Page 3 of 9

Posted: Thu Feb 07, 2008 5:50 pm
by Dajimmy10101
Well getting someone's attention in a grand way usually requires the public to be able to see it. Oh well if we see 'em we'll tell him.

Posted: Thu Feb 07, 2008 6:27 pm
by guitarism
oh okay, well he's permabanned now. So how about letting us in on the secret? Lets here what he was trying to Hax0r!

And who caught him? Pook Bv or TE? Place your bets...

Posted: Thu Feb 07, 2008 6:34 pm
by Tigereye
I think the publicity was well worth it. It's been 24hours since the issue began, and all attempts at communications with Pilot077 have been ignored (after being acknowledged. Yes, ASGS messages tell us when they've been read.)

More blatantly, when confronted ingame between his 1hr ban and his 171yr ban, he quickly ran away and logged off.

Based on these actions, case closed. His ban is now permanent.

For those curious, here is what happened, and why these actions were taken by FAO's administration.

Pilot077 was observed bragging that he had an exploit ingame. This was very quickly picked up by BlackViper's omniscient ears. When asked to disclose it, he decided to hide it. This was his decision, and it got him banned from our community permanently.

For those who are not aware, we have a ZERO tolerance policy regarding irresponsible disclosure of exploits that harm our community members' gameplay. Yes, irresponsible disclosure includes hiding it without reporting it.Every case where someone was found using an exploit ingame and did not disclose it has been issued a permanent ban from our community. (See Guns22)Every case where someone was found using an exploit ingame, but disclosed it after they were discovered has been issued a lengthy ban based on how long they've used it/its impact/etc. (See JimmyNightHawk. Welcome back.)Every case where someone has found an exploit and tested it without impacting real games, and reported it within a reasonable amount of time have enjoyed years of gameplay in our community, and will continue to do so. (See Mr. Kltplzyxm, voipscout, me, others)
If you know of a vulnerability, reporting it is the only way to guarantee that you will not be banned. Hm, maybe something else should be done for these folk?

--TE

PS: BV heard the bragging first, so he gets credit. I sifted through months worth of gamelogs and found evidence to support his bragging. Pook was notified after everything was dealt with and replied "I'm glad I don't deal with this crap any more /mrgreen.gif" style="vertical-align:middle" emoid=":D" border="0" alt="mrgreen.gif" />"
so all 3 of us win /mrgreen.gif" style="vertical-align:middle" emoid=":D" border="0" alt="mrgreen.gif" />

Posted: Thu Feb 07, 2008 6:48 pm
by Buyo
I still don't know what the exploit was :(

Posted: Thu Feb 07, 2008 6:55 pm
by Kltplzyxm
I guess he claimed he has an exploit but never divulged it. `yb

Posted: Thu Feb 07, 2008 7:01 pm
by Tigereye
Buyo wrote:QUOTE (Buyo @ Feb 7 2008, 01:48 PM) I still don't know what the exploit was :(
There's a reason for that /wink.gif" style="vertical-align:middle" emoid=";)" border="0" alt="wink.gif" />

Responsible disclosure means that discretion is used. If everyone knew how to get infinite money, how much fun would pickup games be? Out9 games exist for that reason.

FAO's responsibility is to protect everyone's gameplay experience. Sometimes that requires keeping certain things out of the public spotlight.
This is also why we have ASGS, and why we have @Allegs with bansticks... it's not so we can play President/God/whatever like the vocal minority alleges, it's so we can deal with the few who work to ruin the fun for the many. Everything we do is so the community can enjoy its favorite game.

--TE

Posted: Thu Feb 07, 2008 7:07 pm
by peet
It's not the same person with the same exploit coming back again and again with different names?

Posted: Thu Feb 07, 2008 7:07 pm
by Buyo
Awww c'mon

Posted: Thu Feb 07, 2008 7:26 pm
by apochboi
Off with his Head!

Posted: Thu Feb 07, 2008 7:26 pm
by Dark_Sponge
peet wrote:QUOTE (peet @ Feb 7 2008, 11:07 AM) It's not the same person with the same exploit coming back again and again with different names?
Since most identifying software relies on numbers unique to each cpu, it is conceivable that these hackers could repeatedly drop in a new cpu and be seen as a new player each time (although it would be quite pricey).