Skip to the end if you don't feel like reading. Most of this is just me rambling anyway but the last part is relevant
Earlier tonight I was checking out Fagex.net and I somehow stumbled accross a link that brought me to another website, and that website gave me a link to another, and anyway through a brief series of events I found myself on a password cracking forum with an entire subforum for Runescape passcracking. I had previously been under the impression that it was extremely impractical to crack runescape passwords. Sadly that is not the case.
I of course assumed that all of the passcrackers there were either viruses or at least bundled with a virus however upon downloading one of them to make sure of this I discovered that it was virus free. Upon discovering this I automatically assumed that it was too outdated to work or it was just another dimwitted scam and would ask for my username and password with some lame excuse as to why it needed it to work. It didn't ask for any information regarding my account(s) so I set it to the task of cracking my level 7 combat character that I have never used and will never use for anything. It worked.
Now knowing full well that there are working passcrackers for Runescape and that there are people on those forums that average as high as 1 or 2 accounts a day, I'm changing my passwords on my macros to something longer than 6 characters (my password on my main is 12 characters) and I suggest you all do the same if you're on the high scores. I figure anything more than 6 characters is pretty safe because A: the majority of passwords are composed of 6 lowercase letters, B: the number of possible passwords available with more than 6 characters is too damn high for anyone to even bother trying more than 6 in this instance, and C: umm it's almost 4 in the morning and I really thought that I had something to put for C but I guess I don't.
Start reading here
In summation to my long and rambling post don't use 6 character passwords and throw in some numbers otherwise you may be unfortunate enough to get your account stolen by some noob asshole with a pass cracker. The threat of pass crackers is still very much alive as I discovered earlier tonight.






















