insufficient evidence

[kThisIsCvpv]

You said they can be compromised, that's enough. + plenty of 3rd party users have merged into this thread or posted separate threads where they will gladly demonstrate the insecurities of the plugin. I will gladly do so myself as well, in which case after the successful demonstration from my side I will require a permanent ban for all the parties who claimed otherwise.

Dear All,

Please realize that the reason why this "demonstration" hasn't been done yet is because he hasn't been able to access my system because it's locked behind authentication that he doesn't have.

From the uploaded transcript:

He's able to get my plugin. Don't know how, but sure, whatever.

It appears he also knows that you need to be a booster to be able to use the plugin. Therefore, in order to "demo" the plugin's insecurities, he wants me to give him my "keys".

In other words: right now, he doesn't have shit to show. In order to compensate, he proposes a bunch of theoretical situations, hoping one of them will hit the spot.

The equivalent of this is pretty much going to a random Discord server and asking for staff so he can "audit" them.

• Hey @OSRS_Services (sorry to ping you, I don't have anything against you guys, just using this as an example)
• Our discords are getting banned and yours are not!
• This can't be a coincidence!
• Let me go through your emails to see if you're doing anything suspicious!

Like why do you think you need you need to be authorized to access the system? It's to prevent clowns like you from snooping around things that don't belong to you.

As someone who's a software developer for 13 years, throughout various programming languages, companies and systems, anywhere from freelancing on their own to developing Military Defence Systems used within NATO countries can't past an authentication panel? Typical. Because the extent of your knowledge only covers HTTPS sniffing, which apperently, you also seem to know very little about. Cry me a river. Anyone can see how delusional and absurd this is.

 

[Wild UIM]

Dear All,

Please realize that the reason why this "demonstration" hasn't been done yet is because he hasn't been able to access my system because it's locked behind authentication that he doesn't have.

From the uploaded transcript:

He's able to get my plugin. Don't know how, but sure, whatever.

It appears he also knows that you need to be a booster to be able to use the plugin. Therefore, in order to "demo" the plugin's insecurities, he wants me to give him my "keys".

In other words: right now, he doesn't have shit to show. In order to compensate, he proposes a bunch of theoretical situations, hoping one of them will hit the spot.

The equivalent of this is pretty much going to a random Discord server and asking for staff so he can "audit" them.

• Hey @OSRS_Services (sorry to ping you, I don't have anything against you guys, just using this as an example)
• Our discords are getting banned and yours are not!
• This can't be a coincidence!
• Let me go through your emails to see if you're doing anything suspicious!

Like why do you think you need you need to be authorized to access the system? It's to prevent clowns like you from snooping around things that don't belong to you.

As someone who's a software developer for 13 years, throughout various programming languages, companies and systems, anywhere from freelancing on their own to developing Military Defence Systems used within NATO countries can't past an authentication panel? Typical. Because the extent of your knowledge only covers HTTPS sniffing, which apperently, you also seem to know very little about. Cry me a river. Anyone can see how delusional and absurd this is.

Please do not encourage Blackhat activity, as none have been performed so far from my side, and none will be performed

Also, I'm not the one who claimed to be willing to prove the safety of the plugin publicly:

I'd also appreciate less harassment from your side, despite it being a trademark for MyPVM accomplices.

Again: arguments from your side are on repeat now, further discussion between us is, I believe, not needed and an administrator should now review the case.

 

Please do not encourage Blackhat activity, as none have been performed so far from my side, and none will be performed

Also, I'm not the one who claimed to be willing to prove the safety of the plugin publicly:

I'd also appreciate less harassment from your side, despite it being a trademark for MyPVM accomplices.

Again: arguments from your side are on repeat now, further discussion between us is, I believe, not needed and an administrator should now review the case.

all of your theoretical credential stealing methods would also, be considered blackhat because you are going out of your way, and out of scope of launching the client to obtain information that otherwise would not be available to you.

if anything, you’re the one providing blackhat information.

 

[Wild UIM]

all of your theoretical credential stealing methods would also, be considered blackhat because you are going out of your way, and out of scope of launching the client to obtain information that otherwise would not be available to you.

if anything, you’re the one providing blackhat information.

Reading your own network packets is not blackhat information.

 

[kThisIsCvpv]

Please do not encourage Blackhat activity, as none have been performed so far from my side, and none will be performed

Also, I'm not the one who claimed to be willing to prove the safety of the plugin publicly:

We're not hiding anything. We're open to demo our plugin whenever.

As I'm reading the convo, looks like @MyPvM were more than happy to show it to you. However, at no point did they say that they'd make you a booster. As a matter of fact, they said they weren't. This is from your own chat logs.

I'd also appreciate less harassment from your side, despite it being a trademark for MyPVM accomplices.

Again: arguments from your side are on repeat now, further discussion between us is, I believe, not needed and an administrator should now review the case.

With you, there seems to be a pattern: twisting people's words to make a fictitious argument, then running away with your tail between your legs when your argument gets broken down. How do you expect people to side with you when you act like so?

 

It's being sent via HTTPS. The certificate is issued by Let's Encrypt. Sniffing the payload during transport is not possible.

Thank you for taking time to answer.
There's not enough of a concern presented here that would warrant a further investigation in their implementation of the plugin. If new evidence arises though then at the time staff may consider looking further.

Just a reminder for those uninvolved - Do NOT post unless you are directly involved in report [YOU WILL BE INFRACTED OR TEMPORARILY BANNED]
I appreciate your concerns regarding the topic however please respect the stickies within the section.

However, @Wild UIM fraudulently advertising as an e-adult star is not allowed though so that's been added to your DNT + banned for 1 month.
https://i.imgur.com/EtoFGcV.gif