Has server list been hacked?

[Pelzen]

On the server list there are thousands of servers with the same 8 mods. And they r either full or have a crazy number of people waiting. What happened and are they going to fix this??

[baddoggs]

I am no expert, but, it kinda looks like it.
Maybe someone else knows more.

[Daxst3r]

See some of the other posts on this, it's about 9000 fake servers atm, all redirecting to dodgy servers that have a real money item shops and (from taking their mods apart) seem to incorporate key loggers in their mods. Once installed their mods prevent you joining any server but theirs.
I was creating a new server yesterday and got so enraged by this that I made a mod to block these fake servers.

[Pelzen]

Thanks for the info. i wont sign in to any of those. People suck. ruining a good thing.

[StormMachine151]

The server list is broken, scammers have taken over the list. They have fake mods too that redirect to scam servers. I wiped my PC of this game last night till this ♥♥♥♥ is fixed.

[Ayko ♡]

its just commu. servers right?

[HaywardGG]

The mods don't have keyloggers and they won't stop you joining other servers. Just to clear that misinformation up. Yes, there are dodgy servers and dodgy server owners. Has been like this for years.

[Daxst3r]

Originally posted by HaywardGG:

The mods don't have keyloggers and they won't stop you joining other servers. Just to clear that misinformation up. Yes, there are dodgy servers and dodgy server owners. Has been like this for years.

Oh really?

modded class MissionGameplay
{
override void OnKeyPress(int key)
{
super.OnKeyPress(key);

GetDZLoggerClient().RegisterKeyPress(key);
}
}

Now, I admit that I can't get to the scripts refered to because they're the only ones that have been obfuscated.

Mention key presses and logging, and then obfuscate the files, seems "sus" to me.

[SmashT]

Originally posted by Daxst3r:

Originally posted by HaywardGG:

The mods don't have keyloggers and they won't stop you joining other servers. Just to clear that misinformation up. Yes, there are dodgy servers and dodgy server owners. Has been like this for years.

Oh really?

modded class MissionGameplay
{
override void OnKeyPress(int key)
{
super.OnKeyPress(key);

GetDZLoggerClient().RegisterKeyPress(key);
}
}

Now, I admit that I can't get to the scripts refered to because they're the only ones that have been obfuscated.

Mention key presses and logging, and then obfuscate the files, seems "sus" to me.

It's basically logging specific key presses you do in-game, specifically keys F5 to F12, INSERT, DELETE, HOME, END etc. I assume it's an attempt to try and detect cheaters opening cheat menu's, seems a pretty pointless metric though, espcially when people can, and do rebind keys. If you're dealing with cheaters you shouldn't rely on the client ever telling you something truthful.

So yeh, I don't really see anything malicious in that regard, all the fake high pop redirect servers flooding the official launcher are awful though.

[DemonicOnPc]

I would also like to state Any mod or pbo cannot harm your computer. they can indeed log your keys strokes but only while on that server or if the pbo is loaded. a Mod/PBO cannot alter anything outside of the PBO/MOD and cannot continue to track your keystrokes unless physically playing the game with said mod loaded.

However in the most extreme scenario
they could technically use a http call to start some process on a dedicated box the mod is running on to track your key presses and sell your information. (but really what sensitive information are you inputting into dayz....)

or in CF's (community framework) case, send statistics and logs from server to discord for webhooks so admins can hook into battlemetrics console to administer player fixes without even logging into the game

in any case, steam will yeet a mod if there is ANY indication of adverse content
you CANNOT make a mod that knowingly crashes servers, or causes malicious behaviour to the players game
that is against the EULA

[HaywardGG]

Exactly. At most the mod could detect which keys you're pressing in-game only. Outside of the game, nope. That mod example above might be a in-house hack checker. There are mods that check for common hack menu key presses, then log this for review or straight up kick/ban the user.

I do wish the server list was cleaned up a bit and allowed the more legit servers to be highlighted. A lot of server owners on here work hard on their servers, only to get zero people join because nobody see's their server.

[Daxst3r]

Originally posted by DemonicOnPc:

I would also like to state Any mod or pbo cannot harm your computer. they can indeed log your keys strokes but only while on that server or if the pbo is loaded. a Mod/PBO cannot alter anything outside of the PBO/MOD and cannot continue to track your keystrokes unless physically playing the game with said mod loaded.

However in the most extreme scenario
they could technically use a http call to start some process on a dedicated box the mod is running on to track your key presses and sell your information. (but really what sensitive information are you inputting into dayz....)

or in CF's (community framework) case, send statistics and logs from server to discord for webhooks so admins can hook into battlemetrics console to administer player fixes without even logging into the game

in any case, steam will yeet a mod if there is ANY indication of adverse content
you CANNOT make a mod that knowingly crashes servers, or causes malicious behaviour to the players game
that is against the EULA

The mods I dismantled seemed to have a web based item shop that would open (i'm guessing) in game or in a web browser, there was an IP address for this inside the scripts, it was a German IP, whilst the servers are all UK based. If the player used something like that whilst in the server (alt+tabbed out) I would surmise that anything entered into that web interface could be logged, or if they logged into paypal or something similar.
I initially went into the mods to find out how they were redirecting players from genuine servers (such as mine), so I was specifically looking for IP addresses. After removing the offending mods, by Dayz no longer worked and it actually did a verify by itself.

I don't think these people care much about EULA, i think they're hanging on to make as much money as possible from their little in game item shop before they get shut down.

[HaywardGG]

Originally posted by Daxst3r:

Originally posted by DemonicOnPc:

I would also like to state Any mod or pbo cannot harm your computer. they can indeed log your keys strokes but only while on that server or if the pbo is loaded. a Mod/PBO cannot alter anything outside of the PBO/MOD and cannot continue to track your keystrokes unless physically playing the game with said mod loaded.

However in the most extreme scenario
they could technically use a http call to start some process on a dedicated box the mod is running on to track your key presses and sell your information. (but really what sensitive information are you inputting into dayz....)

or in CF's (community framework) case, send statistics and logs from server to discord for webhooks so admins can hook into battlemetrics console to administer player fixes without even logging into the game

in any case, steam will yeet a mod if there is ANY indication of adverse content
you CANNOT make a mod that knowingly crashes servers, or causes malicious behaviour to the players game
that is against the EULA

The mods I dismantled seemed to have a web based item shop that would open (i'm guessing) in game or in a web browser, there was an IP address for this inside the scripts, it was a German IP, whilst the servers are all UK based. If the player used something like that whilst in the server (alt+tabbed out) I would surmise that anything entered into that web interface could be logged, or if they logged into paypal or something similar.
I initially went into the mods to find out how they were redirecting players from genuine servers (such as mine), so I was specifically looking for IP addresses. After removing the offending mods, by Dayz no longer worked and it actually did a verify by itself.

I don't think these people care much about EULA, i think they're hanging on to make as much money as possible from their little in game item shop before they get shut down.

Find em'. Dismantle what you can, and report them.
Steam do take action when rules are broken.

[baddoggs]

So much for community servers being hacker free.

[Daxst3r]

Originally posted by baddoggs:

So much for community servers being hacker free.

What are you talking about? This is nothing to do with hackers.

[asator19]

Originally posted by baddoggs:

So much for community servers being hacker free.

Encounters more cheating in official, went modded community and was insta killed with a leaning player and snap aiming. Real sus. This game just can't ♥♥♥♥♥♥ itself from these sus players.Sad.