Tweet
As posted by Spanky on the HackHunters forum:
This is quite serious, all should do what (s)he can to fix this major issue.
PS: click on 'expand' to read the quote more easily.
http://www.pbbans.com/forums/index.php?showtopic=64420
You need to make sure you have an SGA Account at PBBans's Forums, and read that Topic.
To sum it all up fast, there was a huge security hole in Evenbalances Software.
Alot of people knew but relied on people not finding out.
One guy did find out...
Basically, people can spoof their streaming info that goes straight back to PB, and get fake bans put in place on the Master Ban List. This is by spoofing their logs on the FTP.
Literally, any game, any streamed Server, any GUID/player is at risk.
This counts for every single streaming anti-cheat organisation.
PsB/PBBans/AOC etc etc etc
All the Staff at PBBans basically say, unless Evenbalance fix the problems, streaming is over, for real, forever.
Thing is.. Evenbalance have already said they will now fix the problem, that is what they have said, so it won't be fixed unless Evenbalance do it.
Some quotes from PBBans Forums for those who can't read the post there:
Maydax a PBBans Developer:
We have been doing this since 2003 and ever since that time we strived to be the best and most effective system out there. We today we are forced with the unthinkable.
On Sept 12, 2008 a modified server streamed fake ban data that was added to the MBI, we have removed the bans in question and the server but the fact is this method tampers with the stream at the server level so no streaming system is safe now. The hackers know it can be done and I'm sure this was only the beginning. This info was posted publicly by Anti-Cheat Inc and i'm sure hackers saw that and finally made their move.
No amount of screening can detect this and if hackers want to ban innocent players they can do so at will by streaming ANY modified server.
We are faced with two choices either stay online with the possibility of hackers streaming fake bans that we cannot verify or we close our doors completely. It's a lose - lose situation and it's a very sad day for the anti-cheat community.
You are the supporters of PBBans and you have gotten us to this point. We feel you have the right to know and give input about this.
artificialaiming.net/forum/general-discussions/18646-unerring-punkbuster-season-2-we-did-lulz.html
Ice Man, PB Staff Member:
no this effects all streaming services PsB, AON, GV ect ect...
the logs are being "spoofed" server side. Its the end to streaming basically...
~Dan~
Maydax, a PBBans Developer:
They are hooking into the server memery itself, we have done it ourselves in the past and never found a way to detect it. We also spoofed the rep here and it proved much easier.
As you can see the video shows a BF2 server itself spamming the violations
http://www.youtube.com/watch?v=joHlPx7mdQ4&fmt=18
We believe they are hooking the server the same was you hook a game and injecting what they want PB to stream.
They can send ANYTHING, from PBSS data to cvar, md5, etc violations.
This issue has been known for a long time and now that it's out in the open we are all screwed.
There is no hole to fix, it's not PB itself, they are modifing the server memory as they do for hacking games.
RodeoBoB, PBBans Co-Founder:
Ultimately, I do want to remain online.....but in light of all of this.....we would be dead in less than 6 months. If we stop all new bans being added and continue on as a "server protection" based on the bans already on the bans list, our donations would drop to zero. Who would want to donate to a service that is limping along as a security blanket? If no one else donates from here on out......our hosting expenses will dry up our cash in 4-5 months.
Tbh, EvenBalance told us they will not fix it and this is why we want to know what you would like to do.
We are currently cruising on a wing and a prayer........
foxdie, the father of the Hub, has retired from PBBans over this matter.
HOW YOU CAN HELP:
Contact your GSP providers and tell them that EB needs to fix this issue or you will not be running servers anymore
Contact Activion, EA games, ect ect: tell them that you will not buy any games unless there is a system that works for banning players other then a 2 minute kick. Streaming solves that issue and let them know that EB said they wouldn't fix this issue
Contact Evenbalance and tell them you want a fix for this
Sign this petition:
http://www.petitiononline.com/fixpb001/petition.html
You need to make sure you have an SGA Account at PBBans's Forums, and read that Topic.
To sum it all up fast, there was a huge security hole in Evenbalances Software.
Alot of people knew but relied on people not finding out.
One guy did find out...
Basically, people can spoof their streaming info that goes straight back to PB, and get fake bans put in place on the Master Ban List. This is by spoofing their logs on the FTP.
Literally, any game, any streamed Server, any GUID/player is at risk.
This counts for every single streaming anti-cheat organisation.
PsB/PBBans/AOC etc etc etc
All the Staff at PBBans basically say, unless Evenbalance fix the problems, streaming is over, for real, forever.
Thing is.. Evenbalance have already said they will now fix the problem, that is what they have said, so it won't be fixed unless Evenbalance do it.
Some quotes from PBBans Forums for those who can't read the post there:
Maydax a PBBans Developer:
We have been doing this since 2003 and ever since that time we strived to be the best and most effective system out there. We today we are forced with the unthinkable.
On Sept 12, 2008 a modified server streamed fake ban data that was added to the MBI, we have removed the bans in question and the server but the fact is this method tampers with the stream at the server level so no streaming system is safe now. The hackers know it can be done and I'm sure this was only the beginning. This info was posted publicly by Anti-Cheat Inc and i'm sure hackers saw that and finally made their move.
No amount of screening can detect this and if hackers want to ban innocent players they can do so at will by streaming ANY modified server.
We are faced with two choices either stay online with the possibility of hackers streaming fake bans that we cannot verify or we close our doors completely. It's a lose - lose situation and it's a very sad day for the anti-cheat community.
You are the supporters of PBBans and you have gotten us to this point. We feel you have the right to know and give input about this.
artificialaiming.net/forum/general-discussions/18646-unerring-punkbuster-season-2-we-did-lulz.html
Ice Man, PB Staff Member:
no this effects all streaming services PsB, AON, GV ect ect...
the logs are being "spoofed" server side. Its the end to streaming basically...
~Dan~
Maydax, a PBBans Developer:
They are hooking into the server memery itself, we have done it ourselves in the past and never found a way to detect it. We also spoofed the rep here and it proved much easier.
As you can see the video shows a BF2 server itself spamming the violations
http://www.youtube.com/watch?v=joHlPx7mdQ4&fmt=18
We believe they are hooking the server the same was you hook a game and injecting what they want PB to stream.
They can send ANYTHING, from PBSS data to cvar, md5, etc violations.
This issue has been known for a long time and now that it's out in the open we are all screwed.
There is no hole to fix, it's not PB itself, they are modifing the server memory as they do for hacking games.
RodeoBoB, PBBans Co-Founder:
Ultimately, I do want to remain online.....but in light of all of this.....we would be dead in less than 6 months. If we stop all new bans being added and continue on as a "server protection" based on the bans already on the bans list, our donations would drop to zero. Who would want to donate to a service that is limping along as a security blanket? If no one else donates from here on out......our hosting expenses will dry up our cash in 4-5 months.
Tbh, EvenBalance told us they will not fix it and this is why we want to know what you would like to do.
We are currently cruising on a wing and a prayer........
foxdie, the father of the Hub, has retired from PBBans over this matter.
HOW YOU CAN HELP:
Contact your GSP providers and tell them that EB needs to fix this issue or you will not be running servers anymore
Contact Activion, EA games, ect ect: tell them that you will not buy any games unless there is a system that works for banning players other then a 2 minute kick. Streaming solves that issue and let them know that EB said they wouldn't fix this issue
Contact Evenbalance and tell them you want a fix for this
Sign this petition:
http://www.petitiononline.com/fixpb001/petition.html
PS: click on 'expand' to read the quote more easily.
Comment