Dang, who do you have to know to get the heads up on these things? Is there some sly developer putting in bad code every six months and leaking it to his friends? I still haven't figured out how the last ones were done -- not that they work anymore. Guess I should spend more (some) time parsing code to find bad data checking/broken routines.
Done grousing, now to be more serious.
A one year ban is all well and good but is it enough? Is it possible to uniquely identify a player by his ip which may be dynamic? Certainly you can lock that account for a year and any others that you know about but that will not prevent someone from having multiple accounts.Even with a static ip, like I have, it is possible to use something like tor to disguise your ip so it is almost impossible to ban a player.
Here is a suggestion, lock the account so that characters cannot be created or deleted, remove all cash/items, set all stats to 25 and all skills to 0 and finally set up a debt such that 90% of income goes to paying the debt and the debt equals the amount that was gained by the exploit. Now some of the characters on the account may not have been used for the exploit and they will have no debt but all the other punishments will remain in effect.
I am getting pretty tired of all these cash exploits trashing what economy that there is. I understand that that is the price of development but I think more should be done than just ban a few accounts and maybe wipe some cash from everybody. Halfassed measures get halfassed results.
NB guess I was not quite done grousing
