Magic: The Gathering Arena

Magic: The Gathering Arena

This topic has been locked
SammyToeJr Feb 6, 2024 @ 10:49pm
Comfirmed hacker.
In game username: Rain bandit

Proof: https://www.youtube.com/watch?v=QNBEdMi-1ag

lobby dodge him he will freeze the lobby if you start beating him.
< >
Showing 1-15 of 26 comments
Doctor Zalgo Feb 6, 2024 @ 11:00pm 
I just had a game freeze against another player midway through resolving a stack of cards. Might be server problems.
SammyToeJr Feb 6, 2024 @ 11:01pm 
Originally posted by Doctor Zalgo:
I just had a game freeze against another player midway through resolving a stack of cards. Might be server problems.
i dont know man the timming was so prefect for it.
Nanaki Feb 7, 2024 @ 2:02am 
Coincidence and luck. You cannot hack this game.
PityClassy Feb 7, 2024 @ 5:38am 
Originally posted by Nanaki:
Coincidence and luck. You cannot hack this game.
the game can be hacked and has been hacked before... Just because a client is server side doesnt mean it cannot be hacked with scripts.. ♥♥♥♥ like seeing other players hands, playing cards that are not in the game, etc. nothing is unhackable lol.. theres a backdoor to everything.
KîNG Feb 7, 2024 @ 7:26am 
Originally posted by PityClassy:
Originally posted by Nanaki:
Coincidence and luck. You cannot hack this game.
the game can be hacked and has been hacked before... Just because a client is server side doesnt mean it cannot be hacked with scripts.. ♥♥♥♥ like seeing other players hands, playing cards that are not in the game, etc. nothing is unhackable lol.. theres a backdoor to everything.

No it hasn't and no you can't, not without seizing control of their entire server network. The client does literally nothing other than submit requests to the server and listen to the servers response so that it, for example, knows how much health to reduce from the health total on your client's UI.

This isn't an FPS where any calculations need to be run client side for latency/performance reasons.

Show me visual evidence of the claims your making. Which you can't, because it didn't happen.
Doctor Zalgo Feb 7, 2024 @ 8:00am 
Originally posted by King:
Originally posted by PityClassy:
the game can be hacked and has been hacked before... Just because a client is server side doesnt mean it cannot be hacked with scripts.. ♥♥♥♥ like seeing other players hands, playing cards that are not in the game, etc. nothing is unhackable lol.. theres a backdoor to everything.

No it hasn't and no you can't, not without seizing control of their entire server network. The client does literally nothing other than submit requests to the server and listen to the servers response so that it, for example, knows how much health to reduce from the health total on your client's UI.

This isn't an FPS where any calculations need to be run client side for latency/performance reasons.

Show me visual evidence of the claims your making. Which you can't, because it didn't happen.

While he hasn't put forward any evidence in this case, extracting or changing information in "server side" or otherwise 'protected' systems is something that has happened before (many times). This link is one of my favourite examples of this (https://orlp.net/blog/when-random-isnt/) because it doesn't even involve breaking an interface, just recognising that another interface used by the protected system is accesible and has a structural weakness.

Anyway, breaking client server security can be done if the programmers have failed to sanitise/secure all of their interfaces and there are plenty of techniques usable by both sides to help find these: https://www.beyondsecurity.com/resources/guides/buffer-overflows-discovery

I don't believe that there are vulnerabilities without seeing any evidence (particularly when I've been trying to report a bug with Tamiyo's Safeguard for several hours and their web services keep going down before I can submit it), but just straight up saying this sort of security flaw is impossible is not correct.

PS: If you're considering suggesting that that I don't understand why Client Server Architecture is special and inviolate, consider that not only is Client Server vulnerable to attack (and has been successfully attacked many times - e.g. any sort of credential elevation against a Windows domain is an attack against some of the most hardened client server infrastructure on the planet), actual air gapped infrastructure is now being successfully attacked as well: https://en.wikipedia.org/wiki/Air-gap_malware
SammyToeJr Feb 7, 2024 @ 2:23pm 
Originally posted by Nanaki:
Coincidence and luck. You cannot hack this game.
you can hack any game, if it runs on code it can be edited back doors can be installed rules can be changed, yes you can hack this game.
Winter Wolf Feb 7, 2024 @ 3:45pm 
It's a catch-22 claim. Even if WOTC's servers had been hacked, they would be disinclined to admit to that unless forced to by the US government. The motive for hiding this sort of thing is obvious and also makes it easy to make a claim like "This game has been hacked!" because it is a hard thing to disprove without the alleged victim saying it isn't so.

That said, while any lock can be picked and any door busted. Any server can be hacked into, the harder it is to do so, the less likely it is to happen because most thieves (hackers) are lazy opportunists. If the motive for doing it isn't theft then maybe there are reasons for doing so but it seems rather silly to think every game that can be hacked, HAS been hacked.

Usually when it does happen, it is because as Doc says, someone left a door open.

I should note the concept of a software backdoor is highly popularized (thanks to Hollywood and fiction novels) and spread about but it is not something that even good hackers automagically know for any specific app or architecture. There have been a number of attempts to crack windows (pick a version) over the decades and when they have happened it was typically because someone found a backdoor. However, these things are rapidly patched and rabidly checked for by security consultants for most major software firms.

Again: any lock can be cracked, any door busted, but where is the motive? To win games in a very low ante game? Even password cracking seems a lot of effort for little result. Now if you wanna claim that someone has hacked the servers and given themselves currency in game, OK, maybe? But then it begs the question, how do they spend it without drawing attention to themselves? Store transactions are typically tracked in any game.
SammyToeJr Feb 7, 2024 @ 10:41pm 
Originally posted by Winter Wolf:
It's a catch-22 claim. Even if WOTC's servers had been hacked, they would be disinclined to admit to that unless forced to by the US government. The motive for hiding this sort of thing is obvious and also makes it easy to make a claim like "This game has been hacked!" because it is a hard thing to disprove without the alleged victim saying it isn't so.

That said, while any lock can be picked and any door busted. Any server can be hacked into, the harder it is to do so, the less likely it is to happen because most thieves (hackers) are lazy opportunists. If the motive for doing it isn't theft then maybe there are reasons for doing so but it seems rather silly to think every game that can be hacked, HAS been hacked.

Usually when it does happen, it is because as Doc says, someone left a door open.

I should note the concept of a software backdoor is highly popularized (thanks to Hollywood and fiction novels) and spread about but it is not something that even good hackers automagically know for any specific app or architecture. There have been a number of attempts to crack windows (pick a version) over the decades and when they have happened it was typically because someone found a backdoor. However, these things are rapidly patched and rabidly checked for by security consultants for most major software firms.

Again: any lock can be cracked, any door busted, but where is the motive? To win games in a very low ante game? Even password cracking seems a lot of effort for little result. Now if you wanna claim that someone has hacked the servers and given themselves currency in game, OK, maybe? But then it begs the question, how do they spend it without drawing attention to themselves? Store transactions are typically tracked in any game.
the answer lays with in a question. why do backmarkets work?

if people can do something, they offten do, for as dumb of a reason or for as good of a reason as you can think. kinda like the entropy effect. if something could go wrong it will go wrong at somepoint. same applys to people if people can cheat or hack just to pretend their better. they will now it is true that for this game its mush harder to cheat. but not impossiable and theres always going to be that one guy thats willing to work ten times harder to cheat and go around getting better then too just get better.

i have seen this IRL in magic shops as well. its pretty common for people to just make ♥♥♥♥ up and confuse that hell of the shop owner until he just gives up and rules that you have won. i once had a game wayyyyyyyyyyyyyyyyyy back when phyrexian builds were starting to become the new meta for people. and he tryed to say that 1 stack of toxic is gg game over you lose. when i had to explain to him that, that is indeed not the case, but at the time it was a new idea for magic so the rulers didnt really know how it worked either. and rather then read the damm card they just ruled i had lost because he got one stack of toxic on me.

point is, if people can cheat they will cheat. peroid
Doctor Zalgo Feb 8, 2024 @ 2:38am 
Originally posted by SammyToeJr:
point is, if people can cheat they will cheat. peroid

Sure, but the barrier for entry to meaningfully having this discussion is 'evidence that this is actually happening' not 'a general consensus that some people want to cheat'.
Tenguninja Feb 8, 2024 @ 10:21am 
100% this game can be hacked, I played a game where on the very first turn the person I was playing against put down cards which equalled over 30 mana points and they never even played a land card, all his creatures had haste (despite the card not stating the creature had haste) he attacked and won before I even played a card
mwesthoff Feb 8, 2024 @ 11:14am 
Dudes computer got jacked by the feds. His profile looks like he is blowing out birthday candles through a glory hole in a bathroom stall or something. No way it's real.
SammyToeJr Feb 8, 2024 @ 2:04pm 
Originally posted by Doctor Zalgo:
Originally posted by SammyToeJr:
point is, if people can cheat they will cheat. peroid

Sure, but the barrier for entry to meaningfully having this discussion is 'evidence that this is actually happening' not 'a general consensus that some people want to cheat'.
look at the video i droped with the chat. the timmer would normaly tic down if someone is taking to long but not only did that not happen but it locked out my choices as well.
mwesthoff Feb 8, 2024 @ 3:56pm 
Originally posted by SammyToeJr:
Originally posted by Doctor Zalgo:

Sure, but the barrier for entry to meaningfully having this discussion is 'evidence that this is actually happening' not 'a general consensus that some people want to cheat'.
look at the video i droped with the chat. the timmer would normaly tic down if someone is taking to long but not only did that not happen but it locked out my choices as well.
All that means is that you are the one who is disconnected. Yep, you'd think they would scribble out a special message or have Sparky tell you that you have been disconnected.

The developers took one look at the proposition to tell people that they have been disconnected and laughed in harmony like a many mouthed turd.

I know, for me at least, when I saw that my opponents rope not moving the first time I thought, "damn I must be disconnected".

Now that I know you think you were being hacked by a roper that wanted to secretly rope you without you seeing the rope. I can without a doubt see this as being a skill issue.
SammyToeJr Feb 8, 2024 @ 4:51pm 
Originally posted by mwesthoff:
Originally posted by SammyToeJr:
look at the video i droped with the chat. the timmer would normaly tic down if someone is taking to long but not only did that not happen but it locked out my choices as well.
All that means is that you are the one who is disconnected. Yep, you'd think they would scribble out a special message or have Sparky tell you that you have been disconnected.

The developers took one look at the proposition to tell people that they have been disconnected and laughed in harmony like a many mouthed turd.

I know, for me at least, when I saw that my opponents rope not moving the first time I thought, "damn I must be disconnected".

Now that I know you think you were being hacked by a roper that wanted to secretly rope you without you seeing the rope. I can without a doubt see this as being a skill issue.
if that is true and a disconnect did happen why wouldnt it just, you know, disconnect you? send you back to the main lobby. no the soft lock, toppled with the fact that the timming only happened after i had gained the upper hand in the match. its fair more possiable for him to be cheating there then a simple disconnect
< >
Showing 1-15 of 26 comments
Per page: 1530 50

Date Posted: Feb 6, 2024 @ 10:49pm
Posts: 26