Runescape

[Zeref]

8 hours ago, Sasuke said:

I don't think I'll be able to get around to playing much RS until I get back home. Mobile is alright but I can't do NMZ well.

Can't boss or raid well either. I prefer anyway PC for the boss or raid and when I did NMZ. 

I will also join the RS club.

[Sakura]

I did NMZ fully on PC too .-. Just AFK'ing it tbh ~ Prolly better to finish it now before they do something like change it like they were talking about lol just max out combat. That being said I need to go there and finish my Ranging to 99 since it's the only combat stat I don't have at 99 -.- 

[Sasuke]

13 hours ago, Sakura said:

I did NMZ fully on PC too .-. Just AFK'ing it tbh ~ Prolly better to finish it now before they do something like change it like they were talking about lol just max out combat. That being said I need to go there and finish my Ranging to 99 since it's the only combat stat I don't have at 99 -.- 

I need to max out combat but instead when I get on I seem to work solely on quests as of late. Great for my achievement diary and quest logs not so much my lvls. I want to work further in achievement diaries too but this will require leveling up a lot of skills still.

[Zeref]

21 hours ago, Sakura said:

I did NMZ fully on PC too .-. Just AFK'ing it tbh ~ Prolly better to finish it now before they do something like change it like they were talking about lol just max out combat. That being said I need to go there and finish my Ranging to 99 since it's the only combat stat I don't have at 99 -.- 

There was small discussions of what in this needs to change because of AFK botting. It's very easy to bot here to full combat in several weeks. 

7 hours ago, Sasuke said:

I need to max out combat but instead when I get on I seem to work solely on quests as of late. Great for my achievement diary and quest logs not so much my lvls. I want to work further in achievement diaries too but this will require leveling up a lot of skills still.

Getting the achievement cape a goal?

[Sakura]

10 hours ago, Sasuke said:

I need to max out combat but instead when I get on I seem to work solely on quests as of late. Great for my achievement diary and quest logs not so much my lvls. I want to work further in achievement diaries too but this will require leveling up a lot of skills still.

I mean to be fair doing all that early on makes the upper levels a lot easier lol getting all that done and all the areas unlocked that are quest locked ~

[Zeref]

20 hours ago, Sakura said:

I mean to be fair doing all that early on makes the upper levels a lot easier lol getting all that done and all the areas unlocked that are quest locked ~

It sure does little Miss I-hate-quests

[Sakura]

3 hours ago, Zeref said:

It sure does little Miss I-hate-quests

I mean I'm not even about to lie I hate doing quests lol worst part of the game for me ~ 

[Zeref]

18 hours ago, Sakura said:

I mean I'm not even about to lie I hate doing quests lol worst part of the game for me ~ 

I'm still a quest person and I'm the weird kind who also likes to read all of the dialogue instead of skipping through it and following a guide, or do the quest the day it comes out without a guide is also more fun for me. 

[Sakura]

2 hours ago, Zeref said:

I'm still a quest person and I'm the weird kind who also likes to read all of the dialogue instead of skipping through it and following a guide, or do the quest the day it comes out without a guide is also more fun for me. 

Back in myyyyy dayyyy we had to figure out how to do quests ouRSELVESSSS we didn't have not no fancy smancy quest guides all dese young-ins be a-usin taday I tell you HWHATTTTT  

[Sasuke]

17 hours ago, Sakura said:

Back in myyyyy dayyyy we had to figure out how to do quests ouRSELVESSSS we didn't have not no fancy smancy quest guides all dese young-ins be a-usin taday I tell you HWHATTTTT  

Pessi is getting old. Maybe you should give him your crutches lol.

[Kikyou]

Thank you @Sakura @Sasuke @Zeref For joining the club I made. I made it for you guys as a gift since your passionate about the game and been so kind to me as well. 

[Zeref]

22 hours ago, Sakura said:

Back in myyyyy dayyyy we had to figure out how to do quests ouRSELVESSSS we didn't have not no fancy smancy quest guides all dese young-ins be a-usin taday I tell you HWHATTTTT  

 

4 hours ago, Sasuke said:

Pessi is getting old. Maybe you should give him your crutches lol.

Give me those crutches I will hit you both with that

4 hours ago, Kikyou said:

Thank you @Sakura @Sasuke @Zeref For joining the club I made. I made it for you guys as a gift since your passionate about the game and been so kind to me as well. 

Thanks I will post some screenies it later when I organized the screenshots I have. 

[Sakura]

7 hours ago, Kikyou said:

Thank you @Sakura @Sasuke @Zeref For joining the club I made. I made it for you guys as a gift since your passionate about the game and been so kind to me as well. 

I'm getting ready to go upload some ingame pics on a lil page there ~ maybe I will finally be able to keep my screenshots organized somewhere which I desperately need to do XD 

[Kikyou]

I do have a question have any of you ever got your account hacked by anyone over the time you've played Runescape / OSRS? I saw on Reddit just looking up more information about the game and saw someone got hacked from some creepy dude and other topics I searched said last year so far, I saw. People are getting their stuff hacked more I was readding up. Like the person who took their account use their character/ stuff in game or worse try to get their computer info to possibly put a virus on it. So, I guess I'm just nervous now that's going happen. I know online safety and now to protect myself as well. Though some have said people can get passed their security to log in the game easy now. It's why I have not played it yet.

---

  Group UPDATE: I added some threads to the group if you like to answer them, no worries if not. Yes, you can make threads too in the club to your liking. 

[Sasuke]

2 hours ago, Kikyou said:

I do have a question have any of you ever got your account hacked by anyone over the time you've played Runescape / OSRS? I saw on Reddit just looking up more information about the game and saw someone got hacked from some creepy dude and other topics I searched said last year so far, I saw. People are getting their stuff hacked more I was readding up. Like the person who took their account use their character/ stuff in game or worse try to get their computer info to possibly put a virus on it. So, I guess I'm just nervous now that's going happen. I know online safety and now to protect myself as well. Though some have said people can get passed their security to log in the game easy now. It's why I have not played it yet.

---

  Group UPDATE: I added some threads to the group if you like to answer them, no worries if not. Yes, you can make threads too in the club to your liking. 

@Zeref works for Jagex Runescape and I feel like he will tell you that's not possible to do. Especially on the new Jagex launcher with the way game account security is setup. To do that they would  have had to have hacked your phone, your email and your computer. There are 2fa's you have to enter and codes sent to your email to even be able to log in to your account with Jagex account launcher. People who have had that happened more than likely had entered their info into phishing sites, given their account information to friends, or been keylogged in some form.

In addition to that it's still hard because you have to know the person's email and account codes to get in. Once you are in there is a bank pin set where you store items so they'd have to disable that too. No one would bother going to the trouble unless they knew you had sufficient wealth and items on the game to begin with. Most people with any common sense haven't shared their account codes or email and no better than to enter it on phishing websites. 

@Zeref can correct me or add on to that if I'm wrong since as I said, he's employed and works for the game. 

 

Edited November 19, 2024 by Sasuke

[Kikyou]

16 minutes ago, Sasuke said:

@Zeref works for Jagex Runescape and I feel like he will tell you that's not possible to do. Especially on the new Jagex launcher with the way game account security is setup. To do that they would  have had to have hacked your phone, your email and your computer. There are 2fa's you have to enter and codes sent to your email to even be able to log in to your account with Jagex account launcher. People who have had that happened more than likely had entered their info into phishing sites, given their account information to friends, or been keylogged in some form.

In addition to that it's still hard because you have to know the person's email and account codes to get in. Once you are in there is a bank pin set where you store items so they'd have to disable that too. No one would bother going to the trouble unless they knew you had sufficient wealth and items on the game to begin with. Most people with any common sense haven't shared their account codes or email and no better than to enter it on phishing websites. 

Orion @Zeref can correct me or add on to that if I'm wrong since as I said, he's employed and works for the game. 

 

Ah I see alright well this makes sense and that's so cool Orion works for them. With the information here I can now play it I got a little worried since I got hacked years ago on a different computer of mine. Thank you Sasuke ~ !

[Sasuke]

43 minutes ago, Kikyou said:

Ah I see alright well this makes sense and that's so cool Orion works for them. With the information here I can now play it I got a little worried since I got hacked years ago on a different computer of mine. Thank you Sasuke ~ !

I'm Orion. I don't know why or how I typed my name into that message when I only meant to type @ Zeref. However I've been at work for 14 hours so I'm suprised I can type coherent sentences at all. Zerefs name is Pessi but yes he does work for the creative development department for Jagex. So I'm assuming he can answer about any questions. 

[Zeref]

Go home Orion, sleep  

I'll answer this but because of the fact I work for Jagex I have to state that the opinions stated within this response are of my own and not affliated to Jagex or Runescape in any way.

Is it possibly to hack RS? Sure it is possible to hack anything if you know how to. 

Is it going to happen to you? Not highly likely. 

How can you keep it from happening? The main way is to create a Jagex account which is the most advanced way to ensure your account safety and protection. Add your 2 Factor Authentication and secure your account further with account verification codes. Don't share your login email information with anyone. Don't click on links that appear to be suspicious; they are likely phishing attempts. Don't share your password information with anyone. 

Here is a very simple breakdown of what can happen and how to avoid it:

Phishing

Phishing is a type of social engineering in which hackers gather information from you including passwords. An example is the phishing streams you see on Twitch. When you click on the link in chat you'll be redirected to a website similar to RS/OSRS. At this point the phishers have acquired your IP address. When you log into the fake website, the phishers have acquired your OSRS login details and can now login on your OSRS account.

Solution: RS Authenticator

A 100% solution for when your OSRS login details have been compromised through phishing is the RS Authenticator. The phisher won't be able to log onto your OSRS account. Of course don't click links and check urls, so you won't get into this situation in the first place.

Leaked Databases

This type of hacking applies most to this subreddit. With only ONE piece of information the hackers can acquire LOTS of information about you if they're lucky. There's a website and with a paid subscription you can search through leaked databases. You can search on: usernames, emails, passwords, hashes, phone numbers and (full) names.

- Reusing your old passwords

If someone posts a screenshot somewhere showing their RSN people can look up this username on that website. If you've used that username in the past on a website that has been hacked, the hackers could now have an old password and/or email and/or IP address and/or birth date and/or name and/or phone number. Now the hacker has found additional information on you and can continue. If there's only an email address, he can look up the email address to find leaked passwords. If he only has found a password, he can already try to log onto your account. If you're still using this old password without authenticator, the hacker is now on your account!

But not only giving out your username or RSN is risky, also your RuneLite or OSBuddy username. Furthermore, these hackers will look through your  post history to find more valuable information, take Reddit for example. The country you live in could be useful already. If they look up your username and see different emails from multiple people and found out you're from Spain and there's an email ending on .es, chances are that's your email. If you've shared your Twitter account and it has your full name on it, they could look up your full name in the leaked database. If you didn't properly protect your FB account they can login and find lots of information about you, including your IP address from previous sessions.

The hackers do this with one goal: to find out your current password of your OSRS account.

Solution: RS Authenticator

A 100% solution for when your OSRS login details have been compromised through a leaked database is the RS Authenticator. The hacker won't be able to log onto your OSRS account. Additionally, don't post personal information online, don't re-use old passwords, don't use the same usernames, keep your private and gaming life separate.

Beware: in most scenarios people will only get hacked after they made themselves a target, for example by posting their wealth online, by streaming or by posting on YouTube.

- Password resets

The hacker doesn't need your OSRS password to get access to your account. The hacker can fill in your email login or username here https://secure.runescape.com/m=accountappeal/passwordrecovery and a password reset will be send to the registered email. It will also show a part of the registered email:

CHECK YOUR EMAIL

A link to reset your password has been sent to x***************@x******.xxx.*

The hacker can compare that email to the ones found in the leaked database to see if there's a match. If the hacker knows the password, he can now try to log onto your registered email. Unfortunately, many people use the same email as login and registered email! This helps the hackers. They will try to use old passwords to get into your email and reset your OSRS account password and get access to your OSRS account.

Solution: 2 step verification on email

A 100% solution for when your email details have been compromised through a leaked database is 2 step verification on email. As long as no one has access to your phone, no one else but you will be able to log onto your email. Your email will be protected and your OSRS account too. Your password won't get reset.

Beware: if you don't protect your email, the RS Authenticator is worthless! The hacker can disable the authenticator on the RS website, confirm this in the email and then log onto your OSRS account.

Malware

- Keyloggers, RATs

I don't think these types of hacks are common for OSRS accounts. The solution would be: use antivirus software, don't click links and don't download (sketchy) files.

RuneScape Account Recovery

These are highly exceptional cases, but it's possible. As mentioned before a hacker can find out lots of information about you. He can use all this information to send in a recovery appeal. But how can such appeal be successful? An example can be found where someone was hacked through recovery. The JMod reply can be read here: https://www.reddit.com/r/2007scape/comments/ajjz13/an_attempt_to_recover_thousands_of_hours_of_my/eewx8pu/. The hijacker needs a lot of information to get his appeal accepted. Just looking up some information on leaked databases isn't enough. The hijacker will need multiple previous passwords, your email, IP address and probably more details. He will send in an appeal using your IP address and hopes for the best.

To get hacked like this, the hijacker first needs to have a target. If you post your wealth online, you'll become a target. If you share personal information on RS related sites, you'll become a target.

Solution: A 100% solution for when all the necessary details have been compromised to recover your OSRS account is to stay anonymous. You're never gonna get hacked when no one knows you and can't find any information on you. Separate IRL from online. Don't use a RSN you've used somewhere else before. Don't use social media usernames you've used in the past. Don't use previous passwords. Don't use the email that's registered to your OSRS account to other OSRS related sites.

And what if your account does get recovered? A bankpin will save your whole bank. Bank all your items before you log off and you'll be safe for days.

Authenticator delay needed?

IMO no. Not everyone that got hacked through recovery even used all security measures or the authenticator. Adding an authenticator delay wouldn't have saved them. Besides that, the bank pin is basically your authenticator delay. Lots of people don't even use the available security measures, so adding this delay wouldn't prevent accounts from getting recovered and cleaned. If everyone uses RS authenticator + 2fa + bank pin I'd say you won't lose your items.

Edited November 19, 2024 by Zeref

[Sakura]

I think the TL;DR of that is just follow the recommended password security advice from the website and don't tell anyone your username info and you'll be fine  

I have never once been hacked or had any issue nor do I know anyone that has for that matter. The main thing you have to worry about is people in-game trying to scam you for your items once you get items actually worth anything. For instance whenever I walk around with a scythe or T-bow I get loads of people trying to scam me since those are 2 of the most expensive items in the game. When I walk around with some basic stuff on no one even knows I exist lol 

Avoid in-game scamming is just don't give people your items and double check all trades which is pretty much just basic safety precautions on any MMO. Don't give an item to someone if you don't wanna run the risk of losing it. For instance I remember many years ago back on what's now RS3 I let a friend borrow my santa hat. Which was only worth about 5M but it was a "rare" in game at that time. I had known this person awhile and even talked to them all the time on MSN Messenger but they logged out with my item, blocked me, and I never saw it again lol. Lesson was learned about trusting people. 

[Sasuke]

Never any issues firsthand either. I switched to a Jagex account early on when it was released for added security. A lot of times with this people don't know what the word hacked really means and just refer to it as the loss of items. Once you dig a little deeper into that you find out they weren't hacked they just stupidly gave their password information to someone who then logged in their account and took their stuff. 

[Kikyou]

@Sakura @Sasuke @Zeref Thank you guys for the information and your experience  about what I asked I really appreciate it ~

[Zeref]

20 hours ago, Sakura said:

 

Avoid in-game scamming is just don't give people your items and double check all trades which is pretty much just basic safety precautions on any MMO. Don't give an item to someone if you don't wanna run the risk of losing it. For instance I remember many years ago back on what's now RS3 I let a friend borrow my santa hat. Which was only worth about 5M but it was a "rare" in game at that time. I had known this person awhile and even talked to them all the time on MSN Messenger but they logged out with my item, blocked me, and I never saw it again lol. Lesson was learned about trusting people. 

This is the biggest problem. There is a lot of real life money in Runescape wealth. Real world item trading can earn some people a 6 figure salary a year and Runescape is a big target for the real world trading market. There are for example no end to the websites you can buy RS gold on. While Jagex has a lot of methods in place to crack down on these nothing is fool proof.

[Sakura]

3 hours ago, Zeref said:

This is the biggest problem. There is a lot of real life money in Runescape wealth. Real world item trading can earn some people a 6 figure salary a year and Runescape is a big target for the real world trading market. There are for example no end to the websites you can buy RS gold on. While Jagex has a lot of methods in place to crack down on these nothing is fool proof.

RWT been a srs problem since ever though lol I mean I guess that's the main reason they removed the duel arena (which I still think is BS) because we all know the RWT'ing will continue they just find other ways to do it. For every bot they take out 3 more spring up in its place lmao I mean it doesn't really matter anymore since having bots in your spot doesn't effect anything these days but it does mess up the ingame economy on some levels. 

[Sasuke]

I certainly haven't done any real world trading in my life for OSRS

[Zeref]

2 hours ago, Sasuke said:

I certainly haven't done any real world trading in my life for OSRS

I will pretend I didn't see that