5 ms·
If you've done any serious gaming, especially an MMORPG, you've seen this scam a million times. Register an account with a name something like "Mod Steve" or "B
by soared 11y ago
If you've done any serious gaming, especially an MMORPG, you've seen this scam a million times. Register an account with a name something like "Mod Steve" or "Blizzzard Rep" and just private message every rich player you see. Claim to be a service rep, say you need to verify their password for security or whatever, and 5% of the time they'll give it to you.
I made a lot of free money on runescape doing this back in elementary school. "Jagex Modz 1"
- JoshTriplett 11y agoLeaving aside the infamous laws against "unauthorized access", if you pulled that scam on any gaming platform that had a real-money market, that could easily be interpreted as theft.
- mschuster91 11y ago> Leaving aside the infamous laws against "unauthorized access" Why should that be unauthorized? Unless it's written in the T&C that you must not use a pseudonym which impersonates a company official, he had used the system in a legitimate way and did not exploit bugs or bypassed access controls.
- rubidium 11y agogoogle "criminal impersonation" for your answer. Doesn't need to be in T&C for the law to apply (most countries that is).
- mikecaputo 11y agoI believe he is referring to logging in as the other to transfer their goods once they have mistakenly given you the password. That's the unauthorized access, not naming yourself something that is similar to a moderators name.
- JoshTriplett 11y agoExactly. Phishing someone's password and not using it might be a T&C violation, but shouldn't necessarily be illegal (you might, for instance, be doing a study on user gullibility, or be part of a red team checking the security policies of a partner or supplier). Actually using that password, on the other hand...