I feel bad for those Sylestians. If you required them to change their passwords and their e-mails were hacked too then they'll never get their Sylestia account back. For some players, specially with really old accounts, they might not be able to open the e-mails that they used to create their accounts in Sylestia. Some people can't access their old e-mails anymore. Either their accounts get automatically deleted if they don't login for long years or they might have forgotten their passwords. It happened to me in my early e-mail accounts.

Link: https://www.sylestia.com/forums/?thread=95099&page=1#5 Author: Krinadon Time Posted: 12/12/2020 at 7:09 PM [quote=2416432] Hard for me to really answer that. Could have just been some personal pet project for the person to see if it would work. Or perhaps they wanted to create a bot army of Sylestia accounts - although that seems very strange to me lol... There's almost no way someone could do that without being noticed and just getting the accounts banned and whatnot. I really don't have a real answer to that question though.

the person might find our credit card numbers to buy what he or she wants?

thx krin!!

Link: https://www.sylestia.com/forums/?thread=95099&page=3#22 Author: Krinadon Time Posted: 12/12/2020 at 8:32 PM [quote=2416495] Don't worry, that scenario would never be the case. If you ever get locked out of your account, you can always contact our support email and we will help you get back in. At this point, in order to change your email address w/o access to the original email address, you will have to PM and I will have to manually resolve it.

I've been wondering the same thing. I had to abandon my old account because my old email was no longer accessible. I was okay with this because I hadn't made much progress, but after this recent attack, I kinda want to retrieve a few of my old pets so I know they're safe.

Link: https://www.sylestia.com/forums/?thread=95099&page=7#62 Author: Wolfiegacha20 Time Posted: 12/13/2020 at 2:06 PM [quote=2416433] the person might find our credit card numbers to buy what he or she wants?

We do not store any type of payment information on our site/database/server. There is nothing at all like that that someone could gain if they were to successfully access our systems.

But, just to emphasize, nothing was compromised on our end in this. This was just someone with a list of hundreds of thousands of username/password combinations and them just simply spamming away at our log in system phishing for matches.

Link: https://www.sylestia.com/forums/?thread=95099&page=7#61 Author: AnnaHeartz Time Posted: 12/13/2020 at 1:55 PM I feel bad for those Sylestians. If you required them to change their passwords and their e-mails were hacked too then they'll never get their Sylestia account back. For some players, specially with really old accounts, they might not be able to open the e-mails that they used to create their accounts in Sylestia. Some people can't access their old e-mails anymore. Either their accounts get automatically deleted if they don't login for long years or they might have forgotten their passwords. It happened to me in my early e-mail accounts.

I am always willing to help individuals regain access to their accounts. They just simply have to contact our support email and we go from there.

Link: https://www.sylestia.com/forums/?thread=95099&page=7#66 Author: Krinadon Time Posted: 12/13/2020 at 4:44 PM [quote=2417130] I am always willing to help individuals regain access to their accounts. They just simply have to contact our support email and we go from there.

What info would you need me to include in the email?

Good to know thanks krin

Link: https://www.sylestia.com/forums/?thread=95099&page=7#67 Author: Sarikunezume Time Posted: 12/13/2020 at 5:41 PM [quote=2417353] What info would you need me to include in the email?

In your specific circumstance, since you have created a new account, there is not much I can do at this point. Players are not allowed to have more than one account and I would not be able to allow you to transfer assets from your original account to your new account.

If you wanted to switch back to your original account, I could help you do that - but you would then be losing access to your new account. So it's either one or the other.

If you want access to your original account and want to switch back, then send an email to our support just mentioning the situation and include the original Username and any other information you can provide.

Thank you for your constant vigilance, Krin! :D

My concerns for the projected changes are:


1. Can we use a unique log-in "name" that cannot match our username instead of our email addresses? One that we can create ourselves? I already have so much trouble signing in that it impedes my use of the site a significant amount and having to sign in using my email address would make it even more difficult and tedious (I have already almost completely stopped using all of the other sites that require email address sign-in because of this). I have seen some sites use a separate login account name that no one else ever sees, kind of like a second password, and it seems to have been very effective. :) -Or possibly even just requiring two passwords that can't be the same may be effective. :D

3. Do mobile devices have IP Addresses that would need to be whitelisted?

4. If the backup security option changes to something more secure than Date of Birth, either I'm not going to know it or Sylestia's not going to know it? D: What's more secure than Date of Birth? Isn't that the #3 most secure thing you're never supposed to give out? D.D (The irony that almost every site that has membership requires such intimate PII is not lost on me...)


All of these may be highly limited issues, but if they aren't voiced, they have no chance to be addressed, right? :D ^_^