@yashar So wait, it was voiced by another person. People sound like each other all the time... Is she saying this other woman that sounds like her should be permanently out of a job? That's absolutely not ok.
5/5
While not nearly as bad as a full on RCE, IF this is true, it's... pretty bad. The fact that a third party can be in my client executing commands is scary. How long until they find a way to scape the game client and execute machine code?
1/5 Based on everything we know so far, this is my current theory for the Apex hack:
- Actor intercepts communication between client and server and starts playing with server commands for fun or to cheat.
@PirateSoftware#apex
4/5
- Figure out a way to get specific clients to execute certain in-game commands, like drawing menus.
- From there they figure out a way to send commands to turn on aimbot / show all players on screen. (How they do this... no idea).
@PirateSoftware@HugoDerave@jmeyels@ImperialHal I also wonder if these kind of RPC connections can be initiated from the machine to reach out to the jump box? NAT would take it from there and route the packets back.
@PirateSoftware@HugoDerave@jmeyels@ImperialHal Yeah... It is weird. Maybe some sort of NAT/uPnp trickery? I would love to telnet to Hals current public IP on port 135 and see what we get.
@MonsoonGG If they are overseas US laws have no reach unless those countries also have some laws that would apply or the country has extradition treaties. Hard to imagine someone would be extradited due to this.
@AntiCheatPD@PlayApex@TeddyEAC@ImLunaHey to continue my other comment, this to me looks like it's drawn using the game UI... Meaning they don't necessarily need to jailbreak outside the game client.
@ImLunaHey@AntiCheatPD@PlayApex@TeddyEAC Could be. It's also possible nothing extra was actually installed on their computers and those menus are in-game only. Obviously exploiting the client but wouldn't need access to the rest of the system.
@MonsoonGG@TSM_Reps It will happen with most jobs bro. Even doing things you absolutely love you'll have those days when you REALLY don't feel like doing it, and you have to do it anyway. Repeat many times and it starts to wear out the good vibes. Also it was nice to meet you in Raleigh!
@CamiPar91@Cundox22@Payoneer Por lo pronto te recomendaría que dejes de usar cualquier plataforma que no ofrece 2FA por una de las app de Authenticator.