Southperry.net
I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Printable Version

+- Southperry.net (https://www.southperry.net)
+-- Forum: Maplestory (https://www.southperry.net/forumdisplay.php?fid=15)
+--- Forum: Maplestory Discussion (https://www.southperry.net/forumdisplay.php?fid=31)
+--- Thread: I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) (/showthread.php?tid=35102)

Pages: 1 2 3 4 5 6


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Chilly - 2010-12-26

Fenne Wrote:You guys, there was an exploit with white scrolls the first day the Christmas hill content was released. I saw it in action by my next door neighbor and posted about it on a few of the maple sites warning people about possible hellbans/rollbacks.

The exploit was being circulated extremely privately, and these people have literally tens of thousands of white scrolls and chaos scrolls now spread across multiple characters accessed by multiple IPs. All I can say is be careful how you merch.

I haven't played since Christmas Hill just for the sake of saving myself from any possible RB/HB.

They are not going to rollback, with my statement corroborated (at least in principle) by this statement they would have to rollback to a little less than a week before Battle Mages and Wild Hunters to sweep all of the White/Chaos Scrolls. A targeted response will likely be the only response. They'll likely miss a lot of hackers and catch some innocents. Don't hoard the scrolls.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Seanny - 2010-12-26

The fact that they're not showing off the hack in action is interesting.

And judging by what Fenne was saying, maybe that whole 'big bang upped security' was a hoax. They seem to be serious about keeping their hacks to themselves now, though there might have been some truth in it: remember how the guild issue was resolved without even taking the server down? They might have the ability to hotfix security holes now... if they can be identified.

Here's to hoping one of them screws up if this is the case <3


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Eos - 2010-12-26

Seanny Wrote:remember how the guild issue was resolved without even taking the server down? They might have the ability to hotfix security holes now... if they can be identified.

Guilds are maintained on their own separate server(s), don't read too much into things and make wild leaps and assumptions.
So far there has been zero conclusive proof in this thread and it's purely speculation and FUD.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - FrozNlite - 2010-12-26

This game is so fucked up. Perhaps I should only play it while high from now on.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Puppeteer - 2010-12-26

Why don't they just end the event and make the crystals drop rarely from all monsters? That would be the best predictable solution.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Eos - 2010-12-26

Puppeteer Wrote:Why don't they just end the event and make the crystals drop rarely from all monsters? That would be the best predictable solution.

That'd just reward botters in isolated maps with good spawn. Slime tree for example. Bubblings. Etc.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Phoenix Wright - 2010-12-26

Eosian Wrote:That'd just reward botters in isolated maps with good spawn. Slime tree for example. Bubblings. Etc.

At least it'd be better than what's going on now.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Eos - 2010-12-26

Phoenix Wright Wrote:At least it'd be better than what's going on now.

Abused is abused. What would be better than what's going on right now is if the game were not a cesspit of craptastic fail coding.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Kojo - 2010-12-26

brb logging on all my accounts to get 5k compensation maple points


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Duelman - 2010-12-26

Yeah totally didn't see this one coming....

Nexon we tried to warn you earlier this would happen.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Seanny - 2010-12-27

Eosian Wrote:Guilds are maintained on their own separate server(s), don't read too much into things and make wild leaps and assumptions.
So far there has been zero conclusive proof in this thread and it's purely speculation and FUD.

Oh, yeah in that case i doubt the hotfix theory now. /takesback


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - QSCX - 2010-12-27

White Scrolls don't add mesos into the economy, so there shouldn't be a rollback.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - ZakumSlaYers - 2010-12-27

FOUND the exploit, it was by sending negative integer as the "count" of the purchase. I just did this on SEA with my mule via "FE 5F".
Unfortunally, I couldn't mass produce things there as White scroll and Chaos scroll wasn't sold in the store. We just have plenty of 15% scrolls.

-(negative) item is a positive, so the hacker'd gain the snow flakes however, without white scrolls there will not be any gain of that +(Negative). You'll have to re-purchase it from the store again.


 Lolnexon

I'd love this to be patched as soon as possible. Nexon should also throw an exception on the server side in any event of taking something that the character doesn't have, that will prevent such dupe in future even with the developers' carelessness.

What I am thinking is, didn't Nexon recently updated their HS and patched all CRC bypass? I guess it got bypassed again.


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Turtally - 2010-12-27

ZakumSlaYers Wrote:FOUND the exploit, it was by sending negative integer as the "count" of the purchase. I just did this on SEA with my mule via "0xFE 0x5F".
Unfortunally, I couldn't mass produce things there as White scroll and Chaos scroll wasn't sold in the store. We just have plenty of 15% scrolls.

-(negative) item is a positive, so the hacker'd gain the snow flakes however, without white scrolls there will not be any gain of that +(Negative). You'll have to re-purchase it from the store again.


 Lolnexon

Herp derp integers are so complicated
Oh lawd, Nexon.

Wasn't this how the whole Griffey Horn thing worked?


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Polantaris - 2010-12-27

Are you telling me they didn't make a check to make sure people don't put in a negative number? REALLY?

Quote:パラディン ポランタリス says:
That's like..."Stop Glitching 101".
Lesson 1: "Make sure you don't allow users to put in values you don't want them to."
Nexon: "WHO NEEDS THIS CRAP?" *toss out window*



I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - 0^2 - 2010-12-27

"What are the odds the "hackers" would try the negative number trick again?" says Nexon.
Anyone with foresight or a bit of logic says "1 out of 1 chance. Tongue"


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - ZakumSlaYers - 2010-12-27

Polantaris Wrote:Are you telling me they didn't make a check to make sure people don't put in a negative number? REALLY?

There is a check for normal shops, just not the flakes store although it is sent via the same packet header.
It goes something like that :
Quote:<2 bytes header>
<1 byte mode> // 0 = Buy, 1 = Sell and so on
<2 bytes 00 00> // This is probably to determine if the item is sold in meso, or with item
<4 bytes itemid>
<2 bytes quantity>



I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Polantaris - 2010-12-27

ZakumSlaYers Wrote:There is a check for normal shops, just not the flakes store although it is sent via the same packet header.
It goes something like that :

I know there's a check for the normal shops, however you'd think they'd take everything in the code, and just duplicate it except for flakes instead.
If they were smart, the entire shop program would use a constant for the currency type, then they only need to change it once.
IE normally it's Mesos, and it's defined as something like CURRENCY = MESOS (Or something to that effect, I don't know how they programmed it), so when they change the entire system for this one event, they just change CURRENCY into either Blue or Golden Flakes, and it does the check like normal.
Oh wait... "If they were smart".


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - Fenne - 2010-12-27

Yup the exploit has been released to the wild. Prepare for shite to hit the fan. -_-


I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback) - SaptaZapta - 2010-12-27

*facepalm*

You'd think that after the disastrous effects of previous exploits of this nature- O, wait, this is Nexon we're talking about.

Also, maple weapons can be npc'ed, right?
That makes this a meso-generating expoit...