About the security breach

Greetings,
As some of you may be aware now, there has been a substantial security breach with the Rise of Agon client, and now that it was made public, we can address it openly.
Full disclosure, the Darkfall franchise itself has been dealt an heavy blow, but we will push through and we will do what is necessary.
New Dawn will happen and Darkfall will not merely survive but grow to its full potential.

Here is what happened:
We were made aware of the breach when BPG opened the server for the first time. The exact issue is that they did not follow the recommendations that were provided to them for client packaging and simply rushed to release.
Before you ask, Aventurine has done a great job at providing us licensees with all we needed to do these releases properly. They even answered questions and provided materials that were well beyond their responsibility. We are the ones in charge of the implementation, and any outcome positive or negative is on us.
So let’s make it clear: this whole mess was completely avoidable.

Since then, we have recommended a course of action to reduce the spread of the leak and improve BPG’s next release. We agreed to help because it was the only way to make sure this would be done properly, and it was under the condition that it would not reopen until all three companies would give a go.
BPG reopened without waiting on any approval, with an archive that is still defective.

Please understand that we could not say anything about it. Releasing security details such as these harms us as well, and we wanted to limit the impact to players of all three versions.

Our battle plan:
This will not delay our release further. It does not change our plans of how we will evolve or market the game and for us, it is mostly business as usual.
What it does change is that we will have to grow our team’s resources faster than anticipated. Right now this situation is costing us a lot more than it should, but we’ll manage.

The full InDev infrastructure has been ready to release for over a month now, but we chose to delay in order to prepare a battle plan and start work on refactoring what we could.
We had hoped to have more time to do changes before word got out, but there are a lot more reversers out there than there are of us at Ub3rgames.
It is simply impossible for us to do a complete refactor before releasing, we cannot win this race, so we better make the best of it.

So here is what we will be doing: We will allow hacking for a few closely monitored “hacking weeks” during InDev.
These weeks will be just like our balance betas. We’ll shut down the normal InDev for a while to do some very specific test sessions on targeted issues.
Until we can reduce the issues, please do not ruin other people’s fun. If you wish to experiment with hacks outside of these hacking weeks, do it properly by warning us and reporting them.

In addition, whenever we mention a security update in one of our patch note, we urge the knowledgeable people out there to try and break them and communicate the results with us privately.
Here is our “hotline” for hacking issues: security@ub3rgames.com

Let’s show the world once again that the Darkfall community can come together to defend their game and do positive things.
Help us out, and rest assured we’ll do our part and double down on improving the game on all fronts.

Stay tuned this evening for our weekly update, which should be something much more positive.