Test Server GM compromised

[tcb720]

Character Jesus, 201+ was accessed about 30 minutes ago and gave the same access level to Tutyloo as well as another guy, but he logged off. Tutyloo is now making herself god of the test server. Running commands on random people without a word. Abusing #kill, changing peoples names, titles, etc. The account containing Jesus was reduced to zero access and banned. I am assuming by her. I began asking accusatory questions regarding her status and what was going on and I was greeted by this.

[Tue Aug 31 16:32:52 2004] You say, '#help'
[Tue Aug 31 16:32:52 2004] Your access level is not high enough to use this command.
[Tue Aug 31 16:32:59 2004] You say, '#flag'
[Tue Aug 31 16:32:59 2004] Your access level is not high enough to use this command.
[Tue Aug 31 16:33:19 2004] You say, 'tuty im going to go post my logs and screenshots of u now'
[Tue Aug 31 16:33:27 2004] Tutyloo says, 'alright'
[Tue Aug 31 16:33:31 2004] Your might fades.
[Tue Aug 31 16:33:32 2004] Kardador Tarsinian begins to cast a spell.
[Tue Aug 31 16:33:33 2004] You say, 'since u revoked all my commands'
[Tue Aug 31 16:33:36 2004] Tutyloo says, 'lol'
[Tue Aug 31 16:33:38 2004] Tutyloo says, 'ok then'
[Tue Aug 31 16:33:41 2004] Tutyloo says, 'go ahead'
[Tue Aug 31 16:33:43 2004] You try to punch yourself, but miss!
[Tue Aug 31 16:33:43 2004] You have been knocked unconscious!
[Tue Aug 31 16:33:43 2004] You have been slain by Basald!
[Tue Aug 31 16:33:45 2004] Returning to home point, please wait...
[Tue Aug 31 16:33:46 2004] Your Home Zone is unavailable, going back to Character Selection Screen!


I am now IP-banned from the Test Server

[RangerDown]

Most likely a result of that account bug. People have been logging on their *own* accounts but end up getting other people's characters, so somebody *happened* to get cross-linked with an account that was GM status. That somebody chose to exploit this.

Wow... that bug has the potential for some serious abuse :( Looks like 5.8dr1 ain't gonna go live till the LSID thing is resolved. In any event, a quick "UPDATE account SET status=0 WHERE name NOT IN ('Doodman','Rogean', ..... )" is in order :P

[tcb720]

I completely agree. Theres maybe 10 people at any given time bug-hunting on the server. I cannot believe someone actually exploit to gain power over such a small world. It is very low and very frightening. Action is needed.

[Shadow-Wolf]

actualy i logged into a gm account too, but i did not stay in it to "abuse" my power but because my computer is slow and clunky and i got tired of looking for my characters cause it took forever, you may have seen me on as Biggy Shortty, to Ogre/Paladin, then Dark elf/Paladin(i might add REALLY TALL darkelf).

[tcb720]

Yes I'm still able to relog multiple times and I've stumbled onto quite a few GMs, including that punk Tutyloo or whatever her name is. However I was unable to log-in and revoke her access levels do to the fact that I am still IP-Banned.

[Doodman]

I am looking at ways to avoid that. I need to generate/capture some more keys for the login server.

Work has been busy lately, I should have a chance in the next day or two. Sorry for the delay.

[tcb720]

Think you could un-ban me in the meantime lol.

68.4.75.150

Thanks

[tcb720]

As of 7:42 PM PST She is still in-game playing god according to people on IRC. This is like 5 hours after she got GM status.

[bluejam]

Probably someone who hasn't been out of puberty yet, in the mental way.

[Scorpx725]

Why would someone be so childish... thats all I want to know. He/She/It will get caught soon enough, and then they loose, no matter how much fun they had.

[Cisyouc]

As of 7:42 PM PST She is still in-game playing god according to people on IRC. This is like 5 hours after she got GM status.Good god someone doesn't have a life...

[tcb720]

Well I was just able to get on and it looks like the pre-pubescent power trip have gone to sleep or off to play counter-strike or some other game more fitting for their maturity level. It seems I am banned only under my account name (tcb720) as I can log in with other accounts I get. I would still appreciate this being fixed.