• 0

    posted a message on Thanks, Blizz
    So, thanks to Blizzard getting hacked two things have started happening on my accounts, and I wanted to know if this is happening to anyone else:

    Firstly, although I have set Authenticator to prompt me like, once a week, it's prompting me every day, pretty much everytime I login - I assume this is happening because someone from a different IP is logging in, can't pass Authenticator, so when I login, I need to input it. It's frustrating, and annoying, and it pretty much proves that the guys who hacked Blizz got our passwords, thanks Blizz.

    I now get gmail 'chats' as my attached account is an email one, selling gold. I've NEVER in the history of having a gmail account, ever received this kind of spam, and I don't buy gold!



    So, anyone else receive any kind of problem since Blizz's servers got hacked?
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Voix

    Quote from BaneAu

    As for what they have to gain? I paid $50 for them to show me proof that it was working, but without sharing the method. They gain 'internet notoriety' which a lot of them crave, as well as a little bit of cash (not that they were particularly strapped for that). I gained a story. Win/Win.

    It's obvious to me you have no idea what you are talking about and just being nosey.

    You are playing with fire, watch what you say on a public forum especially about EH/BH.

    The people you are talking about are not scrippies or phytes.

    I suggest this thread is locked and the OP removes his article.

    sincerely,

    Grey.

    Kid I've been with hackers since I was 8, my uncle was one until he got one of those rare times where someone hacks something so well and proper that the company offers him a job. A job he still has, for quite a large company. Most of the people in both those places are not hackers, and a majority of those I spoke to had just learned the method from the grapevine... which is exactly the same as being a scrippie, as you know. The notoriety comment was aimed at them, not at developers, who normally don't give a flying crap about being in the spotlight, and usually prefer life outside of it.

    But a script kiddie? They thrive on crap like that, and that's what I rolled the dice with, and that's what I got.

    EDIT: Have added the full article in a quote box to the front post.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro

    Anyways sorry for off-topic. Just wanted to talk about how much I hate spam bots.

    I loathe them myself.

    P.S. You forgot .c0m :)
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from DOOMSD4Y

    I just dont get where you came up with $10,000.

    Or how you just hop on some hacker forum and they are chomping at the bit to show you their paypal accounts and real time AH hacks..... what do they have to gain?

    $10,000 was a minimum figure I extracted from each of the five hackers results with the 'exploit'. only four of them actually showed me some kind of proof of income, but the last one definitely had the method working, but didn't feel comfortable showing me his PayPal (fair enough really).

    As for what they have to gain? I paid $50 for them to show me proof that it was working, but without sharing the method. They gain 'internet notoriety' which a lot of them crave, as well as a little bit of cash (not that they were particularly strapped for that). I gained a story. Win/Win.


    Quote from Dontbanmebro

    I think you hate them, not them hating you, Bane. At least that's the impression I get from the way you post. :P

    Banning people based on text alone is not a good idea, which is what you seem to be implying to stop spam. I know I've retyped a gold seller's spam to a friend before just because some of them are pretty hilariously bad. (Or just to mess with them a little.) You could say people shouldn't joke about it, but shrug.

    I'll admit I didn't read your article on dealing with spam though, and I'll say up front I'm also not really interested. :P (No offense!)



    None taken!

    My way of dealling with spam wasn't an instaban, it was a server side temp-mute and flag, before the message was delivered to clients. It wouldn't even reach people that way, and so you would have nothing to copy :P There were also several other flags associated with it, for instance they almost always come from accounts with less than x hours played, etc. It can get quite technical extremely easily with little/no overhead
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro

    What I meant by cancel when someone had bid was, force to end the auction, not cancel it, and receive the gold from it. That would have to go through the server. If that was possible and there is actual evidence of it then I'm far more likely to believe this has happened.

    I also don't think it's possible to get rid of spam completely. Blizzard just gets it more because WoW is a very popular game people are willing to spend a lot on. It's a bigger target.

    Blizzard barely try. The exact same message posted over and over again for weeks on end? The same spelling and everything? I wrote an entire article on how other MMO's deal with spam and the way Blizzard don't. There is nothing that stops those chat bots from working, and the goal of spam detectors and filters is to make it so it is unprofitable for a company to run bots on their service.

    I'm telling you now, if blizzard implemented a half decent spam filter, those bots would be gone in a month, and you'd be lucky to see one spam message a day, instead of the 100+ you can see at the moment.

    EDIT: Blizzard if you ever read this post, call me even though you hate my guts for being a douchebag. I will fix your spam filter and you will hate the loss in sales, but your customers would love you... oh... wait, that doesn't sound like a good business decision now, does it? Loss in sales you say!
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro

    Quote from BaneAu

    Trust me, I know how information spreads, and this has spread, go research it for yourself :)

    I'm very familiar with the auction ending earlier than stated bug but I really don't think this is what's causing it.

    I'm not saying it's not technically possible, obviously it is. Tons of old online games were plagued with exploits because they didn't preform server side checks before allowing some actions. But for it to happen nowadays would be ALMOST beyond the realm of possibility, especially coming from Blizzard who has some of the best experience with online games and exploits that come with them.

    The main difference here between the canceling with the clock was that only affected your own auctions. So I guess it wasn't looked at as a big deal and probably forgotten about during testing. I don't even think it was possible to force an auction to end successfully with a bid by setting your time forward was it? This however would have to run through the server, which would mean it'd be checked (or should be like everything else) and you can't trick that.

    It's FAR, MANY TIMES, more likely someone is spinning an semi-intricate hoax than for a company to actually forget this sort of thing all of the sudden, and well if for some reason it is real, then yes this is a huge problem and pretty stupid if missed.

    I really like you, and what you're saying. I felt the same way about Blizzard for a long time, but the truth is this:

    The same checks should have been in place for cancellation bug and weren't. Where was the verification then? It didn't exist. I know it was only affecting 'you' but it wasn't. YES you could cancel auctions once people had bid, it wasn't in the Kripp video but it was in someone elses.

    Blizzard have had over a decade to deal with the issue of spam, but they don't/aren't capable. Other popular MMO's have all but eradicated it, Blizz haven't, they even put their foot in it with the currency conversion and making $2.5 per million the lowest, when the current rate is far below that on gold sale sites. EDIT: Thereby still making it profitable for gold spammers to spam.

    Blizzard have lied about patching things in the hope that most people will give up trying them. Exploding Palm glitch, anyone? WoW had LOADS of exploits like this in the early months of the game... the thing is that there wasn't a real money investment associated with (most) items.

    No game is 100% rock solid, I truly, truly get what you are saying, but the potential is there for Blizz to have overlooked this. As far as I'm concerned, they have.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro

    Well people may be making tons of money but that doesn't keep people from talking about methods either. If this was actually what was causing the auction ending early problem we've seen for... weeks if not months, it'd be out there already.

    Hacks and exploits always get out and found about quickly if they're real because loose lips sink ships as the old saying goes.

    And it did get out. Originally it was quiet, no one knew about it, then people started complaining on Blizz forums. Then people started posting on certain 'communities' about it, then people started explaining how the method could work, then guides were written on donator forums. Trust me, I know how information spreads, and this has spread, go research it for yourself :)
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Dontbanmebro



    I know it's vastly different, but I would expect a server side check on something like cancelling your auctions, too. ;)



    This made me laugh, heartily and hard.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro


    If it's legit we'd be seeing tons of posts and videos about it.

    Why would people making loads of money doing something illegal post videos about it. It's not until it gets to the stage that the populace can get their hands on it easily that such videos are made, and this isn't as simple as changing a system clock.

    Every single one of the people I spoke to wouldn't share the method, and why the hell would they? I had to PAY people just to get them to show me they had it working and functional. I had posts removed from two places with posts related to this, because of admins trying to hide the hack from knowledge. It might not be enough proof for you, but it is for me.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from overneathe

    Curious. When you saw it happen live, did the guys then take the item, put it in their inventories, reload the game and have it in their inventories still?

    I saw them relist the item on the AH, I saw the item get sold quickly, I saw the Completed Tab light up with an amount in review and the email they had gotten from blizzard stating the item had been sold and was in review. I saw their completed tab history of the same item being purchased-buyout for peanuts and then resold, without the little red ! stating it was still in review.

    EDIT for coherence:

    Basically their completed tab was like this:

    Item x sold
    Item x purchased-buyout
    Item w sold
    Item v sold
    Item w purchased - buyout
    Item u sold
    Item v purchased - buyout
    Item u purchased - buyout

    There was pages and pages and pages like this. We're not talking like 10 items, we're talking like hundreds, and a paypal history that matched the amounts.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro

    There's a big difference in the time thing which was scripted where it was SUPPOSED to be doing that (probably an oversight from testing that wasn't changed) and then this.

    You can't "fool" the server into thinking anything. Because the server will check it's records first and foremost. Anything you try to do will be delivered to the server, the server will check to see if it's correct, and then send permission to allow it.

    You can change client side data to make it appear like you have more gold. Or maybe even that the buyout on an item is higher than it should be, but you can't change the actual server data.

    So if you witnessed it with your own eyes that's more likely. Someone changed the value to show falsely that the buyout was higher in order to trick you into thinking what you saw was genuine.

    I'm sorry, but I don't believe this for an instant, and I'll tell you why.

    The reason I started on a search for this exploit was because there were a large majority of people in Blizzards support forum stating that items they had put up for bid were being sold to people for the bid amount, and ending the auction early. I went from there and took a look at all the local sites related to such nefarious deeds and found quite quickly that there was something to what people were saying.

    While idling in the chat on one of these places, I discovered someone who had posted a rough method. This method wasn't entirely accurate, but it was enough that people could tweak and fiddle and get it to work. An hour later, his post was deleted, he had logged off, and his pastebin was also removed. I reposted the data, only to have that quickly deleted also... it was at that point that I knew I had something.

    I spoke to a lot of people who stated they had this working. They showed me it working in a live demonstration. They showed me their paypals, they showed me the item in game, they showed me everything. You're saying it can't be done, I've seen it with my own eyes. If I'm known for anything in the journalism circuit it's that one thing with the email list that is embarassing to talk about, but the second thing is my Investigative Journalism skills.

    You say this can't work. I say you're wrong.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    Quote from Daemaro

    I stopped at the point when the "hacker" tried to tell me that changes in your client can affect the server.

    Also no offense meant to you, seeing as you wrote the article.

    I didn't want to go into too much detail because I don't like people potentially reproducing it themselves or attempting to, considering its base maliciousness.

    None taken :) Just quoting what was said at me, whether what was said was real or not, I have nfi, I did however get to see it live in action from two seperate people, and it was scary easy to pull off.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Diablo Hack Causes over $10,000 worth of damages
    I spent 3 days looking into a hack that has been allowing people to buy items on the RMAH for much less than their worth. I'd love to see some discussion around this topic!

    The Diablo 3 RMAH is making people a lot of money, but none so much as the common hacker. A relatively simple exploit was uncovered in the last few days which have allowed enterprising exploiters the world around to purchase expensive items on the auction house for peanuts, harming legitimate users in the process. We have left some technical details intentionally vague.

    It works quite simply, within Diablo 3 you can put items up for auction with either a buyout, or a flat bid system. The hack will then allow people to buyout an item for the value of its bid, which is quite frequently much much lower than the worth of the item. ‘The hack is very easy to replicate’says one of the hackers ‘it’s just a matter of switching values within the client, tricking it into thinking there is a buyout when there is none there’

    Over the course of four hours, I spoke to five different people who were using the exploit, two of which who confirmed it to me via streaming video. Every single person who had used it had made over $2,000 to themselves, in addition to the money they had already made from the RMAH before using the hack.
    A few had stated they got the exploit working on the gold auction house, allowing them to bypass Blizzards review period for transactions. With the price of gold within Diablo 3 already at Blizzards artificial minimum of $2.5 per million, and externally at trading sites like playerauctions at $1.7 per million, they’re able to easily turn that gold into $$ minutes after purchasing the items.

    Since starting to investigate this exploit over 24 hours ago, various sites have been reporting on it and public methods have been made available, increasing the overall number of people using this exploit, and the loss in income, gold or otherwise, that legitimate Diablo 3 users are experiencing when an exploiter buys their item for its current bid.

    Blizzard are no doubt aware of the issue, however there is no notice as to when it would be fixed, and people complaining about it have been left without a blue post confirming there is an issue… considered Blizzard’s standard operating procedure when dealing with something that could potentially give them a loss in income. Will there be refunds? No. Will people get any kind of compensation? No. Will exploiters still have profited? Absolutely.

    For now, please be aware that putting an item up for bid with no buyout will leave you vulnerable to this particular exploit. Hopefully this is due to be hotfixed soon.
    Posted in: Diablo III General Discussion
  • 0

    posted a message on Resellers look here!
    Quote from BaneAu

    Hey guys, got about 4-5m worth of gloves that I'm looking to sell for 1.5m

    Why? I'm out of Auction space, and I craft over 300 gloves a day. Even my two accounts, doing both RMAH and GAH trading cannot keep up with my glove output.

    Feel free to check some of my recent posts for legitimacy, and also don't hesitate to contact me in game. I'll be around for about another hour. BaneWilliams#1485

    Vending these, because people don't know how to sell 150 dex 30 crit damage 5 crit chance gloves for 500k. two different people wasted about 10 minutes of my time each.
    Posted in: US Servers Trading
  • 0

    posted a message on Resellers look here!
    Hey guys, got about 4-5m worth of gloves that I'm looking to sell for 1.5m

    Why? I'm out of Auction space, and I craft over 300 gloves a day. Even my two accounts, doing both RMAH and GAH trading cannot keep up with my glove output.

    Feel free to check some of my recent posts for legitimacy, and also don't hesitate to contact me in game. I'll be around for about another hour. BaneWilliams#1485
    Posted in: US Servers Trading
  • To post a comment, please or register a new account.