Rose Online Is Taken Offline One Week After Early Access Launch Due To Data Leaks
Rose Online’s revival has hit a snag and has been taken down indefinitely until the issue can be fixed. According to the game’s new publisher Rednim Games, they recently discovered a security leak that was part of the 2005 MMORPG’s original coding.
The developers were alerted to the leak last week and promptly applied fixes but had apparently misdiagnosed the issue and were unaware that the data was still accessible until they were alerted to another leak earlier this week.
“The data leak originates from our login service which due to a bug was not correctly clearing data, which in turn would result in some data leaking under certain circumstances,” explained Rednim. “As many of you are aware, we inherited a large and old code base when we started this project. It appears that this data leak has existed in this code for a very long time, predating our acquisition of it, but has seemingly gone unnoticed.”
Rednim warns players who logged in between Rose Online’s early access launch on December 13th and December 20th that their email addresses and partial passwords may have been compromised and are advised to change their passwords immediately.
Meanwhile, the servers remain offline as the developers work overtime to rewrite the game’s code. “Basically what’s happening is we have applied a lot of security patches to harden the server security but issues happened as soon as lot of players joined the game,” reported Rednim. “We have identified all of [the faulty code] and reverted all the problematics changes we've found, but we also need to recode some of them, then we will have to test it extensively this time to be sure everything is alright and safe. Our fault to have worked too fast without extensively tested our new codes as we really wanted to put the server online as soon as possible.”
Rednim can’t give a definite timeline for the fix but they assure the community that they’re working overtime to address the issue.
