FAQ  •  Register  •  Login

Ok server 34 fallin apart. QUICK HELP PLEASE!

<<

Rhobar

Newbie

Posts: 7

Joined: Sat Dec 04, 2010 9:14 am

Post Sat Dec 04, 2010 1:23 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

Arch. wrote:All I'm saying is that the android version should have been tested much more thoroughly before being released.


I agree with that. But now the android version is launched and people are using it (myself included). So at this point there is no acceptable way to remove this version. Removing all Android players (as Nathan05 gladly suggested) is in my opinian unacceptable as a solution.

Just put yourself into the shoes of any android user that started this game a few days ago and is enjoying it (withour cheating) and is the removed from the server because apple users don't like him/her.

What they need to do now is quickly fix any bugs that enabled some android users this so called hacking and that is being done on the server side not on the client side imho.

And as an Android user I can tell that there are more bugs in this version than just some security problems so they have a lot of work ahead of them.

PS: Cheating in mmo games cannot be done withour security issues on the server side. So those security issues have been present all the time. The only difference is that Android users have a lot more freedom in using the device so were able to find those issues faster. Also there are more Android users with advance knowledge in this field than Apple users. However, if an Android user managed to hack the game then it means it was hackable and it could have been hacked even before the Android launch. Any linux/unix user with enough knowledge and determination could have hacked it at any time in the past.

PPS: And yeah, that means that even after the removal of Android users, the game could still be hacked if they don't fix the original issues.
<<

Arch.

User avatar

Baron

Posts: 224

Joined: Fri Nov 19, 2010 8:40 pm

Location: It's Raining again ... Yep you've guessed it.... England

Post Sat Dec 04, 2010 3:50 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

I know how to Hack Haypi to a certain extent but don't use it. But all i was saying is that the android OS is too easily hacked. And im pretty sure the server side has no security issues. So far the only way of really hacking is by running all the messages the game sends through a proxy serer and altering the respone the serevr gives back. ( doesn't entirely work though )
S10 - Marcus6189-2nd Marquis-Member Of Archange1
S21 - Dr@gonlord-HACKED
S28 - Wipeout24-2nd Earl - Member Of KingsKourt
S33 - Arch.- 2nd Marquis - Back With Archangel ( Rank 7 but with only 18 members lol )

Rank 8... Im Falling behind ;-(
<<

Rhobar

Newbie

Posts: 7

Joined: Sat Dec 04, 2010 9:14 am

Post Sat Dec 04, 2010 4:31 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

That is very false. I will explain more when I get home.
<<

GenStryker

Citizen

Posts: 118

Joined: Wed Nov 24, 2010 6:30 am

Post Sat Dec 04, 2010 5:02 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

arch i suggest you know what your talking about before you say it. i know every single hack that is going on in haypi kingdom ATM and NONE of it has been via android devices. so again i suggest you know what your talking about before you say it.

now again android for haypi is very buggy but it impossible to hack. i have seen it tried to be done but the android haypi lags WAY to much to do anything and basic haypi ipod hacks dont even work

and you dont need to know how i know this. those who matter know how i know this...
Image
GenStryker Server 30 Expert
Feel free to pm me here or on s30 for any help:)
<<

Arch.

User avatar

Baron

Posts: 224

Joined: Fri Nov 19, 2010 8:40 pm

Location: It's Raining again ... Yep you've guessed it.... England

Post Sat Dec 04, 2010 8:28 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

Genstryker Explain to me how unstoppabl got 222million prestige in 2 days then.....
S10 - Marcus6189-2nd Marquis-Member Of Archange1
S21 - Dr@gonlord-HACKED
S28 - Wipeout24-2nd Earl - Member Of KingsKourt
S33 - Arch.- 2nd Marquis - Back With Archangel ( Rank 7 but with only 18 members lol )

Rank 8... Im Falling behind ;-(
<<

GenStryker

Citizen

Posts: 118

Joined: Wed Nov 24, 2010 6:30 am

Post Sat Dec 04, 2010 8:59 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

Hacking via playing haypi on PC. How he did itbwill not be told to anyone but haypi staff
Image
GenStryker Server 30 Expert
Feel free to pm me here or on s30 for any help:)
<<

Rhobar

Newbie

Posts: 7

Joined: Sat Dec 04, 2010 9:14 am

Post Sat Dec 04, 2010 9:49 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

Arch. wrote:I know how to Hack Haypi to a certain extent but don't use it. But all i was saying is that the android OS is too easily hacked. And im pretty sure the server side has no security issues. So far the only way of really hacking is by running all the messages the game sends through a proxy serer and altering the respone the serevr gives back. ( doesn't entirely work though )


Here is just how wrong you are:

It is true that you can monitor the messages that you client sends to the server and the messages the server sends to the client. And if those messages aren't crypted or if you manage to decrypt them then you can alter those messages in both direction.

If you alter the messages the server sends to the client then you can fool the game you have on the phone. For example when you start the game, it syncs with the server to find out the number of resources, cash and coins you have. So if you alter the messages the client gets from the server you can make the game on you phone think you have like 999999999 coins or 999999999999999999 prestige. But that prestige is not truly in the server database, all the other players will not see that you have that prestige so it should be not worth to you. What good is it making you phone believe you are number one when on the server you still show up as number 10.000 and all the other players see you as number 10.000.

If however you alter the messages that the client sends to the server, you could for example pretend that you have 9999999999 gems and put them on the market. But the reason why mmo games are uncheatable is that when a server recieves such a message from a client it checks with the database first. So the server knows that you only have 2 gems in your inventory and instead of processing your market request it will return an error. It is necesary to do so not only to prevent cheating but also to prevent bugs.

However somebody managed to truly cheat in this game. Not alter his own client to show he's the boss but actually managed to fool the server into showing him as the boss. This only means one thing. Somewhere the server takes some info from the client as granted. If the server always checked what he got from the client to see if it fits the server database noone could foold the server that he owned 9999999999 gold nuggets or such. But if somewhere the server doesn't check the info he gets from the client and takes that info for good then someone cand exploit that by sending fake messages from his client (or from a fake client for that matter).

That is the only way to cheat in a mmo game and that is a server issue. When you create a mmo, you expect the users to try to do all kinds of crap with the client. So every piece of info you get from the client you check versus the database to see if it fits (if my client sends a message that I want to attack with 100000 catapults you first check if I have 100000 catapults available, you don't just take that attack for good). If you don't do that then you get hacked but it's not Android or Apple users that need to be eliminated. It's the server that has some bugs that need to be solved. And if they don't solve those, the so called hacked can still hack the game no matter what platforms they ban from the game.

PS: The other way to hack it would be to actually hack the OS of the server or at least the database server and directly edit the info written there but that very very hard and unlikely to happen.
<<

GenStryker

Citizen

Posts: 118

Joined: Wed Nov 24, 2010 6:30 am

Post Sun Dec 05, 2010 2:09 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

Rhobar wrote:
Arch. wrote:I know how to Hack Haypi to a certain extent but don't use it. But all i was saying is that the android OS is too easily hacked. And im pretty sure the server side has no security issues. So far the only way of really hacking is by running all the messages the game sends through a proxy serer and altering the respone the serevr gives back. ( doesn't entirely work though )


Here is just how wrong you are:

It is true that you can monitor the messages that you client sends to the server and the messages the server sends to the client. And if those messages aren't crypted or if you manage to decrypt them then you can alter those messages in both direction.

If you alter the messages the server sends to the client then you can fool the game you have on the phone. For example when you start the game, it syncs with the server to find out the number of resources, cash and coins you have. So if you alter the messages the client gets from the server you can make the game on you phone think you have like 999999999 coins or 999999999999999999 prestige. But that prestige is not truly in the server database, all the other players will not see that you have that prestige so it should be not worth to you. What good is it making you phone believe you are number one when on the server you still show up as number 10.000 and all the other players see you as number 10.000.

If however you alter the messages that the client sends to the server, you could for example pretend that you have 9999999999 gems and put them on the market. But the reason why mmo games are uncheatable is that when a server recieves such a message from a client it checks with the database first. So the server knows that you only have 2 gems in your inventory and instead of processing your market request it will return an error. It is necesary to do so not only to prevent cheating but also to prevent bugs.

However somebody managed to truly cheat in this game. Not alter his own client to show he's the boss but actually managed to fool the server into showing him as the boss. This only means one thing. Somewhere the server takes some info from the client as granted. If the server always checked what he got from the client to see if it fits the server database noone could foold the server that he owned 9999999999 gold nuggets or such. But if somewhere the server doesn't check the info he gets from the client and takes that info for good then someone cand exploit that by sending fake messages from his client (or from a fake client for that matter).

That is the only way to cheat in a mmo game and that is a server issue. When you create a mmo, you expect the users to try to do all kinds of crap with the client. So every piece of info you get from the client you check versus the database to see if it fits (if my client sends a message that I want to attack with 100000 catapults you first check if I have 100000 catapults available, you don't just take that attack for good). If you don't do that then you get hacked but it's not Android or Apple users that need to be eliminated. It's the server that has some bugs that need to be solved. And if they don't solve those, the so called hacked can still hack the game no matter what platforms they ban from the game.

PS: The other way to hack it would be to actually hack the OS of the server or at least the database server and directly edit the info written there but that very very hard and unlikely to happen.

win :)
Image
GenStryker Server 30 Expert
Feel free to pm me here or on s30 for any help:)
<<

Hotknight

Newbie

Posts: 21

Joined: Sun Sep 26, 2010 11:30 pm

Location: Hell

Post Sun Dec 05, 2010 11:37 pm

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

Rhobar wrote:
Nathan05 wrote:get them players of our ipod servers before they ruin them


So if 1-2 Android players managed to hack it the solution is to ban all Android players is it not? Sounds a lot like what Hitler did with the jews a while back.

I'd really like to tell you where you could stick you ipod into...

Eh? Kinda like banning all of New Zealand for one man?
s10 Expert
<<

uranos

User avatar

Warlord

Posts: 2282

Joined: Mon Apr 12, 2010 2:54 pm

Post Mon Dec 06, 2010 5:53 am

Re: Ok server 34 fallin apart. QUICK HELP PLEASE!

u dont need android for this.......
PreviousNext

Return to Bug Report

Who is online

Users browsing this forum: No registered users and 3 guests

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by ST Software for PTF.