IMENTEC escribió:Lo pongo aquí para que lo vea todo el mundo. Ya se que no corresponde aquí.
Parece que se debe a un hackeo masivo a origin.
CAMBIAD LAS CONTRASEÑASUpdate – 11/15/12 1:40PM EST: After having previously stated they were escalating the matter after it was brought to their attention, EA has issued a statement saying they have no reason to believe Origin was hacked. Regardless of EA’s stance, it’s still a good idea to change your login information.
EA’s Origin, the digital games storefront that everyone loves to hate, has been hacked, with numerous accounts being hijacked and login information being changed. Users whose accounts were hijacked were alerted through automatic emails from Origin stating account credentials were successfully changed.
Origin doesn’t have any kind of secondary security protocols, such as a separate password, in order to prevent account changes — a hacker simply needs to know the login and current password in order to change them. Unfortunately, Origin’s login details are the same as the ones used for a user’s EA profile, so a hacker could use the hijacked Origin login information to log into a user’s EA profile and change the email address associated with the account. Anyone who holds that meager amount of information can also change an account’s Origin ID. So, by changing the login and password information, the associate email address, and the Origin ID, a hacker can change an Origin account into a virtually different account.
Though a user can store credit card information on his or her account, Origin mercifully doesn’t store a credit card’s security code, so there’s at least one layer of security preventing a hacker from buying everything on Origin with a hijacked account. However, as anyone that has stored their credit card information online is fully aware, billing addresses are stored along with the card’s information for a quicker purchase. So while a hacker may not be able to decipher the card’s security code, they could stop by your apartment and get it out of you.
Details of how the account information was obtained have either not yet been disclosed, or aren’t yet known, but it’s disconcerting that users were alerted to it from an automated email of a routine account change, rather than something or someone announcing something was amiss.
A clever user has found a tedious, yet uncomplicated method for discovering the email address of who changed the account details.
Saludos!