Jump to content
Sign in to follow this  
drivetheory

Identifying in-game admin hijacking

Recommended Posts

What about not allowing kick/ban from setVehicleInit?

Either way, it's good to know that can be done. 1.59 made our mission-based anti-hack (or rather anti-script-kiddie since it's incredibly easy for anyone who knows a tiny bit to get around) worthless since we could only disable their input.

ah ok.

Edited by GossamerSolid

Share this post


Link to post
Share on other sites

the packets can easily be read, make filter on packet monitoring software (wireshark , Microsoft network monitor)

to monitor the needed script commands and ban every retard sending crap to Your server ...

simple as that ...

also properly set server with BE enabled cleans 95% of mess for You by default ...

Share this post


Link to post
Share on other sites
the packets can easily be read, make filter on packet monitoring software (wireshark , Microsoft network monitor)

to monitor the needed script commands and ban every retard sending crap to Your server ...

simple as that ...

also properly set server with BE enabled cleans 95% of mess for You by default ...

If you don't have BE running and sig checks on then your just asking for the script kiddies. Rcon is a must but for the first time in a lond time we actualy had a skilled hacker on the server who just went right around BE and also froze my ability to input via Rcon. I was most impressed about that. You will never be able stop a skilled hacker but using the sig check,BE and Rcon will prevent 95% of the problem since script kiddies have no skills ban and be done with it.

Share this post


Link to post
Share on other sites

Hi all

As I pointed out some time ago hacking a server is a crime in most countries. There has been a new international treaties and laws that affect cyber crime too, so no hiding behind jurisdictions! There are additional treaties and laws coming into force:

http://www.cybercrimelaw.net/documents/A_Global_Treaty_on_Cybersecurity_and_Cybercrime,_Second_edition_2011.pdf

I know of several cases where there have been successful prosecutions in the US, UK, Holland and China even altering the scoring system of a game is enough to get you successfully prosecuted.

Game hackers/crackers can be and have been arrested and prosecuted

http://www.dailymail.co.uk/news/article-1337380/Call-Of-Duty-Teenager-arrested-hacking-online-game.html

http://www.shanghaidaily.com/nsp/Metro/2011/07/22/Hacker%2Bjailed%2Bfor%2Bhijacking%2BPCs%2Band%2Bgame%2Bserver/

http://www.theregister.co.uk/2011/05/18/gaming_trojan_conviction/

http://www.shacknews.com/article/53369/valve-hacker-caught-by-dutch

http://www.dailymail.co.uk/news/article-1232128/RuneScape-hacker-arrested-online-theft-medieval-fantasy-game.html

...In Britain, the Police Central e-Crime Unit was set up in September 2008 to target serious and organised online crime. A spokesman for the unit said: “People who seek to destroy others online gaming experience could be committing criminal offences, leaving themselves liable to prosecution. The PCeU will continue to work with the industry and investigate these allegations where appropriate.â€

http://technology.timesonline.co.uk/tol/news/tech_and_web/gadgets_and_gaming/virtual_worlds/article6937026.ece

As always follw the link to the original article in full

Trace their IP. One email to Inform the police, CCed to your Server host provider/ISP, and to their ISP abuse email found via an IP whois look-up.

Their ISP will either warn them to stop it or remove their Internet access for breaking their contract. If their ISP does not do this your ISP will blackhole their ISP and refer it on up to the Internet governing body who will arbitrate it. In the mean time the police will investigate it and nowadays go to the persons house and arrest them.

The Law.

If they are altering data on another persons server/computer or stealing, altering, or obtaining passwords via fraud; then they have broken the Law. If they crash a server or cause its service to degrade, that is denial of service and a crime. Report it to your server host provider and the police. If you have proof that a forum is providing services to people to do such criminal activity then report them too, that is in fact a more serious crime as it is inherently conspiracy.

It is a crime pure and simple. Contact the police in your country, they have the resources to trace who is doing it, AND IT IS FREE! You do not need a lawyer to do it. You just report the crime.

At least one member of the ArmA community already did this and the police went after the criminal.

He just followed this link to the US Cyber crime website.

http://www.ic3.gov/

In the UK you can use this link.

http://www.ceop.police.uk/reportabuse/

In the Holland it would be this link

http://www.meldpuntcybercrime.nl/english_information.html

Interpol also has a link for reporting cyber crime on its main site

http://www.interpol.int/

Money hacks

Chernobyl life type RPGs with regard to money hacks, take note: If you have people donating to your server even just the admin! And you use virtual cash in the server then this applies:

http://www.interpol.int/Public/TechnologyCrime/CrimePrev/VirtualMoney.asp

...

  • Unauthorised creation, transfer or redemption of virtual money.
  • Criminal access to computer systems being used to change illicitly the attribution of funds within the system.
  • Criminal attacks on virtual money systems, leading to loss of virtual money value or loss of function of the virtual money system...

Google search for "Cyber crime police" in your mother tongue to find your own countries Cyber crime reporting site.

Virtually every country in the world has laws that make unauthorised changing of data on someone Else's server a crime! Just use this link to find your country to find the relevant law to quote to your police service.

http://www.cybercrimelaw.net/Cybercrimelaw.html

I get bored pointing this out on other forums but at least other games are taking notice and going after the criminals rather than wringing their hands, saying "What can we do?" like moaning ninnies.

Kind Regards walker

Edited by walker
spelling

Share this post


Link to post
Share on other sites
Chernobyl life type RPGs with regard to money hacks, take note: If you have people donating to your server even just the admin! And you use virtual cash in the server then this applies:

http://www.interpol.int/Public/TechnologyCrime/CrimePrev/VirtualMoney.asp

I'm pretty sure that by "virtual money" they mean something more along the lines of Bitcoin. And I don't know of anyone who will convert Zargabad Life or Chernarus Life money to another currency. :)

In general, law enforcement won't do anything about video game hackers. (There are exceptions to this though - it's just rare.)

Share this post


Link to post
Share on other sites

It makes me laugh that there is twats out there willing to spend time in looking into the ways to hack a server.

They must have had to sit down and look at bits of code to do what they do?.

I mean what a waste of bloody time I mean really.

They could be putting it to better use and helping peeps to prevent it what do they get from it?.

They must live one real boring life and they must know they have nothing to do such mindless immature things.

Any who I run a server never been hacked yet but I will look at the links and make sure I make it as hard as possible for them to do so.

Cheers

Share this post


Link to post
Share on other sites
what do they get from it?

Threads like this, for one, full of people like you and me talking about them. It's called notoriety. Complaining about them only affirms their behaviour, because it tells them that what they're doing is achieving the desired effect. There's a good reason why it's not allowed to mention the names of certain script kiddie groups, otherwise it would be even worse. You can bet your ass that they're reading these forums, even this thread, and others like it. Hi ya script kiddies!

Anyway, a big part of it is also some kind of antisocial disorder, reinforced by the anonymity of the internet. You don't need to be a doctor in psychology to know that. Just ask youself: do you think mentally healthy people derive enjoyment from giving other people a hard time? No? They do, and the conclusion is obvious.

Share this post


Link to post
Share on other sites

Hmm, Our servers have died down.... I THINK WE BANNED EVERYONE!!!! Lol, for real though... I have battled hackers for months especially because of life missions... they just draw that sort of crowd. However, you will find that once your ban list reaches over 200 plus players... you start to wonder how many people actually play the game anymore. Im almost led to believe that the majority likes to cheat in some way shape or form.

... but we will keep banning.

Share this post


Link to post
Share on other sites
Hmm, Our servers have died down.... I THINK WE BANNED EVERYONE!!!! Lol, for real though... I have battled hackers for months especially because of life missions... they just draw that sort of crowd. However, you will find that once your ban list reaches over 200 plus players... you start to wonder how many people actually play the game anymore. Im almost led to believe that the majority likes to cheat in some way shape or form.

... but we will keep banning.

It's not that the majority cheats, it's just that the majority doesn't play public MP anymore.

Just wait till 1.60, there have been quite a few of the script kiddies' holes fixed up nicely. That said, I'm sure they'll find more.

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×