Saturday - November 18th - 2017
» Menu

» Login

» OB/Site News

Omerta News Integration
Comments: 26 - Views: 6619 - Votes: 0
War rating
Comments: 6 - Views: 8840 - Votes: 2
Reporters Wanted!
Comments: 2 - Views: 12894 - Votes: 3
» Articles
Date Comments Rating

General Comments & Major Rumors
Comments: 42,690 - Views: 2,773,790 - Votes: 66
16-11 When lego gets boring
Comments: 107 - Views: 3,017 - Votes: 0
14-11 To mine, or not to mine.
Comments: 43 - Views: 1,351 - Votes: 0
12-11 Baltimore Conclusion
Comments: 73 - Views: 4,190 - Votes: 0
06-11 Out of Time ?
Comments: 216 - Views: 7,645 - Votes: 0
05-11 Little Late Don't You Think..?
Comments: 53 - Views: 2,042 - Votes: 0
01-11 Baltimore Trouble
Comments: 191 - Views: 6,678 - Votes: 0
31-10 Getting Drowned With Force
Comments: 41 - Views: 2,529 - Votes: 1
30-10 The End of a Succession
Comments: 39 - Views: 2,441 - Votes: 1
27-10 Independence day
Comments: 166 - Views: 8,887 - Votes: 2
go back
go forward
» Barafranca News

» Mafia News

» Online last 15 minutes

Guests: 145
Total members: 2894
Online: 0 (0%)
Members:
04-07 Omerta hacked!
Author: sbanks
Last updated: 2316d 10h 20m 8s ago by Kyra
Comments: 177
Views: 17,406
Votes: 0 (0 average)
Version: 3.2
Involved families:
article
Today i recieved a PM from mister Anonymousss, claiming he was the one removing the money ingame. The complete irc log with the "hacker" is posted below.

I also added the complete log from the conversation i had with Brando, its added below.

Brando: And of course we are very sorry to the players who lost out. It is a shame that people use exploits, and difficult to exclude these when you have new developers on the team. We will close them later today and consider a rollback as well.


Conclusion of the chat i had with him: He can remove the cash from every player in the game who is kept in pocket. Bank money can't be touched. Money, Bullets, HP's and other stuff can't be added!

BANK YOUR MONEY!!

As curious as i was, i decided to test it..we first tested this at player Yoghami

01:18 Yoghami • Money
01:18 Yoghami • Cash $ 1,090,480
01:18 Yoghami • In bank account $ 600,000

we sent him 1,080,000 extra and told the "hacker" to remove his cash.

--

01:19 sbanks • Anonymousss --> Yoghami
01:19 Anonymousss • ok
01:19 sbanks • tell me when its done xd
01:20 Anonymousss • done
01:20 Anonymousss • took 2 million or something

--

01:20 Yoghami • Cash $ 170,480
01:20 Yoghami • In bank account $ 600,000


After this i decided to crank it up a bit, sorry for the people who got hit, i picked randomly names.

- Dreamland
- Watchurbackk
- Hakkiyeten
- Brando
- Marcel
- Bramblerose


User: Hakkiyeten / (Add to your friends list)
Rank: Godfather
Honour points: 9,949
Status Alive (Offline for 30m 19s)
SMS Status Send SMS
Don of: Pa
Wealth Very rich ($1.000.001 - $5.000.000)

-- *magic trick* --

User: Hakkiyeten / (Add to your friends list)
Rank: Godfather
Honour points: 9,949
Status Alive
SMS Status Send SMS
Don of: Pa
Wealth Nouveau Riche ($100.001 - $500.000)


All users were offline, so they could not have banked the cash!

During this, our reporterbot gave this information about the economy:

(02:22:05) <%NoobSurv> [Economy] Money total: -$8,870,695 to $48,701,233,020
(02:29:05) <%NoobSurv> [Economy] Money total: -$7,940,561 to $48,693,292,459
(02:36:05) <%NoobSurv> [Economy] Money total: -$31,478,968 to $48,661,813,491
(02:41:05) <%NoobSurv> [Economy] Money total: -$45,790,004 to $48,616,023,487
(02:52:05) <%NoobSurv> [Economy] Money total: -$11,748,751 to $48,607,962,266


Bramblerose before:



Bramblerose after:







Update:
After revealing this hack on our site, admins have closed down #reina, in which the hacker was talking with people, and Sbanks has been g-lined.

Update:
#reina has been opened again by the admins, but the hacker has been banned there. He is now visiting #camorra, #krays and #omerta.

Update:
Brando joined #help (with the nick Brandupe, but the host matched) and has given there a statement.
[Brandupe] ok
[Brandupe] So there is clearly some clever dick operating
[Brandupe] With a simple exploit.
[Brandupe] Once we find it we will close it
[Brandupe] We cannot refund anyone's money
[Brandupe] that is shit
[Brandupe] Sorry for that but we cannot track that so not prove that so no refunds
[Brandupe] But
[Brandupe] We will consider our options tomorrow morning when most of crew are back online
[Brandupe] right now it is just me and a couple more crew members
[Brandupe] and devs are sleeping
[Brandupe] I suggest that anyone who has questions about this just leaves

Update:
With a sudden change of heart, Anonymousss has decided to report the exploit he used to Brando.

Update:
Added complete conversation log from Brando.

Update:
Omerta declares in a newspost that the backdoor has been fixed and tomorrow (6-7-11) Bramblerose will give more information!
statements
Session Start: Tue Jul 05 01:12:37 2011
Session Ident: Anonymousss
01:12 Session Ident: Anonymousss ([email protected])
01:12 •
01:12 • Query with Anonymousss/ opened on Tuesday, July 5th 2011, 01:12:37.
01:12 • Total queries: 163/~2.5 per day
01:12 • Queries today: 2
01:12 •
01:12
01:12 Anonymousss • hi important here?
01:12 •
01:12 Whois • Anonymousss [http://www.mibbit.com]
01:12 Address • [email protected]
01:12 Channels • #omerta
01:12 Server • irc.barafranca.com [Omerta]
01:12 Idle • 3secs
01:12 Sign-on • Tue Jul 05 01:12:14 2011 [26secs]
01:12 •
01:12 sbanks • what? xd
01:13 Anonymousss • do you have a account on omerta?
01:13 sbanks • uhm why?
01:13 Anonymousss • i want to proof you something
01:13 sbanks • cant u sent it to pastebin or make screenshots?
01:13 Anonymousss • that i remove money
01:13 sbanks • ow.. that would be nice to see ofc
01:13 Anonymousss • no it would show how its done
01:14 Anonymousss • get a account with 1 million cash
01:14 sbanks • but i dont own an account
01:14 Anonymousss • none?
01:14 Anonymousss • find a friend xD
01:14 sbanks • nope, but you want me to show you can remove that 1m of cash?
01:14 Anonymousss • yea
01:15 sbanks • well hang on.. maybe some1 wants to be a test dummy
01:15 Anonymousss • ok
01:16 sbanks • money needs to be in pocket? bank?
01:16 Anonymousss • pocket only cant touch bank
01:18 sbanks • think i got 1 Anonymousss
01:18 Anonymousss • k xD ingame?
01:18 sbanks • sec, asking
01:19 sbanks • Anonymousss --> Yoghami
01:19 Anonymousss • ok
01:19 sbanks • tell me when its done xd
01:20 Anonymousss • done
01:20 Anonymousss • took 2 million or something
01:20 sbanks • did u first add cash?
01:20 Anonymousss • no
01:20 Anonymousss • User: Dreamland / / / (Add to your friends list) / Action / History
01:21 Anonymousss • look at this guy
01:21 Anonymousss • too rich to be true now
01:21 sbanks • oki
01:21 sbanks • seen it
01:21 sbanks • go :p
01:21 Anonymousss • look now
01:21 Anonymousss • xD
01:22 sbanks • how did you found out ? and are you leaving some families alone? like the fam you are in
01:22 sbanks • and or bloods?
01:22 Anonymousss • no i target all fams but mostly turkish..dont tell that..they will think i am a racist xD
01:23 Anonymousss • seeing how Mafia got angry makes it funny
01:23 sbanks • haha ye
01:23 sbanks • so funny his fampage
01:23 Anonymousss • but i have nothing to do with the downtime now xD
01:23 sbanks • are you doing this by sql injection? or DB access?
01:24 sbanks • i think sql huh, since ur doing 1m / 2m stuff at 1 time or so
01:24 Anonymousss • no that is the weird part, i never got access to the DB
01:24 Anonymousss • so everyone cann be easy now xD
01:24 sbanks • and its only you? or is it a group of people who does it?
01:24 Anonymousss • i didnt steal emails and such
01:24 Anonymousss • only me as far as i know
01:24 sbanks • can you also add money?
01:25 sbanks • remove hp's ?
01:25 sbanks • bullets?
01:25 Anonymousss • no only cash money
01:25 sbanks • and how did you found out?
01:25 Anonymousss • so they should all put money on their banks xD
01:25 Anonymousss • few months ago but couldnt find the motivation to do it this big
01:26 sbanks • well pretty cool xd
01:27 sbanks • are you playing this game still?
01:27 sbanks • or just fuckign around
01:27 Anonymousss • i have a bruglione lackey in some fam xD but its more about toying with the turks
01:28 sbanks • and why the turks?
01:28 Anonymousss • although i did target non-turkish fams too so im no racist :)
01:28 sbanks • haha ok
01:28 sbanks • can i post this log @ our news site?
01:29 Anonymousss • yes sure
01:29 sbanks • u using sql injection?
01:30 Anonymousss • no i dont know anything about sql , also nothing to do with the database
01:30 Anonymousss • or back-doors that admins supposedly fixed in casinos yesterday xD
01:30 sbanks • lol
01:30 sbanks • so... how do you do it!
01:30 Anonymousss • :)
01:31 sbanks • can you remove
01:31 sbanks • Watchurbackk
01:31 sbanks • his money
01:31 Anonymousss • k
01:32 sbanks • done?
01:32 Anonymousss • yes
01:32 sbanks • and now
01:32 sbanks • Hakkiyeten
01:33 Anonymousss • done
01:33 Anonymousss • xD
01:33 sbanks • haha
01:33 sbanks • so funny
01:34 sbanks • Anonymousss
01:34 sbanks • remove brando his cash xddd
01:34 sbanks • can u do that
01:35 Anonymousss • look now xD
01:35 Anonymousss • i had never done an admin before
01:36 sbanks • :D:D:D:
01:36 sbanks • funny
01:36 sbanks • and Marcel ?
01:36 Anonymousss • give me a minute slow proxy xD
01:38 sbanks • tell me when done xd
01:38 sbanks • and then teckna & bramblerose :p
01:38 Anonymousss • it is done
01:38 sbanks • all 3?
01:38 Anonymousss • haha sorry dont want to mess with admins too much
01:39 sbanks • only bramblerose then
01:39 Anonymousss • Marcel is done
01:39 sbanks • :p
01:39 Anonymousss • too risky i am afraid
01:39 sbanks • then u use another proxy after xd
01:39 Anonymousss • pick someone who it will really hurt xD
01:39 sbanks • brando online
01:39 sbanks • so
01:39 sbanks • stop :p
01:39 Anonymousss • that is a good idea xD
01:40 sbanks • we wanted to make a screenshot
01:40 sbanks • from bramblerose
01:40 sbanks • though
01:40 sbanks • for our news item
01:40 sbanks • we had just made a picture where she had cash in her pocket
01:40 Anonymousss • you did not ask the admins to put a logger on her? xD
01:40 sbanks • last request from me :p
01:40 sbanks • nope
01:40 sbanks • i dislike admins
01:41 Anonymousss • ok here we go
01:41 Anonymousss • look now
01:42 sbanks • omg u know what would be funny, but 2 morrow or so.. target every BF owner
01:42 sbanks • they will lose their BF's :')
01:42 Anonymousss • some owners are in fams that i dont want to target xD
01:43 sbanks • awww
01:43 sbanks • oki :]]
01:44 Anonymousss • haha i love targetting the people who are online
01:44 sbanks • :D::D
01:44 Anonymousss • doing moc/oc
01:44 sbanks • hahaha ye
01:44 sbanks • i heard a story of a guy
01:44 sbanks • he said
01:44 sbanks • the MOC profit
01:44 sbanks • got removed
01:44 sbanks • from leader
01:44 sbanks • _o_
01:45 Anonymousss • haah the poor guy
01:45 sbanks • :D:D:
01:46 sbanks • oki Anonymousss
01:46 sbanks • im gonna write the article




04:29 sbanks` • this thing have been going on for a few days, were there really problems with the objects? or it was a wild guess and you closed it hoping it was a bug there?
04:30 Brandupe • Well until we close the exploit I cannot say where it was
04:30 Brandupe • but it was in at least 2 locations
04:30 Brandupe • neither of which was spots
04:30 Brandupe • Both will be closed before 10 am in the morning OT
04:30 Brandupe • (as soon as a dev appears from its lair)
04:31 sbanks` • so there was a bug @ objects? as it was closed, and something got "fixed" and reopend again
04:31 Brandupe • No
04:32 Brandupe • it wasn't in an object either
04:32 Brandupe • last night's attack was elsewhere
04:32 Brandupe • Problem is here that rumour spreads like wildfire on IRC
04:32 Brandupe • of course everyone's backfire was not set to zero on DM
04:32 Brandupe • but
04:32 Brandupe • many believed it was
04:33 sbanks` • ye, have seen a few of those fake rumours every version kinda
04:34 sbanks` • so will the game be closed down tomorrow morning?
04:34 sbanks` • and is a rollback an option?
04:37 Brandupe • Of course that is an option
04:38 Brandupe • I would not like to pre-empt my colleagues and the players though
04:38 Brandupe • Rbs are radical and many may not wish to.
04:38 Brandupe • We'll likely discuss it in about 4 hours.
04:38 sbanks` • ofcourse, but i think it would be the most fair, billions of money got lost on .com
04:39 sbanks` • ofcourse there will be people crying they lost bullets and rp, some people might be alive again, but i think the majority got hit due this exploit
04:40 sbanks` • always two sides of the medal
04:40 Brandupe • Yeah.
04:41 sbanks` • You cant track the money right? so refunds are impossible?
04:42 Brandupe • That's correct.
04:42 Brandupe • Zer once said that if we were to track all accounts every action like that
04:42 Brandupe • we would need a DB about the size of Earth's moon with a CPU the size of Chicago
04:43 Brandupe • Even with lackeys we cannot afford that
04:43 Brandupe • not even Kredu and Swifty could afford that.
04:43 sbanks` • :D
04:44 sbanks` • oki, 2 more things
04:44 sbanks` • did this "anonymouss" guy, already told how he used the exploit? i heard he was willing to tell it
04:46 Brandupe • Yes he told us all about it and apologised too.
04:46 Brandupe • He said he did not really think of the ramifications of his actions
04:46 Brandupe • He seemed fairly overwhelemed really
04:46 Brandupe • But he pointed us to both his known exploits
04:46 Brandupe • and I can confirm that both are due to weak coding on Omerta's part
04:47 Brandupe • Actually both done by people who no longer work with us
04:47 sbanks` • ah ok
04:47 Brandupe • one triallist who was sent home for good yesterday because he a. thought he was God almighty and b. Bugged the shit out of everyone in the office
04:48 sbanks` • haha, ye those you shouldn't keep
04:48 Brandupe • and Weirdgoku who got sacked last week. He was not very good at his job and had some other issues so we called time on him.
04:48 Brandupe • This means that we have one more vacant situation for a trainee dev.
04:48 Brandupe • No we are sick of high-maintenance low-input people.
04:49 Brandupe • No more of that.
05:04 Brandupe • And of course we are very sorry to the players who lost out. It is a shame that people use exploits, and difficult to exclude these when you have new developers on the team.
05:04 Brandupe • We will close them later today and consider a rollback as well.
05:04 sbanks` • alright, i make sure i add that
comments

Add a YouTube movie Add an image Add a link/url Help
Anonymous (20:19:53 - 14-07)
Link Quote
just got hit thursday 14-7, lost 15 mil from my pocket, maybe someone else figured out a way. ofc admins are no help
Rix Netherlands (20:40:30 - 06-07)
Link Quote
Well at least they let something know.

They could also just decide not to post that message and just not let us know anything till they would really come out with a statement.
Anonymous (19:39:53 - 06-07)
Link Quote
Hi all,

The post above said Bramblerose would give you more information today, but this will be later (not today as said in previous post).

Sorry for the delay,

Omerta Crew

Now Bramblerose dont say exactly date bcz she dont know the answer???
gg ridicilous crew ...
Anonymous (19:28:01 - 06-07)
Link Quote
Anonymous at 19:18:15 on 06/07:
Hi all,

The post above said Bramblerose would give you more information today, but this will be later (not today as said in previous post).

Sorry for the delay,

Omerta Crew


Just LOL!! :'D
what a failures there. Unbelievable.

nothing to add on this.. they keep failing!
Anonymous (19:18:15 - 06-07)
Link Quote
Hi all,

The post above said Bramblerose would give you more information today, but this will be later (not today as said in previous post).

Sorry for the delay,

Omerta Crew


Just LOL!! :'D
what a failures there. Unbelievable.
Rix Netherlands (10:32:28 - 06-07)
Link Quote
Cerberiaan at 07:45:25 on 06/07:
Well good they made a newsitem about this.
Sad to see i just pointed 30 min earlier to help crew that people who dont know about OBN or trabot dont know whats happening around, cause latest news object and update object dont give any info.

lets hope they handle this with some caring about the players. but speed of info and discussing this problem aint that promissing. fingers crossed ;)
TraBot has not reported any news around this subject, as far as I know.

Anyway I totally agree with your point. Brando promised they would make a public statement (as in, new news thingy ingame) about what happened and what was going to happen, but still we are clueless.
burnthem (09:31:10 - 06-07)
Link Quote
Octavello at 01:39:04 on 06/07:
Kyra at 00:56:12 on 06/07:
mmmmh at 23:29:58 on 05/07:
I dunno why people keep being anoying with family winning the version

To have an winner, the game had to have 1 begin and 1 ending anounced with fixed dates

that dont happen here, admins reset when they forced to do it so!

This game is too slow, to variable to have any winners, besides all that, I forgot to mention, how does an cheater family be an winner?

anyway bullshit!


agreed.
Very True. There really isn't a clear winner to this game, the game is not designed for it. Basically, the closest you get to a "winner" is a family that dominates for a period of time. In these times, it often is some large alliance, which further muddies the waters. But anyways, different families have different styles. Some start out aggressive and dominate early, but eventually get shot down. There's nothing wrong with that. Others prefer to play the wait game, and then start shooting later on. There's nothing wrong with that either. But to say the last alliance alive is the "winner" is iffy, at best. It's just a style of gameplay,
I think a true goal should be to dominate and be feared for as long as possible. It doesn't matter so much when it happens.


+1 so true
Cerberiaan Netherlands (07:45:25 - 06-07)
Link Quote
Well good they made a newsitem about this.
Sad to see i just pointed 30 min earlier to help crew that people who dont know about OBN or trabot dont know whats happening around, cause latest news object and update object dont give any info.

lets hope they handle this with some caring about the players. but speed of info and discussing this problem aint that promissing. fingers crossed ;)
Octavello United States (01:39:04 - 06-07)
Link Quote
Kyra at 00:56:12 on 06/07:
mmmmh at 23:29:58 on 05/07:
I dunno why people keep being anoying with family winning the version

To have an winner, the game had to have 1 begin and 1 ending anounced with fixed dates

that dont happen here, admins reset when they forced to do it so!

This game is too slow, to variable to have any winners, besides all that, I forgot to mention, how does an cheater family be an winner?

anyway bullshit!


agreed.
Very True. There really isn't a clear winner to this game, the game is not designed for it. Basically, the closest you get to a "winner" is a family that dominates for a period of time. In these times, it often is some large alliance, which further muddies the waters. But anyways, different families have different styles. Some start out aggressive and dominate early, but eventually get shot down. There's nothing wrong with that. Others prefer to play the wait game, and then start shooting later on. There's nothing wrong with that either. But to say the last alliance alive is the "winner" is iffy, at best. It's just a style of gameplay,
I think a true goal should be to dominate and be feared for as long as possible. It doesn't matter so much when it happens.
Moesasji Netherlands (01:01:39 - 06-07)
Link Quote
Anonymous at 21:31:11 on 05/07:
I BET THAT BRANDO MAKE A DEAL WITH HACKER OR ANONYMOSSS
THAT WILL NOT REFUND THE VICTIMS OR ROLLBACK THE GAME
TO WIN KRAYS ++BLOODS
rofl
Kyra Seychelles (00:56:12 - 06-07)
Link Quote
mmmmh at 23:29:58 on 05/07:
I dunno why people keep being anoying with family winning the version

To have an winner, the game had to have 1 begin and 1 ending anounced with fixed dates

that dont happen here, admins reset when they forced to do it so!

This game is too slow, to variable to have any winners, besides all that, I forgot to mention, how does an cheater family be an winner?

anyway bullshit!


agreed.
mmmmh (23:29:58 - 05-07)
Link Quote
I dunno why people keep being anoying with family winning the version

To have an winner, the game had to have 1 begin and 1 ending anounced with fixed dates

that dont happen here, admins reset when they forced to do it so!

This game is too slow, to variable to have any winners, besides all that, I forgot to mention, how does an cheater family be an winner?

anyway bullshit!

Anonymous (21:31:11 - 05-07)
Link Quote
I BET THAT BRANDO MAKE A DEAL WITH HACKER OR ANONYMOSSS
THAT WILL NOT REFUND THE VICTIMS OR ROLLBACK THE GAME
TO WIN KRAYS ++BLOODS
Chain Reaction Machine (20:50:49 - 05-07)
Link Quote
Situation:

Most but 8 specific to-each-other-blooded-or-close fams loose most or big parts of their money.
The ruined fams have no war funds,
Can't provide members with bullet money,
And have to close their objects.
The spared fams keep running their objects
(Eventhough while hacking went on, they or most of them knew that they would be spared after one time since they didn't close their objects?)
Every gambler gambles on the open objects.
More profit for the spared fams.
The difference between ruined and spared fams grow.

The winner of the version is decided.
Unless,
Unless there is a rollback.
Rokii Denmark (20:08:02 - 05-07)
Link Quote
Brando securing the Omerta DB:

http://www.youtube.com/watch?v=7htBb-w9fNw

No hate! <3
Funnyshit (20:07:47 - 05-07)
Link Quote
They only claim it won't happen again. The lost money is probably lost forever.
Anonymous (19:55:00 - 05-07)
Link Quote
Anonymous at 19:38:10 on 05/07:
lol omerta claims to have it fixed.
but the newspost is closed for reply
are they afraid of complains there????????



Maybe they're afraid of whiney flamers acting like they know what's best for all.
Anonymous (19:38:10 - 05-07)
Link Quote
lol omerta claims to have it fixed.
but the newspost is closed for reply
are they afraid of complains there????????

Masc (19:24:50 - 05-07)
Link Quote
What a surprise, once again every mistake and bug is due to bad coding by devs that already left..

I vote for them hiring Rix!
friedel (19:07:19 - 05-07)
Link Quote
where do you see that?

this article messes up my scroller :(