Saturday - November 30th - 2024
» Menu

» Login

» OB/Site News

Omerta News Integration
Comments: 58 - Views: 54561 - Votes: 0
War rating
Comments: 10 - Views: 26296 - Votes: 4
Reporters Wanted!
Comments: 2 - Views: 18300 - Votes: 3
» Articles
Date Comments Rating

General Comments & Major Rumors
Comments: 57,985 - Views: 15,815,958 - Votes: 81
Endless Struggle !
Comments: 511 - Views: 17,252 - Votes: 0
23-09 Reset → 30 September 2022, Friday → 12:00 OT
Comments: 70 - Views: 8,799 - Votes: 0
30-09 Welcome to Round #40!
Comments: 2 - Views: 2,128 - Votes: 0
19-09 Congratulations Reichsthaler!
Comments: 0 - Views: 2,019 - Votes: 0
01-09 Not Penny's boat..
Comments: 72 - Views: 18,047 - Votes: 0
21-08 First Family!
Comments: 6 - Views: 2,572 - Votes: 0
12-08 Welcome to Round #39
Comments: 5 - Views: 2,475 - Votes: 0
03-08 Reset → 12 August 2022, Friday → 10:00 OT
Comments: 17 - Views: 5,176 - Votes: 0
27-07 Congratulations Vengeance!
Comments: 8 - Views: 2,668 - Votes: 0
go back
go forward
» Barafranca News

No news found. Reset in progress?
» Online last 15 minutes

Guests: 547
Total members: 3748
Online: 0 (0%)
Members:
04-07 Omerta hacked!
Author: sbanks
Last updated: 4886d 5h 39m 38s ago by Kyra
Comments: 178
Views: 82,269
Votes: 0 (0 average)
Version: 3.2
Involved families:
article
Today i recieved a PM from mister Anonymousss, claiming he was the one removing the money ingame. The complete irc log with the "hacker" is posted below.

I also added the complete log from the conversation i had with Brando, its added below.

Brando: And of course we are very sorry to the players who lost out. It is a shame that people use exploits, and difficult to exclude these when you have new developers on the team. We will close them later today and consider a rollback as well.


Conclusion of the chat i had with him: He can remove the cash from every player in the game who is kept in pocket. Bank money can't be touched. Money, Bullets, HP's and other stuff can't be added!

BANK YOUR MONEY!!

As curious as i was, i decided to test it..we first tested this at player Yoghami

01:18 Yoghami • Money
01:18 Yoghami • Cash $ 1,090,480
01:18 Yoghami • In bank account $ 600,000

we sent him 1,080,000 extra and told the "hacker" to remove his cash.

--

01:19 sbanks • Anonymousss --> Yoghami
01:19 Anonymousss • ok
01:19 sbanks • tell me when its done xd
01:20 Anonymousss • done
01:20 Anonymousss • took 2 million or something

--

01:20 Yoghami • Cash $ 170,480
01:20 Yoghami • In bank account $ 600,000


After this i decided to crank it up a bit, sorry for the people who got hit, i picked randomly names.

- Dreamland
- Watchurbackk
- Hakkiyeten
- Brando
- Marcel
- Bramblerose


User: Hakkiyeten / (Add to your friends list)
Rank: Godfather
Honour points: 9,949
Status Alive (Offline for 30m 19s)
SMS Status Send SMS
Don of: Pa
Wealth Very rich ($1.000.001 - $5.000.000)

-- *magic trick* --

User: Hakkiyeten / (Add to your friends list)
Rank: Godfather
Honour points: 9,949
Status Alive
SMS Status Send SMS
Don of: Pa
Wealth Nouveau Riche ($100.001 - $500.000)


All users were offline, so they could not have banked the cash!

During this, our reporterbot gave this information about the economy:

(02:22:05) <%NoobSurv> [Economy] Money total: -$8,870,695 to $48,701,233,020
(02:29:05) <%NoobSurv> [Economy] Money total: -$7,940,561 to $48,693,292,459
(02:36:05) <%NoobSurv> [Economy] Money total: -$31,478,968 to $48,661,813,491
(02:41:05) <%NoobSurv> [Economy] Money total: -$45,790,004 to $48,616,023,487
(02:52:05) <%NoobSurv> [Economy] Money total: -$11,748,751 to $48,607,962,266


Bramblerose before:



Bramblerose after:







Update:
After revealing this hack on our site, admins have closed down #reina, in which the hacker was talking with people, and Sbanks has been g-lined.

Update:
#reina has been opened again by the admins, but the hacker has been banned there. He is now visiting #camorra, #krays and #omerta.

Update:
Brando joined #help (with the nick Brandupe, but the host matched) and has given there a statement.
[Brandupe] ok
[Brandupe] So there is clearly some clever dick operating
[Brandupe] With a simple exploit.
[Brandupe] Once we find it we will close it
[Brandupe] We cannot refund anyone's money
[Brandupe] that is shit
[Brandupe] Sorry for that but we cannot track that so not prove that so no refunds
[Brandupe] But
[Brandupe] We will consider our options tomorrow morning when most of crew are back online
[Brandupe] right now it is just me and a couple more crew members
[Brandupe] and devs are sleeping
[Brandupe] I suggest that anyone who has questions about this just leaves

Update:
With a sudden change of heart, Anonymousss has decided to report the exploit he used to Brando.

Update:
Added complete conversation log from Brando.

Update:
Omerta declares in a newspost that the backdoor has been fixed and tomorrow (6-7-11) Bramblerose will give more information!
statements
Session Start: Tue Jul 05 01:12:37 2011
Session Ident: Anonymousss
01:12 Session Ident: Anonymousss ([email protected])
01:12 •
01:12 • Query with Anonymousss/ opened on Tuesday, July 5th 2011, 01:12:37.
01:12 • Total queries: 163/~2.5 per day
01:12 • Queries today: 2
01:12 •
01:12
01:12 Anonymousss • hi important here?
01:12 •
01:12 Whois • Anonymousss [http://www.mibbit.com]
01:12 Address • [email protected]
01:12 Channels • #omerta
01:12 Server • irc.barafranca.com [Omerta]
01:12 Idle • 3secs
01:12 Sign-on • Tue Jul 05 01:12:14 2011 [26secs]
01:12 •
01:12 sbanks • what? xd
01:13 Anonymousss • do you have a account on omerta?
01:13 sbanks • uhm why?
01:13 Anonymousss • i want to proof you something
01:13 sbanks • cant u sent it to pastebin or make screenshots?
01:13 Anonymousss • that i remove money
01:13 sbanks • ow.. that would be nice to see ofc
01:13 Anonymousss • no it would show how its done
01:14 Anonymousss • get a account with 1 million cash
01:14 sbanks • but i dont own an account
01:14 Anonymousss • none?
01:14 Anonymousss • find a friend xD
01:14 sbanks • nope, but you want me to show you can remove that 1m of cash?
01:14 Anonymousss • yea
01:15 sbanks • well hang on.. maybe some1 wants to be a test dummy
01:15 Anonymousss • ok
01:16 sbanks • money needs to be in pocket? bank?
01:16 Anonymousss • pocket only cant touch bank
01:18 sbanks • think i got 1 Anonymousss
01:18 Anonymousss • k xD ingame?
01:18 sbanks • sec, asking
01:19 sbanks • Anonymousss --> Yoghami
01:19 Anonymousss • ok
01:19 sbanks • tell me when its done xd
01:20 Anonymousss • done
01:20 Anonymousss • took 2 million or something
01:20 sbanks • did u first add cash?
01:20 Anonymousss • no
01:20 Anonymousss • User: Dreamland / / / (Add to your friends list) / Action / History
01:21 Anonymousss • look at this guy
01:21 Anonymousss • too rich to be true now
01:21 sbanks • oki
01:21 sbanks • seen it
01:21 sbanks • go :p
01:21 Anonymousss • look now
01:21 Anonymousss • xD
01:22 sbanks • how did you found out ? and are you leaving some families alone? like the fam you are in
01:22 sbanks • and or bloods?
01:22 Anonymousss • no i target all fams but mostly turkish..dont tell that..they will think i am a racist xD
01:23 Anonymousss • seeing how Mafia got angry makes it funny
01:23 sbanks • haha ye
01:23 sbanks • so funny his fampage
01:23 Anonymousss • but i have nothing to do with the downtime now xD
01:23 sbanks • are you doing this by sql injection? or DB access?
01:24 sbanks • i think sql huh, since ur doing 1m / 2m stuff at 1 time or so
01:24 Anonymousss • no that is the weird part, i never got access to the DB
01:24 Anonymousss • so everyone cann be easy now xD
01:24 sbanks • and its only you? or is it a group of people who does it?
01:24 Anonymousss • i didnt steal emails and such
01:24 Anonymousss • only me as far as i know
01:24 sbanks • can you also add money?
01:25 sbanks • remove hp's ?
01:25 sbanks • bullets?
01:25 Anonymousss • no only cash money
01:25 sbanks • and how did you found out?
01:25 Anonymousss • so they should all put money on their banks xD
01:25 Anonymousss • few months ago but couldnt find the motivation to do it this big
01:26 sbanks • well pretty cool xd
01:27 sbanks • are you playing this game still?
01:27 sbanks • or just fuckign around
01:27 Anonymousss • i have a bruglione lackey in some fam xD but its more about toying with the turks
01:28 sbanks • and why the turks?
01:28 Anonymousss • although i did target non-turkish fams too so im no racist :)
01:28 sbanks • haha ok
01:28 sbanks • can i post this log @ our news site?
01:29 Anonymousss • yes sure
01:29 sbanks • u using sql injection?
01:30 Anonymousss • no i dont know anything about sql , also nothing to do with the database
01:30 Anonymousss • or back-doors that admins supposedly fixed in casinos yesterday xD
01:30 sbanks • lol
01:30 sbanks • so... how do you do it!
01:30 Anonymousss • :)
01:31 sbanks • can you remove
01:31 sbanks • Watchurbackk
01:31 sbanks • his money
01:31 Anonymousss • k
01:32 sbanks • done?
01:32 Anonymousss • yes
01:32 sbanks • and now
01:32 sbanks • Hakkiyeten
01:33 Anonymousss • done
01:33 Anonymousss • xD
01:33 sbanks • haha
01:33 sbanks • so funny
01:34 sbanks • Anonymousss
01:34 sbanks • remove brando his cash xddd
01:34 sbanks • can u do that
01:35 Anonymousss • look now xD
01:35 Anonymousss • i had never done an admin before
01:36 sbanks • :D:D:D:
01:36 sbanks • funny
01:36 sbanks • and Marcel ?
01:36 Anonymousss • give me a minute slow proxy xD
01:38 sbanks • tell me when done xd
01:38 sbanks • and then teckna & bramblerose :p
01:38 Anonymousss • it is done
01:38 sbanks • all 3?
01:38 Anonymousss • haha sorry dont want to mess with admins too much
01:39 sbanks • only bramblerose then
01:39 Anonymousss • Marcel is done
01:39 sbanks • :p
01:39 Anonymousss • too risky i am afraid
01:39 sbanks • then u use another proxy after xd
01:39 Anonymousss • pick someone who it will really hurt xD
01:39 sbanks • brando online
01:39 sbanks • so
01:39 sbanks • stop :p
01:39 Anonymousss • that is a good idea xD
01:40 sbanks • we wanted to make a screenshot
01:40 sbanks • from bramblerose
01:40 sbanks • though
01:40 sbanks • for our news item
01:40 sbanks • we had just made a picture where she had cash in her pocket
01:40 Anonymousss • you did not ask the admins to put a logger on her? xD
01:40 sbanks • last request from me :p
01:40 sbanks • nope
01:40 sbanks • i dislike admins
01:41 Anonymousss • ok here we go
01:41 Anonymousss • look now
01:42 sbanks • omg u know what would be funny, but 2 morrow or so.. target every BF owner
01:42 sbanks • they will lose their BF's :')
01:42 Anonymousss • some owners are in fams that i dont want to target xD
01:43 sbanks • awww
01:43 sbanks • oki :]]
01:44 Anonymousss • haha i love targetting the people who are online
01:44 sbanks • :D::D
01:44 Anonymousss • doing moc/oc
01:44 sbanks • hahaha ye
01:44 sbanks • i heard a story of a guy
01:44 sbanks • he said
01:44 sbanks • the MOC profit
01:44 sbanks • got removed
01:44 sbanks • from leader
01:44 sbanks • _o_
01:45 Anonymousss • haah the poor guy
01:45 sbanks • :D:D:
01:46 sbanks • oki Anonymousss
01:46 sbanks • im gonna write the article




04:29 sbanks` • this thing have been going on for a few days, were there really problems with the objects? or it was a wild guess and you closed it hoping it was a bug there?
04:30 Brandupe • Well until we close the exploit I cannot say where it was
04:30 Brandupe • but it was in at least 2 locations
04:30 Brandupe • neither of which was spots
04:30 Brandupe • Both will be closed before 10 am in the morning OT
04:30 Brandupe • (as soon as a dev appears from its lair)
04:31 sbanks` • so there was a bug @ objects? as it was closed, and something got "fixed" and reopend again
04:31 Brandupe • No
04:32 Brandupe • it wasn't in an object either
04:32 Brandupe • last night's attack was elsewhere
04:32 Brandupe • Problem is here that rumour spreads like wildfire on IRC
04:32 Brandupe • of course everyone's backfire was not set to zero on DM
04:32 Brandupe • but
04:32 Brandupe • many believed it was
04:33 sbanks` • ye, have seen a few of those fake rumours every version kinda
04:34 sbanks` • so will the game be closed down tomorrow morning?
04:34 sbanks` • and is a rollback an option?
04:37 Brandupe • Of course that is an option
04:38 Brandupe • I would not like to pre-empt my colleagues and the players though
04:38 Brandupe • Rbs are radical and many may not wish to.
04:38 Brandupe • We'll likely discuss it in about 4 hours.
04:38 sbanks` • ofcourse, but i think it would be the most fair, billions of money got lost on .com
04:39 sbanks` • ofcourse there will be people crying they lost bullets and rp, some people might be alive again, but i think the majority got hit due this exploit
04:40 sbanks` • always two sides of the medal
04:40 Brandupe • Yeah.
04:41 sbanks` • You cant track the money right? so refunds are impossible?
04:42 Brandupe • That's correct.
04:42 Brandupe • Zer once said that if we were to track all accounts every action like that
04:42 Brandupe • we would need a DB about the size of Earth's moon with a CPU the size of Chicago
04:43 Brandupe • Even with lackeys we cannot afford that
04:43 Brandupe • not even Kredu and Swifty could afford that.
04:43 sbanks` • :D
04:44 sbanks` • oki, 2 more things
04:44 sbanks` • did this "anonymouss" guy, already told how he used the exploit? i heard he was willing to tell it
04:46 Brandupe • Yes he told us all about it and apologised too.
04:46 Brandupe • He said he did not really think of the ramifications of his actions
04:46 Brandupe • He seemed fairly overwhelemed really
04:46 Brandupe • But he pointed us to both his known exploits
04:46 Brandupe • and I can confirm that both are due to weak coding on Omerta's part
04:47 Brandupe • Actually both done by people who no longer work with us
04:47 sbanks` • ah ok
04:47 Brandupe • one triallist who was sent home for good yesterday because he a. thought he was God almighty and b. Bugged the shit out of everyone in the office
04:48 sbanks` • haha, ye those you shouldn't keep
04:48 Brandupe • and Weirdgoku who got sacked last week. He was not very good at his job and had some other issues so we called time on him.
04:48 Brandupe • This means that we have one more vacant situation for a trainee dev.
04:48 Brandupe • No we are sick of high-maintenance low-input people.
04:49 Brandupe • No more of that.
05:04 Brandupe • And of course we are very sorry to the players who lost out. It is a shame that people use exploits, and difficult to exclude these when you have new developers on the team.
05:04 Brandupe • We will close them later today and consider a rollback as well.
05:04 sbanks` • alright, i make sure i add that
comments

Add a YouTube movie Add an image Add a link/url Help
Deston Palestinian Territory, Occupied (00:42:38 - 05-07)
Link Quote
[02:42:11] * Alliance|OFF was kicked by ChanServ (This channel has been closed)
[02:42:11] * Barayev was kicked by ChanServ (This channel has been closed)
[02:42:11] * Carpio was kicked by ChanServ (This channel has been closed)
[02:42:11] * Veronica was kicked by ChanServ (This channel has been closed)
[02:42:11] * Soad was kicked by ChanServ (This channel has been closed)
[02:42:11] * juju was kicked by ChanServ (This channel has been closed)
[02:42:11] * LeitzZz was kicked by ChanServ (This channel has been closed)
[02:42:11] * Aho was kicked by ChanServ (This channel has been closed)
[02:42:11] * Anonymousss was kicked by ChanServ (This channel has been closed)
[02:42:11] * Ibra was kicked by ChanServ (This channel has been closed)
[02:42:11] * Suicida| was kicked by ChanServ (This channel has been closed)
[02:42:11] * You were kicked by ChanServ (This channel has been closed)
[02:42:11] * Attempting to rejoin channel #reina
[02:42:11] * Unable to join channel (invite only)

:(
Rix Netherlands (00:42:29 - 05-07)
Link Quote
Admins have closed #reina :')
Anonymous (00:40:51 - 05-07)
Link Quote
hahaha nice one :")
ehrman Turkey (00:39:08 - 05-07)
Link Quote
take out every admins cash!
even their real money
make them poor D
Anonymous (00:37:42 - 05-07)
Link Quote
lol good 1 :D
Acidum Denmark (00:36:58 - 05-07)
Link Quote
Ralf`zZz at 00:35:13 on 05/07:
the game is getting pretty more fucked up every single day

and that is why we love it ;)
Tycho Netherlands (00:36:57 - 05-07)
Link Quote
We still don't know how he did :')
Ralf`zZz (00:35:13 - 05-07)
Link Quote
the game is getting pretty more fucked up every single day
Acidum Denmark (00:34:52 - 05-07)
Link Quote
If this is true and so, it's pretty darn funny in a way xD
sbanks Guatemala (00:34:34 - 05-07)
Link Quote
ehrman at 00:32:47 on 05/07:
sbanks you are mean :')

01:42 sbanks • omg u know what would be funny, but 2 morrow or so.. target every BF owner
01:42 sbanks • they will lose their BF's :')

game is fucked up lets go swimming \o/


haha ye i am, but sshhH :p
evanmidnight (00:33:02 - 05-07)
Link Quote
Robbing admins cash.

You just made my day xD
ehrman Turkey (00:32:47 - 05-07)
Link Quote
sbanks you are mean :')

01:42 sbanks • omg u know what would be funny, but 2 morrow or so.. target every BF owner
01:42 sbanks • they will lose their BF's :')

game is fucked up lets go swimming \o/
Anonymousss (00:32:15 - 05-07)
Link Quote
im in #reina taking requests
Moonside (00:30:09 - 05-07)
Link Quote
omfg
Anonymous (00:29:56 - 05-07)
Link Quote
+1
gilly (00:27:54 - 05-07)
Link Quote
01:12 Session Ident: Anonymousss ([email protected])

hope admins can find this guy xD
Anonymous (00:27:30 - 05-07)
Link Quote
http://trololololololololololo.com/
Deston Palestinian Territory, Occupied (00:25:19 - 05-07)
Link Quote
01:23 Anonymousss • seeing how Mafia got angry makes it funny