PDA

View Full Version : Wormnet/Net play - I was hacked...i think.


Mr.cosmico
19 Oct 2005, 21:38
Yes. How and why I dont know, but I was.

I joined a host, there were more 2 players in it, 3 player match.

I win the first round, then, at the end of the second, I was going to win again, only needed to use the shotgun to kill both worms.

Just i as going to select the shotgun, my worm started the move, and I was LAGGING AS HELL. It happened in one second, so I thought it was just my net, but then, i was going to aim a bazooka at one worm (realized didnt had a shotgun), and was ready to aim.

Just as I was pressing the button, I started to lag again, and the worm turned around, making me miss my shot. I found it suspicious, but once again I thought it was my net.

At my next turn, i didnt TOUCHED the keyboard, and the worm MOVED and JUMPED around, and selected an air strike and even AIMED! But right after that, the guy that was loosing left the game (his name gone grey). It was probably him.

Happened to anyone else here?

colt blood
19 Oct 2005, 21:54
not to me i leave my firewall on

Mr.cosmico
19 Oct 2005, 21:57
So did I...Dont think it would help even if it was off.

quakerworm
19 Oct 2005, 22:38
that is highly odd. do you have windows xp by any chance? it has the remote controll option which allows someone else to take controll over your keyboard and mouse. since it sends out screen captures to that person it would cause a serious lag. that is the only way i can see this happening. i do not think that there is any way to do this using wormnet alone.

Rabble
20 Oct 2005, 02:28
When I minimize that game while I am doing something (for example spinning) my worm will keep spinning until I Maximize it.

In your case, mabye your game was going screwy.

colt blood
20 Oct 2005, 06:39
that is highly odd. do you have windows xp by any chance? it has the remote controll option which allows someone else to take controll over your keyboard and mouse. since it sends out screen captures to that person it would cause a serious lag. that is the only way i can see this happening. i do not think that there is any way to do this using wormnet alone.
but before that happends u have to give premision and els just press escape to stop it when it happends again

parsley
20 Oct 2005, 11:33
I'd be amazed if someone had managed to hack the Worms 4 network itself, let alone gain control of your worm.

If you can be bothered looking it up, each game session is protected with a 256 bit Diffie-Helman-Merkle key. It is extremely difficult to crack, with the exception of the man-in-the-middle attack but, as the man-in-the-middle attack takes place during the key exchange (when you join the lobby), I can't really see the hacker waiting so long before making himself known.

Once the DHM session key has been shared, the encryption used is a fairly straightforward key-based scrambling mechanism. I wouldn't claim it to be secure against a serious attacker because GCHQ, for example, could crack it in a minute: 59 seconds of hysterical laughter, followed by 1 second of computation, that is. Even so, I'd still be bloody amazed if someone managed to extract the key from the data stream (and thus be able to insert data into the legitimate data stream) within the time available.

Even then, having obtained the key and synchronised the scrambler, the would-be hacker still has a problem: when a local worm is in play, the game is simply not even listening to the network: I don't think it's even possible to gain control of a local worm from a remote machine

Most likely cause: there's a nasty bug somewhere and the game went screwy.

Given the comments by quakerworm, I'd seriously consider whether or not your machine has been compromised.

Mr.cosmico
20 Oct 2005, 20:05
Actually, odd things have been happening with my pc, I better check if everything is alright :-/

colt blood
20 Oct 2005, 20:35
Even then, having obtained the key and synchronised the scrambler, the would-be hacker still has a problem: when a local worm is in play, the game is simply not even listening to the network: I don't think it's even possible to gain control of a local worm from a remote machine


well as i think your saying is that the controles over a worm happens on your pc so the network wont get over loaded oh sweet then i know nice things :P but wont do it but still is nice :D :P

quakerworm
23 Oct 2005, 07:32
Even then, having obtained the key and synchronised the scrambler, the would-be hacker still has a problem: when a local worm is in play, the game is simply not even listening to the network: I don't think it's even possible to gain control of a local worm from a remote machine
that is what i thought but wasnt sure since there are other things that seem a bit odd to me in the way the game works. but that is why i suggested problem with the os or machine rather than the game.

eduardodb
25 Oct 2005, 00:17
hello, i wanted to know how do i play on internet with my friends, please give me the advices step by step so i will understand better

eduardodb
25 Oct 2005, 00:20
please give advices step by step. HOW DO I ACTIVATE MY WORMNET

Krazy_92
25 Oct 2005, 00:25
eh???

you need a gamespy account

Worm Mania
25 Oct 2005, 09:25
i had the same problem mr cosmico yesturday i was choosing a weapon for a normal turn and then it just changed to jetpack i changed it back and then it came to a mine,the game quit and it said something that i have never seen b4,you get these couldn't connect to remote machine but this was different if i get it again i'll write it down.

jesusthief
5 Apr 2006, 17:53
Almost exactly the same thing happened to me: the lagging, the point at which it happened being when it was just my last worm and one enemy worm.
Was playing WWP on wormnet2, but my Norton took care of the attack, though it crashed the game to do so.

Attack was the worm
MS Windows H.323 Buffer Overflow
at 4:54pm on April 5th 2006

I'm running Windows XP, but it wasn't XP's remoteware - its disabled on my machine.

According to Norton Symantec you can block these attacks manually by
blocking port 1720.

Is anyone at t17 doing anything about this ?
If not - why not ?

I REALLY REALLY want to find out what happened and would be very grateful for any help on the matter, this kind of behaviour isn't just legally criminal, its CHEATING, which is far worse.

97wormer
6 Apr 2006, 10:27
Yes, the same things happened to me two or three times in Worms 4, but I still was able to control the worm at least a little bit by pressing the opposite key of the (maybe) remote-controlled moving direction. I have an always up to date virus-scanner from G-Data in use, my system is clean, but virus-scanner and firewall are turned off during the game. How serious is it? Do I have to worry? :eek:

jb.jones
9 Apr 2006, 01:47
This is extremely odd, would any of you be using a no-cd crack so you don't have to put in the DVD? I wonder if this could have something to do with it.

Fizz
14 Apr 2006, 02:51
Hi everyone,

Since this thread has been revived and it's the first time I am reading it I'll say this. It is possible for another person to control your worm Mr.Cosmico and parsley. This never occurred to me in "Worms 4: Mayhem" yet, but in "Worms 3D" it did occur with me and Krazy 92 (he has disappeared off the internet so he can't justify this). Krazy and I would play games in "Worms 3D" and sometimes (because it was so glitchy) during a game he'd take over my worm or I'd do the same to his. This was right after a turn not during a turn and my guess is that this happened because the game would switch teams or worms or something like that (can't explain it with computer terms :p). Just like usual, right after a glitch occurs the game would diconnect and be over.

parsley
18 Apr 2006, 10:04
I was writing of the possibility of hacking the network in Worms 4 Mayhem, not the possibility of seeing the described behaviour in Worms 3D.

parsley
18 Apr 2006, 10:14
Almost exactly the same thing happened to me: the lagging, the point at which it happened being when it was just my last worm and one enemy worm.
Was playing WWP on wormnet2, but my Norton took care of the attack, though it crashed the game to do so.

Attack was the worm
MS Windows H.323 Buffer Overflow
at 4:54pm on April 5th 2006

You mean the Microsoft ISA Server H.323 buffer overflow vulnerability? As fixed by Microsoft in January 2004?

Is anyone at t17 doing anything about this?
Nope.

If not - why not ?
:D

tom2k
30 Jul 2006, 20:40
Hello this is happening for me too.
Happend 2 times this week with 3 players, first we got a big laag and than someone else was controlling our worms and we couldnt do anything.
Than after a minute some guy joined the chat in game !!! Very strange cause normaly u cant join running games...
The guy told us than that he hacked us etc. , esc button dont work anymore and we had to close the game with alt+strg+del.

Krazy_92
2 Aug 2006, 04:36
Hi everyone,

Since this thread has been revived and it's the first time I am reading it I'll say this. It is possible for another person to control your worm Mr.Cosmico and parsley. This never occurred to me in "Worms 4: Mayhem" yet, but in "Worms 3D" it did occur with me and Krazy 92 (he has disappeared off the internet so he can't justify this). Krazy and I would play games in "Worms 3D" and sometimes (because it was so glitchy) during a game he'd take over my worm or I'd do the same to his. This was right after a turn not during a turn and my guess is that this happened because the game would switch teams or worms or something like that (can't explain it with computer terms :p). Just like usual, right after a glitch occurs the game would diconnect and be over.
Rofl.. i remember when you took control of my worm and i had to drown myself XDD

Me!!!
2 Aug 2006, 07:33
Hello this is happening for me too.
Happend 2 times this week with 3 players, first we got a big laag and than someone else was controlling our worms and we couldnt do anything.
Than after a minute some guy joined the chat in game !!! Very strange cause normaly u cant join running games...
The guy told us than that he hacked us etc. , esc button dont work anymore and we had to close the game with alt+strg+del.

A similiar thing happened to me too. But nobody took control of our worms (or I didn't see that happening). It just started lagging horribly, one of the players did nothing, then the game stopped for 3 minutes (angry swearing during this time), and after that all controls got locked and we couldn't quit the game. Hopefully I was able to tell the others via the chat menu to ctrl+alt+del out of the game.

It was round two- I got no lag at all in round one. The players did accuse the "green player" for lagging, but the weird thing is that we didn't lag at all during the first round. He wasn't downloading anything on the background either.

tom2k
2 Aug 2006, 14:58
Hi, were you able to chat when u had the lag ?
When we got the lag we could easily talk via chat but the game hanks... strange.

Me!!!
3 Aug 2006, 14:08
Hi, were you able to chat when u had the lag ?
When we got the lag we could easily talk via chat but the game hanks... strange.

Yeah, we were able to chat during that time.

robowurmz
10 Aug 2006, 20:05
This is major stuff going on here. I wonder...do any of you have wireless internet connections?

tom2k
17 Aug 2006, 16:27
No Wireless connection here.
This hacking action is going to be a big problem so i stopped playing worms.
Strange that the Team17 guys dont say anything about it.
I can say that my system is very secure so it cant be some security issues on my pc. (only opened the ports that are listed here to host games)
I think team17 made some serious failures in Worms4 and they dont want to talk about that....
For me its the last product i own from team17, because this **** is to heavy to accept and noone is doing **** about.