The inside story of GOA's problem!!! *MUST SEE*

S

Serdan

Guest
Found it in my cache:


--------------------------------------------------------------------------------------
The inside story (10/09/03)

First words:

I would like to apologize for lying to all the people asking about what happened to my accounts during the past month. Obviously I, contrary to what I said, knew why my accounts had been banned, which I guess a lot of you probably figured out anyway. I'll get back to that later.
I also realize that this post will agitate a great deal of people who will be slagging me off, but as I got screwed over by GOA, and won't be playing again, I really don't care what people will say or think about me. I just thought the community deserved to know what really happened.
People are likely to be blaming me for all GOA's systems being down for the past 3 weeks, cause you need a scapegoat, and now you have one. To be honest, I couldn't care less. If you feel like you need to blame someone else than GOA, you can blame me.
In no way is this written to "win" sympathy from anyone.
English isn't my mother tongue, so bare with my written english.
I don't have any precise information on the technical aspect of this story (ie. how information was obtained) as, like described below, MrX was the backbone.
I have intentionally left out some bits of the story that contained a lot of "confidential" information from GOA, which I obviously have no interest in publishing.
It all began about 5 months ago, when I got to know a nice person (hereafter referred to as MrX) through a DAoC Emulator project, Dawn of Light. The friendship with MrX didn't really get interesting until about 2 months ago, when he confronted me, saying he had gained access to a gamemaster account on one of the german servers. Obviously I didn't believe MrX, so I went to Avalon to create a character, to have him prove that he did indeed have gamemaster status. By the time he had ported me to the Hibernian Dragonlair and altered my level to 70, I was convinced. MrX had indeed obtained access to a gamemaster account. He played around with altering my character for about 15 minutes until I decided it was too risky, and logged off the account. This all happened the night between the 22nd and 23rd July. I later, that same day, proceeded to submit a RightNow report about a "Hacked GM account", and also contacted Kemor (Prydwen Gamemaster) directly over ICQ telling him about the incident. I also had them wipe the level 70 stalker off my account that was created the night before. Needless to say, I never mentioned the reporting to MrX, and he didn't seem to care about the gamemaster account not working anymore at the time either. Also, as you might have guessed, the RightNow ticket was handled within 10 minutes, which must be some kind of a record.

As the day went by, MrX told me he found some cool documents, which he proceeded to send to me. Of course, I was curious, and started to read through the documents he had sent me. The documents were the internal Customer Support manuals from GOA. While I understood very little about the contents of those documents, I started to wonder where MrX got all this stuff from. Up until this point I hadn't questioned him about that. I didn't give it much more thought, and just ignored it. One day later, 24th of July, MrX contacted me again, asking me to log on to Carnac, a new french server. I'm not a complete moron, and I thought to myself "I bet he got hold of another GM account" and then proceeded to log on to Carnac. Surely enough, MrX had himself another character with gamemaster status, and wanted to play around some more. I had to leave for a few hours, and told him I would be back later that same evening. I returned the night between 24th and 25th of July around 1am, and at that time MrX had figured out how to create new working gamemaster characters. I won't bore you with all the details about what we did, but mostly we did harmless stuff like flying around, hitting epic mobs while invulnerable and stuff like that. I decided at the time not to report the incident again, and to be honest I don't really remember why. I guess my curiosity about what MrX was able to just shadowed my conscience so much I completely ignored the fact that what we were doing ingame was exploiting.

A couple of days later, 27th of July, MrX had obtained gamemaster accounts to all the european servers. I got greedy, and wanted to be able to do what he was doing (in terms of ingame actions) on the english servers, which is where I played, so I had him promote characters on my personal accounts to gamemasters on excalibur and prydwen. At the time, I didn't give much thought about my accounts getting banned, which was probably the biggest mistake I ever made. I mean, obviously they would find out eventually, and when they did, the chance of my accounts not getting banned would be very slim. But, I still went ahead and have gamemaster characters made. At this time, MrX had also got hold of the actual gamemaster manual, which he had also sent my way, so not knowing the right commands for doing stuff was not an issue anymore.

About 2 weeks passed without talking a lot with MrX, so I figured he had lost interest in what he was doing, so I didn't give it much thought. But, 12th of August, MrX once again contacted me very breifly, and sent me a character analysis tool for the us servers which wasn't working, so actually I have no idea why he sent it to me. I guess it was just a way to show me that he wasn't "done" yet. Another 4 days passed, now 16th of August, before I talked to MrX again, and this time he contacted me because he apparently needed a character promoted to gamemaster on Prydwen. I was busy at the time, but the day after, 17th of August, I promoted his character to gamemaster.

This is about when things started to go bad (in my point of view). 18th of August around noon, my accounts (2) were terminated. This is about 3 weeks after it all started. I submit a ticket to RightNow asking why I had been banned, as I hadn't got any notice about it. Obviously I knew why I had been banned, but I wanted to hear it from GOA, but as you might have guessed, all I got was a typical standard form answere saying "You account has been banned for multiple illegal activities".

That same evening, MrX had his account(s) banned as well. Up until this point, all I knew was MrX had access to a lot of GM accounts, but boys was I in for a suprise. Apparently, the time where we hadn't been communicating, MrX had been harvesting information from the GOA network. Obviously I won't share the information he gave me, but he had access to almost everything inside, that being RightNow, databases, gameservers and support/gm client machines. He even packed a copy of one of the gameservers for us to download! At this point, I was starting to get cold feet. Part of me was thinking, "I'm banned, why not have some fun with it" but the other was thinking "This is getting way out of hand".

After being frustrated with the RightNow answer I got, I decided to grab a couple of random unused accounts from the RightNow interface and cause some havoc. A good friend of mine, who will remain unnamed, joined me that evening with the "event". As you might have figured out, the "event" i'm talking about is the one that happened at APK in Emain on Prydwen the night between 20th and 21st of August. After about an hours fun with various epic mobs, we decided to log off. We had a great laugh doing that, and I was personally "snooping" (listening in on) the Bad Omen group that was in Emain at that time, and from what I could tell they were having fun as well. And my apologies to Blejsarus, the other person that was with me that evening seemed to hold a grudge against you, so he pretty much just put /stick on your ass and spawned mobs in your trail. :)

During the day of the 21st of August, I decided to confess my sins. I told MrX that I was going to come clean with GOA and tell them about what I did, and needless to say he wasn't too happy about that, since that would involve me giving GOA all the information he gathered for the past month. So I proceeded to contact Lawrence (a German Gamemaster) on IRC, and asked him if I gave them all the information I had (which supposedly could help them close their security breach) could I get my personal accounts reopened. At that time they still didn't know what information I could give, but Lawrence told me he would ask his teamleader (or supervisor) and let me know. He came back to me a couple of minutes later, saying that if I had information that could help them close the security breach, he had been authorized to reopen my accounts. This is also why I didn't come clean about what happened sooner, as I was hoping to get my accounts, and characters, back without too much information getting "out". I then proceeded to hand in all the information I had, which resulted in a 4 hour chat. Lawrence the told me, that he would pass the information to Kemor, who was the one investigating the case, and any further contact would be made by him. I later that same day asked Kemor about an approximately time of my accounts being reopened, and the answer was "early next week", that being around 25th/26th of August.

Nothing happened for 3 weeks. I was held off by being told, by Kemor, that they couldn't reopen my accounts because of RightNow being down. Then today, 10th of September, after contacting Kemor on ICQ, he told me one of my accounts had been reopened. I logged on, and was suprised to see the account completely stripped of characters. I contacted Kemor once again, asking what happened to my characters, and why only one of my accounts had been reopened when the agreement was reopening both my accounts. The answer I got was "I was told only to open one". Needless to say I wasn't very pleased with that answer, as logs I have of all the chatsessions clearly show the agreement was to reopen both my accounts. I then proceeded to ask why all my characters had been stripped, since that was never mentioned to me in the 1 month period. The answer was "You got your account back, be glad, period". Again I was really displeased by the answer I got. I know many of you will say "haha you muppet, that's what you deserved" and you might be right, but nonetheless I made an agreement with Lawrence upon first contact, and they screwed me over. So, now I have one account with all the characters stripped from it, which is also why I decided to write this "confession", as I very much doubt I will ever be playing again, and the community deserved to know what happened instead of all the lies published by GOA/Mythic.

As some of you might think after reading this (if you made it this far) is that i'm making all this up to slag off GOA even further. However, I have logs of all the chatsessions I had with Lawrence/Kemor from day one, which I have been reading through while writing this, and nowhere did they mention stripping off all my characters, or did they mention I would only get one of my two accounts reopened. In the end, the "good cop bad cop" act Lawrence and Kemor put up almost had me fooled.

It's been a nice 17 months of playing on and off, but unless GOA decides to do a 180 and stick to their original agreement this will be my official goodbye.



Signed,

Laroma
 
S

scarffs

Guest
Howcome this is a five star thread ?
Is it the views or replies over time ?
Obviously its not total relies or views since the real life pic thread isnt five star...just wondering.
 
L

Larssi

Guest
It's been a nice 17 months of playing on and off, but unless GOA decides to do a 180 and stick to their original agreement this will be my official goodbye.

I don't personally think GOA ows this person/these person anything. These persons rather ow GOA all the costs and lost business income tbh. If no law suite follows, it just tells how (international) laws for computing crimes aren't ready yet for these kind of things.

I can see the GOAs view on returning the account and deleting chars from it. It's account which has been used to violate their system and one of many accounts with possibly one or more GM chars etc. It's quite understandable that they'd minimize further security risks by clearing up any and all accounts having any part here. It's not like they ow these persons to put some people working in order to create safe duplicates of all their characters. These people put many employees into extra work for big costs.

I agree with people who say that one should be considered lucky to have account re-opened (even as empty) after the stunts pulled. Even more lucky if now law suites follow...

If these people are nice people like some say, it's sample of how nice people can do wrong things when enough greed and opportunity mixes. Using tools and information stolen to violate a system is not right and should be legally a crime. Even if someone else does it and just hands you the tools. You fail to report it, but instead use them (esp after you get access to servers with own chars in them). Just as guilty. Writing a confession in order to try and save own accounts after realizing you're gonna get caught ain't a big moral victory.

Maybe next time, if you don't want to face the consiquences, just don't do it?

My symphaties to community members who're still without access after many weeks, just because one or two person wanted to have a little bit of fun. I'm sure they'd call it innocent fun...
 
J

Jupitus

Guest
Laroma and MrX = twatheads.

<smiles wryly at the childish attempt to hang on to characters after realising what a twat he/she'd been>
 
B

Bagloor

Guest
Originally posted by scarffs
Howcome this is a five star thread ?
Is it the views or replies over time ?
Obviously its not total relies or views since the real life pic thread isnt five star...just wondering.

Hint... Look at the right side almost at the bottom on the page :)
 
N

Nivellen

Guest
Originally posted by scarffs
Howcome this is a five star thread ?
Is it the views or replies over time ?
Obviously its not total relies or views since the real life pic thread isnt five star...just wondering.
Cause some1 rated it five stars - *hint* it was me :)
Theres a rating bar at the bottom near the reply button.
 
O

old.yaruar

Guest
Originally posted by Aussie-
who the fuck cares what he did, not like its the end of the world.

the sub downtime annoys me alot more :eek:
SO if I clone your credit card and go on a spending spree and your account gets closed for a month and you can't draw any money out during the investigation you'd be happy as a pig in shit then ;-P

It's not the end of the world.
 
W

Whoodoo_RD

Guest
Well all i can add is I hope the little fun you had atthe expense of the rest of us was worth it. Sorry you didnt get youre accounts back in order, but then again the punishment fits the crime.

You and MrX knew exactly what you were doing, you had a manual, that says you knew it. You know the rough CoC and EULA, you know roughly what cyber crime is, and tbh you dont seem like a stupid person, although MrX I feel is a real dumbass.

Hopefully it may even put off other cheaters here, who knows.
 
N

Nivellen

Guest
Come on guys lets hit that 100 post mark with this thread!

Damn if it werent for Mr X and Laroma we'd be happily playing along dammit dammit dammit i wouldnt be sitting here for hours clicking on the damned account section :p How many more maniacs like me are there out there?
 
T

Tesla Monkor

Guest
I think both can look forward to damage claims of several 10's of thousands of Euros for their actions. I doubt it'll ever get that far, but it would be justified.
 
F

freeq

Guest
bump

DING 100! :clap:


sorry college is just soo boring, i could be at home spamming the account button :( DOH!
 
C

charmsdark

Guest
The inside story (10/09/03)
So I proceeded to contact Lawrence (a German Gamemaster) on IRC, and asked him if I gave them all the information I had (which supposedly could help them close their security breach) could I get my personal accounts reopened. At that time they still didn't know what information I could give, but Lawrence told me he would ask his teamleader (or supervisor) and let me know. He came back to me a couple of minutes later, saying that if I had information that could help them close the security breach, he had been authorized to reopen my accounts.


Well hey, if you wanna be really picky then the only way GOA broke their promise in that case was to only reopen one of his/hers accounts rather than both of them. Nothing mentioned about him/her getting his/her chars back, only that the accounts would be reopened.

Personally I think he/she should be happy he/she even got one account reopened after what was done and how much hazzle it caused everyone.
 
S

Stormm

Guest
dont know about Laromia but i would imagine mr.x is in the shiat

i for one have been given 1 months free subs because of this - and how many more have across the servers. that will add up to a substantial sum. plus all the claims GOA can make for time spent fixing it (rather than working on actual normal day to day stuff) plus the bad publicity etc...

Laromia really should have just reported it first - but really the cause of all this comes down to mr.x
 
A

Ala

Guest
F u Laroma

Ur a dog.

Ur a wet urself when GOA got onto u and like the dog u r u told them everything. I bet u even cried irl.

Imo ur just as guilty as the hacker.

Thousand of players suffered and are still suffering as a direct result of your actions .

U irl gimp.

Just to reiterate...

F u Laroma
 
O

old.Laryssa

Guest
Originally posted by Ala
F u Laroma

Ur a dog.

Ur a wet urself when GOA got onto u and like the dog u r u told them everything. I bet u even cried irl.

Imo ur just as guilty as the hacker.

Thousand of players suffered and are still suffering as a direct result of your actions .

U irl gimp.

Just to reiterate...

F u Laroma

word, he is a sad twat
 
T

Theiir

Guest
Originally posted by heath
The guy is a twat...the people who defend him are twats. He did something very wrong. End of story.
I'm sick of all the flame posts! What he did was wrong, yes, but if you knew him you would know he wasn't a twat, but a really nice person. As Mid|Max said, im sure many of you people would have done the same.
You should admire his guts for confessing this. ;)

(Dunno if this has been written by anyone else since I cba to read all of the posts)

PS. Will miss you Laroma :(
 
N

-Nxs-

Guest
I also cant be assed ot read all the posts here far to many - but any chance to increase my post count :)

ITs nice to know what actualy happened now, and I cant blame GOA for not restoring the characters fully. Personaly this game means alot to me and I do spend way to much time playing - in that situation i know it sounds hard to believe as we all like to play - but I would have passed the information onto GOA right away,

Complaining that GOA welched on the deal and did not restore charaters after you played around with GM access on the servers is kinda silly.

Anyway - thank you for posting what happened, it was nice reading and will hopefully force GOA to secure their systems in future.
 
O

old.Laryssa

Guest
Originally posted by Theiir
You should admire his guts for confessing this. ;)

actually only Laroma abused the powers openly on the users ;)
MrX only looked things up as far as I can read out of the thread.
 
H

heilel

Guest
I wouldn't be surprised if both these guys get sued bigtime by GOA what with loss of time, manpower money, customers and god knows what else, that would add up to a LOT of money
 
O

old.Laryssa

Guest
Originally posted by heilel
I wouldn't be surprised if both these guys get sued bigtime by GOA what with loss of time, manpower money, customers and god knows what else, that would add up to a LOT of money

at least they found out about their bad security system - they should cheer that the hacker only looked and not crippeled internal systems, placed viruses and stuff.
 
C

chretien

Guest
How do you know he didn't? I'd imagine that Goa have spent the last three weeks verifying every last file, system process and application on their servers. I doubt they'd post about it if they found anything, if Mr X had a grudge with Goa and had half a clue as to what to do with the full access he clearly had, he'd be an idiot not to leave some presents hidden in some obscure runtime application.
 
O

old.Laryssa

Guest
well GOA lied to us as they announced on the german news that the attack came from an ex-employee.

I guess they were pretty surprised as the hacker walked into their systems.

Only let GOA appear in a very bad light - just imagine how many hackers did it before and got our logins/pwds/private data without being noticed since there was no kid who screwed it up coz he couldn't handle the punishment.
 
H

heilel

Guest
Well, the transcript in question never said MRx WASN'T a GOA Ex-employee, so maybe it was.
 
C

chretien

Guest
Am I missing something? What in that account rules out an attack from an ex-employee? Mr X could have been an ex employee or in contact with one.
I don't see any proof that Goa lied here.
 
O

old.Laryssa

Guest
Originally posted by chretien
I don't see any proof that Goa lied here.

I have no proof but the kid didn't mention that he was an ex-employee either.

Atm GOA just trying to keep the face on the market as serious publisher hiding behind a scared kid who was the unstable factor in a hacking of their weakly secured systems.

my 2 cents.

Do u really think the subs/rightnow were down coz they needed 2/3 weeks to check on their files.

I bet they had to reprogram everything coz it was highly unsecure using open ports and stuff - i'm not a security expert but I can imagine that the whole GOA platform lacked much security until the hacking.
 
A

Aarweenie

Guest
Originally posted by old.moriath
Well i think its wrong to defend anyone who has , thro his or her actions, seriously impacted a companies business and 1,000's of peoples entertainment.

I'm sure the people who get raped by guys they meet on the net think there nice before the crime or they wouldn't meet them. Just goes to show you can't judge people like that.

And to defend them in public when so many people have been affected negatively just shows poor judgement or lack or social understanding imo.

And for GOA to give that person an account back is imo absolutely unacceptable as there statements are that hackers/cheaters will be banned. They can't say ooo except in this case.

Those are my morals ;-) pull them apart if you like. If you do tho your showing yourself as bad as the hacker. And i use hacker in the sense of unauthorised use of a computer system. Which clearly happened.

First of all... Blejs didn't defend the actions Laroma did... he said Laroma is a nice guy, not that she is innocent... if you've ever been into a prison you can see that people sitting there isn't bloodthursty monsters that hate everyone... just because someone has done something "criminal" doesn't mean that he/she can't be a nice person...

Second... Laroma wasn't the one shutting down everything... GOA did... might have to be because of Laromas and MrX actions... mostly because of MrX actions... since he was the one acually hacking the servers... Laroma just used the info MrX gave her... not saying she didn't do anything wrong... just that MrX have a greater part in this then Laroma...

GOA did almost what I would have done... only thing they did that I wouldn't have done is to make the agreement to give back the account... then I wouldn't have to take any form of shit when not giving the chars back... agreements are agreements... if GOA agrees on restoring the account if she would give back all info she got... then she should get her account restored... I haven't read the chat loggs of what was agreed.. but if she fullfilled her part of the agreement GOA should fullfill their... if they intended not to fullfill their part of the agreement then they shouldn't have made the agreement at all...

My morals are that no matter who you make deals with you should fullfill your part if the one you make the agreement with fullfill their...
 
A

Aarweenie

Guest
Originally posted by SB_Mackem
Originally posted by Aarweenie


I know where White Rose gets it ethics from then....


Explain?


If you read all the post your Guildmaster, Moriath, said that Blejs, the Guildmaster of Bad Omen, was defending Laroma when he said:

Originally posted by Mid_Blejsarus
just fyi, laroma is 1 of the nicest person i meet (in game)
And i really hope she get her chars back, very nice person.
i was mentioned!! :D "Blejsarus" :D but i had my savage there tho :p and it sure was a blast that evening :)
Wondered why i had 3dragons going for me :p now i know :D

basiclly... he says Laroma is a nice person... and that she should get her chars back... not a word of that she wasn't doing this or something like that...


Moriath also said (more or less) that BO ethics are to defend hackers and cheaters...


so basiclly... I made him taste his own medication... accusing White Rose for haveing ethics to bend words so they make the author look like a bad person...

all apologizes too all the Members of White Rose... just that I do not respect the way your Guildmaster Moriath makes some of his arguments...
 
O

old.Laryssa

Guest
Yeah, what a nice person who was pissed at GOA and spawned random epics all over the place.

12y old?
 

Users who are viewing this thread

Top Bottom