have done differently...something I could have done to further secure my account. I can't think of anything else.

Based on this, we've arrived at the hypothesis that our accounts could have only been hacked by those with inside access, meaning either an e-Games employee, or someone with access to login information obtained through an e-Games employee.

There is simply no other explanation.

Check the audit trails...check the backup data...check the logins of your personnel, and the IP addresses for consistency. It is so easy for an authorized employee to get the relevant login information from its database, forward it to an outside accomplice who can then log in the account and steal the valuable items, only to sell it later for real money.

While e-Games maintains the policy, and this we agree with, that it is the player's responsibility to secure the confidentiality of his/her account password, we strongly disagree with the premise that e-Games itself is entirely free from any liability, given that the security of its internal account database and system are its responsibility and not the responsibility of the players themselves. There are only two possible avenues to a security breach, one is through the client side, and the other through the server side. e-Games cannot claim absence of responsibility on its part of maintaining the security and integrity of its server-side data.

In fact, the Game Policies of e-Games itself bear out this inconsistency:

xxx...E-Games does not guarantee that its portal and corresponding game websites are free of any harmful software, and that the same is hack-proof. Account Security is therefore the sole responsibility of the account holder. As such, you are earnestly enjoined to take all security measures reasonably available to safeguard the operating system and accounts when accessing the Games and the websites...xxx

e-Games admits that it cannot guarantee that its portal and websites are free from any harmful software and the same is [sic] hack proof...and yet in the same paragraph it maintains that account security is the sole responsibility of the account holder.

Honestly, I believe this is a lot of bull. Admitting that one cannot guarantee the security of its system, then passing the sole responsibility of account security to the player, who is merely a client/user. And this from a company who profits by selling privileges to players to use on its system.

I can go on a legalistic tirade on why this policies are bull, but that is not the point of this blog post. The point of this blog post is the fact is that e-Games itself, by our own experience, and by its own admission cannot guarantee the security of its own system. This is simply unacceptable for a company which operates that system for profit.

Admittedly, the concept of MMORPGs has very little legislation going for it in terms of client/user protection, but there are tons of general laws which can be invoked in order to protect the rights of the client/user. It cannot be helped I suppose, online gaming being a niche market in itself, that it is for the most part unregulated. Nonetheless, that is not an excuse for not securing the personal information and login passwords of registered users.

From a practical point of view...if you are aware of and diligently follow all of the rules when it comes to account security, who else is there to blame for hacked accounts? To my mind, the blame falls squarely on e-Games' shoulders, and they cannot shirk away from this responsibility on the basis of its game policies and license agreements.

Don't get me wrong, I am not advocating, nor am I planning to take this issue to court. That's a bit extreme for something which is as trivial as an MMORPG. Nor am I or my girlfriend clamoring for the return of the lost in-game items, which may or may not be possible. Thankfully, the items were procured through honest-to-goodness in-game farming and selling and not bought using real money. But still, the effort exerted shouldn't just go to waste...or trashed because of e-Games' inability to provide adequate data security.

For me, e-Games should just do right to those who have been availing of its services, the very players it gets its profits from. Fortunately or unfortunately, I am not one of those pimple-faced teenagers whose (admittedly sometimes exaggerated) claims or allegations e-Games may easily dismiss.

The requisite help tickets have been filed, though there is still no official response at this point. Personally, I am looking at all the possible angles and remedies for this situation, which may include government involvement, media, and possibly, if the circumstances warrant, court intervention, though only as a last resort, if only just to establish a point, never mind if the case is actually lost or won.

Frankly, the loss represents more to me than just the loss of in-game items. The hacking incident has eroded my trust in e-Games' ability to secure its system, and for that reason I cannot recommend any of their online games to any online gamer who values security and the integrity of their accounts. Go to some other online game publisher, one with a better track record when it comes to security, or stick with local network multiplayer gaming or single-player games.

And consequentially, the lack of trust with e-Games has now deprived me of an activity that I once enjoyed and shared with my significant other and even my son before. It's a good thing though, that there are other things to do. But still...

The reason that hacking is so prevalent...and yes, it IS prevalent...just Google up "Cabal PH hacking"...is because it can potentially be a very lucrative endeavor. It is not unheard of for people to spend up to thousands, even tens of thousands of pesos, just to get the most powerful virtual weapons and armor, or the highest level characters. And somehow, in this gray market, hardly any regulation exists, at the expense of those honest players who don't deal in real-money trading and only wish to enjoy a pleasant and secure gaming experience, willing to pay the nominal and legal costs incidental to it and its local publication, but somehow find themselves victimized by unscrupulous hackers. e-Games' indifference to hacking doesn't help either.

This is not the end though. We may no longer be playing Cabal Online with the enthusiasm and zeal we had before...hell, we may even quit entirely given our distrust with e-Games...but personally, I don't want this loss on our part to be in vain. Sooner or later more people will realize the one-sidedness of this entire episode, e-Games' indifference to the plight of its hacked players, the massive hacking that has remained largely unchecked, and local online game publishers, especially e-Games, will be forced to put a higher priority on data security, on data confidentiality, on employee selection. We expect the highest level of data security when it comes to credit cards, bank accounts, ATMs, money transfers and remittances, social services like SSS and PhilHealth, prepaid loads, internet accounts, email accounts, social networking sites, etc. Online games should be no different. And if a company cannot guarantee the security of its data, it has no business holding our personal account information only for them to lose or allowed to be divulged and be misused.

Labels: , , ,

Friday, September 02, 2011

Sometimes....

Doing the seemingly hurtful thing is the only way to get the message across.

Tuesday, August 30, 2011

New notebook....

Just a few days ago I bought a new notebook computer to replace my trusty yet aging Compaq Presario CQ40-107AU. That notebook served me well for three years, and it'll still continue to serve my purposes here at home, no longer as my main portable unit.

PhotobucketSo what did I replace it with? I replaced it, of all things, a Samsung. Yes, I admit, Samsung is not really a brand that comes to mind when talking about notebook computers. Until only a few years ago, they were all but unknown in the portable computing segment. Now, they seem set to be a force to be reckoned with in this product category, the same way they started out before virtually dominating sales of LCD TVs and mobile phones. And their tablets aren't that bad either, having owned a Galaxy Tab for several months now.

It's not that I set out from the start to get a Samsung notebook computer. I do my notebook shopping the same way I've always done...with a budget and set of specs in mind. Then I set out to find the most bang for my hard-earned buck. I've considered the usual suspects: Asus, Acer, Compaq, HP, etc. and even got close to choosing a particular MSI model with an Intel Core i5 processor and a Radeon GPU. Then I saw the Samsung. A Samsung NP 305V4A-S02PH.

PhotobucketThe specs are pretty impressive for P32,900.00. At it's heart is an AMD A6-3410MX APU. It's not just a CPU, it's an APU. It combines 4 Phenom II-class processor cores with 1 MB of L2 cache each, a Radeon 6520G GPU, a UVD3 video processor, a DDR3 memory controller, and a PCIe 2.0 controller all on a single die. It runs at a speed of 1.6 GHz, but can push the speed up to 2.3 GHz on individual processor cores when some of them are inactive (Turbo Core technology, in AMD-speak). This chip alone gives you a quad-core processor, a 3D GPU, and a HD video processor.

The rest of the specs outside the APU are not too shabby either. An AMD A60M chipset, a Radeon HD6470M GPU with 512MB GDDR3 dedicated video memory (giving this notebook 2 GPUs) 4 GB of DDR3 memory running at 1333 MHz, a 640 GB SATA drive, a DVD Super-Multi Drive, gigabit LAN, 802.11 b/g/n, a 14" LED display, a 1.3 MP webcam, and card reader, among others. Windows 7 Home Basic 64-bit is also preinstalled, and a recovery disk is included with the package.

Basically, this notebook is not only state-of-the-art (the A6 3410MX APU was only introduced about two months ago), it's chock full of features and affordable to boot. And if Samsung makes notebook computers as well as they make LCD TVs, mobile phones and tablets, I'd say we have a keeper. Well at least for another few years.

Photobucket

Labels: ,

Monday, August 08, 2011

Reasons why it's never a good idea to position your PC on the floor....

Photobucket

For some reason, a lot of my colleagues at work and even some of my friends in their homes prefer to position their PCs on the floor, leaving only their monitors, keyboards and mice on their tables. Frankly, I don't think this is such a good idea. True, the jumble of cables coming from the rear of a PC isn't exactly aesthetically pleasing, but if one values reliability, durability and ease of use above aesthetics, it is always preferable to position a PC in an elevated position such as on a table, and not to leave it on the floor.

Reasons:

  • Modern PCs have plenty of components which generate a lot of heat such as the CPU, the northbridge chip, power supply and video card among others. To keep these components cool, a PC typically has at least two fans, often more, and are configured to suck cool air from the front of the PC, through the chassis and out through the power supply and/or an exhaust fan at the rear. A PC on the floor tends to suck up the dirt, dust and grime on the floor (even animal hair if you have pets), clogging up heatsinks and coating electronic components, making them less effective in releasing heat to the air. This results in higher operating temperatures which could leading to premature component failure. It's even worse if you sweep in front of the PC, or if your floor is carpeted, as the PC acts like a vacuum cleaner sucking all the dust and dirt in front of it.

    Frequent exposure to dust can also cause the optical drive to malfunction as the laser read/write lens can get coated with dust;

  • In office settings, cleaning crews typically scrub and mop floors during the weekends. It's not unusual for these crews to unwittingly splash water and detergent on PCs located on the floor. Most vulnerable to water splashes are the ports at the rear. Water can also get in through the various air inlets. Moisture can lead to corroded contacts and/or short circuits. The chassis could also rust;

  • PCs on floors are vulnerable to various small animals/insects. Mice can chew on the various cables, or urinate on the rear ports. Cockroaches may crawl in the small holes of the chassis and lay their eggs or other secretions on the various components. These can be corrosive and eventually lead to component failure;

  • PCs on floors tend to be more exposed to inadvertent kicks from people sitting in front of them. A kick while the hard drive is reading/writing could result in the read/write head smashing into the hard disk recording surface, possible leading to a hard disk crash, bad sectors and/or loss/corruption of data;

  • From a usability point of view, it's not very practical to always bend down just to plug in a USB drive or insert a disc in the drive, when you can just reach over if the PC is on your desk;

  • It also helps if the hard disk access lights are visible. That way you can determine at a glance if your PC has already frozen, or if it's just reading from the drive.

If you really prefer to set your PC on the floor, get one of those stands to elevate the chassis at least several inches from floor level. This would mitigate some of the hazards mentioned above. If your PC's chassis is one of the floor-standing types that are meant to be placed on the floor, keep the area around the PC free from dust or pests.

Lastly, if the jumble of wires from the back of your PC bothers you, invest in wireless keyboard mouse/combo. Nowadays they're dirt cheap. Pardon the pun.

Labels: ,