EVE General Discussion

I've recently got back into eve after around a year of only logging in to train skills.

I had several requests in my inbox from people in Brave Noobies to join them and as I enjoyed the time I had spent with them before I thought why not.

I was fast-tracked through the recruitment queue and was accepted into corporation.

Shortly after some people that I was friends with before invited me to a TeamSpeak server that they run.

And this is where it went down hill...

But first a little about me, I currently have the following qualifications:

CompTIA – Security+

Certified Ethical Hacker (CEH)

Offensive Security Certified Professional (OSCP)
Offensive Security Wireless Professional (OSWP)
Offensive Security Certified Expert (OSCE)
Offensive Security Exploitation Expert (OSEE) + Advanced Windows Exploitation (AWE)
Offensive Security Web Expert (OSWE)

Certified Penetration Testing Consultant (CPTC)
Certified Penetration Testing Engineer (CPTE)

Certified Security Testing Associate (CSTA)
GIAC Certified Penetration Tester (GPEN)

Certified Security Analyst (ECSA)
Certified Expert Penetration Tester (CEPT)

Can you guess what my job is?

So I join this TeamSpeak server and the people on there are calling names from local then shortly after posting the links to the kills.

My first thought where dam these guys are a lot better at eve than the last time I flew with them.

But after a while of flying with them I noticed something the pilots they were killing were not shooting back.

Curious as to why this was I tried to start a conversation with a few of them and got a message telling me they were offline.

This seemed a little odd I've seen people rage quit before, but I've never seen ten people in a row rage quit.

So when they called names, I would quickly search the pilot and then add them to the online/offline watch list.

Sure enough shortly afterwards they would disconnect from the internet.

At this point, I know what is going on someone or someones in the group are disconnecting these pilots so the others can kill them.

What I didn't know was the how.

So after about an hour of asking leading questions hinting that I knew what was going on I was pulled into a channel and told that they were using denial of service DOS attacks on the players to disconnect.

I asked how are they getting the IP's of these players in order to disconnect them?

It turns out that there are many ways to do this some that I was aware of some that I was not.

Here are some of the ways.

Get a user to visit a website and log their IP address. Side note anyone who has sent you a link from this site http://gyazo.in has been trying to send a denial of service attack to you. How do I know for sure? The company that owned that website before it was closed down where a denial of service for rent company. Check your chatlogs ;o)

Get a user to join third party voice comms anyone on TeamSpeak or Mumble who has admin or on most servers moderator can show info on you to get your IP (note you cannot do this via eve voice)

Get the users Skype account and use any of the free services to resolve there Skype account to there IP address.

When they have your IP kicking you from the internet on command is as simple as a £30 a month subscription to a denial of service for rent company or from £90 a month you can rent a server powerful enough to do this without the need for a third party company.

This is, however, illegal; good luck proving it, most of you don't even know its happening.

So moving on from this I asked how do you get away with it.

Well the same lesson thats been there for years. Do not click on a unknown link specially if is in local and is not from your "buddies"

THis behaviors is bad and shows no good sportsmanship, but defintly easy to mitagate by not clicking on enemy links.

well........ok then.....

You can petition CCP with all the details, but they are right that a DOS or DDOS attack from a third party to another third party is not something that CCP can do a lot about.

If this is actually a practice, please gather as much information as possible and bring it directly to ccp
(f12 menu in game file a support ticket )

assuming this isnt a smear campaign I would be shocked if they didn't come down hard on it.

contact security@ccpgames.com with all the information, and see if they will look into this. As this falls under 'hacking of accounts' type stuff. and general server security.

Or as said above, contact EN24 or a CSM to put some pressure on ccp. But petition or mail security first

The client could track it's own traffic and the pattern of lag spike right before ship loss would be an indication, especially if the "involved parties" just happen to be the same people.

So yeah, CCP can do something about this.

Like the OP I spend a lot of time just logging in for skills, so I can live without the game. They were right in the movie "Fight Club": after a few weeks you don't even remember whatever media you were into.

Wow......in all my years in this game and all the little tactics ive seen people use......this is a new one for me (not the ddos part but the way they are using it). Im glad i stumbled upon this thread. Thanks for the info and toughening my vigilance.

Regardless of the he said, she said crap, someone might wanna poke a Dev over this.

In come the alts to debunk... You can tell when something is a "thing" by who or what says what. I'll be watching.