Blackhat Activities

Link the current Sythe account: myturtles
Which violation you are reporting the user for: Blackhat Activities

Report created by him, clearly doing shady shit: MyPVM Plugin Exposed/Violations

There are a bunch of Sythe mods in that server (OSRS SERVICE OWNERS), you guys can look into it by yourself.

Farewell

 

[GZ AIO]

Link the current Sythe account: myturtles
Which violation you are reporting the user for: Blackhat Activities

Report created by him, clearly doing shady shit: MyPVM Plugin Exposed/Violations

There are a bunch of Sythe mods in that server (OSRS SERVICE OWNERS), you guys can look into it by yourself.

Farewell

Blackhat/Malicious Activities: Using software tools for deceptive, malicious, or harmful intent directly or indirectly affecting Sythe users. Will result in a temporary ban and a DNT

Opened files posted on Sythe in an IDE is blackhat?
Viewing byte code is black hat?
Ever heard of cyber security? White hat reversing for malicious code? There was no malicious intent. No api requests were sent, no brute forcing occurred. No source was leaked or posted or shared. Get your facts straight and stop shaking in your pants shitter.

I didn't use any advanced tools to even deobfuscate your product nor do I plan to use your plugin. Who wants to sideload on customers accounts and claim official Runelite? What are you smoking dweeb? Hope off my curry stick gang. Fire another 7 more people please and steal some more deposits while you at it.

 

[GZ AIO]

Actually, just put your file into chatgpt, even they can deobfuscate the file to source zumb zog.

 

[GZ AIO]

imgur.com
imgur.com
imgur.com

Chatlogs with Titanite aka GrandExchange who mentioned that he had recieved requests to make a plugin but always a possibility to access DB infomation.

Forwarded Messages from a user:
imgur.com

Furthermore, the files were available on sythe for like 30-60 minutes. It was leaked off one of your workers lol. Nice 1 nerd.

 

[GZ AIO]

Also from the cropped chatlogs, clearly stated "cba got to do alot of work" = I stopped trying, no point of wasting time on that since I had 0 plans to use it.

 

[GZ AIO]

This post becomes irrelavant on the matter that @MyPvM Dev claimed that they are no longer using such products and has a in house solution.
https://www.sythe.org/posts/85946988/
If this is so, I guess I am just messing with outdated jars which have no use, is that right? So in turn, I am just exploring code for educational purposes if there is no active server or back end yes?

 

Dev claimed that they are no longer using such products and has a in house solution

We did not say that. You're tampering with active worker files.

 

The problem that I have with this myturtles guy is that he's so full of shit and is clearly a man-child.

• His posts are full of broken english
• He struggles to create a constructive post without some sort of racial slur or derogatory reference
• His narrative often changes - this, that, wait no, actually this

Regarding this report, the facts here are pretty laid out:

• There is overwhelming evidence of you trying to deobfuscate our files.
• You openly claim that you're trying to access internal records not meant for public eyes.
• You claim your efforts are "white-hat", yet are also in kahoots with other bad actors. Very ironic.
• You claim that our "security [...] is honestly mid at best." after being blocked by the very measures we've set to deter users from snooping around. This is in joint with the claim that you that the plugins "contains the API Endpoints for their login". Of course - we have to authenticate our workers somehow. Literally all protected content has some sort of authentication wall. The fact that this is as far as you've got and somehow decided to pawn it off as some amazing discovery makes it clear that you are incredibly naive and that our measures work to deter the average worker.
  
• You're also actively "Deceiving members or staff for fun, humor, or to cause drama." and "Accusing Someone [of Scamming] Without Proof" now, given how you're openly trying to push the narrative that Keith was the individual who started other report. Do you have proof of this? Or are you just trying to bring someone else in and affect their relation with us for your own entertainment?

Here is our own additional thoughts on the matter:

• You claim that the files you got were leaked publicly on Sythe but also "sent to you through dms". Not only did you not provide proof of it being sent to you through dms, you've also now conveniently edited that part away. Sythe mods can see your edit history. Why are you trying to now hide it?
• You're also able to give an accurate timeline of when the leak happened and how long they happened for. Prior to this time, we already identified you as a prime suspect. Is it a coincidence that the initial report was made with a guest user, yet your account was also offline until after we've revealed your identity? Why are you logged out until we pinged you? What and who are you hiding from? https://i.imgur.com/UgkfP7m.png

We're not going to sit here and argue with a man-child. We're also not looking to drop this case. Please take caution reading his posts as he has a tendency to twist our statements.

 

[GZ AIO]

The problem that I have with this myturtles guy is that he's so full of shit and is clearly a man-child.

• His posts are full of broken english
• He struggles to create a constructive post without some sort of racial slur or derogatory reference
• His narrative often changes - this, that, wait no, actually this

Regarding this report, the facts here are pretty laid out:

• There is overwhelming evidence of you trying to deobfuscate our files.
• You openly claim that you're trying to access internal records not meant for public eyes.
• You claim your efforts are "white-hat", yet are also in kahoots with other bad actors. Very ironic.
• You claim that our "security [...] is honestly mid at best." after being blocked by the very measures we've set to deter users from snooping around. This is in joint with the claim that you that the plugins "contains the API Endpoints for their login". Of course - we have to authenticate our workers somehow. Literally all protected content has some sort of authentication wall. The fact that this is as far as you've got and somehow decided to pawn it off as some amazing discovery makes it clear that you are incredibly naive and that our measures work to deter the average worker.
  
• You're also actively "Deceiving members or staff for fun, humor, or to cause drama." and "Accusing Someone [of Scamming] Without Proof" now, given how you're openly trying to push the narrative that Keith was the individual who started other report. Do you have proof of this? Or are you just trying to bring someone else in and affect their relation with us for your own entertainment?

Here is our own additional thoughts on the matter:

• You claim that the files you got were leaked publicly on Sythe but also "sent to you through dms". Not only did you not provide proof of it being sent to you through dms, you've also now conveniently edited that part away. Sythe mods can see your edit history. Why are you trying to now hide it?
• You're also able to give an accurate timeline of when the leak happened and how long they happened for. Prior to this time, we already identified you as a prime suspect. Is it a coincidence that the initial report was made with a guest user, yet your account was also offline until after we've revealed your identity? Why are you logged out until we pinged you? What and who are you hiding from? https://i.imgur.com/UgkfP7m.png

We're not going to sit here and argue with a man-child. We're also not looking to drop this case. Please take caution reading his posts as he has a tendency to twist our statements.

1) Who am I in Kahoots with?
2) Who am I Deceiving? Don't you mean who ARE YOU Deceiving? The general public? You customers? All the users of Sythe?
3) Nothing really blocked me, I just don't want to spend the time to do it and gaining the skill set. No motivation.
4) The files were just viewed to see if there was a backdoor. Idk if there is a virus? Educational purposes and protection.
5) Thank you for validating you use these.
6) The files were available on Sythe before the post merge.
7) Racial slurs in reports? Where? Not on sythe?

FYI: Not going to respond unless necessary got shit IRL to do for a while, peace out. Sythe mods handling this, just drop me a DM on discord. Ty.

 

1) Who am I in Kahoots with?

Also FYI, most of these leaks weren't even by me except the initial screenshots that went into the said private group.
2nd ones someone forwarded me, 3rd one I got from sythe.
imgur.com

You tell me. We're interested as well. Why are people leaking files to you in dms? Why do you have our files anyways?

2) Who am I Deceiving? Don't you mean who ARE YOU Deceiving? The general public? You customers? All the users of Sythe?

This post becomes irrelavant on the matter that @MyPvM Dev claimed that they are no longer using such products and has a in house solution

Where did we say that we are not using such products? Does past tense and present tense confuse you? Stop trying to get out of this report.

3) Nothing really blocked me, I just don't want to spend the time to do it and gaining the skill set. No motivation.

If time and motivation aren't blockers, I'd probably be doing other things too.

Speaking of time and motivation, I don't have the time or motivation to be arguing with you anymore.

 

[GZ AIO]

You tell me. We're interested as well. Why are people leaking files to you in dms? Why do you have our files anyways?



Where did we say that we are not using such products? Does past tense and present tense confuse you? Stop trying to get out of this report.


If time and motivation aren't blockers, I'd probably be doing other things too.

Speaking of time and motivation, I don't have the time or motivation to be arguing with you anymore.

1) Many people think you are scummy? What else motivates whistleblowers. Poor practices.
2) Dev literally said you are using In house product but you have since clarified it. Inconsistency.
3) No need to argue, I have been fishing you the entire time and like the little pleb you are, you slowly showed your true colors. Hats off gang. Have a good one. A temp ban and DNT don't affect me as much as one would affect you , but I would get mine for a good reason if that were to be done anyways, for the public and community in general.

 

Link the current Sythe account: myturtles
Which violation you are reporting the user for: Blackhat Activities

Report created by him, clearly doing shady shit: MyPVM Plugin Exposed/Violations

There are a bunch of Sythe mods in that server (OSRS SERVICE OWNERS), you guys can look into it by yourself.

Farewell

The last image in this post above is broken (I can recall what it was),but need you to repost this image, it was something about API requests

 

The last image in this post above is broken (I can recall what it was),but need you to repost this image, it was something about API requests

 

Thank you, @MyPvM.

I don't like banning a user who was reporting an issue, as it would most likely have been overlooked if it weren't for the attempt to perform malicious activities on a user by brute-forcing their database. However, the screenshot above clearly shows intent to engage in blackhat activities by attempting a brute-force attack on a database. Thus:

Blackhat/Malicious Activities: Using software tools for deceptive, malicious, or harmful intent directly or indirectly affecting Sythe users. Will result in a temporary ban and a DNT.

@myturtles has been 1 month banned and given a DNT.