Old School Runescape

Old School Runescape Dev Tracker




21 Mar

Comment

Originally posted by M2dis

https://i.imgur.com/99ynOli.png literally unclickable

This is fixed now.


20 Mar

Comment

Originally posted by WhiskeyWolf

Sincere question, would a VPN explain certain drastic location changes or can you guys see through that? I have been curious of that since I started using one due to my work and new geographic location.

It could make it appear as though you have drastically changed locations but we wouldn't use that alone to conclude that you're not the account owner.

Comment

Originally posted by krazeykev

But don't you find it strange how according to your own words, the OP is not the original owner and that the original owner now ( or did ) have the account back. If it was in the hands of the owner in your eyes, why would wealth be moved? Because the recovery system is flawed or because there is something more going on?

Possibly because the original owner wanted the wealth but had no interest in keeping the account.

Comment

Originally posted by brodaki

So, for a second time, you're going to lock an account just for me to unlock it?

This is all really interesting though, thank you for being more transparent on what information you were given in the initial recovery appeal, because it sounds to me like my information was entirely compromised, more than I even thought. The hacker's geo-location or whatever, whether it's spoofed or not, he was not the account creator. Because that is me. This is not a case of an account seller then recovering the account.

A for the whole 5000 mile thing, I have been upfront with this the entire time. For all intents and purposes, I live in two different countries and travel back frequently. And I live for the most parts, in the US with my brother, who I pk with on occasion. After sending in the recovery appeal from the UK, and seeing in my email that it was successful, I immediately hit up my brother and told him to get on my account and let me know if the untradeables were dropped...

Read more

I followed all the wealth that left the account and none of it has been sold.

Comment

Originally posted by treesprite82

It's good that you've provided the information the decision is based off of this time, looks better than just a plain doubling-down.

but has now been convinced not to keep it

So before handing it over to OP, the friend recovered the account from themself? Why would they need to do that?

I'm still concerned that you might have just given the account back to a hacker, given OP's story from the first post seems more consistent with the given information than your guess (supposed-owner/hacker went to Uni with OP, so will have a close geolocation match, whereas OP moved to America. OP claimed they'd be in UK where the account was created from Sat to Tue, so the 5000 mile movements were already completely expected in advance)

Obviously only OP and/or the creator would know the answer as to why they recovered it again, rather than just registering OP's email back on the account. I can only speculate that it was an attempt to make it appear as though the OP was the one recovering the account from the original location.

The IP address for both this recovery and the first one that started this chain of events are identical and the OP is the last one to log into the account. If we had indeed given it to a hijacker, I'm not sure how the OP would have managed to regain access to the account.

Comment

Originally posted by Noxidx

So you've locked it again? Why didn't you just do that in the first place so OP or the accounts creator wouldn't have lost their bank?

Because the account creator was in control of the account

Comment

I've seen quite a few comments in this thread (and the last one) from people who are both confused as to what happened with this account and concerned that they might find themselves in a similar situation in the future. I'd like to hopefully ease some of those concerns by providing a timeline of what happened with the account and some limited details that will hopefully explain why I came to the conclusion that the account was not hijacked.

At the start of the month, we granted a password recovery for the account. This recovery contained very strong information, such as passwords, contact information and a good geo-location match with the account creation.

After reading OP's first post, I looked at the account and noticed that, on the day that OP first appeared on the account:

  • The login location moved 5,000 miles in 10 minutes
  • A new email was set on the account
  • A new password was set on the account

I then check...

Read more

19 Mar

Comment

Originally posted by acwriting

Hi Mod Kieren can you say "Hi"

Thanks

Much love

Gam gam xx

Hi

Comment

I'll jump in on this - just to say I think this is down to a miscommunication with the blog.

I certainly hear you and the others in the team do too. We understand a lot of you feel the fact you can see the poll results means you feel it is pointless to vote - and that matches what people told us when I asked what reasons people have for not voting a couple month ago on the Q&A too.

It's not the one exclusive reason though, and there's more problems with polls than just hiding / showing - we want to understand those too :).

Apologies it wasn't clear - I'd be blown away if anyone hasn't seen the amount of times you all have asked about hiding results and the explanations for why you want it done - the crabs have been everywhere :P.

Comment

Originally posted by S3nosrs

What does addressing “toxicity in game” mean, that’s very vague I don’t want to get muted or banned for telling someone to f**k off lol

Also “hide poll results” means we want them hidden until voting ends, that’s all

Also authenticator delay should be essential

There are a few comments about the definition of toxicity - apart from the obvious serious community safety stuff, we're interested to know from you, what are the most toxic things that disrupt your gameplay - in the survey we'll be sending out, we will really dig into this to understand it in detail.

Comment

Originally posted by AmberSherbet

Good response, but you should know that me and other players will be holding you to these promises. Previous posts on issues with MTX in a related game we're never met with the actions to backup the words. I won't be swept away by the words until I see the actions done, I believe that to be only fair.

Absolutely fair

Comment

Originally posted by Lee_en

Man, I remember back in 2013-2015 the list of mods at the bottom of the page used to be so much smaller, and now its massive! Years ago I doubted this game’s future every time I logged on, but I’ve recently picked the game back up again and have been having more fun than ever before.

That's awesome to hear!

Comment

Originally posted by Codemanz

Glad to see this all being addressed, really interested in how and what old content they’re going to focus on.

We've put together a plan for seeing which old content you guys care about the most and how you'd like it changed/re-designed. The core idea with this is that the community is involved every step of the way.

Comment

Originally posted by Obnokshus

As a staff member of one of the remaining pure community clans, what can I do to better establish a relationship with Jagex administration to communicate our desires for organized pvp outside of deadman or bounty hunter?

Drop me a message on Discord - Gambit#7472

Comment

Originally posted by Technician47

What about a cosmetic reward, something like the capes for raids 1 & 2 or a toy with an emote action, for number of polls/questions you've participated in?

Let's be honest, the way to motivate the OSRS players is through a reward.

The downside is that you get people who just spam the answers and you get mass "yes" votes. Might be too risky to attempt.

We've considered an in-game incentive (like a cosmetic), but the spamming of answers is a very real concern. It's a good idea, but tricky to implement

Comment

Originally posted by sdf222234

Hey Jmods, just a quick heads up, the twitch event link at the bottom has a typo, it links to tiwtch rather than twitch

woopsy

Comment

Originally posted by SaberCrunch

I don't know if this has been addressed but I would love to see if its possible to implement a new password policy. The fact that they aren't case sensitive and can't contain special characters or spaces is baffling to me.

I understand it's likely an old system that would be a bear to overhaul but I feel like that's fairly important.

Hey Saber, thanks for raising this. It's something we're aware of and can work into the Player Support plan for improving account security.

Comment

Originally posted by tmr111111

Jagex, you really need customer support. there is NO WAY talk to your company vis-a-vis the website. I have been a player for over 10 years, and when you changed the combat styles it ruined my pure. I PC'd most of my str levels to be a low combat. Could a mod please message me so I can give username?

Hey tmr, sorry this has taken so long to fix. It's been a length and complex process to make the changes that will allow us to rollback individual accounts. On top of that, we've had to manually verify every player who has gotten in touch via the Forum thread we posted. We're pretty much there now though so if you were affected by the XP bug on Feb 21st, you can expect your account to be sorted on Thursday with the update. If it's not, you can find out all the details you'll need to get in touch directly for getting it resolved.

Comment

Originally posted by BasicFail

I thought Jagex would ban the account if there is an account dispute like in your explanation. Given that Jagex is unable to tell who the actual account creator is and the fact that account sharing is still officially against the rules.

I understand that Jagex doesn't actively enforce the account sharing rule and uses a "common sense approach", but the situation you're describing doesn't seem to fit that criteria.

Maybe I misunderstood what you're saying. It just seemed that Jagex only looks at one specific thing instead of the entire situation.

I'm also hoping that Jagex doesn't just deny the 'fraudulent' appeal from this 'friend' but also cleans up the account if possible. It think it's important to clean up accounts where possible. We shouldn't remain vulnerable and be unlucky if another JMod decides otherwise and accepts a future recovery appeal.

Thanks for your considered post. We do undertake an element of account cleaning in clear cut hijacking situations, but it's also a fine balance between trying to make the account less open to malicious recovery, and making it so that it can never be recovered because of the depth of cleaning. Clear hijackers are always cleaned off, but if an account has (say) 3 passwords and all 3 are known by somebody else (so we clean them), that could make future recovery a real challenge for the genuine owner.