Author Topic: LADDER ABUSE AND ACCOUNT SECURITY  (Read 49097 times)

Offline Delete mine too

  • Death Knight
  • *********
  • Posts: 2652
  • http://meatspin.com
    • View Profile
    • http://meatspin.com
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #75 on: June 05, 2015, 10:58:26 PM »
Yeah I wonder if he did successful injection...
It's fuck up he was on focus for making a host bot, but he ran off and used it for evil... its definitely warwinner source made, He just fucking used a bot too hack dis shit gg no re 100 percent just fucked it all.
 
We'll at least he didn't mass join current games number is endless...... he is flooding games list /games with warwinner because of this thread below and he doesn't use proxies that's why all of the games only 1 game will show per ip... warwinner doesn't support proxies and would need to add it...

So I guess this is a flaw with the pvpgn not filtering game names, etc. Like it does with accounts, etc.

Thread that changed archer..
http://forum.war2.ru/index.php/topic,1005.0.html
« Last Edit: June 05, 2015, 11:11:18 PM by tupac »

Offline Rit

  • Grunt
  • ***
  • Posts: 245
    • View Profile
    • Rit's Youtube
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #76 on: June 06, 2015, 01:53:19 AM »
Yeah... I used some random password on his site that I don't remember.  I've learned my lesson the hard way (Tupac knows this o_o).  Anyway, that's a pretty shady thing for USA~Archer to do.  It's a shame that a guy who's capable of doing such a thing has such a low emotional intelligence and lacks a conscience. 

Offline iL

  • Administrator
  • Ogre Mage
  • *****
  • Posts: 1653
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #77 on: June 06, 2015, 05:20:03 AM »
Well, i don't think the situation is something critical.

Ladder is a separate project, everything it do is reading reports, parsing and uploading to it's separate database.
It's being located on the separate hosting and of course ladder database doens't contain any passwords or any other private info from bnet server.

So you can hack ladder, you can change any values in ladder, but it's not related with bnet server.

Of course if one can take an access to bnet database, that would be a big problem, but it's not so easy to do it.
So i have no reason to suppose bnet database is compomised.
I don't think there's a reason to change passwords or w/e...
« Last Edit: June 06, 2015, 05:22:02 AM by iL »
Need help to translate War2Combat to German, French, Italian, Polish or another language: http://forum.war2.ru/index.php/topic,4728.0.html
Please, contact me if you are interested in that.

Offline I hate naggers

  • Ogre Mage
  • ********
  • Posts: 2345
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #78 on: June 06, 2015, 05:28:44 AM »
So i have no reason to suppose bnet database is compomised. I don't think there's a reason to change passwords or w/e...
well, other than archer using medivh, knitterhemd, pavlos, player, spb and ^adam^ account, no there isnt :P

Offline Warchief Lightbringer-

  • Server Admin
  • Axe Thrower
  • *****
  • Posts: 428
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #79 on: June 06, 2015, 05:56:33 AM »
This is just the accounts that were accessed before I started locking accounts...There was no spb in it.
aka DeaDLyGaMeS

Online Knitter

  • Axe Thrower
  • ****
  • Posts: 251
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #80 on: June 06, 2015, 06:14:45 AM »
I never logged into his site, server, etc., and he had my pw. 

same for me.

Offline Nox

  • Death Knight
  • *********
  • Posts: 4133
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #81 on: June 06, 2015, 06:17:11 AM »
I never logged into his site, server, etc., and he had my pw. 

same for me.

I told you, moustopher get caught on USA-Website and he used her password to get acces on the admins controls.

Thats how he get peoples passwords and he used only peoples from top 10 because he dint cares of others.
« Last Edit: June 06, 2015, 06:21:13 AM by Equinox »
Mr.120apm aka U8! Best player of the world losing 4v3 against Phillip5256.

Offline Delete mine too

  • Death Knight
  • *********
  • Posts: 2652
  • http://meatspin.com
    • View Profile
    • http://meatspin.com
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #82 on: June 06, 2015, 10:19:43 AM »
So IL your thinking we are safe? Where is mousey.....

OMG I got it, if he hacked mousey password I bet hes grabbing the hashes from her server.....

Offline tora is a simp bitch for billionaires

  • Death Knight
  • *********
  • Posts: 3722
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #83 on: June 06, 2015, 11:29:55 AM »
if spb's account got hacked it could be considered a crime against humanity

Offline Winchester

  • Ogre Mage
  • ********
  • Posts: 1739
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #84 on: June 06, 2015, 12:07:52 PM »
I never logged into his site, server, etc., and he had my pw. 

same for me.

I told you, moustopher get caught on USA-Website and he used her password to get acces on the admins controls.

Thats how he get peoples passwords and he used only peoples from top 10 because he dint cares of others.


That sounds more like you then anyone else

Offline GaNzTheLegend

  • Best War2 Player Ever
  • Ogre Mage
  • ********
  • Posts: 1745
  • #1 on: Kali, Heat, Zone, Kahn, GameStorm, Bnet, RU
    • View Profile
    • Kali Hall Of Fame
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #85 on: June 06, 2015, 12:41:25 PM »
Thats what you get for handing over ladder scripts to him. I told you from day 1 this guy was nothing but trouble when he refused to remove hacks link in his profile and was asking for all kinds of code and PVPGN questions.
Kali IGL Stats

Offline Certified MENSA Genius Brain (smart)

  • "The Architect"
  • Global Moderator
  • Dragon
  • *****
  • Posts: 5384
    • View Profile
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #86 on: June 06, 2015, 02:20:48 PM »
Did anyone actually give him the ladder script?  I don't recall that
    

Offline mousEtopher

  • Administrator
  • Ogre Mage
  • *****
  • Posts: 2065
    • View Profile
    • War2.me
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #87 on: June 06, 2015, 04:38:45 PM »
My theory is that those people have registered on that faggot's website and have the same PW on war2.

Not so. As Knitter & Player can confirm, people who never registered for the site were affected. I used a throwaway password myself, but even if I hadn't it wouldn't have given him access to anything important. On top of that, WP passwords are protected by encryption that can't be "cracked" like pvpgn encryption, you can only try to guess them which takes much longer and doesn't guarantee success.


Did anyone actually give him the ladder script?  I don't recall that

The discussion is here. iL agreed to it but I don't know if he ever made good.
squeak!

Offline Delete mine too

  • Death Knight
  • *********
  • Posts: 2652
  • http://meatspin.com
    • View Profile
    • http://meatspin.com
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #88 on: June 06, 2015, 05:32:13 PM »
So your server is out of the question now then eh?

Do you think Lance gave him a copy of the old DB??

Offline GaNzTheLegend

  • Best War2 Player Ever
  • Ogre Mage
  • ********
  • Posts: 1745
  • #1 on: Kali, Heat, Zone, Kahn, GameStorm, Bnet, RU
    • View Profile
    • Kali Hall Of Fame
Re: LADDER ABUSE AND ACCOUNT SECURITY
« Reply #89 on: June 06, 2015, 06:08:46 PM »
lol lance wouldn't waste his time on something so dumb, its more like something an immature 15 year old would do.
Kali IGL Stats