Dekar wrote:
Ohh right, WC3 uses udp which allows IP spoofing and might could do nasty stuff... But corrupting your map folder? In a way it works again later? Sounds more like a bug with wc3 or the refresher. But it really could be a ddos attack and since the game traffic is afaik udp only you can't trace him. Not even Blizzard could, I read an article about tracing ip-spoofed traffic about a year ago and it said you'd have no chance if you're a normal guy. Hows X11 on mac? I always read it'd be the hell XD Have you tried changing your IP (If you have dynamic IP) or log in with a different bnet account using a different port? If you have a static IP and this stuff goes on you should get a Linux machine with applied tarpit patches, that could surely stop him. But as a first measure you should change the port! good luck
The point is, it doesn't even matter if you change ports, cancel the refresher, or force quit every single program: allowing Mono Frameworks to have a .exe file work with the
system is at the moment, allowing the hack on the refresher to never stop, even if you manually quit tasks (processes) in the Mac OS X equivalent of task manager, Activity Monitor.
The corruption on the map folder is file specific: any files in the directory are corrupted. I simply removed the corrupted files, and inputted copies of them back into the correct folders.
X11 is a damn pain... I usually manually boot the refresher through terminal when it starts to constantly crash. I had a static for the connection I had, no dynamic here.
Yeah, sure I could play Warcraft 3 on Linux and use Tarpit... but I want the damn status quo, and no one is going to change my personal preferences to how I play the game and what system I run it on. I am not compromising my system while I play the game to this... anti-social time-waster.
I have a port range, so if one is blocked, it goes on the other. 6112-6119. All are blocked during this process, because it's Warden that's doing the CD key or IP banning, not this guy. He's manipulating Warden using a DDoS attack. Warden reacts to the threat, and kills it. Unfortunately I'm the target, due to the laser pointer being homed in on me, due to this hacker.
I can spoof my own IP (I also have many different computers I can use, and I'm in many locations), and I have many CD keys... I'm no slouch on Battle.net.
Are there any Mac Experts on here? Maybe I could scrap the auto refresh I made, and find a more secure project for Mac OS X that's being worked on? I understand there's some Dutch project in the works, but Java script is failing to work for Mac OS X for the program: something about the drivers.
Again, the problem isn't accessing Battle.net. The problem is, this fucker finds me and hacks me, so I get banned, no matter what I do, so it's either an infection, or he's tracking me somehow.
So basically in a summary, the guy is forcing me to be unable to host without getting banned. I tried deleting all my auto refresh files the other day... I even re-installed and removed X11 and Mono Frameworks as well at alt.binaries (and any other tools I used to make it), etc. And the thing STILL was infiltrating my hosts.
Shall I run a motion capture of the hack? See if you can watch it, then whatever information you get, do something about it?