robotzindisguise
Guru
- Joined
- Oct 8, 2007
- Sythe Gold
- 1
- Messages
- 1,067
Just to let you all know ; -
Jagex has Done a SQL Injection on the RID Bot so that any account which uses it will be PERM Banned!
If you wan't your account to be banned, PLEASE GO AHEAD AND USE...!!
~ This DDoS!
SQL injection is not possible, the bot and website are secured against SQL injection, and have been for a very long time.
76 people used the bot yesterday so you are able to put it into perspective, there were about 5 bans, and it seems like most had either used 3.00 (and because Jagex's recent packet sniffing could have been identified back then) or were identified previously with V2. I think there could potentially be a risk to people who aren't in that category although we are yet to see any bans given outside those criteria. We keep people up to date via the news system on the bot. If you are suggesting you know better than us, whether there is a new threat, and that you know exactly what it is, within 20 hours of the first ban - I should probably remind you, that you don't work for Jagex.
The most likely explanation is they've been spying on IP addresses in some way, shape or form - the next logical step from the packet sniffing attacks we were able to negate last week. We'll know more about it within a couple of days, in the meantime if you want to reduce the risk, play RuneScape via proxy because if they are matching IP's of people logged into their servers with the IP source/destination in the packets they're intercepting, this would negate that risk. While they cannot extract the username (or any other) data from these packets anymore, they can still obtain source and destination IPs. This wouldn't be too difficult to negate, and just incase that's what they're doing I'm already preparing several layers of security, and new advice to give to our members about ensuring your privacy online.


