Closed Thread
Results 1 to 15 of 131

Thread: Clone Wars, The Exploit... Continuation

Hybrid View

  1. #1
    Developer
    Join Date
    Sep 2011
    Location
    New York, NY
    Posts
    1,601
    Play Stats
    Inactive
    Quote Originally Posted by esmiswg View Post
    When your tool is flagging items as duped that are made with the same factory run of *crafted components* where a single one of those components got duped on a completely separate account, then your tool does not meet the specification of correctly detecting duped items. It needs more time and additional information taken into account to even work right.
    Trust me it is no where near that simple in implementation, it's 1,300 lines of code just for the part that flags the items. I appreciate the complexities are not obvious, but we have spent a lot of time looking at the edge cases here.

    I will not go into the details of the exploit, however there were a number of "artifacts" that could be used as a seed.

    The system that does the tagging has 8 separate phases that unpack each level of detail to match items, not just a simple s/n counter.

    If we just sorted based on s/n's we would have flagged 100 million items.

    That said when you do see a s/n with thousands of copies and its a loot item not a manufactured item, pretty clear what happened there.
    LordKator
    Developer

    lordkator@swgemu.com | www.swgemu.com
    SWGEmu is a non-profit, open source community project.
    SWGEmu FAQ | Install SWGEmu | Report Bugs

  2. #2
    Newbie
    Join Date
    Feb 2017
    Posts
    34
    Play Stats
    Inactive
    Quote Originally Posted by lordkator View Post
    Trust me it is no where near that simple in implementation, it's 1,300 lines of code just for the part that flags the items. I appreciate the complexities are not obvious, but we have spent a lot of time looking at the edge cases here.

    I will not go into the details of the exploit, however there were a number of "artifacts" that could be used as a seed.

    The system that does the tagging has 8 separate phases that unpack each level of detail to match items, not just a simple s/n counter.

    If we just sorted based on s/n's we would have flagged 100 million items.

    That said when you do see a s/n with thousands of copies and its a loot item not a manufactured item, pretty clear what happened there.
    How does it matter when it's so obviously wrong? It does not do the job it's supposed to do. It's close, but not quite yet. Please spend some more time polishing it until it's actually correct. It would be such a waste to spend months on something and then have the results be half-assed. It's really not missing much, but it is missing a significant part.

    I have items flagged from the same factory run of components that contain *no* looted items btw.
    Last edited by esmiswg; 08-05-2020 at 04:44 AM.
    Vendor: -3027, -4562 (Gorath, Tatooine)

  3. #3
    Developer
    Join Date
    Sep 2011
    Location
    New York, NY
    Posts
    1,601
    Play Stats
    Inactive
    Quote Originally Posted by esmiswg View Post
    How does it matter when it's so obviously wrong? It does not do the job it's supposed to do. It's close, but not quite yet. Please spend some more time polishing it until it's actually correct. It would be such a waste to spend months on something and then have the results be half-assed. It's really not missing much, but it is missing a significant part.

    I have items flagged from the same factory run of components that contain *no* looted items btw.
    Contact support if you think it's wrong, give them OID's. But are you sure every single resource you used was clean? Because they duped everything including resource crates and wall modules. Its crazy.

    I appreciate you're upset, many people are, but saying the system doesn't do what it's supposed to do when you don't know the entire extent of what happened is not helpful.

    I've been "polishing" this for months using TC-Prime, you all thought it was down but instead, I built code that allowed me to keep it up for testing and later just for staff.

    I've done 100's of spot checks, even since the marking I've had outreach and thus far not found any item that should not have been tagged. I have however found net-new ones that should be. The program that does the audit is fairly conservative, I know it doesn't feel that way to you but they duped an incredible amount of items, I have another log I'm looking through where I found even more ADK's they duped but because of the way they did it the audit did not find them.

    I don't know how to help you with your intuition that its not working, when all the data we look at with CSR's and others shows it actually is working as intended.
    LordKator
    Developer

    lordkator@swgemu.com | www.swgemu.com
    SWGEmu is a non-profit, open source community project.
    SWGEmu FAQ | Install SWGEmu | Report Bugs

Closed Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts