WARNING: This site is intended for online use only; mass-downloading of pages degrades the server and is prohibited.
If you attempt to use tools to mass-download the site, you may be blocked permanently by automated software.

Google
Web TruthScape


Sponsored links make TruthScape possible. See here for more information about ads.




Table Of Contents  TruthScape.com
 9  The Truth About RuneScape Account and Password Scamming and “Hacking”
      9  Common Ways Players Get “Hacked” Outside the RuneScape Game

Previous Topic/Section
Easily-Guessed Passwords and Poor Password Protection
Installing Third-Party RuneScape Software (Especially “Cheat” Software)
Next Topic/Section

Using Shared or Public Computers

Most online fantasy games require you to download and install special software on your computer to use them. RuneScape, however, does not—you can play on any computer with a browser that supports Java. This “mobility” feature is widely seen as one RuneScape's biggest advantages, but it carries with it some serious security risks that most people don't realize.

The issue boils down to a matter of control. On your own PC, you have control over all security issues: who uses the computer, who watches others use it, who installs software on it, how often it is checked for malware and so forth. When you use a computer at a friend's house, library, school or Internet café, you lose this control, and that puts you at risk.

The best advice I can give you, if you are really concerned about keeping your account and password safe, is this: do not use shared/public computers to access RuneScape. In fact, that advice applies more generally—it is unwise to do anything on these computers that requires you to enter passwords, credit card numbers or other sensitive information.

Now, I realize that this will be inconvenient for many people, and impossible for some. Obviously, many people do access RuneScape from shared and public computers, but if you are going to do so, you need to understand the risks and how to minimize them.

Here are the main risks associated with shared and public PCs:

  • Deliberate Keylogging: Public computers can easily be compromised by either hardware or software keyloggers, which could steal your password and send it to whomever installed the device or program. Watch out for this even for computers that aren't “public”. For example, suppose a friend invites you to a party held by a friend of his, and he has a small LAN of computers that everyone is sharing to play RuneScape. Do you know this “friend of a friend” well enough to be sure he won't try to steal everyone's accounts? He could even scan the computer to prove it has no spyware, while actually having a hardware keylogger on the machine, like the one shown in Figure 111.

  • Accidental Keylogging: Even if you play on a computer owned by someone you trust, you could still get keylogged if that person did something unwise and got a keylogger on his PC.

  • Prying Eyes: Be very careful of other people watching over your shoulder as you type your password, or especially, as you enter your bank PIN (because it can be seen on the monitor). This can be a problem not only in public places, but even at the house of a friend. Even at home, watch out for those pesky siblings!

  • Video Cameras: While somewhat uncommon, there have been incidents where people have had their keystrokes logged not by the computer, but by a video camera aimed at the keyboard. This is typically only an issue in an insecure public place.

  • Leaving the PC: When logged in away from home, don't yield to the temptation to get up from your RuneScape session for “just a few seconds” to do something “quick” like getting a drink of water. It takes only “a few seconds” for someone to cause you serious problems.

  • Forgetting or Failing to Log Out: Similarly, don't forget to log out when you are done playing. Also, watch out when logging out after combat: many people who are in a hurry finish fighting a monster, and then quickly hit the logout button and leave the PC. You have to wait 10 seconds after combat before logging out, however, so if you do this too quickly, you will not be logged out and anyone can take over your session.

Trust your instincts. If you feel like you are “being watched” or that you are not safe typing your password on a particular computer, don't! You can always play another time.


Figure 111: Sneaky Hardware Keylogger

A device like this can be inserted between any keyboard and PC, and will record all keystrokes typed by the user. It is small and easy to conceal and impossible to detect using any type of software scan. Just one more reason to be careful what computers you use when entering any form of password or other sensitive information.

 


Previous Topic/Section
Easily-Guessed Passwords and Poor Password Protection
Installing Third-Party RuneScape Software (Especially “Cheat” Software)
Next Topic/Section



Home - Table Of Contents - Contact Us

TruthScape.com (http://www.TruthScape.com) - Information about RuneScape You Need!
Last Update: May 28, 2008

© Copyright 2007-2008 Charles M. Kozierok. All Rights Reserved.
All information is provided for free use at your own risk. Not responsible for any loss resulting from the use of this site.
WARNING: All content on TruthScape is protected by relevant copyright laws in the United States and other countries, and may not be reproduced in any form without expressed written permission. Violators will be prosecuted to the maximum extent permissible by law.