Mysteries of the Mighty Barbarians.

[Odon]

lol has anyone seen this shit? apparently it is (or was?) possible to edit the hex values on AH items so you can just buy for the bid price if there is no buyout.

from bnet forums:

Spoiler: show

Hex Editor (recommended to use Hex Fiend if you are using Mac)
Steps on using Diablo 3 Exploit RMAH Bid Cheat

Note that the steps in here are only an educated guess on how Diablo 3 hackers perform the Diablo 3 RMAH bid cheat. We will not spoon feed you on how to use some of the tool involved in this. We will just quickly brief you on how the process is done.

Look for an item using the RMAH.
Dump the memory. (memory editor can also be used)
Scan for the item memory address (E.g. 0x1b450c60)
Find the “real” reference for the item.
Find the hex values for the bid confirmation and buyout confirmation.
Switch the bid confirmation with the buyout confirmation.
Find the hex values for the bid button and buyout button.
Switch the bid button with the buyout button.
Click the bid button.
Tada!

Thats the way to do it. I know nothing in memory dumping and hex values but prolly still could pull it out with google's help. And you wonder why theres a new maintenance... thats NOT a coincidence

so if i have an item that's worth 100m but i start it at 1m with no buyout, someone can "swap" the buyout/bid buttons and just buy my shit at 1m.

yet another thing that blows my mind.

D3 is not a Blizzard game. This is just unfuckingreal.

[Odon]

Outsourced to fucking India or something, the programmers for this game should all be fucking fired.

[Tajin]

And suddenly I feel like a douche for calling all the people crying about being hacked, idiots.

[kisada]

yeah, i never thought i'd see the day i was looking for ff14 to save me from online gaming.

[Necronus]

Its just mind boggling how many newbie mistakes they made in gameplay balance, UI design, AH design, and even basic coding techniques. It not like this is an indie game or a new studio ... this is a company who has volumes of examples of what to do and what not to do. Hell, toss out the gameplay balance issues even ... even the obvious ones ... its the UI / AH / Coding that's the true insult. I honestly don't even know how it got released when on even day 1 people already had literally dozens of obvious MINOR convinience tweaks that we've come to expect in games.

Ah well, back to Steam sales where I'll get the same amount of gameplay from two $4-$5 sale games that i got from D3 before getting jaded.

[Lucavi]

And suddenly I feel like a douche for calling all the people crying about being hacked, idiots.

I'm waiting for the rest of your kind to come crawling out of the woodwork with their "qq moar" shitty mouth-drivel. The game, no matter what kind of fun can be gleaned from it in its current form, is busted. Busted as fuck.

Whether it was unintentionally done by an over-worked staff or intentionally done by a "clever" staff that figured they'd release an early beta version of the game, then release the "real" version come the first expansion pack, is not for me to decide. We can all decide, however, that the shit is busted.

[Lordender]

Hex Editor, lmfao! someone went oldfuckingschool, 1998 on Blizzard.

[arus2001]

And suddenly I feel like a douche for calling all the people crying about being hacked, idiots.

Apology accepted.

[Thunder]

Hex Editor, lmfao! someone went oldfuckingschool, 1998 on Blizzard.

hex editors get used pretty often <_< easiest(noobiest) way to start changing things in a game

Seems like the security team for D3 was outsourced or something because this is pretty embarrassing. If things like game clock and alternating bids work(ed) then I'm pretty sure there are a lot more holes to exploit with creative methods

[Syntex]

You know after all this shit I don't think I'll buy another game from them. They can fuck off with someone elses money if this is the shit they are going to put out.

[Eanae]

I'm waiting for the rest of your kind to come crawling out of the woodwork with their "qq moar" shitty mouth-drivel. The game, no matter what kind of fun can be gleaned from it in its current form, is busted. Busted as fuck.

Whether it was unintentionally done by an over-worked staff or intentionally done by a "clever" staff that figured they'd release an early beta version of the game, then release the "real" version come the first expansion pack, is not for me to decide. We can all decide, however, that the shit is busted.

Nah you're still a cry baby.

[Plow]

Yeah, gameplay itself being fucked up has nothing to do with the fact that you want to blame your keyloggers on blizzard.

It still definitely stands that there was no rash of hackings, there was simply a rash of people without authenticators.

Spoiler: show

which obviously proves there's people living in the blizzard password servers (that can't access the authenticator ones) intercepting your info and the only reason they didn't get every single person that doesn't have an authenticator instantly the first time they logged in was to make it not look suspicious

[Plow]

Also yeah, hex editing working for that auction communication makes me wonder how long it will be before people figure out the same info for item rolls and start printing gear with the stats they want.

[arus2001]

Yeah, gameplay itself being fucked up has nothing to do with the fact that you want to blame your keyloggers on blizzard.

It still definitely stands that there was no rash of hackings, there was simply a rash of people without authenticators.

Spoiler: show

which obviously proves there's people living in the blizzard password servers (that can't access the authenticator ones) intercepting your info and the only reason they didn't get every single person that doesn't have an authenticator instantly the first time they logged in was to make it not look suspicious

I dunno, I just find it coincidental I got hit shortly after using the AH to sell something for the first time (at a point where you probably wouldn't have seen many people in Inferno). Lack of authenticator at the time may have made it easier for them, but I'm still of the mind something on Blizz's end pointed them to enough info about myself to get access. And fuck if they'll publicize such an error on their part. People just pointing out AH errors/exploits since just builds on that possibility.

[BaneTheBrawler]

The AH server is independent of the game server. It could be that selling something on the AH attracted the attention of the hackers, but authenticators are still king.

[arus2001]

Yeah. I'd never been in a public game by that point (still haven't) and it took Blizz a while to even associate my handle to the boards. Even so, they couldn't log in with that and I'm fairly confident my net habits didn't expose me elsewhere between avoiding unofficial info on the game and of the gaming communities I have signed up to, I use throwaway yahoo accounts whereas my bnet uses my primary... or at least did until I changed it post-recovery. And I've still got like a year of emails saved on my end to rule out phishing attempts. So, sometin' fishy.

[Blarg]

So for those who have sold gold on the rmah, how well does it actually sell?

[Odon]

I don't think you can yet my mcmuffin. Unless this was recently added.

[geno]

It was added 2 days ago. I sold about 110M so far, but it took quite awhile and I listed it pretty early. Threw up another 25M last night and no hits on that.

I was pretty surprised my initial lot sold, the floor price of $0.25/100K is so much higher than the exchange rate actually was (both in terms of item prices and underground gold selling sites). But I'm not complaining, pretty damn easy $200 after fees.

[Plow]

reading the computer illiterates' crap trying to conspiracy theory away their keyloggers just makes me think of this:

http://www.funnyordie.com/videos/251...out?rel=player