Give me ideas

MaxOff · 04-14-2008, 07:32 AM

The Weakness in the Login System is still not fixed

so im asking u guys what should i do to get the attention of outspark!
So that they will FINALLY fix that serious design flaw.

Give me your ideas

I though about blocking the gms from logging in, by hijacking every session i get and whitelisting everyone who hasn't a char named after a known gm. So u can log in after a 2nd try.
Or maybe i should send whispers to all your friends online ? ;-)

Give me your ideas!!!

ps.: i already tried talking and the results are already documentated here. And outspark never, i mean never tried to get in contact with me.

**Yosei** · 04-14-2008, 08:13 AM

Have you provided screenshot proof to Outspark? Maybe you should screen how you do it and send it to them.

Then again.. they may still be trying to fix it.

I can't and won't tell you to hack peoples accounts.

MaxOff · 04-14-2008, 11:22 AM

i provided them with a proof of concept. If they would have asked, i would have provided my source code too.

But like with the SHN-Viewer, Outspark does not speak directly to me(Well Steam did...). I really have tried to get in contact with them.

Mhh i guess i got some funny ideas.

When it will happen i will warn u guys before, so u know what will happen lol. And maybe outspark will fix the weakness before that

And if they throw i awaw what i send them, i will gladly give it away again.

p.s.: of course i wont harm any player in any way in the process.

Pedobear · 04-14-2008, 11:32 AM

i like that idea of blacklisting GMs. just seems so funny.

Kreain · 04-14-2008, 11:32 AM

yeh hes tellign the truth (well everyone knows allready) but yeh ghostly proved it to me by making my fiesta account say multiple logins detected when i asked her to show me on msn.

btw umm how bout logging on an admins account and using the command /area 999999999999 for liek exp n stuff then they wud get mad and have to listen to you.

**Lady-Loki** · 04-14-2008, 01:42 PM

btw umm how bout we don't talk about specifics of any hacking on these forums?

Maxoff - e-mail support@outspark.com with links to images and such and maybe PM one of the GM's we have in these forums through the PM box here since the FF PM box is probably not as overwhelmed as the PM box on the officials.

**Hyper** · 04-14-2008, 02:52 PM

I always get a response from a GM... Maybe you should go on to one of their accounts, and move their items around, or something? Or make chests spawn?Just something to show them how big of an issue it is. (Because no one likes the idea of someone else on their account.)

Originally Posted by Lady-Loki

btw umm how bout we don't talk about specifics of any hacking on these forums?

Maxoff - e-mail support@outspark.com with links to images and such and maybe PM one of the GM's we have in these forums through the PM box here since the FF PM box is probably not as overwhelmed as the PM box on the officials.

I wouldn't really call it specific... It's not like he's describing how he does it, right? And I thought that /area thing was common knowledge... (if that's what that was directed at)

**Yosei** · 04-14-2008, 05:03 PM

We're really not supposed to condone ANY kind of ToS violations on here, such as exploits and hacks.

This is somewhat in between the two.

Just remember... you can talk about what you're going to do, without detail. But saying how, providing links on how to do it, or showing us via screenshots or pics, is not allowed.

Also, we have staff members who lurk here too. I know Maxoff is trying to get noticed, but someone else might naively talk about the things they do.

**Lady-Loki** · 04-14-2008, 05:21 PM

Originally Posted by hyperswoss

I always get a response from a GM... Maybe you should go on to one of their accounts, and move their items around, or something? Or make chests spawn?Just something to show them how big of an issue it is. (Because no one likes the idea of someone else on their account.)

I wouldn't really call it specific... It's not like he's describing how he does it, right? And I thought that /area thing was common knowledge... (if that's what that was directed at)

I really don't know - I am so hax-clueless that i can't say, but it worries me whenever something starts sounding like hack detail or instruction, i.e. the "logging on an admins account and using the command /area 999999999999", how do i know thats not legit?

Just saying . .

**viasta** · 04-14-2008, 05:24 PM

hack the GMs and do random stuff in towns with it? o.o?