What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

TuanHA is logging information about you!

Status
Not open for further replies.
R

Rainman

New Member
Joined
Jul 14, 2012
Messages
3
Reaction score
0
Just to let you all know, ever since TuanHA changed his combat routine?s so it requires that you all log in with e-mail and PW (Special Edition?s only) and it all goes through his login-server he also made it send in information about you and your characters.


&username=<username>
&password=<password-plaintext>
&msp=s
&md5=<md5-sum>
&char=<level-faction-class>
&realm=<realm-name>
&version=<wow-client-version>


The above string is what he is getting everytime you log in and using his routine. In short it send in information on what character name, realm, level, class you are using.

Personally i do not like this and i?ve stopped using his routines as i see no reason for him to know this and for what purpose?! Blackmail botters perhaps?
 
Lol I have tuanha on my realid.

If you're scared that this awesome coder is taking your character info, oh well.

You run the risk of being banned regardless.
 
In what file is he gathering the information? I think we need proof.
 
Rainman said:
Just to let you all know, ever since TuanHA changed his combat routine?s so it requires that you all log in with e-mail and PW (Special Edition?s only) and it all goes through his login-server he also made it send in information about you and your characters.


&username=<username>
&password=<password-plaintext>
&msp=s
&md5=<md5-sum>
&char=<level-faction-class>
&realm=<realm-name>
&version=<wow-client-version>


The above string is what he is getting everytime you log in and using his routine. In short it send in information on what character name, realm, level, class you are using.

Personally i do not like this and i?ve stopped using his routines as i see no reason for him to know this and for what purpose?! Blackmail botters perhaps?
Click to expand...


Don't think he is saving info about "us" and you are just being paranoid.

&username=<username> - actual username of his website so he can tell if your the person that purchased the product instead of some random guy that obtained the files through some one else.
&password=<password-plaintext> - password that goes with the username, again the stuff from his own website. If you use the same for wow your just....*fill in here*
&msp=s
&md5=<md5-sum>
&char=<level-faction-class> - level of character, faction of character, and class of character info but I don't see it's asking for your char name.
&realm=<realm-name> - realm of the character, wooptie doo! do you care that much? maybe this will give him insight that some realms with diff languages don't work
&version=<wow-client-version> wow client is most likely for debugging to see if you are using the up-to-date version, else it might not connect the cc.

All in all bet he can explain that it's not your own info.
 
Trust me when I say you're safe. No one wants your character or account, or wants to get you banned. Tuanha is a great gentleman and he would never give away the information of his buyers.
 
think he is just being paranoid and the info that is sent to tua is just info from his site and the info about char is purely for debugging purpose. Singular also has info on chars and such, didn't see anyone complain about that. HB knows stuff about your char too, nobody complains about that too.
 
It's obviously a dude who is paranoid...
if Tuanha would "ninja" ur username and pw, don't you think that he'd do it alot earlier :) ?


*GO TEAM TUANHA* !
 
dam i could say some bad words right now, tuan would never do this.....f..f..u is coming ! tuan is great !!
 
change the password for then, derp

its the info to login to his server;

highly doubt tuanha is going to rip off accounts when he makes a shit tonne in premium cr's

tuanha is a pro man
 
I partially disagree, but I do understand that some of us don't like to share that information.

- Realm, could beremoved, no real debugging purpose for that.
- Character Lvl, could be handy to debug certain spells, as people use his routine for leveling too.
- Version, I've absolutely no idea...
- Username, to TRY and protect his routine
- Password, same as username.
 
many of the devs around here, private or public stuff, are gathering some informations
Why we do that? We love numbers and statistics, or simply ... we would like to know in which case our stuff is used a lot, to do some more tweaks for specific parts of our code.
Some of us also thought bout gathering the Exceptions on our own websites for better debugging, like:
- Exception
- State of the toon
- Location of the toon
- Target informations
- anything we think is necessary

we don't care bout your toons, we want to have more details about stuff/code that is failing when u use our stuff ;)
for example:
PureRotation - Trinket / Engieneering
- working for me
- not working for some users
- log says nothing specific except - it tries to use these items
- some user report this issue

now i could implement an error handler which is sending this error to my assembla place, and create a new ticket for me, without me looking at the forum and asking for any specific stuff (like a log that is again not attached, or whatever)
 
this is a dumb thread, the username and password are for his login servers...not your wow account
 
xsilverdicex said:
this is a dumb thread, the username and password are for his login servers...not your wow account
Click to expand...

Yeah, everyone knows that. But for what purpose he needs the realm you play on?
Charname + realmname is really a bad combination. :D
 
Hi guy, I just wanna explain a bit about these.

First of all NO PRIVATE information tracked. If someone break into my database, you are still safe because:

1. Username: That my website login username - NOT your WoW username
2. Password: That my website login password - NOT your WoW password
3. Char level: That anonymous because it use Me.SafeCharName same like any Log in any combat routine. No one can know who is Level 90 Alliance Shaman => I've remove that because someone may feel uncomfortable.
4. Realm: That anoymous, no one know who is playing in Jubei'Thos for example => I've remove that because someone may feel uncomfortable.
5. Version: That version of my CR, serve for debug purpose.

All in all, the only username and password for MY WEBSITE is tracked and I'm sorry if you feel uncomfortable with it.

Happy botting xD
 
Ah one more thing about md5, that string do not contains any private information too. It's just a anti-DDOS.

The main purpose of MD5 string is trying to stop someone querrying non-stop my server to get your username and password

It's just a simple combination check of

Classname.CreateMD5Hash("RandomText" + PasswordText + "RandomText" + UsernameText + "RandomText")
 
tuanha said:
Ah one more thing about md5, that string do not contains any private information too. It's just a anti-DDOS.

The main purpose of MD5 string is trying to stop someone querrying non-stop my server to get your username and password

It's just a simple combination check of

Classname.CreateMD5Hash("RandomText" + PasswordText + "RandomText" + UsernameText + "RandomText")
Click to expand...


I really like the "RandomText" you are using! :D
 
The random text is "Please don't hack me" xD
 
Status
Not open for further replies.
Back
Top