Someone hacked my account?

[SafetyAlwaysOff 0]

Hello everyone, so today i decided to play some dayz and i just picked a random server off the list and when i spawned in.. i had the best gear possible. Im pretty sure its all hacked and im wondering if someone could have used my same IGN on that server and got it or what? I have never hacked and never will and im scared i might get banned for something i have not done.

No one has access to my computer except me btw.

So what should i do? I really dont want to get banned for this and need some help. Thanks.

[suspense 210]

You wont get banned for having "hacked items" also, no one hacked your account. In order to be using your "account" they would have to be using your CD key, which is unlikely, unless you gave it to someone obviously.

[RECphantom 31]

Get rid of the gear, maybe?

[Legacy (DayZ) 1091]

It's based on GUID's (Cd-Keys) Either someone spoofed it, or you let someone use your Cd-Key.

[redfield-77 315]

We don't have accounts. Everything is tied to your cd-key. As long as no one knows your cd-key you will be fine. A scripter could have armed you with weapons when you logged in.

[icomrade 201]

It's based on GUID's (Cd-Keys) Either someone spoofed it, or you let someone use your Cd-Key.

Guids cannot be spoofed, as they are computed by the server not the client. You would need to unhash/unsalt a 25 digit alphanumerical key in order to get someone's CD-key.

[Rollonio 54]

Place all items which are not in DayZ on a Zombie body, then hide the body. Keep the rest.

[SafetyAlwaysOff 0]

Thanks for so many replies! Im glad to hear i wont get banned, i was really worried.

[sixbarns 217]

Someone could have just changed your gear while you were spawning in.

[Dev (DayZ) 113]

You wont get banned for having "hacked items" also, no one hacked your account. In order to be using your "account" they would have to be using your CD key, which is unlikely, unless you gave it to someone obviously.

Someone has not seen Ander's post about banning people with hacked weapons. Might want to get your facts straight.

[v1ktor 59]

Guids cannot be spoofed, as they are computed by the server not the client. You would need to unhash/unsalt a 25 digit alphanumerical key in order to get someone's CD-key.

Right and wrong at the same time. BE dev team claimed (ever since the guid spoofing went public 2 weeks ago) that the guid is created by the server and thereby your cd key never get's registered on the client. The problem is that half of that statement is a lie and there is a major exploit. ANY server owner who has an unmanaged/dedicated server can intercept the guid creation as a player is joining (no do not ask me for a link). It's a simple .exe which injects into the memory of aoserver.exe while it's in the memory. It's the same method smart hackers use to get around global bans.

Btw: with 95948 you are no longer able to run a script on a user without a bypasser and all other memory related hacking is now logged in BE folder on the server machine

Edited August 15, 2012 by v1ktor

[suspense 210]

Someone has not seen Ander's post about banning people with hacked weapons. Might want to get your facts straight.

Someone must not have seen Rockets post about people using hacked weapons(and battleyes faq site) Might want to get your facts straight.

[sostronk 334]

Looks like not many people realise that you can execute scripts on other players to do this.

[icomrade 201]

Right and wrong at the same time. BE dev team claimed (ever since the guid spoofing went public 2 weeks ago) that the guid is created by the server and thereby your cd key never get's registered on the client. The problem is that half of that statement is a lie and there is a major exploit. ANY server owner who has an unmanaged/dedicated server can intercept the guid creation as a player is joining (no do not ask me for a link). It's a simple .exe which injects into the memory of aoserver.exe while it's in the memory. It's the same method smart hackers use to get around global bans.

Btw: with 95948 you are no longer able to run a script on a user without a bypasser and all other memory related hacking is now logged in BE folder on the server machine

The BE change to logging/script detection was made in 95883. As far as I know the only thing server admins can do is white list guids from being effected by BE, I.E. banned CD keys are usable if the guid is white listed. CD Keys are never sent in plain text to the server, even packets are encrypted. CD Keys are sent from the client to the server using an unreadable/unreachable address of the memory. Therefor this unencrypted CD key will almost certainly never be able to be read from memory.

All of this is assuming that ArmA 2 OA has some sort of buffer overflow protection.

Edited August 15, 2012 by icomrade