Author Topic: NwN Server and security update  (Read 7942 times)

Legacy_ShinsFortress

  • Newbie
  • *
  • Posts: 21
  • Karma: +0/-0
NwN Server and security update
« Reply #180 on: April 07, 2012, 10:43:19 pm »


               Would like a fix for this. Doesn't seem likely, but would like a fix.

Edit: typo.
               
               

               


                     Modifié par ShinsFortress, 08 avril 2012 - 10:49 .
                     
                  


            

Legacy_Fester Pot

  • Hero Member
  • *****
  • Posts: 1698
  • Karma: +0/-0
NwN Server and security update
« Reply #181 on: April 08, 2012, 12:50:25 am »


               

ShinsFortress wrote...

Would like a fix for this.  Doesn't seem likely, buy would like a fix.


You can find the fix here.

It's just that simple!

FP!
               
               

               


                     Modifié par Fester Pot, 07 avril 2012 - 11:51 .
                     
                  


            

Legacy_ShinsFortress

  • Newbie
  • *
  • Posts: 21
  • Karma: +0/-0
NwN Server and security update
« Reply #182 on: April 08, 2012, 11:50:56 am »


               Thanks. Have seen that. I would like an offical proper fix with the master server doing the job it was designed to do, not a workaround. You can still buy the game, so EA/Bioware should still be supporting it!
               
               

               


                     Modifié par ShinsFortress, 08 avril 2012 - 10:51 .
                     
                  


            

Legacy_Empyre65

  • Hero Member
  • *****
  • Posts: 662
  • Karma: +0/-0
NwN Server and security update
« Reply #183 on: April 09, 2012, 05:17:45 am »


               

ShinsFortress wrote...

You can still buy the game, so EA/Bioware should still be supporting it!

NWN is an Atari game, not an EA game. Bioware might be still officially supporting NWN if they hadn't been bought by Atari's competition, EA. Some NWN devs that are still at Bioware are still supporting NWN, but not officially and not on company time.
               
               

               
            

Legacy_jmwylie

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
NwN Server and security update
« Reply #184 on: April 10, 2012, 08:17:06 am »


                Any info/hope on being able to get the CD Keys logged on the old site? 
               
               

               
            

Legacy_Fester Pot

  • Hero Member
  • *****
  • Posts: 1698
  • Karma: +0/-0
NwN Server and security update
« Reply #185 on: April 10, 2012, 02:53:41 pm »


               

jmwylie wrote...

 Any info/hope on being able to get the CD Keys logged on the old site? 


Here you go!

Chris Priestly wrote...

Hi Everyone

First off,
thank you for all your patience as we continue to investigate and work
to solve the issues that arose after the hacking attack on the Legacy
Neverwinter Nights servers some time ago.

Our top priority
remains ensuring Neverwinter Nights fans can continue to enjoy playing
the game, and shortly after the incident we re-established the game
authentication servers; everyone whould be able to play Neverwinter
NIghts and the persistent worlds created in Neverwiner Nights. If you
have purchased a copy of Neverwinter Nights, you should be able to
authorize and play your copy. If you are experiencing any problems
authenticating your copy of Neverwinter Nights or cannot connect to your
persistent world or game, please let us know below.

We are
working with Atari and the other parties involved to resolve remaining
outstanding issues including access to the legacy forum content. When we
have more definitive information and timelines we will provide another
update. We appreciate your dedication to Neverwinter Nights and we thank
you for your patience.



[smilie]../../../images/forum/emoticons/devil.png[/smilie]


FP!
               
               

               


                     Modifié par Fester Pot, 10 avril 2012 - 01:54 .
                     
                  


            

Legacy_PlasmaJohn

  • Full Member
  • ***
  • Posts: 150
  • Karma: +0/-0
NwN Server and security update
« Reply #186 on: April 10, 2012, 08:27:25 pm »


               

Fester Pot wrote...

jmwylie wrote...

 Any info/hope on being able to get the CD Keys logged on the old site? 


Here you go!  ...

Just so people don't get any false hope that quote was one of the very early responses.  Since that time the assurances have become much less frequent and the promises much less specific.  Bioware has stopped participating in these forums.  The only action taken to date has been the activation of a service that allows the premium modules to function (and it doesn't require the one you registered).

It seems pretty clear that nether the key data nor the Master Server are coming back.  If you just want to play online, get a key from GOG.com for 10USD (or less when they have a sale).  If you need a specific key you're pretty much out of luck.
               
               

               
            

Legacy_fish taco

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
NwN Server and security update
« Reply #187 on: June 08, 2012, 05:53:23 am »


               yea so if the servers ever come back will i be able to update my game since im just buying the game or do i have to look for the patches somewhere else?
               
               

               
            

Legacy_HipMaestro

  • Hero Member
  • *****
  • Posts: 2849
  • Karma: +0/-0
NwN Server and security update
« Reply #188 on: June 08, 2012, 06:54:25 am »


               

fish taco wrote...
yea so if the servers ever come back will i be able to update my game since im just buying the game or do i have to look for the patches somewhere else?

The servers about which FP cited a month ago are not related to the server that contains the patch files.  Those are still available and accessible through the Bioware files page and a comprehensive list of links for all versions of NWN in the Win7/Vista installation sticky of the self-help Tech forum.  There are also alternate download sites referenced.  I'm not sure whether the Vault or Nexus has any plans to mount them as part of a patch back-up plan, but it is possible, I suppose.

At this point, for all intents and purposes, I believe even the most optomistic of our community have recognized that no resources have been allocated to restoring the master server nor will there be in the foreseeable future.  Therefore, until an official announcement by Bioware is published about restoration schedule, it is a dead issue.
               
               

               
            

Legacy_Lazarus Magni

  • Hero Member
  • *****
  • Posts: 1837
  • Karma: +0/-0
NwN Server and security update
« Reply #189 on: August 31, 2012, 08:55:01 am »


               There are a few tidbits, some of you all may find relevant to this discussion:

http://social.biowar...ndex/13633358/7

Particularially how the loss of the master server, and the complete negligence in an effort to restore it, let alone keep the community aprised has detrimentially affected the community.
               
               

               
            

Legacy_Lazarus Magni

  • Hero Member
  • *****
  • Posts: 1837
  • Karma: +0/-0
NwN Server and security update
« Reply #190 on: August 31, 2012, 09:22:30 am »


               In particular, here:

Lazarus Magni wrote...

Losing the master server really crippled NWN 1 PWs. Luckily Funky Swerve came up with a work around, but it didn’t mitigate the damage done to the player base, that is still being done. It only was a work around to prevent PW’s player accounts from being totally jacked. Bioware really let us down here. But don’t you think that might have been different if they were still pulling 25-50k/mo from hosting profits alone? In my estimation, the answer is yes.


And here:

Lazarus Magni wrote...

Actually, if you consider PW owners... players, which I do, NWN 1 is pay to play. It's free for the majority of players, but not PW owners. You have to pay for hosting, and that is one of the main points I have been making. We PW owners pay for hosting, but we don't pay bioware. I love my host, and no disrespect to them (heck maybe bioware will buy them out as an experiment, and they will be better off for this exposure), but the fact is if bioware would have been getting additional revenues from this game from hosting, they would still to this day have a reason to support it. (AKA the master server at the very least.) Or how bout being a part, and promoting it's 10th year aniversary? They didn't even support that effort in the least. It was a 3rd party (gog.com) that did and the community. Honestly if you ask me, bioware wanted NWN 1 to die when it pulled the plug on the master server. Their website got hacked? How is that relevant to the master server? Seemed more like an excuse to me, to kill off a game they are no longer getting a profit from, and would rather see die than continue. Which comes full circle to one of my points. If bioware actually offered a hosting service, they would still be making money of NWN 1, still have a reason to support it, and it would still be free for the majority of players.

.


And here:

Lazarus Magni wrote...

As far as the master server… I beg to differ. First of all, bless Funky for releasing his system, but it took a pretty talented scripter to get it up and running on my PW. And secondly (and more importantly) it didn’t fix the problem, it just prevented it from getting worse. PW’s like mine which have a player base from years of being around got totally crippled, due to the fact that I (and the previous hosts of Av) were not keeping track of my players CD keys. Why? Because the master server did that for us. Sure moving forward, using Funky’s system when a new player logs into my server their public cd key is tied to their account. But what about the 9 years worth of player accounts in my server vault? I have over 4k player accounts (maybe a lot more) in my server vault. I had to disable every one of them due to account jackers. I consider that pretty darn crippling, and the drop off in NWN 1 players since that happened I think speaks to that as well.


And here:

Lazarus Magni wrote...

Lazarus Magni wrote...

Oh and to the toon hacker who visited my PW tonight...


The more I think about this the more this is starting to ****** me off...


Oh. btw… I think I may have mentioned something in this thread about how bioware totally screwed us over by abandoning the master server?

And I think I mentioned how it was great and all the community came up with a work around, which didn’t actually fix the problem, but did stop the bleeding?

Some people said, oh, this hardly crippled the community. I suppose that is true if you have a super genius scripter. Luckily we have one of those working with us. However here is another not so small example about how this loss totally screwed the community.

I have had some idiots logging on to my PW with hacked toons. I can ban them, but they can just use a CD key generator, and a proxy server to relog with in minutes. So ok, my validator (no not a bioware provided one, but rather one from the community) catches these ****s, but they can keep doing it. And what about the 100’s of other servers that aren’t blessed with as gifted of scripters and community support as I have been?

In short the loss of the master server has completely opened up all PWs (except those of the most sophisticated nature, with state of the art, damn near professional level community contributed security systems), to being vulnerable.

Someone said something about how the loss of the master server was not a crippling effect on the NWN 1 community? That someone is either involved in one of the PWs with the capacity to actually thwart it on their own (aka with no help from bioware), or interested in perpetuating that myth for some other agenda.

As much as I can be a total jerk, IMO defending such an outcome, and trying to pass it off as no big deal, is the serious violation.

Now as mentioned, I guess I can’t really blame bioware. They have no real incentive for supporting the game. Which is kinda the purpose of this whole thread. The community can solve a lot of problems. But apparently they can’t (or are unwilling to) solve this one simple one. Not for bioware, retroactively, nor presently, nor for the future, nor for the NWN 1 on line community at large, nor for any other game modeled after the precedent NWN 1 set.

As I said, apparently the future is bleak.


               
               

               
            

Legacy_Lazarus Magni

  • Hero Member
  • *****
  • Posts: 1837
  • Karma: +0/-0
NwN Server and security update
« Reply #191 on: August 31, 2012, 08:00:14 pm »


               

Squatting Monk wrote...

If you recall, I said the reason it wasn't crippling is that there were workarounds even when the Master Server was online. Servers are very vulnerable right now, yes, but they were very vulnerable back then, too. It's just that now everyone knows how vulnerable they are. Yes, the Master Server being down removes a first line of defense, but it also forces server admins to pay attention to security where they were complacent before. All things being equal, I'd prefer to have the Master server and have server admins implement tight security practices, but we're stuck with just the latter. People need to get used to it.

Lazarus Magni wrote...

The community can solve a lot of problems. But apparently they can’t (or are unwilling to) solve this one simple one. Not for bioware, retroactively, nor presently, nor for the future, nor for the NWN 1 on line community at large, nor for any other game modeled after the precedent NWN 1 set.

As I said, apparently the future is bleak.

What, exactly, did you expect the community to do, besides kicking around "wouldn't it be nice if..." ideas and hoping a big company think it's worth sinking millions of dollars into?


First of all what makes you think it would cost millions of dollars? Where are you getting that estimation from? It could be as simple as just turning the master server back on (if it’s not already… you don’t get a webpage no longer exists message when you visit nwn.bioware.com, you get re-routed here.).

Part of the problem is Bioware was intentionally vague about what happened, and has not been forthcoming about any details since (neither regarding what happened, nor the resolution.) Everyone has just assumed, ok no response, means it’s dead permanently.

Part of the problem for me is that I am not an IT professional. But from my own un-IT-educated perspective this is how it breaks down.

Bioware’s nwn 1 website got hacked. Somehow this also affects the master server. So what is the master server? Apparently it was the server that hosted the web pages, and was involved in interfacing (or however that works) with Game Spy to cross check CD keys, with player accounts for authentication.

So, this begs the question. Why would anyone do this on a 10 year old game? Usually when sites get hacked they are storing finical information of their users. Linkedin is a recent example of this. And usually those sites are back up within days if not hours (although I have no idea how stolen financial data is rectified.)

But that was not the case here. Bioware didn’t store our financial data. So what did the hackers get? Our e-mail addresses? Possibly our player names and CD keys? Which still begs the question… why? I know I haven’t received a massive barrage of spam because of this. So some hacker is risking jail time, so they can get access to someone’s player account on a ten year old game? I don’t think there is much of a marked on e-bay for nwn 1 player accounts any more… It just doesn’t make any sense.

Ok so what if that was the motivation… The damage has already been done, turning off the master server doesn’t fix it. Turning the master server back on however, would fix a lot. So sure, that one person (or couple people), might be able to log into PW’s with other peoples accounts. Provided those PW’s don’t have Funky Swerve’s security system installed as a second line of defense. But as it is now, it’s not just those perpetrators who can do this it’s anyone. Turning the master server back on, won’t stop those thieves, but it will stop others taking advantage of this.

So what would bioware’s motivation be for doing this?

1) Protect their game’s integrity, and their company reputation.
2) Protect their customers
3) Catch the people who did this.

I think 1 and 2 are self explanatory. But one barrier to this may be financial. It’s possible any revenue bioware is getting from new sales of NWN 1 no longer cover the cost of maintaining the master server. I offered an idea which might be able to make up the difference. Bioware could start (or buy out) a hosting company. There are a lot of servers out there paying between 24$ and 400$ a month. That is a fair amount of money Bioware is not currently getting from their product. Bioware could offer reasonably priced hosting, promote it right here on their web pages (and elsewhere), and use the revenue to both support the hosting service, and the master server maintenance costs. Anything left over is cake.

In the instance of buying out an existing company, they would not even have to do much. The infrastructure and personnel is already there. They could either make them part of the company, or hire them as independent contractors.

And as far as 3… It’s classic crime solving. You follow the money (or data) trail. Right now the thieves have no use for the player info they got. If CD keys were relevant, perhaps they would attempt to use them somehow. Bioware could ask PW owners to report any suspicious activity (like someone logging in with CD keys they should not have), and Bioware and the community could keep an eye out for how else this might be used (selling on e-bay, or what have you.)

SM, you asked what would I like the community to do? It’s sign a petition to bioware imploring them to restore the service. It’s offer ideas like this, which could really resolve this issue.

This post may be a year late in coming. But it’s here now. And the problem (lack of the master server) still is too. The issue is only dead if we let it die.
               
               

               


                     Modifié par Lazarus Magni, 31 août 2012 - 07:08 .
                     
                  


            

Legacy_Squatting Monk

  • Hero Member
  • *****
  • Posts: 776
  • Karma: +0/-0
NwN Server and security update
« Reply #192 on: August 31, 2012, 09:28:13 pm »


               

Lazarus Magni wrote...

First of all what makes you think it would cost millions of dollars? Where are you getting that estimation from? It could be as simple as just turning the master server back on (if it’s not already… you don’t get a webpage no longer exists message when you visit nwn.bioware.com, you get re-routed here.).

I didn't realize you were talking about the Master Server. I thought you were referring to the fact that there was not much useful coming out of the Future of MMO thread. Millions of dollars there is referring to the cost of developing a great new game that can last for years and appeal to a wide audience.

I didn't read your post closely enough to give a proper response. My bad. I apologize.

Lazarus Magni wrote... 

Part of the problem is Bioware was intentionally vague about what happened, and has not been forthcoming about any details since (neither regarding what happened, nor the resolution.) Everyone has just assumed, ok no response, means it’s dead permanently.

QFT. I think it sucks the way BioWare handled this. If there was no plan to get the Master Server back up, it would have been nice to have been told that from the get-go.

Lazarus Magni wrote... 

Bioware’s nwn 1 website got hacked. Somehow this also affects the master server. So what is the master server? Apparently it was the server that hosted the web pages, and was involved in interfacing (or however that works) with Game Spy to cross check CD keys, with player accounts for authentication.

CDKeys were a big one, yes, but usernames and passwords were the major cause of concern, I think. You can always keygen a new CDKey, but if you can steal someone's username and password, you can sign into the game as another player without having to bypass the Master Server. You could even log into the BioWare website as that player and reset their password and email so they can't recover it, taking over their player name. If that user had created a guild on the BioWare site, they could wreak havok on that, too.

(Aside: many, if not most, people also use the same password for every account, so stealing NWN passwords could possibly let you gain access to someone's email. From there, getting into someone's bank account isn't hard. So let this be a lesson to folks: use a different password for every account, and change them regularly, just in case.)

I think shutting down the Master Server puts a temporary stop-gap in that. Many PWs had enabled the option to require Master Server authentication. Taking down the Master Server would keep anyone from logging in until some security measures could be put in place (unless the malicious player knew a way to get around that requirement which, IIRC, was doable).

Lazarus Magni wrote... 

SM, you asked what would I like the community to do? It’s sign a petition to bioware imploring them to restore the service. It’s offer ideas like this, which could really resolve this issue.

This post may be a year late in coming. But it’s here now. And the problem (lack of the master server) still is too. The issue is only dead if we let it die.

Is this still something BioWare can do? I was under the impression this was in Atari's hands. Regardless, I would sign a petition if I knew it was going to people capable of fixing it.
               
               

               


                     Modifié par Squatting Monk, 31 août 2012 - 08:43 .
                     
                  


            

Legacy_Lazarus Magni

  • Hero Member
  • *****
  • Posts: 1837
  • Karma: +0/-0
NwN Server and security update
« Reply #193 on: August 31, 2012, 09:41:19 pm »


               Well the master server for player authentication in multiplayer play and the website are 2 separate issues. Related, yes, but distinct.

If they turned back on the master server, but not the website, there would be no danger of having the thieves log into the website and wreaking havoc. But this would re-instate the first line of defense for PWs, and the on line community as a whole.

With the master server off, anyone can log into anyone’s account, unless the server has had the ability, and taken the time to put in place a community submitted security system. Re-instating that would restrict that to only being done by thieves. Why is this good? So they can be reported and stopped.

But what is equally as bad with the master server being off is the ability for people to key gen, and not only log in as whoever, but completely avoid server bans. A ban meant a lot more when it was actually a CD key the person bought. Now it’s a total joke.
               
               

               
            

Legacy_Lazarus Magni

  • Hero Member
  • *****
  • Posts: 1837
  • Karma: +0/-0
NwN Server and security update
« Reply #194 on: August 31, 2012, 09:56:20 pm »


               I made an online petition. People can sign it here. Or if someone feels more inclined they can make a better one of their own.

http://www.change.or...erver-for-nwn-1#
               
               

               


                     Modifié par Lazarus Magni, 12 novembre 2012 - 05:14 .