new spambot

Brillance - Raging Tide

Xx_BeLLa_xX - Harshlands wrote: »

It's not a pm from someone, people cannot reply to it, even if they wanted.

Sorry for the double post, but for everyone that have that spam do you see a shop lvl 1 just under the warsoul spirit npc?

On HL there's a shop under it, we cannot target it and we think it's maybe the bot.

EDIT: Here's the SS:

I also see that MissCherie is replying to it - at least with her partial Auto-reply message of "AFK"

das7002

Salari - Raging Tide wrote: »

looks like if it is the name of the catshop that is showing as the player that would make sense not being to click on the name in game and getting invalid user or what not when you try to pm it. You only can click on a valid name in chat by design.

More than likely they are replacing/injecting the catshops name for the toons name into the routine that handles messages being sent out to the server within the exe or from a process that is hooked into the message class(or routine). This is not really hard to do from a dev point of few and a lot of valid applications do this. Microsoft even has api's specifically for using its own message pipe line for Windowed and Windowless applications. Those have been around for decades.

The only fix for this is routines built in on the server end to reject invalid toon names on messeges sent to the chat subsystem or have an auth routine in the client that validates names before its sent(but that can still be defeated).

If this is how they are doing it, PW can have quite a serious issue to deal with, if its not.. its even more serious than that

Holy ****, the amount of ignorance in this post is giving me a headache...

Salari - Raging Tide wrote: »

looks like if it is the name of the catshop that is showing as the player that would make sense not being to click on the name in game and getting invalid user or what not when you try to pm it. You only can click on a valid name in chat by design.

No. It's incredibly simple to have a name not show up in chat at all, and if it contains special characters such as the ampersand it likes to **** with how the client does things. (As for whatever reason they decided to handle all text rendering through the same function no matter the context)

Salari - Raging Tide wrote: »

More than likely they are replacing/injecting the catshops name for the toons name into the routine that handles messages being sent out to the server within the exe or from a process that is hooked into the message class(or routine).

Lots of words I doubt you understand, but make you look like you do.


First off, the client isn't the one sending the name, that would be the server. All the client does is send a message and give a destination and server figures out what to do. The client does not in anyway determine what shows up on the other end for the name. That's all on the server. (As the server sends the player ID and message then the client asks the server what that player ID resolves to. Which is why sometimes you'll end up getting P-1239879 or something along those lines if in a very heavily populated area such as West Arch. Client is asking for lots of names all at once and server is throttling that)

Salari - Raging Tide wrote: »

This is not really hard to do from a dev point of few and a lot of valid applications do this. Microsoft even has api's specifically for using its own message pipe line for Windowed and Windowless applications. Those have been around for decades.

This right here proves without a doubt you have not a clue what you are talking about.

Yes there are APIs for IPC (interprocess communication) and APIs for listening to and responding to events sent by other threads, there is nothing specific in the Windows API for something like PW. You have to implement all of that yourself.

Salari - Raging Tide wrote: »

The only fix for this is routines built in on the server end to reject invalid toon names on messeges sent to the chat subsystem or have an auth routine in the client that validates names before its sent(but that can still be defeated).

Again, it doesn't matter what client says. Client gives the server a message and a destination. Server gets the sender ID from the connection, it does not rely on the client for this. That would be beyond bad design, not even Wanmei is stupid enough to not follow never ever trust the client.

Salari - Raging Tide wrote: »

If this is how they are doing it, PW can have quite a serious issue to deal with, if its not.. its even more serious than that

Honestly it could be one of many things, hopefully it is not the most severe, but the easiest way to do it would be to use an invis char name and then just walk around collecting names. (You can get them all from the nearby players list). While that won't get you everyone on the server it can get pretty damn close and only needs access to the client.

ovenusarmanio

Removed some totally inappropriate vein of discussion. Guys please stick to the discussion topic which is this spam bot. Thanks.

Lolgasmic - Raging Tide

oVenusArmanio wrote: »

Removed some totally inappropriate vein of discussion. Guys please stick to the discussion topic which is this spam bot. Thanks.

Still never as bad as the bots in the -this was not the removed message you were looking for-

XShadowshotx - Heavens Tear

Well the bot is gone from the HT servers, can't speak for the others but its no longer up on the bh platform in its catshop. Very glad to see a speedy response from the PWI team to get rid of these threats to players accounts.

Sizzer - Raging Tide

The bot was removed from R.T also last night. D.D and it's Team rocks. Just hope they're not back again to annoy us all over again.

BUTA - Morai

Hi all and ty for removing this spam from Morai.
By the way, dont know if somebody try to find noname in internet (dont have time to look through 8 pages).
i find it -snip-

P.S. i dont like so persuasive advertising anyway... damn bots