Curse

Bryant Again · Oct 20, 2007, 03:54 PM // 15:54

Quote:

Originally Posted by Darko_UK

screens or it couldnt happen

...We already have some earlier in the thread.

Sword Liger · Oct 20, 2007, 03:54 PM // 15:54

yeh why not ill come tag along

Lord Sojar · Oct 20, 2007, 03:54 PM // 15:54

Quote:

Originally Posted by Two April Mornings

Bad thing is that OP used the exploit, ANET hates exploiters, even if they come forward to reveal one they found out.

Using it to gain an advantage is one thing, testing it to see if it is repeatable is a whole other thing. Pablo isn't the bad guy here, he is a the good guy.

Quote:

Originally Posted by X Earth X

I've posted a message on Gaile's talk page saying they should look into this ASAP. Let's hope they do.

really wish u hadn't have done that. I am contacting her directly, and making this anymore public is bad.

mr_groovy · Oct 20, 2007, 03:56 PM // 15:56

My question is if this uses a external program, did the op stumble upon it? Or was he in the development of it? And if so why would a person try and make an exe that looks at the packets send to the gw server?
And if he stumbled upon it, it must be roaming the internet, meaning that Anet better hurry up and fix it.

Whirlwind · Oct 20, 2007, 03:56 PM // 15:56

lol every single person who has posted on the 2nd page is online trolling this right now, probably refreshing the page over and over.

EDIT: Nix that, 2nd and 3rd page as well !

Tyla · Oct 20, 2007, 03:56 PM // 15:56

Quote:

Originally Posted by Bryant Again

Yeup. If Rahja is using it too, they're both going to get banned. They should probably be able to get unbanned, though, if they send in a bumload of tickets.

However, I can't say. I've only been banned on ANet "thinking" I was doing something. They actually used the exploit.
Nonetheless, we admire the bravery of the two. /salute

/salute too:P
but either way,rahja and pablo didnt use the exploit to their gain(i mean,if what rahja said was true...)
so imo,let them not be banned!

bamm bamm bamm · Oct 20, 2007, 03:57 PM // 15:57

Quote:

Originally Posted by Rahja the Thief

ALright, let me clarify this for people... this exploit allows not just crashing. Pablo could make himself a GM, he could steal EVERY SINGLE GW ACCOUNT ON THE SERVER. The client is poorly coded as I am finding out, and this security hole only gets deeper and deeper the more I am finding. So, I would be afraid. Lucky credit card info is SSL... otherwise, that too would be easy pickings. So, hope that clears up any confusions as to how SERIOUS this is.

What I don't understand is, why is this a client issue and not a server issue? It sounds like you're spoofing something and sending it to the server and it's disconnecting everyone, in which case the server isn't validating it's inputs too well. Surely if it was client-side you would need to know the IP addresses of everyone in a match, and as far as I'm aware, the server is the only one with that info. The client just does what it's told, so you must be getting the server to tell them to disconnect somehow.

Lord Sojar · Oct 20, 2007, 03:57 PM // 15:57

Quote:

Originally Posted by Bryant Again

Yeup. If Rahja is using it too, they're both going to get banned. They should probably be able to get unbanned, though, if they send in a bumload of tickets.

However, I can't say. I've only been banned on ANet "thinking" I was doing something. They actually used the exploit.
Nonetheless, we admire the bravery of the two. /salute

Not really, I haven't used it. I know however that it works. I highly doubt banning in this case, considering that would look awfully bad of them. "Hey thanks for finding a massive security hole and not spreading it to others to cause havoc, but your banned anyways" ummm, NO?

Earth · Oct 20, 2007, 03:57 PM // 15:57

Quote:

Originally Posted by Rahja the Thief

really wish u hadn't have done that. I am contacting her directly, and making this anymore public is bad.

Ah well, will just remove it then <_<;;;

Bryant Again · Oct 20, 2007, 03:59 PM // 15:59

Quote:

Originally Posted by Rahja the Thief

Using it to gain an advantage is one thing, testing it to see if it is repeatable is a whole other thing. Pablo isn't the bad guy here, he is a the good guy.

Nonetheless, you're both going to get banned. When the duping thing was brought to ANet's attention, a lot of people who tested it and brought it to their attention, including names such as Fenix and Max Gladius, got their accounts banned.

I think it's because there's like no connection between the ANet staff reading the tickets and the people who're doing the banning. But ya'll know what I mean, aye?

Lord Sojar · Oct 20, 2007, 04:00 PM // 16:00

Quote:

Originally Posted by mr_groovy

My question is if this uses a external program, did the op stumble upon it? Or was he in the development of it? And if so why would a person try and make an exe that looks at the packets send to the gw server?
And if he stumbled upon it, it must be roaming the internet, meaning that Anet better hurry up and fix it.

he is helping to develop the GWPL server, and as a result, found this massive security hole.

[quote = bamm bamm bamm]What I don't understand is, why is this a client issue and not a server issue? It sounds like you're spoofing something and sending it to the server and it's disconnecting everyone, in which case the server isn't validating it's inputs too well. Surely if it was client-side you would need to know the IP addresses of everyone in a match, and as far as I'm aware, the server is the only one with that info. The client just does what it's told, so you must be getting the server to tell them to disconnect somehow.[/quote]

Ok, you need to stop now... this is what I am talking about. Stop injecting ideas, your only going to encourage more people to look into the issue. Nothing personal, but pls dont post anymore ideas.

Quote:

Originally Posted by Bryant Again

Nonetheless, you're both going to get banned. When the duping thing was brought to ANet's attention, a lot of people who tested it and brought it to their attention, including names such as Fenix and Max Gladius, got their accounts banned.

I think it's because there's like no connection between the ANet staff reading the tickets and the people who're doing the banning. But ya'll know what I mean, aye?

Again, I am going through Gaile, gaile isn't going to ban us, and she isn't going to go mentioning our names to the retards at PlayNC. We are not going to be banned. That is silly.

Bryant Again · Oct 20, 2007, 04:01 PM // 16:01

Quote:

Originally Posted by Rahja the Thief

Ok, you need to stop now... this is what I am talking about. Stop injecting ideas, your only going to encourage more people to look into the issue. Nothing personal, but pls dont post anymore ideas.

This is a forum.

Lord Sojar · Oct 20, 2007, 04:03 PM // 16:03

Quote:

Originally Posted by Bryant Again

This is a forum.

Ugh....this is why I have requested like 9x for this thread to be locked. Further discussion is going to give people more ideas, and someone is going to figure it out, and KABOOM, they are going to go to town and exploit this in every fashion. ... and trust me when I say, those fashions are far worse then just crashing your own team.

bamm bamm bamm · Oct 20, 2007, 04:03 PM // 16:03

Quote:

Originally Posted by Rahja the Thief

Ok, you need to stop now... this is what I am talking about. Stop injecting ideas, your only going to encourage more people to look into the issue. Nothing personal, but pls dont post anymore ideas.

I apologize profusely for posting on topic in a thread on a discussion forum.

Bryant Again · Oct 20, 2007, 04:04 PM // 16:04

Quote:

Originally Posted by Rahja the Thief

Ugh....this is why I have requested like 9x for this thread to be locked. Further discussion is going to give people more ideas, and someone is going to figure it out, and KABOOM, they are going to go to town and exploit this in every fashion. ... and trust me when I say, those fashions are far worse then just crashing your own team.

Bamm bamm bamm's already said it ^

Now this kind of discussion is what'll get it closed. Back to the topic.

Whirlwind · Oct 20, 2007, 04:06 PM // 16:06

Rahjah you are adding more ideas on your own with each passing post..

Darkobra · Oct 20, 2007, 04:17 PM // 16:17

Rahjah, calm down. Each time you snap at a post, you're giving more hints and doing more damage. You even advertised it as FAR more than just a client crasher. You alone have done far more damage and given far more hints than I have EVER seen in this thread with assumptions. Edit the posts in reference to exclude such critical information if you're REALLY after safety over glory.

zwei2stein · Oct 20, 2007, 04:17 PM // 16:17

Quote:

Originally Posted by Rahja the Thief

He is not going to be banned... he figured out the exploit in a harmless manner. He reported it, and he is standing with me right now. He is not going to be banned, it is not like he is going crazy with this. So stop saying that, and stop flaming him and accusing him of this and that.

People who tested, verified and reported duping exploit were banned. For duping one dye to prove it works.

Interesting eh.

Bryant Again · Oct 20, 2007, 04:18 PM // 16:18

Quote:

Originally Posted by Rahja the Thief

Again, I am going through Gaile, gaile isn't going to ban us, and she isn't going to go mentioning our names to the retards at PlayNC. We are not going to be banned. That is silly.

If you're not banned, then good. But I wouldn't be suprised if you were.

And don't you want her to mention your names at PlayNC so you don't get banned? Otherwise, they'll just use their logs and see "okay these people used it banned".

Of course, this wasn't as widespread as the other exploits, so you may be fine. I'd expect the worst, though.

Reverend Dr · Oct 20, 2007, 04:19 PM // 16:19

I'm going to be guessing that this will shut down the GWLP project.