251 réponses à ce sujet

[TSMDude]

We all know there is some serious trolls out there lately. As we have been trading our griefer ban list with 2 other servers we finally decided to make it a more of a Community approach.

Along with four other servers we will be making a special section on our forums for other servers to add thier griefer bans to share the cd key codes of these trolls and try and help one another out.

Any admin is more than welcome to join and this board will be for Admins only. Logging in with corruptted PCs to bog down other servers is getting crappy serious and I think it is time we all did our part to help one another out.

If you are intrested in joining this Admin list let us know or join our forums with the name of your server and link in your signature so I can verify your the admin there.

(TSMAdmin or FRCAdmin or WSIAdmin or FRSAdmin or whatever your server is called.)

[TSMDude]

Jus t a quick bump so this does not get buried. There are several HUGE servers getting hit and one that has had to close for a few weeks to figure out how to stop it. We have been sharing this three guys cd key codes with other servers and it has stopped a bit for us.

Sooner or later they will get to you as well.

We are a Community of PWs. All of us from action servers to RP servers have dealt with griefers before. Yes I know it makes us a target to try and accomdate this on our forums but it is something that a few of us PWs who have okay numbers and some that have the big numbers think it will help alleviate a lot of annoying and beating around the bush. Almost like a terrorist watch list of sorts.

[TripleAught]

This is disturbing. It seems like our world hasn't been hit yet by any serious trolls but worth keeping an eye on. And, like you said, we are all part of a community, it's good to look out for each other.

[TSMDude]

We have about 6 server admins who said they will sign up and 4 have so far. Even if they are just reading the cd key codes and not posting anything to make it a bit harder on folks who do this type of thing seems to be the best way.

[Totems and Teaparties]

You will notice their first forums http://nwng.proboard...i?board=general are now suspended thanks to a number of moles who reported the content (though not after leaking it to a few people, myself included) However the admin is now much more careful and not opening advertising it. However he's also dumb enough to make him easy to find with google again.

http://nwng.46.forum....php?noportal=1

Forumer's TOS also has rules against harassment, I urge everyone to report this forum. Cutting off their man means of recruitment and communication.

Otherwise, there's been a lot of grumble across a lot of PWs that they are 'hacking' in characters with uber stats (generally 99 STR, 250 everything else) and uber items to make a quick kill-run and in some cases, dry-loot people before logging off to prevent item restoration.

This isn't really true, this can be attained by simply knowing how to edit your own NWN files- characters for servers are generated client side and thus this exploit requires absolutely no 'hacking' skills whatsoever. I have their guide they used after it was sent to an admin of one of the worlds they commonly targeted and will share it with any interested server admins. The basic of it is they are 'tricking' NWN by editing game files to think starter stats are 255, and starter gear is a +80 sword of noob killing.

However the big thing is it's really easy to guard against. Because all they are doing is generating an 'uber' character all you need to do is put in a script to catch them at 0 EXP- at creation.

(disclaimer, I am not a scriper, I am simply relaying what was told to me by someone who does know their stuff. I am assuming this ahead is correct.)

Have a hook in your onenter (or is there an onlogin? either way) script that checks the EXP level of a character. If they enter at 0, strip them of all items and then hand them their starter gear. Most servers already do this for custom starter gear anyway.

Next, check their base stats. If a stat is above 22, (adjust this number depending on what your subraces get to and/or any other stat changing. 22 is just my normal fallback number.) teleport the PC to a 1x1 area they can't leave.

Now if the script fired and they came back clean, give them 1 EXP so they don't trigger the script again.

I am, again, assuming it's all that simple. I have tasked a friend in actually writing that script so I can, instead of telling people how to do it, just give them they script and say 'here you go.'

(edit)

Oh and all of the above is moot if you have 'enforce legal characters' checked, but I'm 99% sure most servers don't.

Modifié par Totems and Teaparties, 13 mars 2011 - 06:20 .

[ehye_khandee]

Screening entering PCs for hacked characters is not only possible, but easy and essential. Over the years we've had a few try that route; and because some people won't play nice, we closed that route some time ago. The method is very low tech, not any great computer knowledge is needed to accomplish it thus it falls upon the server operators to scrape away such users on login.

If you are hosting on windows, consider using linux instead, it is MUCH more secure and has the added advantage of speed, pure and simple. All Admins out there, take this as your heads-up, lock the back entries, tighten security and be prepared; there will always be a few disgruntled types out there willing to try and take us down - be prepared.

Be well. Game on.
GM_ODA

[Quilver]

Totems and Teaparties: I would be amazed if any server admin did not know these things. NWN has been running since 2002, and if anyone still doesn't know how to protect against fairly simple hacks, then they most definitely should not be running a server. Don't mean to belittle you, but what you're saying is blindingly obvious to most of us.

I've been killed by griefers numerous times. They often come in a team of maxed-out barbarians, and they can be quite effective against low-level characters. If servers are letting them 'hack' so easily, then they're obviously going to be much more powerful. I would be very surprised if they made any serious progress using such methods, because the majority of 'big' servers must already have protections in place.

[Khuzadrepa]

Quilver: To be fair to Totems and Teaparties, lately there has been in influx of new people into the game, and I've noticed a larger number of people making inquiries about wanting to setup their own PW. While a number of us veterans are aware that such security is needed, it doesn't hurt to repeat it for the benefit of those folks who are just setting out on the path of creating their own place to call home. The strength of this community is the sharing of information it has always had; let's not put that down just because the info isn't useful to everyone.

Totems and Teaparties: Thanks for the heads-up about that group! I hadn't heard of them before.

Happy Gaming all!

[Dark Defiance]

Quilver wrote...

Totems and Teaparties: I would be amazed if any server admin did not know these things. NWN has been running since 2002, and if anyone still doesn't know how to protect against fairly simple hacks, then they most definitely should not be running a server. Don't mean to belittle you, but what you're saying is blindingly obvious to most of us.

I have been on the old forums since 2002 and have hosted private games. In the next few weeks I will be going public with my PW, and to me, *some* of this information may be new to me even fairly simple ones.

As NWN is nearly 10 years old a lot of this important information may have been lost to the old forums, fixed in patches, or otherwise all over the place. It can be hard to keep up to date on every little hack or tool that griefers use. I haven't seen a definitive document regarding safe guarding a PW. While I know of some common fixes for exploits, I feel it doesn't hurt to repeat "common" information. We all have to consider that now NWN is a downloadable game via various sources, we will see new players, DMs, griefers, hackers, and the like.

So the more we share information with us admins, both new and old, the less likely we have to deal with griefers.

My tid bit to add: being that character creation is done on the client, I feel it does not hurt to check for and wipe the 1.69 PC Hide on enter for the first time. The horse scripts will recreate if needed, and when it's recreated it will be from the servers resources, not the client's. I guess you can't be too careful. Please correct me if I am wrong.

So I welcome any and all information and resources available regarding safe guards. Thanks for starting this thread TSMDude.

-DD

[EDIT] Khuzadrepa beat me to the "new player" punch! :-D

Modifié par Dark Defiance, 14 mars 2011 - 01:27 .

[TSMDude]

We also have a lot more info on our forum like CD Key Codes of this group and some other things we will be putting together. Once again this is jsut for PW Admins and such like and if anyone here has any good safe guarding tricks no matter how simple please let me know and I will post them there.

This group is a set of players from PVP/Arena servers, gathered to harass RP servers, while recruiting from PVP/Arena ones.

Some of their old forum is still cached in Google.
Some of the  ramblings on those cached pages are a bit spooky, its similar to what you get from sociopath manifestos.

 I'm sure that the Arena Admins don't like the bad publicity (or the unauthorized recruitment), and in-game and forum recruitment on those servers appears to be their main recruiting tactic.

Modifié par TSMDude, 14 mars 2011 - 03:21 .

[Thayan]

Quilver wrote...
I've been killed by griefers numerous times. They often come in a team of maxed-out barbarians, and they can be quite effective against low-level characters.

I can confirm this has happened as recently as several weeks ago in Thay for example. While we are learning and adapting to try and counter these trolls before they get this chance, it also pays to educate your playerbase to *not* accept party invites from players they do not know and *not* respond to Tells from said players asking where they are at. Simple stuff, but it can be somewhat effective in saving a newbie from a griefer.

[lordofworms]

I hate to ask as its prob. a stupid question for most... but I must being a PW admin/builder/keeper myself...

whats a griefer? and what are some general things a 'griefer' does?
just so I have an idea what your all talking/warning about?

thanks!

[Khuzadrepa]

lordofworms wrote...

I hate to ask as its prob. a stupid question for most... but I must being a PW admin/builder/keeper myself...

whats a griefer? and what are some general things a 'griefer' does?
just so I have an idea what your all talking/warning about?

thanks!

No such thing as a stupid question.

Here's a good definition:
http://nwn.wikia.com/wiki/Grief

By the way, I'm a big fan of your work!

[TSMDude]

lordofworms wrote...

I hate to ask as its prob. a stupid question for most... but I must being a PW admin/builder/keeper myself...

whats a griefer? and what are some general things a 'griefer' does?
just so I have an idea what your all talking/warning about?

thanks!

@ Khuz...as we all are fans of the LoW.

@LoW
Basically it someone or a group who log into servers for the sole purpose to harrass or kill other characters. Also called back in the day a glitch or jumper. Basically the computer bully version of that one kid in elmentary who's dad never hugged him so he beat you up to compensate.

From one of DMs;
fun nugget... when I started with TSM... griefers were called "smurfs" due to the unique ...tactic those at the time used.  Blue gnomes and halflings were the in thing then to grief with.

Modifié par TSMDude, 14 mars 2011 - 08:04 .

[Lightfoot8]

lordofworms wrote...

I hate to ask as its prob. a stupid question for most... but I must being a PW admin/builder/keeper myself...

whats a griefer? and what are some general things a 'griefer' does?
just so I have an idea what your all talking/warning about?

thanks!

 I would define it as: Anyone who loggs into a server for there own enjoyment, at the exspence of others. 

 

[Quilver]

Totems and Teaparties wrote...

Oh and all of the above is moot if you have 'enforce legal characters' checked, but I'm 99% sure most servers don't.

By the way, just to point out how people can be wrong despite strong feelings (99% certainty). This is incorrect. Most servers do have ELC checked.

Modifié par Quilver, 14 mars 2011 - 11:13 .

[Fellanor]

I think we may have just had a visit by them, on AVLIS.

[Bosgald]

I know of them, and I think they're hilarious (and awful).

[PurpleDragonKnight]

They've most definitely been hitting Arabel lately.

[SHOVA]

Why ban him from here, has he done something against these forum rules?

[lordofworms]

thank you all for the clarification, I personally have not had the misfortune of this kind of scenario but I would imagine (my PW being hardly populated with player count) it wouldn't even be worth it to them.

but Thanks, info is knowledge!

[TSMDude]

Quilver wrote...

Totems and Teaparties wrote...

Oh and all of the above is moot if you have 'enforce legal characters' checked, but I'm 99% sure most servers don't.

By the way, just to point out how people can be wrong despite strong feelings (99% certainty). This is incorrect. Most servers do have ELC checked.

Of the 9 servers that have joined our group 4 have it checked and 5 do not. It is 50/50.

As for the peeps who have joined and have been vetted i thank you so much for the wealth of info given to us about this griefer who has posted here twice now , and I look forward to seeing more of you join to help combat this tool who started this in 2006.