Member
Posts: 57
Threads: 5
Joined: 2009-07
Well, disabling whispers or any other kind of "game options" don't work because of client-server design.
Q1: What happens when you send a private message (whisper)?
A: 1- The message go from your client to Nexon Servers;
A: 2- Nexon Servers ask the destiny client if he is accepting private messages;
A: 2.1- Yes, he accept: show message;
A: 2.2- No, he don't accept: tell the sender: he don't accept.
Q2: So, why disabling whispers don't work?
A: Because there's a problem in Q1 item 2: ask the destiny client. Nexon servers is constantly asking if you're accepting or not accepting, and it is knocking on your client to get answer. D/C Hackers do it using "packet editing" repeating the same message thing over and over flooding your client, make the CPU usage going crazy and disabling Nexon Server to keep other functions like: updating your position, updating your screen to show the people around you, show smegas, and etc.
Q3: Why this design?
A: Because its easy and cheap to implement, and doing so, Nexon avoid too many database reading.
Q4: What do you mean by database reading?
A: Lets create our own D/C hack solution. Imagine we put at Nexon database an new field called: "Accept_Whispers". So next time someone send you a message it gona be like that:
1- client send a private message to Nexon Server
2- Nexon server check in the "Accept_Whispers" field if the desired person is currently accepting whispers;
2.1- If Yes: show;
2.2 If No: tell the sender: desired person not accepting;
Now Nexon Server aren't knocking our client for a answer. And its gona protect us from massive questioning and, maybe, preventing the d/c or lag. But this solution will create massive amounts of database reading and memory allocation to temporary store the messaging waiting for its destiny and cpu usage. Why? Image thousands of clients asking Nexon Servers about person "game options" several times.
The currently design, that allows us to get D/C/Lag hacked, is because Nexon servers work only like a repeater or delivering messages, without doing any database read/write but allowing massive amount of information going too fast (in this case pay attention, i am talking about the "game option" or whisper problem, not the overall game, that contains several different functions to communicate with your client).
What Nexon needs is a good team of network security experts, new routers that allows complex filtering/pattern rules to prevent us from being D/C/Lag hacked. But theres goes another problem: its a four or more million users game, and people currently getting d/c hacked are HT squads teams/leaders, PB squad teams/leaders, merchanting like the guy who started this thread, and several others. But if you compare with the overall users "playing peacefully", doing their 4h 2xCards, chatting, have fun in several ways, the "overall" game works quite perfectly, so a solution to this problem may take some time.
NOTE: That's my opinion, I am not a security expert, but currently working with network development, and I am just guessing the design/behavior. So if I said something stupid, feel free to point me my mistakes. And sorry about my poor/bad grammar english.
Posting Freak
Posts: 1,069
Threads: 14
Joined: 2009-03
Gender: Male
Country Flag: canada
Server: Khaini
Job: Various
Scuze my ignorance, but why can't Nexon put something into the server software that would autoban anyone who sends more than say 5 trade/whisper/whatever requests per second?
Junior Member
Posts: 11
Threads: 1
Joined: 2009-05
MissingLink Wrote:Scuze my ignorance, but why can't Nexon put something into the server software that would autoban anyone who sends more than say 5 trade/whisper/whatever requests per second?
I am also ignorant about software changes, but that sounds like it could easily cause bans on innocent characters whose whispers and chat requests simply get backlogged due to lag and then show up server-side all at once.
Posting Freak
Posts: 3,185
Threads: 76
Joined: 2008-12
Gender: Male
Sexual Orientation: Bi
IGN: y0y0y0y0shi0
Server: Mardia
Level: 98
Job: Priest
Guild: Fateless
It's called logging tickets to Nexon.
I herd you liek that.
Your best bet is log a ticket, play another account for a bit, or, just ignore it and the little 8 year old script kiddie craving attention because his parents beat him will go away.
Junior Member
Posts: 20
Threads: 0
Joined: 2008-11
I had something similar happen to me and my friends. A guildie/friend of mine stole a fm spot from some guy that ac'd it us from in the first place. He held some grudge for several weeks and once this thing became public kept dc'ing us. We just ignored him and didnt bother trying to talk it out. He eventually just gave up/got bored of it.
Junior Member
Posts: 37
Threads: 1
Joined: 2009-06
Lysia Voi Wrote:I am also ignorant about software changes, but that sounds like it could easily cause bans on innocent characters whose whispers and chat requests simply get backlogged due to lag and then show up server-side all at once.
normal users dont send several hundred or thousand requests per second even accounting for lag
to the op: ignore the dc hacker. he just wants to hear your whines. this thread probably made his day !
Posting Freak
Posts: 2,969
Threads: 56
Joined: 2009-07
Black Mage Wrote:normal users dont send several hundred or thousand requests per second even accounting for lag 
to the op: ignore the dc hacker. he just wants to hear your whines. this thread probably made his day !
Trust me, they don't always just wanna hear you whine. I was in the middle of a CWKPQ and a dc hacker specifically targeted Glen (SunnySis) to dc him in the middle of it. They didn't do it for any other reason than to screw with him, and they really don't care whether he hunts them down.
Junior Member
Posts: 37
Threads: 1
Joined: 2009-06
DualReaver Wrote:Trust me, they don't always just wanna hear you whine. I was in the middle of a CWKPQ and a dc hacker specifically targeted Glen (SunnySis) to dc him in the middle of it. They didn't do it for any other reason than to screw with him, and they really don't care whether he hunts them down.
if it was a singular incident, sure, that happens to everybody. especially in the FM, and other places where getting DC kicks you out. it happened to me a few times, even while training.
no dc hacker has any reason to stalk someone down every day who never responds to their taunts or gives them the benefit of their whines. you cant screw with someone who never acknowledges they're being screwed with. it's just not fun and they will quit after a short time, in search of new targets.
Posting Freak
Posts: 2,969
Threads: 56
Joined: 2009-07
Black Mage Wrote:if it was a singular incident, sure, that happens to everybody. especially in the FM, and other places where getting DC kicks you out. it happened to me a few times, even while training.
no dc hacker has any reason to stalk someone down every day who never responds to their taunts or gives them the benefit of their whines. you cant screw with someone who never acknowledges they're being screwed with. it's just not fun and they will quit after a short time, in search of new targets.
You would be surprised at how much fun these people get from just ruining people's days.
Senior Member
Posts: 644
Threads: 17
Joined: 2008-07
Gender: Female
Country Flag: usa
IGN: LiIIPrincess
Server: Bellocan
Level: 200
Job: Bishop
Guild: Nobility
2009-09-01, 02:02 PM
(This post was last modified: 2009-09-01, 02:05 PM by LittlePrincess.)
Really the fact that Nexon has allowed dc hack to exist for over 6 months is ridiclious. I'm beginning to think they don't care. >.< You would think it would not be a hard thing to edit their program to auto ban anyone who manages to send 1000 packets a second (or w/e number is completely unreasonable). Or they could make it chat or wispers or trade requests, anyone who manages to send 100 of those (or even 50) in one second is clearly hacking - add it as a perma ban to their auto ban thing. T.T (And then those laggers in cpq won't be hurt by it.)
Posting Freak
Posts: 3,185
Threads: 76
Joined: 2008-12
Gender: Male
Sexual Orientation: Bi
IGN: y0y0y0y0shi0
Server: Mardia
Level: 98
Job: Priest
Guild: Fateless
LittlePrincess Wrote:Really the fact that Nexon has allowed dc hack to exist for over 6 months is ridiclious. I'm beginning to think they don't care. >.< You would think it would not be a hard thing to edit their program to auto ban anyone who manages to send 1000 packets a second (or w/e number is completely unreasonable). Or they could make it chat or wispers or trade requests, anyone who manages to send 100 of those (or even 50) in one second is clearly hacking - add it as a perma ban to their auto ban thing. T.T (And then those laggers in cpq won't be hurt by it.)
Or they could just stop wasting their time making crap events that no one likes, and smegaing at 3 am (a GM did that this morning in Mardia. I'm like "wtp. Stop wasting time smegaing at us asking "So...how many of you leveled today?  ", and start working on making the game better.") and start working on the game.
LF>Someone to start a Southperry-wide petition!
Posting Freak
Posts: 1,170
Threads: 32
Joined: 2008-11
GMs dont program and design the countermeasures for the game, to blame them for no bypass is completely unfair, its not their job.
Posting Freak
Posts: 2,969
Threads: 56
Joined: 2009-07
y0y0y0y0shi0 Wrote:smegaing at 3 am
Lucky you. We get them in the middle of the day along with server lag here in Ghettocan. They've been doin it once every 3 days too. And every single one is "ALL HAIL THE CASH SHOP. ALL HAIL NEXON. ZIG HIEL!" Kidding, but one of the ones I do remember was when a GM came on to sing us two lines of "Rockin' in the Cash Shop."
Posting Freak
Posts: 3,185
Threads: 76
Joined: 2008-12
Gender: Male
Sexual Orientation: Bi
IGN: y0y0y0y0shi0
Server: Mardia
Level: 98
Job: Priest
Guild: Fateless
Deviant Wrote:GMs dont program and design the countermeasures for the game, to blame them for no bypass is completely unfair, its not their job.
I'm talking about the fact that they could be out there banning some script kiddie instead.
Posting Freak
Posts: 1,170
Threads: 32
Joined: 2008-11
y0y0y0y0shi0 Wrote:I'm talking about the fact that they could be out there banning some script kiddie instead.

Ah. Must be bad on your server, I never see any script kiddies around Khaini very often anymore, and these DC hackers arent exactly bannable as its hard to catch them in the act.
Senior Member
Posts: 686
Threads: 5
Joined: 2009-08
So the D/C hack is still around huh... guess it would be too optimistic to think that Nexon patched it along with the Horntail timer.
y0y0y0y0shi0 Wrote:Or they could just stop wasting their time making crap events that no one likes, and smegaing at 3 am (a GM did that this morning in Mardia. I'm like "wtp. Stop wasting time smegaing at us asking "So...how many of you leveled today? ", and start working on making the game better.") and start working on the game.
LF>Someone to start a Southperry-wide petition!
Yeah, and yesterday a GM said in Smega in Scandalia "Don't stay up too late Scania!!" Which is as stupid as those ones in Mardia, as there were probably hackers hacking up their game at that very second.
And too bad petitions never work, especially against something like Nexon, who probably does not even know that their ticketing system is trash and hardly anyone can give them feedback. Let alone a petition or anything else that could get their attention of any problems that goes on in the game.
LittlePrincess Wrote:Really the fact that Nexon has allowed dc hack to exist for over 6 months is ridiclious. I'm beginning to think they don't care. >.< You would think it would not be a hard thing to edit their program to auto ban anyone who manages to send 1000 packets a second (or w/e number is completely unreasonable). Or they could make it chat or wispers or trade requests, anyone who manages to send 100 of those (or even 50) in one second is clearly hacking - add it as a perma ban to their auto ban thing. T.T (And then those laggers in cpq won't be hurt by it.)
They never did care about Maplestory, it is very old news. All they do is continue to suck money out of children and impoverish them while all the GMs and developers are eating pure lard and drinking oil enjoying their good days. As long as they living the good life under their player's expense of suffering beyond imagination, they do not care. Just take a look at Scandalia's Horntail situation, a certain guild's been holding the cave for about a year or so, and Nexon really does not care if some players suffer with their level 20 skills until level 200 as they have not done anything with this guild or even attempted a real solution to Horntail at all.
Member
Posts: 57
Threads: 5
Joined: 2009-07
Another problem is: This short amount of people getting D/C-Lag hacked, like HT teams, are teams who put on market skills and equips, that's only drops from HT, like genesis 30, maple warrior 20, and other stuff. In case of PB if we start to beat it, there's timeless weapons and time rocks only available from PB. I hope Nexon and his team is working on a solution. We're (at BROA server) tired of being D/C-Lag hacked in HT/PB attempts and paying extortion to D/C-Lag hackers.
Junior Member
Posts: 37
Threads: 1
Joined: 2009-06
Has anyone tried using packet filtering as a countermeasure to DC spammers? If the spam packets never are received by the maple client, it may make the difference between getting dced and not getting dced, even though such hacks may take up significant bandwidth.
I've never been able to try this, myself, due to not having a cooperative dc hacker around.
Member
Posts: 57
Threads: 5
Joined: 2009-07
Black Mage Wrote:Has anyone tried using packet filtering as a countermeasure to DC spammers? If the spam packets never are received by the maple client, it may make the difference between getting dced and not getting dced, even though such hacks may take up significant bandwidth.
I've never been able to try this, myself, due to not having a cooperative dc hacker around.
That's not gonna work because D/C-Lag hack acts like a DDoS attack, even if you ignore some packets, they're still knocking your router/modem/network card asking for memory and cpu power to be processed and discarded. And remember, it's not the hack itself doing an attack they're using a currently Nexon game server already connected with your computer, so its Nexon server who is d/c-laging during an attack, hackers are using the servers to repeat the message for us. But if Nexon routers are filtering those packets before they leave Nexon network, in this scenario we're protected, I guess.
In this IO graphic
The red Line is the IP address of one of Nexon game servers.
The green Line is a packet of 1434 bytes.
Starting from the left to 955s is a normal FM spot working.
From 955s to the right side, note the increase on the green line, is the D/C-Lag hacking starting, the Y axe is in bytes per second its like 25 kb/s my backup network speed. Its Nexon server, already connected to my computer flooding my network at his maximum download speed, making my MS client go crazy for CPU processing and making me D/C.
Member
Posts: 56
Threads: 1
Joined: 2008-08
To OP,
The best thing to do is to write a ticket to Nexon about it and suggest that they log on via your account and set up a shop so they can see what happens. There have been instances where Nexon asks you to allow them to change your account info so they can access your account to investigate (your account would be temp banned while they investigate). If the guy has programmed software to auto-search for you so he knows exactly when you log on and auto-lags you immediately, a GM would see that right away and that will give Nexon all the evidence they need to perm-ban the dc hacker and all accounts related to his IP address.
|