Can online league passwords be hacked?

stigs007 · 04-25-2008, 08:56 AM

I'm the commish of a league, I don't want to know how, I'm just curious if it's possible or not. If it is, how easy is it and is there a way I could guard against it?

RchW · 04-25-2008, 10:04 AM

People often use their names as PW. Makes it easy.

stigs007 · 04-25-2008, 10:17 AM

Well I'm only referring to the League password, and I didn't make it that easy to figure out, I just have some concern whether or not those passwords can be hacked from the league file.

jazzrack · 04-25-2008, 12:01 PM

can they be? yes.

but 6 & 6.5 are much more difficult than v5 was (v5 was butt easy) and it's not something the average person can do.

stigs007 · 04-25-2008, 01:29 PM

I suppose there's no real way to guard yourself against it is there?

kq76 · 04-25-2008, 01:43 PM

No, I don't think so. As long as you make the file available, people can get it. Just don't use the same password as something that's important to you like your email password.

f.montoya · 04-25-2008, 11:56 PM

I recommend changing your password often and use numbers and other characters as well. Makes it nearly impossible for the would-be hack.

treedom · 04-26-2008, 10:02 AM

Quote:

Originally Posted by f.montoya

I recommend changing your password often and use numbers and other characters as well. Makes it nearly impossible for the would-be hack.

That would help against a brute-force approach to cracking the password, but I don't know if it would help too much against someone, say, going into the OOTP binary and flipping if statements or something.

cec2 · 04-28-2008, 12:38 PM

If you have a hex editor program, it's just a matter of changing a '1' to a '0' in a specific location.

stigs007 · 04-28-2008, 01:27 PM

That's kinda scary to think about.

frankduffy · 05-07-2008, 11:39 PM

While I can understand someone not wanting the password hacked, it wouldn't be possible to change ratings. The FTP only allows roster moves.

kq76 · 05-26-2008, 10:34 AM

Quote:

Originally Posted by cec2

If you have a hex editor program, it's just a matter of changing a '1' to a '0' in a specific location.

Oy! I hope it's truly not that easy. The way I know is pretty easy IMO, but it's not _that_ easy.

Quote:

Originally Posted by frankduffy

While I can understand someone not wanting the password hacked, it wouldn't be possible to change ratings. The FTP only allows roster moves.

It's not about changing them, it's about seeing what you otherwise can't see.

04-25-2008, 08:56 AM	#1 (permalink)
stigs007 Minors (Single A) Join Date: May 2002 Posts: 72	Can online league passwords be hacked? I'm the commish of a league, I don't want to know how, I'm just curious if it's possible or not. If it is, how easy is it and is there a way I could guard against it?

04-25-2008, 12:01 PM	#4 (permalink)
jazzrack All Star Starter Join Date: Oct 2003 Location: libertarian hell Posts: 1,712	can they be? yes. but 6 & 6.5 are much more difficult than v5 was (v5 was butt easy) and it's not something the average person can do. __________________ With the first link, the chain is forged. The first speech censored, the first thought forbidden, the first freedom denied, chains us all irrevocably." If you can't take a little bloody nose, maybe you oughtta go back home and crawl under your bed. It's not safe out here. It's wondrous, with treasures to satiate desires both subtle and gross; but it's not for the timid Villians who twist their mustaches are easy to spot, those who clothe themselves in good deads are well camouflaged

04-25-2008, 01:43 PM	#6 (permalink)
kq76 Moderator Join Date: Nov 2002 Posts: 5,135	No, I don't think so. As long as you make the file available, people can get it. Just don't use the same password as something that's important to you like your email password. __________________ Kieran Quinn Online League Boards Moderator Fan of spectacular defensive plays and aggressive base-running and stealing Interactive Online League Directory - find or advertise a league today! Hardball Heroes - probably the largest multiplayer OOTP8 world (7 leagues of 12 teams each) The Canadian Baseball League - one of the best OOTP6.5 leagues still left, running since April 2002

04-25-2008, 11:56 PM	#7 (permalink)
f.montoya Hall Of Famer Join Date: Nov 2004 Posts: 4,295	I recommend changing your password often and use numbers and other characters as well. Makes it nearly impossible for the would-be hack. __________________ Fidel Montoya Asahi2 Baseball Commissioner(Historical League Since 2004) www.allsimbaseball.com (Hosting for OOTP with LIVE Online Tutorials) Share Your Mods - Free, unlimited and easy to upload to share your Mods instantly(free site registration required)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

04-25-2008, 10:17 AM	#3 (permalink)
stigs007 Minors (Single A) Join Date: May 2002 Posts: 72	Well I'm only referring to the League password, and I didn't make it that easy to figure out, I just have some concern whether or not those passwords can be hacked from the league file.

04-25-2008, 01:29 PM	#5 (permalink)
stigs007 Minors (Single A) Join Date: May 2002 Posts: 72	I suppose there's no real way to guard yourself against it is there?

04-28-2008, 12:38 PM	#9 (permalink)
cec2 Minors (Rookie Ball) Join Date: Nov 2006 Posts: 39	If you have a hex editor program, it's just a matter of changing a '1' to a '0' in a specific location.

04-28-2008, 01:27 PM	#10 (permalink)
stigs007 Minors (Single A) Join Date: May 2002 Posts: 72	That's kinda scary to think about.

05-07-2008, 11:39 PM	#11 (permalink)
frankduffy Minors (Rookie Ball) Join Date: Jul 2004 Posts: 20	While I can understand someone not wanting the password hacked, it wouldn't be possible to change ratings. The FTP only allows roster moves.