Critical EXPLOIT discovered... Anet read plz - Guild Wars Guru archive powered by Guild Wars Legacy

onerabbit

Grotto Attendant

Join Date: Mar 2006

Thanks to all the guru [mods]

20 Oct 2007 at 14:17 - 41

il help out...

loooks odd

Kerwyn Nasilan

Forge Runner

Join Date: Aug 2007

WHERE DO YOU THINK

W/

20 Oct 2007 at 14:21 - 42

For the sake of ahhhh research, how can you do this?

BlackSephir

Forge Runner

Join Date: Nov 2006

A/N

20 Oct 2007 at 14:21 - 43

Quote:

Originally Posted by Kerwyn Nasilan

For the sake of ahhhh research, how can you do this?

Ur not fooling anybody!

Aera Lure

Desert Nomad

Join Date: Aug 2005

In Baltar's head

Bring Out Your Dead [BOYD], former officer [LBS]

Mo/

20 Oct 2007 at 14:23 - 44

Why didnt the OP just contact Anet support? He's going to end up getting perma banned for having developed the crash method, using it and taking a route like this. Seriously, just let them know about it directly.

Darkobra

Forge Runner

Join Date: Aug 2006

Scotland

Type like an idiot, I'll treat you like an idiot

E/Me

20 Oct 2007 at 14:23 - 45

You type /jump three times, run around in circles and flap your arms making chicken noises IRL.

MagmaRed

Furnace Stoker

Join Date: Mar 2007

Our Crabs Know True [LOVE]

R/

20 Oct 2007 at 14:27 - 46

OP posted here instead of contacting Anet directly because he wants 'recognition'.

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 14:27 - 47

Mods, pls close this thread, I am dealing with the situation directly. Thank you.

Aera Lure

Desert Nomad

Join Date: Aug 2005

In Baltar's head

Bring Out Your Dead [BOYD], former officer [LBS]

Mo/

20 Oct 2007 at 14:33 - 48

Quote:

Originally Posted by Rahja the Thief

Mods, pls close this thread, I am dealing with the situation directly. Thank you.

Submitted a report to Anet as well, if someone hasnt already. Should have been done in the first place.

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 14:35 - 49

Quote:

Originally Posted by Aera Lure

Submitted a report to Anet as well, if someone hasnt already. Should have been done in the first place.

Indeed, I am taking a more direct route though, considering it is Saturday. Not to mention, you would need the program being used to perform this, which is being sent currently as an attachment to Gaile. She will be able to readily contact the support team for an emergency issue such as this.

This thread is only going to create flame bait and people wanting the exploit for themselves. It should be closed.

foo

Wilds Pathfinder

Join Date: Feb 2006

Scars Meadows [SMS]

N/

20 Oct 2007 at 14:39 - 50

Quote:

Originally Posted by Aera Lure

Why didnt the OP just contact Anet support? He's going to end up getting perma banned for having developed the crash method, using it and taking a route like this. Seriously, just let them know about it directly.

Because contacting support is hard and lacks the proper feedback. this way Anet will have to deal with it with no delay.

The OP risk of being baned has nothing to do with the method he choses, but in this one, he guarantees the support of the community in case he will get banned. (not likely imo).

pablo24

Frost Gate Guardian

Join Date: Aug 2007

20 Oct 2007 at 14:39 - 51

I sent Rahja the program to reproduce this exploit and told him how it works.. He is relaying it to Gaile.

Aera Lure

Desert Nomad

Join Date: Aug 2005

In Baltar's head

Bring Out Your Dead [BOYD], former officer [LBS]

Mo/

20 Oct 2007 at 14:43 - 52

Quote:

Originally Posted by foo

Because contacting support is hard and lacks the proper feedback. this way Anet will have to deal with it with no delay.

The OP risk of being baned has nothing to do with the method he choses, but in this one, he guarantees the support of the community in case he will get banned. (not likely imo).

True. Wouldnt want the OP banned for testing it in the interest of the good of stopping it of course. Its just that there is a fine line between that and continually using it to test it, as there is risk involved doing it that way. Was all I meant. Simply sending Anet the report with the steps involved and the program used is safer, if less efficient.

Sounds like its all taken care of, on our end at least, and that is good.

MrSlayer

Jungle Guide

Join Date: Apr 2006

United Kingdom

Quit Whining And [PLAY]

Mo/

20 Oct 2007 at 14:44 - 53

Quote:

Originally Posted by Selket

oh you flooded chat with a macro o ok.

pretty old

(pretty useless)

Also there is a message-size-limiter which stops you from doing it. Since the OP is going out of his way to make this known, I'm gonna guess he discovered it by accident and is scared about getting crap for it. Report it to Anet and post about it on Gaile's talk page on the official wiki.

This kinda thing is annoying but good that some picked up on it and didn't abuse it.

Konrow

Krytan Explorer

Join Date: Dec 2005

NY, New York

Warlords of Earth [WAR]

20 Oct 2007 at 14:46 - 54

Why would you post here instead of just going directly to Anet and increasing the chances of it being noticed? This is a huge problem, but i guess you just care about recognition.

Onarik Amrak

Forge Runner

Join Date: Mar 2007

Astral Revenants

P/W

20 Oct 2007 at 14:50 - 55

Quote:

Originally Posted by Konrow

Why would you post here instead of just going directly to Anet and increasing the chances of it being noticed? This is a huge problem, but i guess you just care about recognition.

Sending a Support Ticket takes matters directly to NCSoft.

It's not the same thing.

zwei2stein

Grotto Attendant

Join Date: Jun 2006

Europe

The German Order [GER]

N/

20 Oct 2007 at 14:51 - 56

To be fair, such major exposure of this topic guarantees very, VERY fast response and fix.

I'd say, some programers will have unpleasant morning.

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 14:56 - 57

Again, it is being dealt with. This is an external program based exploit, and no, none of you may have the program, don't even ask me or Pablo. The issue is contained for the time, and I just sent Gaile an email regarding it. It will be dealt with rather quickly, I am certain. Please, close this thread Inde or another Mod...

Mork from Ork

Lion's Arch Merchant

Join Date: Aug 2007

20 Oct 2007 at 15:02 - 58

Quote:

Originally Posted by MagmaRed

OP posted here instead of contacting Anet directly because he wants 'recognition'.

Or because it is the weekend and it is more likely to catch ANet's attention here during the weekend than sending in a support ticket that won't be read till at least Monday.

pablo24

Frost Gate Guardian

Join Date: Aug 2007

20 Oct 2007 at 15:05 - 59

Quote:

Originally Posted by Mork from Ork

Or because it is the weekend and it is more likely to catch ANet's attention here during the weekend than sending in a support ticket that won't be read till at least Monday.

Yes that's why I posted it here, Guru threads get more attention than support tickets, seeing how long the dupe exploit lasted until someone posted it here.

Neo Nugget

Site Contributor

Join Date: Jan 2006

R/

20 Oct 2007 at 15:08 - 60

:O

Glad you posted it, i hope they get to fixing it.

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 15:12 - 61

Quote:

Originally Posted by Neo Nugget

:O

Glad you posted it, i hope they get to fixing it.

Neo, pls close this.... it is soon to turn into flame fest 07' or "I think how he did it was... etc etc etc" Speculations turn into ideas, which turn into products, which is bad.

Neo Nugget

Site Contributor

Join Date: Jan 2006

R/

20 Oct 2007 at 15:15 - 62

Quote:

Originally Posted by Rahja the Thief

Neo, pls close this.... it is soon to turn into flame fest 07' or "I think how he did it was... etc etc etc" Speculations turn into ideas, which turn into products, which is bad.

Can't i'm only a Q and A mod

majikmajikmajik

Wilds Pathfinder

Join Date: Aug 2007

SATown~Tx

Guild Hopper!

R/

20 Oct 2007 at 15:19 - 63

and you left your name in the picture so you can get banned

cookie for you!

pablo24

Frost Gate Guardian

Join Date: Aug 2007

20 Oct 2007 at 15:21 - 64

Quote:

Originally Posted by majikmajikmajik

and you left your name in the picture so you can get banned

cookie for you!

I left it in the pic because it would rather protect me from beeing banned.

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 15:21 - 65

Quote:

Originally Posted by majikmajikmajik

and you left your name in the picture so you can get banned

cookie for you!

He is not going to be banned... he figured out the exploit in a harmless manner. He reported it, and he is standing with me right now. He is not going to be banned, it is not like he is going crazy with this. So stop saying that, and stop flaming him and accusing him of this and that.

Xiooua

Academy Page

Join Date: Feb 2007

Rt/

20 Oct 2007 at 15:25 - 66

I think it's really gross that people are accusing the OP of only posting here for recognition. He could have easily said nothing and used the exploit, or posted in Riverside on how to do it. Instead he gathered proof, took actual people from the forum to show he's serious, and let the community know of the exploit.

Instead of being so spiteful, try thanking him for taking the time to help out. Yes, support should be notified too, but I really don't see how posting a topic on a forum as big as Guru and letting people know is such a bad thing either.

Bryant Again

Hall Hero

Join Date: Feb 2006

20 Oct 2007 at 15:26 - 67

Quote:

Originally Posted by Xiooua

I think it's really gross that people are accusing the OP of only posting here for recognition. He could have easily said nothing and used the exploit, or posted in Riverside on how to do it. Instead he gathered proof, took actual people from the forum to show he's serious, and let the community know of the exploit.

Instead of being so spiteful, try thanking him for taking the time to help out. Yes, support should be notified too, but I really don't see how posting a topic on a forum as big as Guru and letting people know is such a bad thing either.

Agreed thar.

Very interesting exploit, nonetheless. So you use a third-party program to D/C people?

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 15:27 - 68

Quote:

Originally Posted by Bryant Again

Agreed thar.

Very interesting exploit, nonetheless. So you use a third-party program to D/C people?

No asking... nothing personal, but there is really no reason to discuss this.

Bryant Again

Hall Hero

Join Date: Feb 2006

20 Oct 2007 at 15:28 - 69

Quote:

Originally Posted by Rahja the Thief

No asking... nothing personal, but there is really no reason to discuss this.

lol....aight

BlackSephir

Forge Runner

Join Date: Nov 2006

A/N

20 Oct 2007 at 15:32 - 70

Quote:

Originally Posted by Rahja the Thief

No asking... nothing personal, but there is really no reason to discuss this.

You're just making Guru not fun anymore >:(

Yarly

Retired GW Player

Join Date: Jun 2006

UK

Mo/

20 Oct 2007 at 15:39 - 71

Rofl, reminds me of a certain GvG playoff last year. Not mentioning any names of course.

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 15:40 - 72

Quote:

Originally Posted by BlackSephir

You're just making Guru not fun anymore >

No, I am basically saying that Guild Wars should be kept fair and equal, and this exploit is terrible beyond all reason. So, no one should have this in their hands, including myself or Pablo. The sooner I can delete this little .exe on my desktop, the better. Makes me nervous even having it.

Exploits are NOT fun, they are retarded and their existence should be as short lived as possible.

Darko_UK

Lion's Arch Merchant

Join Date: Feb 2007

England

R/

20 Oct 2007 at 15:44 - 73

Gettin emotional over a game, GG

Auron of Neon

cool story bro

Join Date: Apr 2006

Mililani

yumy

20 Oct 2007 at 15:44 - 74

I'm definitely shaking in my boots at this one.

Whirlwind

Krytan Explorer

Join Date: Aug 2007

Wolven Empire

D/

20 Oct 2007 at 15:46 - 75

Quote:

Originally Posted by Onarik Amrak

Wow, crazy.

I remember a couple of Dragon Festivals ago, Anet said they fixed something like this.

And then they did a rollback, making me lose some Lucky points...

Ah man somebody must of made out like a bandit on prizes i bet ~

Well, before rollback

Lord Sojar

The Fallen One

Join Date: Dec 2005

Oblivion

Irrelevant

Mo/Me

20 Oct 2007 at 15:47 - 76

Quote:

Originally Posted by Auron of Neon

I'm definitely shaking in my boots at this one.

ALright, let me clarify this for people... this exploit allows not just crashing. Pablo could make himself a GM, he could steal EVERY SINGLE GW ACCOUNT ON THE SERVER. The client is poorly coded as I am finding out, and this security hole only gets deeper and deeper the more I am finding. So, I would be afraid. Lucky credit card info is SSL... otherwise, that too would be easy pickings. So, hope that clears up any confusions as to how SERIOUS this is.

Two April Mornings

No Luck No Time No Money

Join Date: Nov 2005

Amherst College, MA

Scars Meadows [SMS]

Me/

20 Oct 2007 at 15:49 - 77

Bad thing is that OP used the exploit, ANET hates exploiters, even if they come forward to reveal one they found out.

Bryant Again

Hall Hero

Join Date: Feb 2006

20 Oct 2007 at 15:52 - 78

Quote:

Originally Posted by Two April Mornings

Bad thing is that OP used the exploit, ANET hates exploiters, even if they come forward to reveal one they found out.

Yeup. If Rahja is using it too, they're both going to get banned. They should probably be able to get unbanned, though, if they send in a bumload of tickets.

However, I can't say. I've only been banned on ANet "thinking" I was doing something. They actually used the exploit.
Nonetheless, we admire the bravery of the two. /salute

Darko_UK

Lion's Arch Merchant

Join Date: Feb 2007

England

R/

20 Oct 2007 at 15:53 - 79

Quote:

Originally Posted by Rahja the Thief

ALright, let me clarify this for people... this exploit allows not just crashing. Pablo could make himself a GM, he could steal EVERY SINGLE GW ACCOUNT ON THE SERVER. The client is poorly coded as I am finding out, and this security hole only gets deeper and deeper the more I am finding. So, I would be afraid. Lucky credit card info is SSL... otherwise, that too would be easy pickings. So, hope that clears up any confusions as to how SERIOUS this is.

screens or it couldnt happen

Earth

Always Outnumbered

Join Date: Jul 2006

20 Oct 2007 at 15:53 - 80

I've posted a message on Gaile's talk page saying they should look into this ASAP. Let's hope they do.