Credit card fraud

34 Replies
Blasphemy
Moderator
2 November, 2016, 10:17 PM UTC

maybe bot the new bots coming to life, need to be noticed and need to be turned in, if you want the bot attacks to stop...

plarium will not get involved unless we ask them to and give them what we want ....


I am a daughter of a High King who is not moved by this world for my God is with me and goes before me, I do not fear because im his
UTC +2:00
Crowbar
Moderator
3 November, 2016, 9:21 AM UTC

bernd said:


players will start to use their own scripts or quit the game. if everyone uses these scripts, presidios are basically useless for example ... and you tell us thats no cheating? WHY???? just because your serverdata's aren't changed? thats pure sarcasm i hope ....

You're twisting my words. I never said that it wasn't cheating, but that it's not hacking. This topic was started with concerns about the safety of your credit card data, and I addressed that.

If I wasn't clear enough, here: bots are a way of cheating, same as alts, but on a massive scale.

As for LH-automation, it all depends on how complex the strategy is. It might actually be simple to teach a bot to do it, but without knowing the strategy we can't really know.
UTC +0:00
CaptChuckles
3 November, 2016, 10:15 AM UTC

Crowbar said:


bernd said:


players will start to use their own scripts or quit the game. if everyone uses these scripts, presidios are basically useless for example ... and you tell us thats no cheating? WHY???? just because your serverdata's aren't changed? thats pure sarcasm i hope ....

You're twisting my words. I never said that it wasn't cheating, but that it's not hacking. This topic was started with concerns about the safety of your credit card data, and I addressed that.

If I wasn't clear enough, here: bots are a way of cheating, same as alts, but on a massive scale.

As for LH-automation, it all depends on how complex the strategy is. It might actually be simple to teach a bot to do it, but without knowing the strategy we can't really know.

Sorry Crowbar but you are wrong. Automation of the items can only be achieved by injecting code into the software. An action which requires unauthorised access to the software = hacking.

It's a separate issue from credit card information but doesn't bode well for server security and that leads to obvious concerns.

Finding the information within millions of lines of data is no easy task and the request for details is to narrow down the search area. Obviously the servers' automated data check isn't designed for, or up to, the job in hand.

With the amount of money involved what really suprises me is that a specialist third party security company hasn't been brought in to solve what seems to be an issue that appears to have been around for some time?
UTC +1:00
Crowbar
Moderator
3 November, 2016, 11:39 AM UTC

I am not wrong. The game runs in a flash client that communicates with the server. If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

And, since the client is practically open source, you can mimic any kind of encryption that might be protecting this communication.

UTC +0:00
CaptChuckles
3 November, 2016, 1:56 PM UTC

Crowbar said:


I am not wrong. The game runs in a flash client that communicates with the server. If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

And, since the client is practically open source, you can mimic any kind of encryption that might be protecting this communication.

To produce items on the scale we have seen would require automation of the requests and on a multiple basis to have so many "members" building so quickly?

The lack of diary scores isn't correlated against the troops available / resources required?
That would imply also that the limit on lighthouse prizes enforced on "normal" players is being manipulated to achieve the recent scores?

It is also impossible for the "normal" player to hide eleven buildings behind the stronghold but these "bots" seem to be able to do this.

All of these things require manipulation of the server parameters.
UTC +1:00
Alyona Kolomiitseva
Community Manager
4 November, 2016, 12:32 PM UTC
Crowbar said:

If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

You're right. And I would add that even if you do that, you can't do anything except the authorized actions that could be performed via game client.
Plarium Community Manager. Please note that I will be unable to respond to your private messages, review your tickets, or check your account information. All technical issues should be directed to our Support Team at plrm.me/Support_Plarium
UTC +2:00
bernd
4 November, 2016, 10:09 PM UTC

Alyona Kolomiitseva said:


Crowbar said:


If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

You're right. And I would add that even if you do that, you can't do anything except the authorized actions that could be performed via game client.

So why do These bots have no raidpoints and so much prize Points?



and you say it would be ok if i start 2 k alts today and run them via Automation, because all they can do is the same a normal Player can do .... so in 3-4 months i can burn 2 k accounts for attacking? and all that is cool for you because your game is safe then and all the stupid Players can still give you their Money?!

UTC +1:00
Crowbar
Moderator
5 November, 2016, 10:21 AM UTC
bernd said:

and you say it would be ok if i start 2 k alts today and run them via Automation, because all they can do is the same a normal Player can do .... so in 3-4 months i can burn 2 k accounts for attacking? and all that is cool for you because your game is safe then and all the stupid Players can still give you their Money?!

Twisting our words again. Nobody said it's OK, only that it doesn't mean compromised security ("hacking"). Having alts, run by people or bots, is still against the rules and thus not OK.
UTC +0:00
FaZi
5 November, 2016, 10:48 AM UTC

Ok so you know it is not okay but still we have

BIGBIGDATA bots & lots of others.


We have 30+ Limeys

and 20+ Blimeys & they are all active.


Despite knowing the fact it is not okay still they are active in game (because no action was taken). What does this communicate to a player?


Does this mean plarium is taking any action? Or is it vice versa?


Th' rougher th' seven seas, th' smoother we sail. Ahoy! ahead ye coward
UTC +3:00
Blasphemy
Moderator
5 November, 2016, 2:39 PM UTC
FaZi said:

Ok so you know it is not okay but still we have

BIGBIGDATA bots & lots of others.


We have 30+ Limeys

and 20+ Blimeys & they are all active.


Despite knowing the fact it is not okay still they are active in game (because no action was taken). What does this communicate to a player?


Does this mean plarium is taking any action? Or is it vice versa?


Im sure plarium support is being swarmed with messages give it time, these kinda things can't be done over night 
I am a daughter of a High King who is not moved by this world for my God is with me and goes before me, I do not fear because im his
UTC +2:00
Pacmod
5 November, 2016, 3:25 PM UTC

Blasphemy said:


FaZi said:


Ok so you know it is not okay but still we have

BIGBIGDATA bots & lots of others.


We have 30+ Limeys

and 20+ Blimeys & they are all active.


Despite knowing the fact it is not okay still they are active in game (because no action was taken). What does this communicate to a player?


Does this mean plarium is taking any action? Or is it vice versa?


Im sure plarium support is being swarmed with messages give it time, these kinda things can't be done over night 

For a decent tech, it should take about a minute to switch them all off. What takes longer is for whoever is in charge to make the decision that switching them off is the RIGHT thing to do. Apparently that decision has not been made which is what concerns the legitimate players in this game.


And, the longer that decision gets put off or that we are not given an adequate explanation the worse it gets for this game.
PACMOD
UTC +4:00
bernd
5 November, 2016, 4:03 PM UTC

Maybe the support / CM should think about giving us more Information.


We, the Players, can't understand why the outcome of the "investigations" can't be told. Is there actually a need to protect the privacy of "bots" ? And if not - which reason do you have not to tell us which bots are banned? The only reason which comes to our mind is that you can't ban them, or dont want to ban them or wont ban them at all ... i hope that you understand this, thx.


UTC +1:00
Blasphemy
Moderator
5 November, 2016, 4:29 PM UTC

bernd said:


Maybe the support / CM should think about giving us more Information.


We, the Players, can't understand why the outcome of the "investigations" can't be told. Is there actually a need to protect the privacy of "bots" ? And if not - which reason do you have not to tell us which bots are banned? The only reason which comes to our mind is that you can't ban them, or dont want to ban them or wont ban them at all ... i hope that you understand this, thx.


its easy to find out who and what has been banned watch out for inactiveness, and if they come back to life...

its what i do anyway.....

I am a daughter of a High King who is not moved by this world for my God is with me and goes before me, I do not fear because im his
UTC +2:00
FaZi
5 November, 2016, 5:01 PM UTC

Blasphemy said:


FaZi said:


Ok so you know it is not okay but still we have

BIGBIGDATA bots & lots of others.


We have 30+ Limeys

and 20+ Blimeys & they are all active.


Despite knowing the fact it is not okay still they are active in game (because no action was taken). What does this communicate to a player?


Does this mean plarium is taking any action? Or is it vice versa?


Im sure plarium support is being swarmed with messages give it time, these kinda things can't be done over night 

that is their problem, not mine nor anyone else's who pay $ to pay for their salaries. 


They need to increase the work force, if they can't than they should think about selling the company to some one who actually care.


Additionally if they are now swarmed with messages that is their fault because they were dead for multiple weeks.



Additionally Blas, i think your CM should lead from front here, She shouldn't hide on backs of MODS. 


Give the link to her because sometimes such threads are gone into invisibility mode (for her) & hence no reply by COMMUNITY MANAGER.

Th' rougher th' seven seas, th' smoother we sail. Ahoy! ahead ye coward
UTC +3:00
bernd
5 November, 2016, 5:02 PM UTC

sorry i cant believe these bots used to "log in" daily (for what? they didnt do raids at all ...), so them being inactive is no real proof for me ,especially as some of them liberate themselves now after being blocked more then one week. Nobody of us knows which tool is used by RuAl, so nobody can say for sure that These accounts can be banned at all.


the only Thing i can see ingame is that plarium has shut down the "real bots" which were useful for us Players, so most of us cant get enough ressources now anymore. Rual wont care, their bots didnt raid at all.


So as we all cant trust Plarium anymore we want to know which / how many bots are banned - or at least an Explanation why those informations cant be forwarded to us. We see no Need to protect the privacy of non-human bot-accounts.

UTC +1:00
1718998 users registered; 42084 topics; 269765 posts; our newest member:rraehal