Sicheats (h4x0r) trainers now contain DRM but why?

[Joe Forster/STA]

TippeX, I can also use Google Translate, thank you very much, but that was not the point. On an English-only forum, people are supposed to write in English and not resort to others translating their posts in whatever language.

I think the threatening with court is kind of an answer to how Cheathappens (allegedly?!) hired a private detective to find out personal data about h4x0r, create a file on him and prepare for legal action. (Not that I'd agree with this at all, it's pathetic...)

The "DRM" bullshit never got out of hand: it was out of hand the very moment it was created. (Thank you for mentioning it because I wanted to add this paragraph.) And I'm not talking about this particular implementation but the very idea. A sane person would think that "Data Rights Management" is about protecting the rights of the users. Fucking wrong! It's not even protecting the rights of authors/developers, rather those of publishers: publishers who are the ones in power but who add nothing substantial to the value of the product, just pass it on from author A to user B, ripping off both, and significantly at that! Therefore, in a sane world, anything that is even remotely similar to DRM should be banned right at its inception. Now this applies to h4x0r's implementation but let's not forget: Cheathappens', too. The notion of DRM is a filthy lie so don't go even near it because it dirties you!

While I was shopping today, something came to my mind that is similar to what TippeX says above. This Cheathappens vs. h4x0r war is similar to the Cold War between the USA and the Soviet Union, with respect to the following: neither side can actually win it, only escalate it to the point where one side will financially collapse and, inherently, give up and kind of "lose". In case it wasn't apparent: I'm referring to Cheathappens as the USA and h4x0r as the Soviet Union in the example.

h4x0r, you don't have as much resources, followers, fans, agents, spies as Cheathappens does so, from a given moment of time, you'll start "losing" and never be able to overtake your opponent anymore. I believe that this moment has already passed so there's no point in competing with them. Don't follow them and don't do anything they do only because they do it, instead show that you can pioneer your own way that has nothing to do with them. I have no idea how respected you are in the trainer scene but getting rid of any kind of connection to Cheathappens would definitely help you.

I hope you'll take advice from someone who is about a decade older and more experienced in the same field as you are and who already saw - and even took part in! - such pointless flame wars. It's a complete waste of resources, nothing more!

By the way, yes, one of the first things I did with the F.E.A.R. 3 trainer was that I launched HTTP Analyzer in the background and also made my firewall alert all kinds of network activity: nothing suspicious happenned.

[tazzoun]

AFKGun: that hidden process you see running after the trainer is closed is what I was talking about in my first post. It scans for "cheathappens" and then does nice things to anything it finds. Tippex or Joe or anyone else could easily see this if they attach a debugger/scanner to it.

Like Joe said, obviously h4x0r's vendetta against cheathappens has caused him to do some things that the admins of this site should probably take a hard look at, especially if they are hosting and helping to spread these trainers. People like me can only throw up the warning signs but you guys must see it for yourself and take the necessary measures to protect your visitors.

[Joe Forster/STA]

Originally Posted by tazzoun

that hidden process you see running after the trainer is closed is what I was talking about in my first post. It scans for "cheathappens" and then does nice things to anything it finds.

A whole day is gone since you've opened this thread but you still haven't described anything concrete just keep reciting vague suggestions again and again. You're really trying my patience! Don't make me think that you're just another Cheathappens agent!

[TippeX]

Ok...'hidden process', how do you see it then? (i will investigate, but not without more info, my time and joes have been wasted before on similar "persuits"... ) rest assured that if this i found and proven to be malicious code against ch then i will be more than happy to provide analysis to ch to assist them in any prosecution as this activity IS viral and illegal in a lot of places and h4x0r will have sealed his own fate (if it is true)..

@Joe. .. Didnt realise the translate was via google..doh

[tazzoun]

I apologize Joe, I don't mean to piss you off in any way. Like I said previously, analyzing h4x0rs trainers is not a priority of mine (or my responsibility?). I was only stating an observation that I had made. You can believe it or dismiss it and it will be fine by me.

The intention of this thread was to determine what GCW plans to do about this new DRM and see what other users thought about it. I simply added the malware note as it was just something odd that I noticed while looking at the authorization process.

[Joe Forster/STA]

(On a side note, Empire - unlike us, hackers - has a real life, so don't expect him to drop in and reply every hour... well, not even every day...)

[cocodrilo]

understand English but do not write to express myself properly, the only reason to write in Spanish.

Fear is a trainer of 3 with a Trojan, is the same but down from another page. I myself have fallen. that's the big problem down other sites with junk and then say we are.

say that there are no resources, I remember that they have not done anything with the law in their hands. cheathappens encourage you to take legal action, that we laugh all day long.

I am the first that this situation is sickening.

legally you can clarify things in these directions:

http://www.delitosinformaticos.com/1...cias/denuncias

everything else is said in forums, they are just guesses. clarify legally vote and the game ends quickly.

with the law in their hands, in Spanish:

Por último, también está el artículo 12 de la Declaración Universal de Derechos
Humanos: “Nadie será objeto de injerencias arbitrarias en su vida privada, su familia, su domicilio o su correspondencia, ni de ataque a su honra o a su reputación.”

La doctrina del Tribunal Constitucional distingue respecto al derecho a la intimidad los siguientes puntos:
• El derecho fundamental a la intimidad reconocido por el art. 18.1 CE tiene por objeto garantizar al individuo un ámbito reservado de su vida, vinculado con el respeto de su dignidad como persona (art. 10.1 CE), frente a la acción y el conocimiento de los demás, sean éstos poderes públicos o simples particulares.
• El derecho a la intimidad atribuye a su titular el poder de resguardar ese ámbito reservado, no sólo personal sino también familiar (SSTC 231/1988, de 2 de diciembre, y 197/1991, de 17 de octubre), frente a la divulgación del mismo por terceros y una publicidad no deseada.

the only one who has committed and continues to commit criminal acts are the people of cheathappens publishing information (in your site) STOLEN AND STAFF. Come on guys, make a complaint because I have really wanted to meet you.


thanks.

I simply added the malware note as it was just something odd that I noticed while looking at the authorization process.

the authorization process is only a HTTP PROTOCOL POST, user and password + key. key is information in your profile, encripted with Rijndael and base64 to prevent lost data. ¿more?

[Joe Forster/STA]

@cocodrilo: I sent an E-mail to the address that you used to register on FileForums. (And, no, I don't read or write Spanish.)

I think cocodrilo is suggesting that there's a fake version of the trainer, that can be downloaded from fake sites acting as Sicheats, and this trainer does contain a trojan. Actually, I think I have two versions of the trainer, one downloaded from Sicheats, the other from GCW, and, no, they're not identical. Could the one on GCW be the fake with a trojan inside?! If so, Empire should check (even more) whether Sicheats' trainers have been really uploaded by Sicheats people or by someone else (possibly malicious fakes).

Originally Posted by tazzoun

I was only stating an observation that I had made.

You continue to amaze me. What observation? This: It actively scans memory and HD for anything with the word "cheathappens" and then attaches a viral signature to it so those files no longer function.? So what does it search for: executables or files in general or directory names or what? What is this "cheathappens": general text anywhere in the file, copyright block in executables or what? What happens: a stub added to executables and the entry point redirected, "cheathappens" replaced with "fuck you" or what? Can you send me actual example files?! Or is this something that you've read somewhere - probably, a Cheathappens-friendly site - and fell for it without any suspicion?

I feel as if taking part in the following conversation:
Citizen: (panting) Constable, sir, John killed Fred!
Constable: Now cool down. Have you seen Fred?
- Yes. He was lying on the sofa.
- And was he breathing?
- I don't know.
- Then he could've been just sleeping. Have you seen the weapon?
- Yes, it was a knife.
- And where was it?
- In the kitchen.
- Well, obviously, there are knives in the kitchen. Have you seen John?
- No.
- Now, seriously, have you actually seen John kill Fred?!
- Errr, no.
- Then what the fuck are you talking about?! Let me take your hand, I'll escort you to a mental asylum.

So what the hell am I supposed to think about what you wrote?!

[TippeX]

So if i downloaded the fear 3 trainer from sicheats (as joe did), it would not contain the trojan... Correct?

[AFKGun]

If anyone want to find out the h4x0r trainer's purpose would scan the program for outbound data, destination IP can be detected by 3rd party firewall like ZoneAlarm, and type of data can be capture by WireShark etc.

Seriously how much that i don't get what is going on? So far i only understand h4x0r and CH, one is accusing for code stealing. Seriously, a real hacker wouldn't give a fk for just one code. Unless one is fighting for their life's work.

[Joe Forster/STA]

Originally Posted by AFKGun

destination IP can be detected by 3rd party firewall like ZoneAlarm

Just on a completely off-topic side note, using the free version of ZoneAlarm is one of the best ways to NOT defend your computer against attacks coming from the network. See http://www.matousec.com/projects/pro...ge/results.php for suggestions on which firewall to use.

Originally Posted by tazzoun

After the whole fake trainer thing, shouldn't Empire ALREADY only be accepting h4x0r trainers from h4xor himself?

He is but there could still be "security holes" in him acting as a "human firewall". Although let me add: none of us - other than Empire and h4x0r themselves - knows how Empire checks this and it's just how it should be.

Originally Posted by tazzoun

h4x0r can easily control the files on his own website and files from anywhere else (even this site) could POSSIBLY be fake or tampered with.

After how we defended him against Cheathappens, I can hardly believe that he personally would upload intentionally infected versions of his trainers to GCW. And, even if he did, it would become obvious within days, if not hours, that (almost) all Sicheats trainers on GCW are different from the originals and those on GCW (almost) all contain some kind of malware. I find this completely unrealistic!

Originally Posted by tazzoun

This whole thing could probably easily be cleared up by a simple post by Empire.

Sure. And I already answered this, look above.

[cocodrilo]

Could the one on GCW be the fake with a trojan inside?

No no, not in this site. one contains a valid key (already banned) user and password for direct use. in others sites.

this dll is a trainer published in sicheats, for the first templar game:

http://www.sendspace.com/file/w1e1vn

please search for stealt code, malicious code etc. is the only published online trainer with one hit kill option, which I can explain how it works and how to get to separate the player from enemies.

[TippeX]

You getting a feeling of deja-vu joe?

[tazzoun]

Tippex and Joe: I downloaded the trainer from GCW, not from h4x0r's website. My guess is that after reading these posts, h4x0r removed the malware from the trainers posted on his own site. After the whole fake trainer thing, shouldn't Empire ALREADY only be accepting h4x0r trainers from h4xor himself? You can clearly see why it's pointless to waste time on this as h4x0r can easily control the files on his own website and files from anywhere else (even this site) could POSSIBLY be fake or tampered with.

This whole thing could probably easily be cleared up by a simple post by Empire. He can tell you where the trainer came from (if it DID come from h4x0r, then why does it no longer match the one on his website?) and if he knew about the DRM and if he supports it, etc.

[Maxgrilo]

I think people are starting to lose focus on the real issue here. Malware or not, should GCW be hosting files that REQUIRE you to register at a third party site (which may or may not be harvesting your info or might at any time in the future) in order to simply use the file? It's my opinon that files hosted on this site should run independently of any outside program or authentication process. Just because these trainers may not collect or send any data now, that could easily be changed at any point down the road by h4x0r's team once the trainers were being readily accepted and posted on this site.