New hacking epidemic

How come I d/c when I switch my IP while changing channels but the hackers can do it? This is discrimination

Because they're sending an "i'm really over here" packet and you're not.
Slacker.

Maybe the problem is that "I'm really over here" comes from my other IP address :x I can hold connections open fine, but I get a random IP every time I open a connection.

Maybe the problem is that "I'm really over here" comes from my other IP address :x I can hold connections open fine, but I get a random IP every time I open a connection.

is that why sometimes when i just try to cc i get dced? like over the past few months sometimes i just randomly dc when ccing.

Does this mean PQs aren't secure if it involves changing channel?

"Ok guys. This channels taken so we'd better cc5"

Time like this, I'm glad I enjoy soloing...

I wish Nexon could grow a pair and take a more firm stance against hackers. A quick glance on any MMO hack site reveals many of the evil little hacks these kids are cooking up. Things are only going to get worse as more dangerous hacks are sold all over the web. I hear rumors that a new packet editor capable of banning players is in the works. While I tend to be skeptical, these past 3 months on Maplestory have changed my mindset somewhat.

I'm no legal expert, but shouldn't Nexon make taking legal action against these hackers their first priority? Are they even able to take any kind of legal action? And correct me if I'm wrong, but isn't packet editing illegal to begin with?

I wish Nexon could grow a pair and take a more firm stance against hackers. A quick glance on any MMO hack site reveals many of the evil little hacks these kids are cooking up. Things are only going to get worse as more dangerous hacks are sold all over the web. I hear rumors that a new packet editor capable of banning players is in the works. While I tend to be skeptical, these past 3 months on Maplestory have changed my mindset somewhat.

I'm no legal expert, but shouldn't Nexon make taking legal action against these hackers their first priority? Are they even able to take any kind of legal action? And correct me if I'm wrong, but isn't packet editing illegal to begin with?

Yeah, it's illegal. I'm pretty sure anyone who uses packet editing for anything can be thrown in prison.

Does this mean PQs aren't secure if it involves changing channel?

"Ok guys. This channels taken so we'd better cc5"

They probably can hack that way, but they don't focus on pq players, seeing as the high levels rarely/never pq and when they do it's only the available pqs for their lvl (GPQ, CWKPQ) which are done with trusted people.

They probably can hack that way, but they don't focus on pq players, seeing as the high levels rarely/never pq and when they do it's only the available pqs for their lvl (GPQ, CWKPQ) which are done with trusted people.

All it takes is knowing that such and such CWK group runs on channel X at Y time and your target runs with that group and is currently on channel Z.
That gives you the time, target, and location to anticipate.

Yeah, it's illegal. I'm pretty sure anyone who uses packet editing for anything can be thrown in prison.

Actually, it is not. You're welcome to find and post links to the law that contradicts me, but as of right now there are no explicit laws forbidding the sending of TCP/IP or UDP packets from one machine to another. Using such means to commit other crimes is however illegal, but it's not the method that's criminal, it's the actual crime that is.

All it takes is knowing that such and such CWK group runs on channel X at Y time and your target runs with that group and is currently on channel Z.
That gives you the time, target, and location to anticipate.

Bosses be one hell of a trap, then.

Bosses be one hell of a trap, then.

HT/PB in particular, yes.

Gawd! Wasn't this patched a while ago? Nexon must have really poor version control, they probably lost or didn't include the patch when the last migration from Neo city addition from KMS. Their whole development department really needs a overhaul.

How this hack is able to work is the CC message don't include any unique private ID only the server and the real users knows, it just uses the IGN to register on the new channel when CCing. So the hacker can spam the new channel with the victim's IGN using the fake CC message ahead of time and beat the victim to it. Easy patch is to include a special ID (or to include the IP), generated randomly upon the CC command and send back to the both the client and the new channel server which will be used in the CC authentication.

There is no law in preventing altering the content of TCP/IP message. To me technically packet editing is not just changing the content of the data payload, but altering the header of a packet, as like in cases for IP spoofing.

Fortunately you can plan ahead and just log in on that channel early >_>


DMCA might cover cracking open nexon's encrypted packets, if that had to be done to fake it.

DMCA might cover cracking open nexon's encrypted packets, if that had to be done to fake it.

They don't need to crack the encryption, just inject an packet spamming DLL to send the fake message which uses the existing encryption routines from the client.

The apq area would be easy to target as well.

I guess I'll be chillin' on my mules for a while.


I hope Nexon takes the time to actually investigate this issue given how horrible their security has been these past few months.

I think maybe the fact that a GM got hacked should bring some sort of attention to the matter. I mean really, the average person can't guess a GM's pin/PIC even if they have the user and PW. What happened was actual hacking/use of 3rd party programs to manipulate information. No way in a million years would some one really be able to choose a pin.

Notice all this crap happened when they starteded their ingenius "let's start maple from the website" idea. They really should test their crap first before they let it go.

Gawd! Wasn't this patched a while ago? Nexon must have really poor version control, they probably lost or didn't include the patch when the last migration from Neo city addition from KMS. Their whole development department really needs a overhaul.

Im pretty sure nexon doesn't use any form of version control at all. And im sure they have different groups working on different projects. And they don't say to themselves, hey group A fixed this bug last patch, we need to make sure we pull in the fix.

Version control's a pain in the ass to get working properly, but seriously, a company that makes this much money should have had it effectively in place long ago.

How many times has a new patch rolled back over old bugs. It's downright embarassing for a "professional" company to be making these kind of mistakes. If it were anything other than a Game, Nexon would have been sued sucessfully many times over.

I think maybe the fact that a GM got hacked should bring some sort of attention to the matter. I mean really, the average person can't guess a GM's pin/PIC even if they have the user and PW. What happened was actual hacking/use of 3rd party programs to manipulate information. No way in a million years would some one really be able to choose a pin.

Notice all this crap happened when they starteded their ingenius "let's start maple from the website" idea. They really should test their crap first before they let it go.

Nexon probably didn't even notice one of their GMs was hacked .
Also maple won't even launch from the website for me, an error pops up, but it still works the old way.

I think maybe the fact that a GM got hacked should bring some sort of attention to the matter. I mean really, the average person can't guess a GM's pin/PIC even if they have the user and PW. What happened was actual hacking/use of 3rd party programs to manipulate information. No way in a million years would some one really be able to choose a pin.

Notice all this crap happened when they starteded their ingenius "let's start maple from the website" idea. They really should test their crap first before they let it go.

Really a GM got hacked? That makes my day.
Stop downloading phishing programs nexon.