SMJS

23 | I modify games in my free time.

Discord: @smjs

[SMJS @SMJSGaming]

GDIntercept is out for most platforms including:
- Android (32/64 bit)
- Windows
- Macbook (M1 chipset)

[SMJS @SMJSGaming]

@RigMatter12 This is mostly a test object. In truth this is 4 lines of code using the API I made😅

[SMJS @SMJSGaming]

#GeometryDash Had some fun with a custom object I made to test my upcoming object collab mod.

[SMJS @SMJSGaming]

@thehorizon2b2t Because most of these maps do not consider erosion which smoothed out the coasts on earth making most planets look jagged

[SMJS @SMJSGaming]

Trying to get synced animations in the editor is somehow really hard even though the objects are created AND updated in the same ticks... I have no clue why (also really do ignore the ghost object I somehow made an object which is a dupe of an existing object on save)

[SMJS @SMJSGaming]

@ZURC_99 I mean you're surprised?
This would be far from the first time encryption methods had a universal key. By now I've just come to expect this from tools which aren't public source.

[SMJS @SMJSGaming]

Gotta love it when you spent 5 days debugging just to find out that your hook was partially inlined on Windows making it pretty much useless (images shown is the uses of the method on Windows VS Android)

[SMJS @SMJSGaming]

@bakathesussy Besides the subdomains which are already there
what for?

[SMJS @SMJSGaming]

#GeometryDash So currently I have all the Android app IDs robtop uses for his GD variants connected to my Discord account (I own the domain)

[SMJS @SMJSGaming]

@1aubreygraham1 Likely just following the trend back then of everything having an X in the name

[SMJS @SMJSGaming]

@ddeaen Nah they redirect to Geode

[SMJS @SMJSGaming]

Just realized it's geometryjumplite rather than geometrydashlite so fixing that small error right now

[SMJS @SMJSGaming]

@finobedoticu @brint Yup

[SMJS @SMJSGaming]

#GeometryDash So considering RobTop never did the due diligence he should have as a European company to report what was leaked. I may as well just reveal one thing I kept secret for quite a while to not immediately soil his reputation.

In the DB leak were unencrypted passwords.

[SMJS @SMJSGaming]

If you think about it. Some of the most critical logins on the web (sftp & ssh which are the protocols to remotely communicate with a server) don't support 2 factor authentication. Kind of a scary thought).

[SMJS @SMJSGaming]

@33YYYYYYY @chrissvector @RobTopGames 1) 2 way obfuscation is useless
2) Nah, most apps use a one time access token which can be revoked at any time when it's compromised. Besides no party involved should have any reason to leave a password 2 way encrypted/encoded since you should test against the hash.

[SMJS @SMJSGaming]

@ArcadiacManiac @ClingingBogGMD @tricipital14 Anyone confirmed compromised through this person's messages was already informed. But unless RobTop goes through the SQL logs (which sadly he isn't doing) I have no way to confirm the scale of the exploit abuse.

[SMJS @SMJSGaming]

@ArcadiacManiac @ClingingBogGMD @tricipital14 Due to sensitivity on this topic I'm not providing anything identifiable but please refer to my reply on the top comment in this thread to explain how non temp this really is.

[SMJS @SMJSGaming]

@ArcadiacManiac @ClingingBogGMD @tricipital14 This same person also got into a bunch of accounts at the time, so there's a high likelihood that they used this same table or used a login bypass trick you can execute when you have read access to the DB.

[SMJS @SMJSGaming]

@ArcadiacManiac @ClingingBogGMD @tricipital14 Currently the person from who we found evidence of knowing about this exploit before pen testers got to it has been inactive. I've always said that it's currently unknown to what extend the breach was abused. Just that the possibility of this data was leaked.

[SMJS @SMJSGaming]

@tricipital14 Basically rob seems to have made this table to find common passwords bots check for so that he can blacklist these. However, he just straight up captures raw login inputs from anyone to achieve this. This table has also existed for years.

[SMJS @SMJSGaming]

@greyogd He did in the sense that he immediately patched it once it was reported. But when I told him that others had also found it and that he legally has to disclose that publicly he completely ignored it.