All Categories

Credit card fraud

Search
How to join our moderation team?
Nov 1, 2016, 00:4611/01/16
231990

Credit card fraud

With all the cheating and hacking going on, how can I be sure it is safe to use my credit card on this website?  Until the ability for Plarium to stop the scripting/hacking/cheating, I cannot afford the potential exposure to credit card fraud from your site.

Views
6k
Comments
38
Comments
Nov 1, 2016, 00:5611/01/16
231990

You won't get an answer on this. Except maybe, that "everything is safe, no one can cheat, fraud or scam" and that there are regularily "security scripts" managed by the "security team". Only to find the other day out that the russian robbed your CC.


No $ for cheats.

Nov 1, 2016, 01:0811/01/16
07/03/16
2
Now that is a very good question. And the answer is, you can't. Therefore, "No $ for Cheats" is not only good for the game, it just might save your wallet.
Nov 1, 2016, 01:3111/01/16
231990
I told everyone in our BH to cancel their card and IF they really have to spend anything here, get a throw away visa from the corner store, IMHO nothing is safe based on what I have seen.
Nov 1, 2016, 01:3911/01/16
19

Well, absolutely correct. In a game where cheaters do whatever they want, your credit card is not safe. Of course not.


No $ for cheats and your own security.
Nov 1, 2016, 01:4611/01/16
07/10/16
176
picframer said:

I told everyone in our BH to cancel their card and IF they really have to spend anything here, get a throw away visa from the corner store, IMHO nothing is safe based on what I have seen.
What you wrote. ^^^
Nov 1, 2016, 13:1211/01/16
231990

I can confirm that no cheats or hacks can be applied to our game. Our game server is secure against any penetrations or attacks. 

Recently we have identified the number of players that were violating our Terms of Use. However, they didn't use any cheats and they have obtained their units in a fair way. 

Moreover, nobody can get access to your game account or credit card information if you don't compromise it.
Nov 1, 2016, 13:5411/01/16
231990

Alyona,


Thank you for your post, perhaps an older age thing on my part.....having played this game with a pretty good understanding of how things should work, looking at what has transpired with attacks on our BH and others that deify logic, seeing havens which have been reported have massive troops with little to no stats except for prizes, seeing these mass attacks against players from havens that are fairly new yet have offence in the tens of millions, not one but dozens, havens again by the dozen all created on the same date, almost identical stats and layouts, names for the most part the same......To make matters harder for me to understand if hacks and cheats have not been used why is the map riddled with these BOT havens that you confirmed in another thread were not created by your employer and many have these have been around for 2 years or more, it seems to me they cost your company income as they supply resources that players do not have to either wait for or buy with hard earned real money yet it seems little has been done to shut them down....my business background is telling me this makes no sense.


I am pretty much left to conclude this may have been an attempt by the makers of the game to bring balance, which has cost our players dearly since you have confirmed no cheats or hacks have been used, i ask you to understand where we the players are coming from.


Please bear with me, I am not pointing fingers, just trying desperately to understand as are my fellow players.


Kindest Regards
Nov 1, 2016, 15:4411/01/16
11/06/14
579

If you guys are so concerned about your CC info, I suggest you do what others do and use a prepaid card or even gift cards. If you guys look at the payment screen other options for payment are available besides paypal or a credit card. 



Nov 2, 2016, 06:0311/02/16
Nov 2, 2016, 06:06(edited)
231990

Malibou's Most Wanted

Nov 2, 2016, 17:5011/02/16
231990

However, what is misunderstood here is that bots are not magic, nor do they crack anything. They simply automate tasks, which is almost the same as having live players. The difference between a bot and a live player is that a bot can't be bargained with. It can't be reasoned with. It doesn't feel pity, or remorse, or fear. And it absolutely will not stop... ever, until you are dead! ;-) This means that the only real abuse with bots comes from running a huge amount of alts, that a living person would be unable to run. Now, this is an abuse worthy of swift action and harsh punishment, but it is not a security vulnerability, and - from all that was said by you and Plarium on this issue - I have a feeling that this is exactly what is happening here.




Look at the prize ranking, they have LH-automation too ... so the script is obviously more complex than the common Automation scripts. even without that lh-automation they could build up thousands of accounts with each several million offense to burn in a couple of months, simply by doing nothing.


And i want to say it again: even if we Keep on reporting bots to the Support, they can create more bots at one day than we can Report. that will go on forever and Change the game.


players will start to use their own scripts or quit the game. if everyone uses these scripts, presidios are basically useless for example ... and you tell us thats no cheating? WHY???? just because your serverdata's aren't changed? thats pure sarcasm i hope ....


Nov 2, 2016, 18:1911/02/16
12/13/15
203

bernd said:


However, what is misunderstood here is that bots are not magic, nor do they crack anything. They simply automate tasks, which is almost the same as having live players. The difference between a bot and a live player is that a bot can't be bargained with. It can't be reasoned with. It doesn't feel pity, or remorse, or fear. And it absolutely will not stop... ever, until you are dead! ;-) This means that the only real abuse with bots comes from running a huge amount of alts, that a living person would be unable to run. Now, this is an abuse worthy of swift action and harsh punishment, but it is not a security vulnerability, and - from all that was said by you and Plarium on this issue - I have a feeling that this is exactly what is happening here.




Look at the prize ranking, they have LH-automation too ... so the script is obviously more complex than the common Automation scripts. even without that lh-automation they could build up thousands of accounts with each several million offense to burn in a couple of months, simply by doing nothing.


And i want to say it again: even if we Keep on reporting bots to the Support, they can create more bots at one day than we can Report. that will go on forever and Change the game.


players will start to use their own scripts or quit the game. if everyone uses these scripts, presidios are basically useless for example ... and you tell us thats no cheating? WHY???? just because your serverdata's aren't changed? thats pure sarcasm i hope ....


i agree  with everything you said

if bots are no humans and they producing troops-playing prizes-win rewards-troops/rubies and other goods....then destroying someone of us with all that.....you can call it what ever you like  , for me that is cheating
Nov 2, 2016, 19:0511/02/16
Nov 2, 2016, 19:06(edited)
03/27/14
1654

it is cheating, and if you can send the bot cords to plarium support so they can take action of the bots that are showing up then this can get fixed faster





PLARIUM is finally stepping up to this guys, Im not just saying that,

ive seen true facts of it by my own eyes

 But they won't I REPEAT won't interfere with our game unless WE ask them to look at something, ,

So if bots are coming up on your gaming events, bring them in, show them here, 


And as said please turn them in support, even if you have 10 tickets out already...


http://support.plarium.com/enpirates/Tickets/Submit/Step1/23

Nov 2, 2016, 20:2211/02/16
Nov 2, 2016, 20:58(edited)
231990

Blasphemy said:


it is cheating, and if you can send the bot cords to plarium support so they can take action of the bots that are showing up then this can get fixed faster

ive seen true facts of it by my own eyes

I'm thinking it's not about the october revolutionary bots to blame, maybe something else its happening here.

I've seen true facts too.

Nov 2, 2016, 22:1711/02/16
03/27/14
1654

maybe bot the new bots coming to life, need to be noticed and need to be turned in, if you want the bot attacks to stop...

plarium will not get involved unless we ask them to and give them what we want ....


CrowbarModerator
Nov 3, 2016, 09:2111/03/16
03/07/16
2422

bernd said:


players will start to use their own scripts or quit the game. if everyone uses these scripts, presidios are basically useless for example ... and you tell us thats no cheating? WHY???? just because your serverdata's aren't changed? thats pure sarcasm i hope ....

You're twisting my words. I never said that it wasn't cheating, but that it's not hacking. This topic was started with concerns about the safety of your credit card data, and I addressed that.

If I wasn't clear enough, here: bots are a way of cheating, same as alts, but on a massive scale.

As for LH-automation, it all depends on how complex the strategy is. It might actually be simple to teach a bot to do it, but without knowing the strategy we can't really know.
Nov 3, 2016, 10:1511/03/16
08/01/15
39

Crowbar said:


bernd said:


players will start to use their own scripts or quit the game. if everyone uses these scripts, presidios are basically useless for example ... and you tell us thats no cheating? WHY???? just because your serverdata's aren't changed? thats pure sarcasm i hope ....

You're twisting my words. I never said that it wasn't cheating, but that it's not hacking. This topic was started with concerns about the safety of your credit card data, and I addressed that.

If I wasn't clear enough, here: bots are a way of cheating, same as alts, but on a massive scale.

As for LH-automation, it all depends on how complex the strategy is. It might actually be simple to teach a bot to do it, but without knowing the strategy we can't really know.

Sorry Crowbar but you are wrong. Automation of the items can only be achieved by injecting code into the software. An action which requires unauthorised access to the software = hacking.

It's a separate issue from credit card information but doesn't bode well for server security and that leads to obvious concerns.

Finding the information within millions of lines of data is no easy task and the request for details is to narrow down the search area. Obviously the servers' automated data check isn't designed for, or up to, the job in hand.

With the amount of money involved what really suprises me is that a specialist third party security company hasn't been brought in to solve what seems to be an issue that appears to have been around for some time?
CrowbarModerator
Nov 3, 2016, 11:3911/03/16
03/07/16
2422

I am not wrong. The game runs in a flash client that communicates with the server. If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

And, since the client is practically open source, you can mimic any kind of encryption that might be protecting this communication.

Nov 3, 2016, 13:5611/03/16
08/01/15
39

Crowbar said:


I am not wrong. The game runs in a flash client that communicates with the server. If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

And, since the client is practically open source, you can mimic any kind of encryption that might be protecting this communication.

To produce items on the scale we have seen would require automation of the requests and on a multiple basis to have so many "members" building so quickly?

The lack of diary scores isn't correlated against the troops available / resources required?
That would imply also that the limit on lighthouse prizes enforced on "normal" players is being manipulated to achieve the recent scores?

It is also impossible for the "normal" player to hide eleven buildings behind the stronghold but these "bots" seem to be able to do this.

All of these things require manipulation of the server parameters.
Nov 4, 2016, 12:3211/04/16
231990
Crowbar said:

If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

You're right. And I would add that even if you do that, you can't do anything except the authorized actions that could be performed via game client.
Nov 4, 2016, 22:0911/04/16
231990

Alyona Kolomiitseva said:


Crowbar said:


If you figure out how the client sends its commands, no injection nor anything similar is needed. You simply send the same requests that would normally be sent by the client. To the server, this is indistinguishable from an ordinary player normally playing via the client.

You're right. And I would add that even if you do that, you can't do anything except the authorized actions that could be performed via game client.

So why do These bots have no raidpoints and so much prize Points?



and you say it would be ok if i start 2 k alts today and run them via Automation, because all they can do is the same a normal Player can do .... so in 3-4 months i can burn 2 k accounts for attacking? and all that is cool for you because your game is safe then and all the stupid Players can still give you their Money?!