Hacking in multiplayer servers.
 

There are too many DoS attackers, renamers and flooders lately. I hope the list servers admins are going to do something and stop them as soon as possible. I got two screenshots from ApprehendJJ2 that show the IP of those hackers.



[IMG]http://img128.exs.cx/img128/743/apprehendjj29yo.gif[/IMG]

[IMG]http://img128.exs.cx/img128/6043/apprehendjj2020mc.gif[/IMG]


Edit: I'm not blaming Shiverz and WINNER, and I can also explain - the hacker's IP was hidden, and ApprehendJJ2 told the IP of the person that joined the server before the hacker, or that's at least my opinion.

Guys haxoring into multiplayer servers?

Sounds bad. :-I

Note: This comment is pretty much useless, but I have nothing to do.

You've got Shiverz and The WINNERS name on it...
but they aren't them.
The f00 joined Chiyu's server.
It had the IP of Dx in that server.

The hacker is prolly a real hacker.
not a fake one. he changes IP I think.

Black Rabbit or Shiverz? No, they wouldn't do that. I'm 100% sure that it's not Shiverz, I know him well, he doesn't have the knowledge or the tools.

I think we are dealing with one (or more) person who can change his own IP, faking it, probably taking the IP of the person who joined (just) before him. I have several suspicions of who it could be, but I'm not going to point the finger.

In any case, let's hope those protection tools for both disabling lasering and automatically renaming back renamed names will be released to the public soon. Nimrod, I'm counting on you... :)

Couple of things, first of all Reptile, u were very against the use of banning on the list servers.

Secondly, forwards logs as they happen to me, either on msn or email. JCF isnt a place for people to come and point the finger and all that.

Other than that, I am aware of the issue and in the coming weeks you will find some protection for it, but until then keep the logs coming into me.

Whey hey, banning hackers is totally fine in my opinion. By the way, I told the list servers to stop those hackers, not banning them. :H

Will this never end? The complaining is far more annoying than the hackers themselves.

It really seems like you didn't visit JJ2 in the last week...
(Edit: And I even expected you to say something helpful since you're a J2O admin)

I've seen some attacks but never went through one myself. You can always challenge them to a duel and be satisfied that they suck at playing JJ2 for not daring or refusing to accept. It works. :p

How do you suggest the List Server Team stops them, then? We have no control over what happens ingame, only what happens on the List.

I agree with r3p. In the past week alone I've been lasered once and witness about two renaming cases.

I am not speaking as an admin, I am speaking as a JJ2 player who is tired of complaining. It's not like J2O has anything to do with the list servers anyway, aside from providing another place to download patches or view the games in progress.

I dont hack ( Shaney said something about it )

Know anything about people who join with a player id higher than the client-limit in the server for example?
They try to invent an annoying nick as possible, to make the server kick or ban them out. Then, usually when this gets kicked or banned from the server, the server crashes with an access-violation message.

EDIT: This has been the most usual hack for me instead of lasering. I even got this one yesterday when my internet began to work again. I spent only 15 minutes with jj2 in my server, and got one of this.

I've got a renaming, laserers and some more things which I've already got enough, so I guess there has to be something to prevent at least half of these. JJ2-script should probably be done more difficult to understand or be covered with a password, or such.

Yes, it's really annoying :|
I also had some problems with someone who kept on joining my servers even if they had password and all slots were closed. It's irritaiting when someone interputs your game -.-

inregards to the players with a higher player ID than allowed in the game, its best to kick them out using Overlords tool "Controller4" with the Stealth Kick function, this way your jj2 wont crash and they will be ejected from the game.

Aren't there "laser-shield" programmes out there? Some didn't work well, but it's worth a try. By laser-shield, I mean a shield against the laser-shield so your JJ2 wont crash. :p

There is, stay tuned.

But lasers arent the only problem.

Hmm...Make that hacker confess how to fake IP:P
I wanna get free access to an encyclopedia by faking my school's IP >P

Im not aware of any way to fake your IP when joining (when the server is using apprehendjj2)

unless your some proxy god, which i havent yet met one.

Then the hacker is a proxy god, because... R3ptile's weird IPs, that match me and Shiverz for some reason?

Perhaps his logs were faked (edited), or you honestly did it. :P (or sumthin buggered up?)

I dont know with those logs. But the IP's do indeed match up.

Still doesn't work for XP though.

Haha, you know that I would never do something like that. The hacker's IP was hidden, and ApprehendJJ2 told the IP of the person that joined the server before the hacker, or that's at least my opinion.

By the way, I know the_WINNER and ShiverzCC, and they would never hack a server. :)

Looks like we need to get Link in here :\ This could be bad if thats why as ApprehendJJ2 was the only way to find there real IP :\

Yep, that's what I think as well.. So the person who joins before the hacker would get all the blame :(.

ApprehendJJ2 will only display and log specific types of JJ2 packets. Specifically, join requests, server confirmations (sending client ID), and client information. All TCP packets that fit the specifications of one of these types will be detected. As far as is generally known, these packets are necessary to cause problems in a server, however, if there is a new JJ2 exploit that does not use one of these types, ApprehendJJ2 will not display or log it.

ApprehendJJ2 takes the IP address from the IP header, not from the JJ2 packet data. Any IPs displayed or logged are authentic.

The best thing to do is to save the binary log file, and include that with any reports. It contains all packet data, so even if there is a problem with AJJ2 the log can be examined manually. I can't make any conclusion in this case unless I see the log file.

Thanks for explaining Link :)

Reptile, do you have the log file still?