The end of PB streaming ?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Blaze
    Member
    • Feb 2008
    • 64

    The end of PB streaming ?

    As posted by Spanky on the HackHunters forum:

    http://www.pbbans.com/forums/index.php?showtopic=64420

    You need to make sure you have an SGA Account at PBBans's Forums, and read that Topic.

    To sum it all up fast, there was a huge security hole in Evenbalances Software.
    Alot of people knew but relied on people not finding out.

    One guy did find out...
    Basically, people can spoof their streaming info that goes straight back to PB, and get fake bans put in place on the Master Ban List. This is by spoofing their logs on the FTP.

    Literally, any game, any streamed Server, any GUID/player is at risk.
    This counts for every single streaming anti-cheat organisation.
    PsB/PBBans/AOC etc etc etc

    All the Staff at PBBans basically say, unless Evenbalance fix the problems, streaming is over, for real, forever.

    Thing is.. Evenbalance have already said they will now fix the problem, that is what they have said, so it won't be fixed unless Evenbalance do it.

    Some quotes from PBBans Forums for those who can't read the post there:

    Maydax a PBBans Developer:
    We have been doing this since 2003 and ever since that time we strived to be the best and most effective system out there. We today we are forced with the unthinkable.

    On Sept 12, 2008 a modified server streamed fake ban data that was added to the MBI, we have removed the bans in question and the server but the fact is this method tampers with the stream at the server level so no streaming system is safe now. The hackers know it can be done and I'm sure this was only the beginning. This info was posted publicly by Anti-Cheat Inc and i'm sure hackers saw that and finally made their move.

    No amount of screening can detect this and if hackers want to ban innocent players they can do so at will by streaming ANY modified server.

    We are faced with two choices either stay online with the possibility of hackers streaming fake bans that we cannot verify or we close our doors completely. It's a lose - lose situation and it's a very sad day for the anti-cheat community.

    You are the supporters of PBBans and you have gotten us to this point. We feel you have the right to know and give input about this.


    artificialaiming.net/forum/general-discussions/18646-unerring-punkbuster-season-2-we-did-lulz.html


    Ice Man, PB Staff Member:

    no this effects all streaming services PsB, AON, GV ect ect...

    the logs are being "spoofed" server side. Its the end to streaming basically...

    ~Dan~


    Maydax, a PBBans Developer:

    They are hooking into the server memery itself, we have done it ourselves in the past and never found a way to detect it. We also spoofed the rep here and it proved much easier.

    As you can see the video shows a BF2 server itself spamming the violations
    Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.


    We believe they are hooking the server the same was you hook a game and injecting what they want PB to stream.

    They can send ANYTHING, from PBSS data to cvar, md5, etc violations.


    This issue has been known for a long time and now that it's out in the open we are all screwed.

    There is no hole to fix, it's not PB itself, they are modifing the server memory as they do for hacking games.


    RodeoBoB, PBBans Co-Founder:

    Ultimately, I do want to remain online.....but in light of all of this.....we would be dead in less than 6 months. If we stop all new bans being added and continue on as a "server protection" based on the bans already on the bans list, our donations would drop to zero. Who would want to donate to a service that is limping along as a security blanket? If no one else donates from here on out......our hosting expenses will dry up our cash in 4-5 months.

    Tbh, EvenBalance told us they will not fix it and this is why we want to know what you would like to do.


    We are currently cruising on a wing and a prayer........

    foxdie, the father of the Hub, has retired from PBBans over this matter.



    HOW YOU CAN HELP:

    Contact your GSP providers and tell them that EB needs to fix this issue or you will not be running servers anymore
    Contact Activion, EA games, ect ect: tell them that you will not buy any games unless there is a system that works for banning players other then a 2 minute kick. Streaming solves that issue and let them know that EB said they wouldn't fix this issue
    Contact Evenbalance and tell them you want a fix for this

    Sign this petition:


    This is quite serious, all should do what (s)he can to fix this major issue.

    PS: click on 'expand' to read the quote more easily.
    Admin Request Networks!
    !AR!Blaze, Bart - Chief Marketing Officer .



  • Guest's Avatar

    #2
    Re: The end of PB streaming ?

    We will get by this, this is only a slight bump in the road. PBBans and thier SGA's are working on a fix as we speek

    Comment

    • DeadSnipe
      Deputy Chief
      • Feb 2008
      • 457

      #3
      Re: The end of PB streaming ?

      Signed the petition. Terrible news but hopefully there is a solution.
      Play right, play fair... the way it's meant to be!

      Comment

      • MCSgtD
        Deputy Chief
        • Jan 2008
        • 116

        #4
        Re: The end of PB streaming ?

        There is a good reason why EB does not offer a global ban lists for people to use on their servers.  I once had a conversation with the President of EB and he reiterated to me that the goal of PB was the removal of cheaters from the server.  Now you may be noding your head and agreeing with that and think that is what a ban list is for but you'd be wrong.  The ban lists we stream to is to keep people off the server and never let them on whereas EB's goal is to simply remove them from the server, let them come back and then remove them again if thay are still using a cheat.

        The server exploit mentioned has been known for some time and is just that, a SERVER exploit its not the PB software that is at fault but rather the Operating System and underlying commands that handle memory.  This is not something that is fixable by EB persay.  PB would have to take control of all memory on a server...this would more or less put server remntal comapanies out of business as there are typically sevceral gaming servers running on a box at the same time.

        From reading the post over it seems that inorder for them to add false bans they have to have access to the server and server memory.  It could mean that AC sites will have to be a lot more selective about who they allow to stream to them and who they do not.
        Respectfully,

        [MC] Sgt. D
        [MC] Gamers

        Comment

        • AR-BlackHawk
          My Email is DEAD
          • Jan 2008
          • 15

          #5
          Re: The end of PB streaming ?

          @MCSgtD,

          Spot on! Even Balance does not get paided for Fixing ServerSide bugs.
          Also the crackers of this bug claim to be able to Global Ban random players.
          As far as i know that is just compleet bull.

          EvenBalance Claims to me in there latest conversation that NO ban will make it to there MasterServers
          as they simply get filtered out by there systems.

          The only people facing a "small" problem are the streaming (banlist) providers.
          There are MULTIPLE easy solutions for this problem that just stops all MBL Spam.

          Comment

          • greenbean
            Member
            • Apr 2008
            • 46

            #6
            Re: The end of PB streaming ?

            Yeah, I'd even say streaming ACO's are probably past the bump.

            Comment

            Working...