The bitter Truth

[MaxOff]

First i want to apologize for bruteforcing TEVA, APOLINE, BIJOU and EPITH also for abusing the login server, for several minutes.
I also want to apologize to the players who i force disconnect during that time. I hope u aren't mad at me x.x

What i did was attacking the Fiesta servers, for about 2minutes. And i want to present my results now.

These is the list of Accounts i could hijack. It includes the server i hijacked them on and the characters i gained control of.

hijacked on APOLINE
Avia
Rutice
Rati
Minala

hijacked on BIJOU
Trapt
Nourishing
BiatchQueen
Nourish

hijacked on TEVA
MrEds
Tejei
Megui_br

hijacked on EPITH
the_one

hijacked on EPITH
veronamine
cindylowho

hijacked on BIJOU
RincewindChurm

hijacked on TEVA
Alterio

hijacked on APOLINE
jnsf

hijacked on APOLINE
Keelie
TickTock
Surgeon
_Keelie_

hijacked on TEVA
MrEds
Tejei
Megui_br

hijacked on EPITH
Saints
Potion_maker

hijacked on TEVA
blood1
blood2
xX_blood_Xx
xX_inuasha_Xx

hijacked on APOLINE
Raiha
Regrant
Lekius
Retier

hijacked on EPITH
BumbleBee
Black_Arachnia

hijacked on TEVA
Trophyhunter357
CIRCLEK
faith06
trophyhunter_357

hijacked on EPITH

hijacked on TEVA
SedaLia
Ecstasma
ShoveIt
Glycerine

hijacked on TEVA
kenny89
ken89
Icemage1
Item_maker

hijacked on APOLINE
Dragonfeather
Sashacat
Kellycat
Magiciancat

hijacked on TEVA
NekoHikaru
Kyoto_Asakura
KyotoAsakura
Neko_Hikaru

hijacked on TEVA
DuckeyBR
PegasusBR
_Legolas_BR

hijacked on TEVA
kenny89
ken89
Icemage1
Item_maker

hijacked on BIJOU
Inconnu
Ammytay
lnconu1
Inconu

For everyone who thinks he lost something: That is not the case, right after i succesfully hijacked someone i immediately disconnected, causing no harm to the unluckly people who were hijacked.

I hope that these is enough to convince people that the login weakness IS NO LAUGHING MATTER.


My Reason: Once again Outspark released a patch, that did not fix the weakness. I can not wait any longer. Outspark i hope u see the warning. Im not the only one who can find the weakness, and someone else might want to exploit it.

MaxOff

[Triumph]

Got bored?

The only name I recognized from that list was "SedaLia," but even still that name is relatively insignificant.

[MaxOff]

i dont know any of them.

And how can they be insignificant?

[Hyper]

Woah, that's scary... Ô___Ô

Can you PM that to an Outspark GM?

[MaxOff]

i gave them a full description some time ago. The answer was that the acc, i send the reported from, was immediately banned.

I got the hint, and i will contact the gms never again. Dont wont to have another acc banned.

[Zodiac]

i gave them a full description some time ago. The answer was that the acc, i send the reported from, was immediately banned.

I got the hint, and i will contact the gms never again. Dont wont to another banned acc.

-.- Just like them to take a helping hand and punish him for trying to get them to realize the error in there own security oi.....

[iDerrick]

-.- Just like them to take a helping hand and punish him for trying to get them to realize the error in there own security oi.....

Seriously.

@MaxOff: But in any case, what you did was still wrong, and how the GMs saw it, even if it was for good intentions.

[MaxOff]

I tried the nice way, and got rejected. So i waited to see if they would fix it non the less. They did not. So im showing the public what was ignored.

My only aim is to see that something like that will not be possible anymore.

[Laifun]

SedaLia.. i recognise that name.. I was reading and hoping my name didn't pop up D:

[Hyper]

SedaLia.. i recognise that name.. I was reading and hoping my name didn't pop up D:

LOL me too. >.>;;