n3tc0d3rZ st4t3m3nt

Statement of Anonymous

sorry to post that link but you have to read what he posted :X
cant paste cause of many pictures in the thread...
if its not allowed to post that link delete the journal but dont ban me please :/

plz dont post links to their site:))

It's been said over and over again: Punkbuster is always right, defensive and will never cause false positives...

...netCoders is proud to finally prove the opposite!

The inability of Punkbuster to detect private cheats has never been questioned - at least from our side. From my perspective looking back on the last 5 years all I can say is that any action from Evenbalance did not severely harm the cheat community.

Instead, the honest player is harassed to play PB games with administration privileges (while Microsoft introduces a more strict model on Vista), local disk drives are scanned and a critical RING0 spyware driver has to be installed. The sad thing is: None of these inconvenient things improved Punkbuster's ability to stop cheating.

These are facts. Another myth yet to be busted is: Punkbuster never fails, if you get kicked then you're a punk. You don't stand a chance to prove the opposite. Nobody would believe you at all. Not even Evenbalance. Filing a support ticket reveals the arrogance and self-assurance of a monoplist that has nothing to fear:

image: pbticketnd0


Well you wont feel sorry for the guy cheating. But was he? Yes he was you'll say... that's the only answer to that question. But Im sorry to teach you better: He wasn't! How can I tell? Well... (yes crossfire)

IT WAS US!

Do we have a fat grin smiley here? It's a special day!

Now how did we manage to do that? Quite easy... Punkbuster - desperate to get our private cheats detected, thought it might be a good idea to randomly sniff any PC's physical (!!!) memory. Basically it's acting like a virus-scanner trying to find blacklisted sequences of bytes found in cheat files. Which isn't not even a bad idea - it's just been used badly. Give a monkey a gun and he shoots himself. Don't blame the gun...

First of all I was surprised to find my private chat aswell as passwords (paypal/online banking/...) just everything inside PnkBstrB's process memory. Thanks to helios for pointing me to this.

image: mozilla%20history00


Do you know what PB is doing with that data? Do you trust them? Of couse you do. Punkbuster never fails. I don't trust them. So I kept digging deeper. After a while I found out what rsHook got detected for: Some noob leaked the files to Punkbuster. As they couldn't manage to reverse or crack them, they've just added some random string to their signature blacklist.

QuoteQuote:
Game: ET v2.60
PB: version (add)
Violation: #80332
Signature dump:
Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F
00000000 2C 20 22 52 69 66 6C 65 20 41 69 6D 20 50 72 65 , "Rifle Aim Pre
00000010 64 69 63 74 69 6F 6E 3A 22 00 diction:".

Neither Rainer nor I could believe what's happening here. All it takes to get kicked is to have these sequences of bytes in a computer's memory, and you will get kicked for #80332, even without hacks!!! That exploit ... no let's call it by it's real name:

GIGANTIC STUPIDITY of Evenbalance

was asking to be exploited. As such we started looking into almost any Punkbuster game and found similar strings. Of course we could not resist to try this on a couple of servers and different games - with surprising results: We were able to kick players from almost any Punkbuster game for different violations.

Where's Punkbuster's defensive attitude here? To yield to despair? If those signature violations you people over in Texas made such a blown-up secret about (#Gamehack, #Multihack, #Aimbot) would be handled with precaution, just like the Corrupted Memory (fried RAM VS memory patch), thousands and thousands of CDKEYs wouldn't be banned and wasted for now!

In other words: YOUR FALSE POSITIVES already caused thousands of innocent people to be banned! Just imagine how many cdkeys have been wasted on Call of Duty 4 already because of that bug? Well alot of keys went down the lavatory eversince we found out, that's for sure

QuoteQuote:
Interview with lio (Team Belgium)
Kicked by nC for #80332
Match GamesTV.org :: Match Details :: Belgium vs Sweden
Innocent Ban PBBans | MBI - BanID 61106 (ae6987d5 | RTCW:Enemy Territory)
Reputation ruined.
Punkbuster reaction: You did cheat. We never fail.

MigrosBudget: Hi lio, please introduce yourself to our readers.

EDiT`lio: Hi I'm Lieven ' lio ' Melsens and started picking up gaming at the age of 14. It all started out with some random games like spec ops etc but on my 15th birthday I ordered RTCW to start playing that. I played RTCW for like 1.5 year and then headed over to ET which I am still playing up to date. I’m coming 21 years old now so you con do the math..

MigrosBudget: What LAN's have you been performing on in the game Enemy Territory?

EDiT`lio: I have been on several lan’s since, I played at some FOM edition which is like the most famous lan in Belgium always reaching a top 3 spot with my team but mostly ending up first. What would you want if your playing with teammates like (mAus, sneek, vila, acid, lio random). And besides that I have been at all the cpc/cdc editions where I have grown every year to get higher and higher. Last cdc4 I ended up 3rd with my team and was considered to be one of the best offline players then..

MigrosBudget: Lets get straight to the point, last week in the nationscup match Belgium versus Sweden you were kicked from the match server for (Gamehack) #80332, what were your first thoughts beside the "wtf" effect?

EDiT`lio: Well on that time I was laughing on vent with my EDiT mates, I have been playing for years with them so they knew this wasn't possible. I was thinking what might have caused that but then I just decided it had to be somekind of bug. A joke that didn't last for to long as the whole community had other thoughts than me and my mates did..


MigrosBudget: As you can see, most of the active clanplayers on crossfire are on your side, none actually believes that you cheated. Even most of the crossfire admins believe you, so what do you think is the reason that Clanbase has banned you within less than half a week after the kick? Normally it takes ages for Clanbase to ban a player if they do it at all.

EDiT`lio: Well you might have heard that I got into some issues with cb admin DoneX, I got kicked and banned on a pbstreaming server which was casting ettv but the guys from Poland had bad pings there so we went to play on another server. He heard about this and then he made us play the server where I got banned on again, I just deleted my etkey in the hope I could play again and it worked so… But before that there was alot of flaming going on with the admin and me so I think he banned us so fast merely on personal reasons. And if its ok I want to add something about our lovely community aswell. You are saying most of the community is standing at my side, that is for the players that have been at lans and the admins that have been at lans. People are always complaining about the fact that there are to much cheaters in ET but when someone gets 'busted' it seems like theres a big party starting where everybody can flame the person in question. Everybody should be sad seeing a player like me might have cheated but no, they just make a media fest from it with me as target, nice community I would call that..

MigrosBudget: So now we heard your opinion about the community, what is your opinion about Punkbuster after this unjustified kick then?

EDiT`lio: Well sometimes I have been thinking why PB is actually there, Punkbuster is mainly busting the public random players that I never get in touch with but if it comes to busting players that are playing in competitive ways I think you will have a very short list. I, as a player can almost immediately tell when playing a 1v1 if a player is aiming normal or not, pb on the other hand is only working with theorie and not with practical things, and thats what makes pb 'not convincing' for me now anyway.

MigrosBudget: Would you continue playing if you would get unbanned from Clanbase or do you think that your reputation was already damaged too much?

EDiT`lio: Well as you might have noticed I'm a pretty hated player in the community aswell, you can be hated for cheating but you can be hated for flaming everyone aswell. And as you might know EDiT might be the team with the worst reputation in the whole community. I never had a really good reputation but for me the game is all about my friends and playing with them. And due to the fact they know I wasn't cheating I would start playing again for sure, the fact that for the first time cb / esl are giving some prize money for their cups might be a big factor also..
MigrosBudget: Well thanks a lot for this interview, I wish you and your team good luck for the coming cups, and I’m pretty sure that your ban will be lifted quite sure, any final words from your side?
EDiT`lio: Thanks you for helping me out with this case and clarify some things for me. I hope for the sake of other players I will be the last player to have experienced something like this.

Oh well what a nice story... I still don't believe a single word you're saying. That guy might have cheated...

We expected that. Who believes punks anyhow. We are the bad guys. So here's another "proof of concept" you will find more difficult to explain: Today we decided to put this up to public after having fun with it for a couple of month. So we chose our beloved friends at crossfire.nu (revenge is sweet, isn't it) to help us out. People wont trust us, but them. They're loyal.

So we put up one of our signatures and send it as a message to their IRC master channel. Soon, more than 300 players got kicked for #80332.

Crossfire 3.0 - A Gaming Community - powered by Game-Hosting.com
Crossfire 3.0 - A Gaming Community - powered by Game-Hosting.com

image: my_personal_thanks_to_xfire


Game over.

Evenbalance will disable these scans or at least remove critical signatures quickly. If you cannot reproduce our results, dont worry. We have all the proof. Punkbuster might fix the terrible mistake, but there is no fix to the damage of it's reputation.
Comments
125
np, ive already read it through my account :)
yes, give them more and more hits. i guess they're laughing their asses of now.
Sorry. The administrator has banned your IP address. To contact the administrator click here

copy paste plzzz
its with pictures and stuff...
Parent
Any pb game? XD
rofl at interview
Delete link and just paste
noone cares about pictures

SHOW US UR COPY PASTE SKILLZZZZZ
paste plx
Make a screenshot of this and paste it.
i wont click this shit, amybe this is the reason why everybody get kicked ? why u browse gamehack sites anyway, pointess
they would hurt their costomers with that so its obviously clean
Parent
conspiracy!
Parent
you cant get fucked by just browsing their forums
Parent
OFC NOT !!! u dont use computer for browsing that forum, naive again!
Parent
Learn how PCs work please, for visiting a site to do anything to you it'd have to put something on your computer or write something to your memory, the first would set off your antivirus, the second can't be done anymore.
Parent
tell that to all the ppl who got kicked by idling in #crossfire and reading the newspost on crossfire...
Parent
Yes, but it can't happen anymore because PB disabled the scanning.
Parent
you're the one being naive actually
Parent
QuoteSo we chose our beloved friends at crossfire.com


.com? :DDDDD
beloved friends? :DDDDD
Parent
they seem to have solved the prob??
didnt get kicked for 20mins now.
last one @ pbbans is 4 minutes ago
Parent
that were other kicks
looks like these guys tried to use the moment and hack it up
but i got kicked 30 mins ago and not on the list
looks like they stopped adding them
Parent
Oh a new conspiracy! :D

I was kicked in the middle of the stream tbh and went Warsow right after so I didn't actually follow the action but I see you're doing your duty! Keep it up soldier!
Parent
yes think so , too
Parent
haha rofl
haha nC gratz :D
Damn bastards!
nC defending lio. That's the first time I think he might rly be cheating! :D
at least giving an interview to those netcoder guys is pretty retarded.
Parent
nc can read everything... no need to hide
Parent
Well to be quite honest with ya, they asked me for the interview and as a ' reward ' if you can even put it that way they would solve the case for me. Giving that interview was like my only hope left for getting unbanned..
Parent
okay, true, but you have to admit that it's not very trustworthy :-/
Parent
well m8, im sure, and I said it before to you, no one believed u hacked...but however....how come u were the first?? *proud*
Parent
You did the right thing, I would've done the interview directly. :)
Parent
That sounds a bit dodgy but hey, they found the problem...
Parent
They made the problem....simple telling it to evenbalance would also solve it.
Parent
you can say everything bout them, but you can't deny tehy're smart x]
+ if i found a bug like that i could probably have used it too for a while :-)
Parent
LMAO is all i can say, PB is the cheapest program ever, we should email this to ID Software
pb is spyware and I already said it a long time ago -.-
Parent
give a monkey a gun and he does what??? plays the piano to "I was born under a wondering star"
clever that innit.....
but that song is nais :D
Parent
epic lulz
The fall of Mcsteve
im banned from every server wtf?
haven't got kicked yet... so i m a sad panda :(
seriously i dont get why they are doing this. i dont think that because of this action someone will buy a cheat :/
Now they have the proofs that PunkBuster (their enemy) sucks. Got it now?
Parent
not, if its so, they r whole dumbasses, coz its known since years that pb sucks, so there is no point to do something against pb!
Parent
they want to show that pb sucks donkey balls. it causes lags, acts like spyware, is buggy and doesn't detect all cheats.

All in all: pb is a fucking failure!

I hope you got it now...
Parent
QuoteAll in all: pb is a fucking failure!


As it wouldn't be known before....
Parent
PunkBuster got owned ............ byebye ET
Congrats nC that was a nice work tbh. Pb sucks donkey balls :\
I agree, unfortunatly you have to give them credit
Parent
Wtf? Stop celebrating nC ffs. It's a fucking group, which earns money with destroying "our" game and who has simply no moral.

That pb is shit was known before and they found a bug, while they were trying to make their private cheats undetectable again. Instead to publish it instantly or to tell it evenbalance they have kicked innoncents and planned to use it for some propaganda shit...and sad to see that u fell for it.
Parent
Indeed but we have to admit that they did a nice work. We are talking about a organization that gets lots of money to make his anticheat from some games such as cod4 etqw and much more. I doubt that new games will use PB. Its a not "trustable" system and they abuse of the privacy (nC found that.. now think if some real hacker find this.. they could use your accounts and get your money etc...).
Parent
Quotethey could use your accounts and get your money etc


Ehm how?
Parent
They scan your memory etc. If you are playing with mozilla logged at bank account.. well, it could be possible if PB save that information and some hacker use it.

engrish
Parent
You are accepting it, while the ET and punkbuster services installation. Your antivir programm is working in the "same" way, so no need to worry...just propaganda bla bla. There is absolutly no evidence that pb does look or stream such as informations to their servers.

P.S.: Correct me, if I wrong...
Parent
Its proven that pb reads the information in your physical memory, as stated in the post. I sincerely doubt that they use it for anything else then trying to detect cheats, but its still there and a lot of people would say thats spyware! :o
Parent
exactly and i haven't said that they use thoose informations for something else. But if someone get access to their database or something , well... :|
Parent
This kind of informations are not in their database imo. :P
Parent
Indeed, thats the worry ;o
Parent
QuoteIts proven that pb reads the information in your physical memory


I didn't want to question it. But it was always known that pb does work so or not? On the one hand a player wants a working anticheat system, on the other hand he doesn't want to "give out such as informations"...that's the price you have to pay and I trust evenbalance there tbh.


I don't like the fact, but I accept that it's probaly needed and I am not afraid of anything, because of it.
Parent
Yer i do agree that its nothing really to be worried about.. but then again as ag0n says its possible that someone can get hold of the information (i dont know if its just stored locally and compared with a list, or sent to a server and analyzed [i guess the first] but either way i spose someone could still view it..) and thats not something im overally keen on.

At the end of the day i guess nc proved the point, even if it was painstakingly obvious to a lot of people beforehand. Its nice that they proved pb can be exploited/wrong though as it will perhaps help those that have got wrongly banned. Although it has fucked a few things up :/
Parent
QuoteIts nice that they proved pb can be exploited/wrong though as it will perhaps help those that have got wrongly banned.


They wouldn't be banned without nC. ^^ They don't deserve any credits, if I see the way how they found it and how they have dealed with it tbh. The only thing I have respect for is their "coding skill", but in the end it's important how you use it. Joseph Goebbels has not deserved any respect or credits, although he was a great talker.
Parent
i didn't mean the people recently banned [like lio and alexl, which should never have been kicked in the first place] i just mean the people that have been kicked for false positives before. However i guess nothing will change, why should it? PB can just claim its a one of and that their software hasn't been giving false positives before. Who knows?! one things clear, thats an extremely stupid way of detecting a hack (not like i could do better though!)
Parent
And now?
Happy?
are they hackers or crackers ?
both imo :O)
Parent
"i-found-a-bug-out'ers"
Parent
unexpected retarded ugly NC boys
Need team to bash nC pmme #netcodersGTFO
How can I tell? Well... (yes crossfire)

IT WAS US!

Do we have a fat grin smiley here? It's a special day!

VERY SAD :///
Taken from
netcoders:
Quoteilos:
*Waiting to play with icebot on CyberGames*
xD


Bulld0g is crying in his bed this night !


LOL
funny thing is bulld0g couldnt give 2 shits about it
Parent
not even one tbh
Parent
anyway, why don't they send a nC lanteam to cdc5? Mamalukes will be there 2 :D
YEAH pb can tell me what was my paypal password then since i lost it!
Almighty pb knows where do you live O_o
SARCASM 100%
Parent
I just dont get it, why netcoders try to destroy a free game by doing a shit like that by reacting against punkbuster, which is doing bad his work, what we all already know since years? What do they wanna prove with it?
They want to prove that cheaters always win, they will fail some day ...
It's some kind of retardness you won't understand them.
Parent
ok and which moral is behind this "cheaters always win"?
if i say "yes" they will feel happy or what?
in this way its called nolife-retarding.
Parent
They have no life coding scripts/bots anything.
Just think a while have you ever been such a nolife to take so much time to look for this bug or code hax which takes 1month(?)
Imo it's impossible to say what do they have in their heads(I mean why do they do that).
Parent
This will all be forgotten in a week. Just like all the vixor vs mama fight crap.
ah and what about kicks? afaik u cant play on servers without to be kicked?
Parent
fyi, there are two Mztik's... one is a Belgian lowskiller that codes cheats, the other is from the UK and won SC with 141.
if i understanded right, some random noob have add files to pb system and if u have this file( which isnt cheat) kick u coz gamehack?
fail :/ it's a pb exploit, pb is searching for specific strings all over your system. If someone sends you these strings pb detects that and thinks it's hax.
Parent
i didnt read all post:P but lio and alexL will got unbanned now?
Parent
if you're reading messages from mirc,msn,xfire,crossfire also on notepad i guess, with:

want XXXXXXX , wanna XXXXXXXX ?
want XXXXXXX" , xxx today! (too much retards spammed them)

you will get banned for multihack even if u're not cheating...
Parent
Unbelievable that that people call themselves professional programmers, it should've been obvious that this was going to happen if they detect it this way.
AAA-fucking-MEN
Parent
the first time i agree with you
Parent
How can having private passwords,paypal and online banking info be legal?
Read license agreement next time

o/
Parent
Do ppl actually read them? :o
Parent
You are accepting it, while the ET and punkbuster services installation. Your antivir programm is working in the "same" way, so no need to worry...just propaganda bla bla. There is absolutly no evidence that pb does look or stream such as informations to their servers.


P.S.: Correct me, if I wrong...
Parent
bb PunkBuster, was fun
whos gonna buy they uberprivate hacks anymore?
btw evenbalance is the mockery of the internet. ssh

edit: waiting for cf department comic about the situation:D
GIGANTIC STUPIDITY of Evenbalance

lold
ehh? DO NOT WANT PB
WELL DONE NC!!!!!!!!!
PROUD!
Is that paypal shit true?
Maybe not because while your connected to paypal connection is SSL Secured. But who knows...
Parent
Back to top