2581
Security vulnerability patched
Dear citizens,
Yesterday a security vulnerability was discovered and exploited for a short while, before our engineers could fix it. By opening articles containing -comments, some citizens got their GOLD stolen and sent to some specific accounts.
The first measure was to "lock" the accounts receiving the GOLD, in order to prevent its spread across the world. Then, in a matter of hours we fixed the vulnerability to prevent this from ever happening again.
Our investigation concluded that the following target-accounts receiving GOLD had nothing to do with the exploit: Emerick, borges16, UncleDed, Karolina Jesieniecka and MoredanKantose.
All other accounts involved in the exploit are permanently suspended, including some high-ranked citizens.
Thanks for your reports which helped us with this issue. Our team of engineers extracted the full list of affected accounts and reversed the transactions, so now everybody should have their GOLD back. In case you GOLD is still missing, please submit a ticket to Report a Bug department.
Regards,
The eRepublik Team
Yesterday a security vulnerability was discovered and exploited for a short while, before our engineers could fix it. By opening articles containing -comments, some citizens got their GOLD stolen and sent to some specific accounts.
The first measure was to "lock" the accounts receiving the GOLD, in order to prevent its spread across the world. Then, in a matter of hours we fixed the vulnerability to prevent this from ever happening again.
Our investigation concluded that the following target-accounts receiving GOLD had nothing to do with the exploit: Emerick, borges16, UncleDed, Karolina Jesieniecka and MoredanKantose.
All other accounts involved in the exploit are permanently suspended, including some high-ranked citizens.
Thanks for your reports which helped us with this issue. Our team of engineers extracted the full list of affected accounts and reversed the transactions, so now everybody should have their GOLD back. In case you GOLD is still missing, please submit a ticket to Report a Bug department.
Regards,
The eRepublik Team
Facebook
Twitter
fix avatars
Sirály
cool
Can i have my gold back?
Zeh mon3y is saf3r n0w!
Just another bug dead.
I want my gold back...
still missing 7982782872 golds...
Finally, next time give feedback earlier please and advice how to be safe.
Valio!
nice
Good that admins done something with this...
I got my Gold back. That was fast. Good job eRep Team.
can we have the list of permbanned players?
Hai romania
Good job!
names please, we need Wall of Shame
Or alternatively you could just.. dunno.. fix the security holes that were reported to you months ago? Might help in avoiding these situations.
Kill the Hacker.
Thank you for your prompt action.
I was very happy to see my Gold balance restored this morning.
Great way to start the day!
To the peanut gallery - Patience! Do you want it fixed or do you want lip service? sheesh...
V0T3D !
Disabling the scr ipt word is not a patch.
Finally
Give us the list of hackers!
WE WANT THE LIST!
WE WANT THE LIST!
:pPp
Nothing is fixed!
We appreciate it!
Would like to know who the high ranking players are...
col
uterin
bıcı bıcı
GOOD.. voted.
<a href="http://www.erepublik.com/en/newspaper/pais-y-justicia-184999/1" target="_blank">http://www.erepublik.com/en/newspaper/pa[..]999/1</a>
Good job! I got my gold back
wall of shame!
wall of shame!
wall of shame!
wall of shame!
wall of shame!
wall of shame!
wall of shame!
v
Who is guilty ?
Thanks for the fix!
гречиха
it's a pretty dumb vulnerability, tbh.
You should be able to prevent all this
actually there were some similar cases some month ago, I can remember some at least.
Hope you can fix this soon.
i think, i missing 68368123861237846123764 GOlds
good one
YAY!
Thanks for the fast and fair action.
You guys rock.
@admin... we want Enze back to eFrance
Stone the hackers
Who all got banned ??
Thanks, Capitan!
Well done for fixing it quickly and returning gold.
Wall of shame would be good though. You just know some of these characters will be back - probably with one of their illegal multi-accounts. Wall of shame may encourage people to identify any multi-accounts of these citizens.
@Two-Four-Six-0-One
how the hell did u do that????!!!!
I mean "s-c-r-i-p-t-s doesn't work!"
This is your BUG FIX? To cut word "s-c-r-i-p-t"?
OH my GOD!!!!
cool,
What is the evidence for the permanent suspensions??
Nice music, by the way
well done
vote
Sorry ADMINS, but this is FAIL BUGFIXING.
Maybe next time hackers will be more accurate, not so rude in robbing.
For example, next time they steal cookies from profile using java s.
And i repeat THIS IS FAIL BUGFIXING.
Next time you will get even MORE troubles.
Good work Admins
wall of shame, as well as reasons for banning. dont be tyrants.
Voted )
WE WANT THE LIST of permbanned!
nice work admins!
Probably because he was just framed by others and admins remove the gold.
Thanks for this quick fix!
Voted!
Thanks!
thanks for my gold!
"Then, in a matter of hours we fixed the vulnerability to prevent this from ever happening again."
Yeah, well that's good... Guess you want us to be impressed?
Ticket ID: UVJ-441757
Take a look at this ticket before!
And ACT!!!
All other accounts involved in the exploit are permanently suspended, including some high-ranked citizens.
======================================== ====
I checked citizen rank 1-60 and no one permanently banned
Finished checking to 100, and cant find any. I give up
The admins have known about the vulnerability for months now. Why didn't you fix it back then?
first 100 xD
Lazy admins.
Great job admins!
My gold has back!
I am still waiting for the gold (although I sent a ticket a few hours ago). Will send another one later if needed
Thank you !
nice one....
Thank you.
lol censored my comment so here it is again:
lol "yesterday". this has been reported for months but you didnt fix it. stop lying
khak toos saret:-L
Maybe it is good to look at Ticket ID: BRW-532387 also about other vulnerabilities or atleast reply if you think they won't affect the server/game. It has also been open for a month now.
Good job
well I had 35 gold
Nice one! Voted!
Good news to hear.
i em sad, hacker hacked my account and find nothing (( please give me some gold so hacker wont laugh at me next time ((
weird enuff but...
/***
Our investigation concluded that the following target-accounts receiving GOLD had nothing to do with the exploit: Emerick, borges16, UncleDed, Karolina Jesieniecka and MoredanKantose
***/
Emerick is the only one to be not from Russian politics. Other guys are, including 3 (75%) russian presidents.
Pretty good stuff for conspiracy theories.
Fix the bugs and kill hackers
18:20 PORTUGUESE TIME - The portuguese president account has just been hacked.wait for further instruction
Post a list of the accounts that got suspended so we can have some lulz
Thank you admins for returning my gold
slain Hackers )
High grain for Poland!
russians are banned but americans nooo
the s are back..........
Thanks for admitting there was a problem for once.
Also thanks for fixing it quickly.
Give us the names!
signed by ANGRY CITIZENS!
Curiously, shortly thereafter, the Portuguese president got hacked. Oh the lolmanity
WOO! NO MORE FEAR!!
bloody hackers with nothing better to do
get a life!
I also got back my golds, thank you.
let's all thank the admins for fixing this bug and getting our gold back so fast!
Great job all around.