Notice Emergency Server Check 19/09/13

lol alirhgt thx for info hahaha good luck on everything hope everythign goes right =)

 

That's my question too... Good luck with this server check!

 

But there's no plug for my internet outside

 

It's great that the hacker is some butthurt kid who has no social life. Go get a social life kid.

Anyway, it's being worked on and this is a rather bigger problem than what the server has had in the past, so...

 

Now I have to get a life this Friday night QQ

 

so it should be up 6:00pm PST. less than two hours!

 

I believe you read that wrong. According to Matt's update it will be up 14:00 BST which is 6am PST.

 

So long...

 

And here I thought E-Server Check meant Electronic-Server Check 0_________o

 

I want to give everyone an update. I'm not going to lie, the exploit is a very simple one but the patch is nothing short of extremely difficult. The good news is, we have been able to replicate what we believe was done. The issue is in actually patching this so it does not happen.

Basically, the hacker gets an ID unique to your character. You don't have to interact with him, simply changing channels and spawning on his map gives him that ID he needs. At that point, all he needs to do is intercept a packet being sent between his client and the server in order to tell the server "Hey, login as GM John character instead of hacker" and he's in. The difficulty is that this is the exact same thing that happens when it is a legitimate request between the actual character owner's client and the server. So what we're trying to do now is figure out a sort of "hand shake" that will ensure only the account owner can access that character. However, we are limited with what we can do because the Maple Client itself cannot be edited, so we can only work on the server side with what's being sent to us.

I assure you we have been working very hard to figure out a solution (I spent over 6 hours on a Skype call with Dante last night where we did nothing but talk through possible solutions and test tons of theories).

While this may seem like bad news, I find it slightly uplifting. This exploit is found in many other v62 servers, but the hacker chose to exploit it on ours. Why? Because clearly we are the most popular of the private v62 servers and he realized he could affect more people here than anywhere else. So thank you (seriously) MapleRoyalers, for you have made us so successful that these stupid script kiddies come here and try to affect us because even they know, we're the best v62 private server around.

I will keep you updated as more develops. I do not provide ETAs so don't ask. My philosophy is: We want this back up as much as you do. So when we feel we have it figured out, we will most certainly start the server back up, but not until then.

 

DONT GIVE UP GMs WE GOT YOUR BACK. ITS A PAIN BUT DONT GIVE UP <333333

 

Is there perhaps something you could implement that you have to do when you log in? For example, an NPC always pops up and requires a code (aka password) to begin playing. This would not eliminate things like character deletion, but it could at least pause them from doing anything in-game.

I don't know the specifics or limits of the "hack," so if they would be able to find out your code then I am not sure.

edit: If you are looking for a more permanent fix or update then just ignore this xP

 

I like the idea of temporary fix like what ekul suggested (if it's even possible)
just until you'll find a permanent fix ofc

 

lol.. just lol

 

I appreciate your very thought out and helpful reply, but please elaborate. If this was something already suggested, my apologies. I did not read the whole thread. I know it is possible to make an NPC that you cannot exit from, so why not add it?

 

'

The server will back?

 

If we were to implement that, you would have to enter a code every time you CCed, changed maps, basically did anything. Trust me, it would be a huge waste of time to code that plus a huge waste of your time to even do simple grinding. Thanks for the suggestion though. Don't want anyone discouraged by me shooting down any ideas

 

I think the problem should be fixed properly and I'd bet the gm's think so too. A temporary fix will just lead to the same situation happening again right?

The Gm's are working very hard and its amazing the amount of work they are putting in

a few days without maple wont hurt any1, especially to protect your account from getting hacked etc..

keep up the good work ^^

 

Date to back? I want to know, will have weekes, or months to do that?