Taj (Windower team-member, and FFXIwiki whistleblower) hacks 9 accounts, steals gil.

Vandoura said:
Is not the Windower, i mean the Plugin Taj made, of cause it doesn't have "Net-Functions", but if Taj want to turn evil and create a keylogger that steal everyone info that downloaded his plugin, he can secretly make that plugin net-functionable without the victim noticing.
Click to expand...

I repeat:
EVERYBODY PANIC!
 
I'm fairly sure Taj is going to be watched like a hawk from here on out, and any releases he makes will be examined with extremely close scrutiny.

And by lacking fear of repercussions, I was referring to social repercussions. I'm pretty sure Taj was confident that the worst thing that could happen to him socially was a sort of slap on the wrist (which is what a lot of people were willing to settle for) and then it would be back to business as usual.

Other repercussions may have him hunkered down in his basement just waiting for someone better than him to do something unspeakable, and to be honest, in my opinion he deserves it.
 
I'm not a programmer, so if it sounds impossible/implausible let me know.

What if someone made a 2 part hack in a similar vein like how compound glues work. Say version "X" of a windower has the beginning sequence for a keylogger, then a few updates/addons/patches to the same windower, they were to finish with the original plan of implementing a keylogger without anyone actually knowing it until its too late. Is something like that possible, or is that just my paranoia kicking in? And if so, how would one even begin to look for something like that unless they knew what to look for?

Edit: Bah! Posted w/o reading the whole thing about firewalls and such.
 
Last edited:
Keylogger in windower has been debunked blah blah blah..

Rorschach... freaking awesome avatar.

Thats all, good night.
 
Last edited:
Taj is shit in my book now, that's for sure. xiclopedia I can understand. Innocent accounts? That's a bit too far.

It's a shame he made good plugins. I sincerely hope he's thrown out of windower development. Even if there's no net code in there now, it'd be way too much of a pain for the other devs to have to scan his future releases, I imagine.
 
Dejavu said:
someone should write an obnoxious obsecenly obvious keylogger on windower plugin page and see how many people download it. Or just to see the responces you get from the community.. Have it do something really stupid too like continuioiusly sign ur guy up for pankatron
Click to expand...
I would download it...
 
Rorschach said:
Is something like that possible, or is that just my paranoia kicking in? And if so, how would one even begin to look for something like that unless they knew what to look for?
Click to expand...

In order for a program to connect to the internet it needs to ask the Operating System some things, it can't just do it on its own, and if you have a software firewall that isn't shitty, it will probably give you a nice little popup asking if you want to allow windower.exe to access the internet. Sure such a plugin may catch some people off gaurd who downloaded it fast and don't have any security, but it would be noticed within seconds of release by random people. He can hide net functions as much as he likes, but in the end of the day, it has to do a call to the operating system to be able to send stuff out to the internet.

Think of a firewall as a mailman who opens mail before sending it out, god knows how someone convinced your dog to write your credit card numbers to a random address, but the mailman will ask you "you sure you want to do that?"

I guess theoretically, he could make the windower send tells of your PoL id/password to him, actually I guess that's a possibility lol. Hope I'm not giving anyone ideas =P I don't think it's a stretch to say the windower can hide outgoing tells from the chatlog, considering it can already insert things, read from chat, and such.
 
Daveman,
windower.exe always can ask an autorized program to send
the info out, even if your firewall controls all outgoing connections (just ask an e-mailer to send an e-mail for example).
 
Last edited:
Winklewil said:
He hacked nine accounts. Eight of them were completely innocent; the one player out of the nine that his followers are trying to use to justify the whole mess as "vigilante justice" admitted to buying gil ONCE, back in 2004, and a negligible amount at that.
Click to expand...

You can buy gil...but only in small amounts?
 
Klop_ said:
Daveman,
windower.exe always can ask an autorized program to send
the info out, even if your firewall controls all outgoing connections (just ask an e-mailer to send an e-mail for example).
Click to expand...

My firewall goes as far as ask if you want a program to access another program, I know every windower update I'm asked if I want to allow it to access PoL, I'd get a secondary box asking if I wanted it to send something through port25 (email), or access any other program, and since the bad thing is likely to be a plugin, the popup will come as soon as a load the game (not just PoL) which would be a super-red flag

Anyone who types their password and ID in game is an idiot. SMS ftw!
Click to expand...
I meant more along the lines of the plugin gets your password/id from PoL, then it sends a 'hidden' tell to a specific character, without you ever noticing
 
Kelyon said:
You can buy gil...but only in small amounts?
Click to expand...

I think the point was more along the lines of that buying a small amount of gil only once three years ago and since learning how to properly make money (enough that the dude got himself an Aegis) doesn't mean you should have your account hacked, items stolen, server changed, and name changed all because some kid wants some e-boobs.
 
EVERYTHING that goes into windower code goes through StarHawk so...
 
Too bad we can't give him the Cicero treatment and nail his severed hands to the Rostra.
 
Raesvelg said:
I'm fairly sure Taj is going to be watched like a hawk from here on out, and any releases he makes will be examined with extremely close scrutiny.
Click to expand...

if they allow him to release anything else on their site again
 
Just so you guys know. Taj is hacked into a few more.

He's already cracked 329.

ROFL.


Edit'd out stuff I don't want public. lulz.
 
Last edited:
You must log in or register to reply here.
Back
Top