Quiting game

[dendryte]

injecting a packet with long enough text to overflow a buffer?

[Robert]

To be honest, I wonder why people leave say and shout off. And I doubt it would be hard to make a mule, /sea dragonaery, and tell every single person there.

you can't search an area you haven't been to with that character. but ya, I understand what you mean

[Taj]

injecting a packet with long enough text to overflow a buffer?

Nope

[Faranim]

injecting a packet with long enough text to overflow a buffer?

I crash my client if I try to copy + paste too much into the chat buffer. But I think that has more to do with the IME (or whatever the client uses when you're typing stuff) rather than when it tries to render the text.

It's probably something really simple like sending the bytecodes for Alt + F4 into a packet. The key being that you have to know the packet structure and bypass the client completely.

[Jeryhn]

If I were to wager a guess, he's using the chatlog to inject a character that the client sees is missing, or one that it cannot recognize. If you go by the theory that if you delete the Darter file and don't put something in its place, the client will search for the file, become unable to find it, and the client then crashes.

I remember back in my old Counterstrike days I had a little program that would inject a computer-controlled character into strictly PvP servers. Since no AI for dummy characters is programmed into these servers, it times out and crashes the server trying to find it. I'm not really a good FPS player so if people pissed me off too much I would use the program to crash the server.

I can surmise that Taj is using a similar method, and to prevent him from disconnecting himself, he inserts the character into a windower macro, blacklists himself, then hits it in /say or /shout range of other people. The actual character he could be trying to insert into the text (though I am sure there are many) I am not familiar with. And yes, SE could fix it easily.

How close am I?

[Taj]

How close am I?

Not very. I'm hesitant to divulge how it works because then nubs like iiFuzz or whatever that fag's name is is going to build it in to FFXIApp.

[Septimus]

How close am I?

Not very. I'm hesitant to divulge how it works because then nubs like iiFuzz or whatever that fag's name is is going to build it in to FFXIApp.

Then don't. >_>

[Aviendha]

This topic is made of win and legendary. I can just imagine the drama that would ensue at king camps if this got out.

Exactly what went through my mind- LSes zoning right outside DA when Nidd pops and just having someone dc the zone

[Jeryhn]

Darn. Was worth a shot though.

[Scythiroth]

How close am I?

Not very. I'm hesitant to divulge how it works because then nubs like iiFuzz or whatever that fag's name is is going to build it in to FFXIApp.

Then don't. >_>

I just hope people realize that if he does give out what he is doing, it will be fixed very fast.

[Jeryhn]

How close am I?

Not very. I'm hesitant to divulge how it works because then nubs like iiFuzz or whatever that fag's name is is going to build it in to FFXIApp.

Then don't. >_>

I just hope people realize that if he does give out what he is doing, it will be fixed very fast.

I would also guess that they'd include a detection method if anyone tried duplicating it, if they can't already.

Seeing how we know Taj likes to flaunt his ability to hack FFXI, I'm pretty sure he wouldn't care if his 30th character got banned.

[Eanae]

Would be anything similar to a SQL injection?

[Taj]

Would be anything similar to a SQL injection?

No.

[Faranim]

Would be anything similar to a SQL injection?

I don't see how SQL Injection is even related. I'm sure if SQL Injection was possible, you'd be able to do an awful lot more damage than just crash their clients ' OR DROP DATABASE

[Fallso]

I'm guessing you edit the packets in such a way that the rest of the people in a zone can't find said information in the packets=mass POL failure? If not this then I definately know my other way is right.

[TB]

I bet Taj getting PM bombed now with people asking how this is done. lol

[Eanae]

Would be anything similar to a SQL injection?

I don't see how SQL Injection is even related. I'm sure if SQL Injection was possible, you'd be able to do an awful lot more damage than just crash their clients ' OR DROP DATABASE

Hey was just putting a shot out there

[Vobent]

Using Python? >,>

[Fallso]

Using Python? >,>

Isn't python a compiler/SDK? >_>a

[Taj]

Using Python? >,>

Python is an interpreter, and I'm using C++