FFA Masters League

General => General Discussion => Topic started by: Lightweight! on August 01, 2012, 04:31:05 pm

Title: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 01, 2012, 04:31:05 pm
Hello everybody!
Recently a guy who claims himself as the "mh-cleaner" appeared on ffareplays trying to animate us to start hacking. So far so good, not a big thing until he said that he is from FML. At this point i got curious and started an investigation in this case. You will be surprised what i figured out!  :icon_cool:

The perpetrator left a track which is also the most important evidence... it is.... the replay!
The parser was my best friend while doing the investigation. Let us start with the evidence.
What i know: The game was played on Northrend, the suspect is using the hotkeys 1,2 and 3 while he uses hotkey 1 the most.

Before i start with the suspects here the properties from the hacker:
http://img832.imageshack.us/img832/8760/actionsapmhacker.png


Suspect #1: MKKKKKKKKKKKKKKKKKKKKKKKKKKKKK
Mkkkkk from Belgium, who would have thought to see him as a suspect in this case. Sometimes nice, sometimes a bit sneaky. But why is he a suspect?
http://img14.imageshack.us/img14/4958/suspectmk.png
If you compare the hacker hotkeys with his, the result will be that mkkkk is using exactly the same hotkeys with the preference of using hotkey "1" the most. Unlike the hacker he uses hotkey "3" more often.

The interesting thing in my eyes is that if you would compare the actions of the hacker game to the ones from mkkkkk you will see that if the hacker game (which was 27 minutes) would lasted as long as mmmmmk's game, the actions (right click,select/deselect, select group hotkey) would match a bit. In addition to that the hacker is playing hipporiders in this game which mkkkk likes to do also if he hits nightelf with random.
Result: Guilt factor 10%

Suspect #2: Aq.Gammel
Compared to the little differences in mkkkk's case, Gammel's hotkeys match 100 % perfectly with the hacker ones.
http://img826.imageshack.us/img826/5606/suspectgammel.png
Preferences on "1", a bit usage of "2" and "3" close to zero (surely used for buildings). Also take a look at the hackers actions and the ones from Gammel. His actions match perfectly with the hacker game if you simply let them grow proportional.
Result: Guilt factor 20%

Suspect #3: Renaud
Yes, you may now think "how can Renaud be a suspect in such a crime when he is always well mannered and helpful to all. Well, his insignificance in hacking makes him a suspect here. Just take a look at his hotkeys and compare them to the hotkeys from the hacker.
http://img809.imageshack.us/img809/2233/suspectrenaud.png
A big preference on hotkey "1" and totally ignoring hotkey "3" as the hacker does.
And here the evidence which made me very suspicious. Take a look at the comment the hacker made on ffareplays:
"Name: MH_Cleaner
and @lightweight of course i watch there creep route etc but only to suicide them if they hack,"
This guy says "there" instead of "their". The only person to do so is Renaud who does the same mistake.
The hacker game was played on Northrend (when does Renaud play ffa ladder on north?) and also i simply could not believe that Renaud would do that. Renaud is the last i would suspect to maphack (although he did in sc1).
Result: Guilt factor 0,1%

Suspect #4: F10EX
F10EX and I never liked each other. I did not leave my position in our dispute, neither he did until the end. He became a suspect after he posted comments on ffareplays and in this thread insulting the good old Lightweight like F10EX did in his best times. I got suspicious about that and checked the hotkeys. The results proofed me right to assume it might be him also.
http://img805.imageshack.us/img805/6673/newsuspect.png
Big preference on hotkey "1", lower usage of hotkey "2", close to no usage of hotkey "3" and total ignorance of all the other hotkeys.
Result: Guilt factor 60%

I would like to close the evidence here from my side and would be very interested to know what you think about this. Since we solved the humanstar smurf case and many other, i am confident to solve this case too with your help!  :icon_biggrin:

Edit: F10EX joined the game and his appearance lowers the other guys guilt factor massively. Renaud is out the race (technical resignation). Plus i opened a new Poll!

Edit #2: The perpetrator is from the US so i apoligize to those whom i made suspects. I pretty much ran into a wall here  :icon_cry:.
And to those who hack: LW is watching you!

Ps: Sorry for grammatical errors.
Title: Re: Mysterious Hacker on FFAReplays
Post by: tehlill0r on August 01, 2012, 04:55:18 pm
hää ich checke nichts was soll das mit den tasten is doch schwachsinn.... klär mich mal auf ^_^
Title: Re: Mysterious Hacker on FFAReplays
Post by: Camp_and_Spank on August 01, 2012, 05:51:44 pm
haha very amuzing LW:)

although i think most guys uses 1 more than 2 more than 3? but the ratios are interesting...
Title: Re: Mysterious Hacker on FFAReplays
Post by: Pinballmap on August 01, 2012, 06:44:20 pm
hää ich checke nichts was soll das mit den tasten is doch schwachsinn.... klär mich mal auf ^_^

Er meint halt dass der Typ der auf ffareplays der sich als MH_cleaner ausgibt einer von den FML Spielern ist. Es gibt 3 verdächtige: mmmk,Gammel oder Renaud.


@topic voted for mmmmmmk, very similiar chat behaviour and the hotkey setup/apm is identical.
Title: Re: Mysterious Hacker on FFAReplays
Post by: ATiBright on August 01, 2012, 08:30:54 pm
Perfect my normal usage of hot-keying my army to 3 since warcraft 3's release has hidden my tracks!
Title: Re: Mysterious Hacker on FFAReplays
Post by: Redkeekee on August 01, 2012, 09:25:26 pm
Wait there are people that don't hotkey their buildings?
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Renaud on August 01, 2012, 11:56:54 pm
I use 1 for chims and hero
2-3 for hippo

8 for aowind
9 for chim roost
0 for zeppelin or altar

The time where I both remember to assign hotkeys 8-9-0 and think of using them are so rare I can count them on my fingers (though I usually am able to remember it as far as zeppelins goes)
Title: Re: Mysterious Hacker on FFAReplays
Post by: Redkeekee on August 02, 2012, 12:42:32 am
I use 1 for chims and hero
2-3 for hippo

8 for aowind
9 for chim roost
0 for zeppelin or altar

The time where I both remember to assign hotkeys 8-9-0 and think of using them are so rare I can count them on my fingers (though I usually am able to remember it as far as zeppelins goes)

No Idea how you can do it that way.  Heros gotta be apart from chim if I want to keep them alive while keeping chims focusing.
1 heros
2 chims
3 hippo
4 aowar then aolore then 2nd hippo group or hippo/dott or dott
5 tree of life then aowind after starting t3 upgrade
6 chim roost
occasionally if im building lores late game i'll shift it to 5 lore 6 wind 7 roost
9 hunts hall
0 altar
Title: Re: Mysterious Hacker on FFAReplays
Post by: Redkeekee on August 02, 2012, 12:52:52 am
This guy says "there" instead of "their". The only person to so is Renaud who does the same mistake.

Lol, I've almost never seen ANYONE on north use "there" "their" and "they're" correctly.  Hell, there are tons of American's that don't even use them right.

Otherwise I just lol'd.  BURN THE WITCH!!!
Title: Re: Mysterious Hacker on FFAReplays
Post by: Persuade on August 02, 2012, 07:19:59 am

Lol, I've almost never seen ANYONE on north use "there" "their" and "they're" correctly.  Hell, there tons of American's that don't even use them right.

Otherwise I just lol'd.  BURN THE WITCH!!!

Can't tell if making joke, or if incredibly ironic.
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|WorpeX on August 02, 2012, 07:52:55 am
It's mmmmk. Actions and hotkeys match him perfectly, as does the way he talks. Gammel's hotkeys are similar, but don't really match that well considering he uses #2 A LOT and the hacker doesn't. Actions are slightly different too. Gammel is also super quiet and doesn't really care about the FFA scene much so I doubt that its him. Besides, we have a chat log of mmmk saying that hes going to try maphacking.

Still, can't prove anything so we can't really take any action.
Title: Re: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 02, 2012, 02:49:39 pm
Well, my intention is not to ban this guy from fml, i just got curious that is all. And also it should show that hacking doesn't pay off at fml, because we will find out anyway.

Furthermore a statement from the suspected players could light up the dark  :icon_wink:.
Title: Re: Mysterious Hacker on FFAReplays
Post by: ATiBright on August 02, 2012, 05:30:47 pm
You guys use weird hotkeys here is the Bright way to do it.
1 (AOW) later Chim roosts.  2 (Ancient of Lore/Ancient of Winds) 3 (Primary army started putting all 3 heros and chims used to be slightly diff) 4 (Hippos) 5(Hippos n Crows) 6 Tree  no more hotkeys required.

In starcraft 2: 3 (Zealot/sentry/collossus/Immortal/ late game add stalker) 4 (stalkers) 5 Nexus's change to high templars when they come out change all nexus to 6. W gateways, Q warp prism, F1-F4 Location hotkeys at expands, Space bar Location hotkey at my upgrade facilities.
Title: Re: Mysterious Hacker on FFAReplays
Post by: Pinballmap on August 02, 2012, 05:41:02 pm
You guys use weird hotkeys here is the Bright way to do it.
1 (AOW) later Chim roosts.  2 (Ancient of Lore/Ancient of Winds) 3 (Primary army started putting all 3 heros and chims used to be slightly diff) 4 (Hippos) 5(Hippos n Crows) 6 Tree  no more hotkeys required.

In starcraft 2: 3 (Zealot/sentry/collossus/Immortal/ late game add stalker) 4 (stalkers) 5 Nexus's change to high templars when they come out change all nexus to 6. W gateways, Q warp prism, F1-F4 Location hotkeys at expands, Space bar Location hotkey at my upgrade facilities.

noone asked you how you play sc2^^ plz stay on topic :)
Title: Re: Mysterious Hacker on FFAReplays
Post by: ATiBright on August 02, 2012, 05:42:00 pm
You guys use weird hotkeys here is the Bright way to do it.
1 (AOW) later Chim roosts.  2 (Ancient of Lore/Ancient of Winds) 3 (Primary army started putting all 3 heros and chims used to be slightly diff) 4 (Hippos) 5(Hippos n Crows) 6 Tree  no more hotkeys required.

In starcraft 2: 3 (Zealot/sentry/collossus/Immortal/ late game add stalker) 4 (stalkers) 5 Nexus's change to high templars when they come out change all nexus to 6. W gateways, Q warp prism, F1-F4 Location hotkeys at expands, Space bar Location hotkey at my upgrade facilities.

noone asked you how you play sc2^^ plz stay on topic :)

I'm giving out free advice take it before I charge son :P
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Renaud on August 02, 2012, 05:45:38 pm

Lol, I've almost never seen ANYONE on north use "there" "their" and "they're" correctly.  Hell, there tons of American's that don't even use them right.

Otherwise I just lol'd.  BURN THE WITCH!!!

Can't tell if making joke, or if incredibly ironic.

Rkk might be the prime suspect after all. THE PLOT! IT THICKENS!
Title: Re: Mysterious Hacker on FFAReplays
Post by: Persuade on August 02, 2012, 05:51:44 pm

Lol, I've almost never seen ANYONE on north use "there" "their" and "they're" correctly.  Hell, there tons of American's that don't even use them right.

Otherwise I just lol'd.  BURN THE WITCH!!!

Can't tell if making joke, or if incredibly ironic.

Rkk might be the prime suspect after all. THE PLOT! IT THICKENS!

takes a hacker to spot a hacker.

so both of you hack!
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|WorpeX on August 02, 2012, 11:35:14 pm
Thats it, everyone in FML is banned except Ugri who is the new FML champion for this season. Damn hackers! Can't trust anyone.
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Mage on August 02, 2012, 11:51:31 pm
If we're doing mass bans then I vote we make Gnom the new FML champion.  Just cuz

Or Kruppe posthumously
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Renaud on August 03, 2012, 01:24:26 am
Yeah Renaud would vote for Kruppe
Too bad he din't play this season :(
Title: Re: Mysterious Hacker on FFAReplays
Post by: MH_Cleaner on August 03, 2012, 05:40:19 am
Most retarded thread every made.
And of course this thread is made by the naive lightweight that doesn't have anything else to do in his real live anyway.

I just want to say: you can stop your investigation because I'm not from FML, I was joking. Just continue your league, i enjoy the replays.

greetings,
the MH_Cleaner who will continue his cleaning, no hacker will be saved by me.
HAHAHA
Title: Re: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 03, 2012, 09:08:39 am
This guy starts making mistakes. I am pretty sure i know who this guy is now. I just took a look at the game chat and compared it to what he answered here.

This is an excerpt from the hotkeys of F10EX in the last seasons fml game between Pinballmap, Me, Camp&Spank and F10EX.

http://img805.imageshack.us/img805/6673/newsuspect.png

There might be many guys that don't like me, but F10EX surely was the one to hate me the most. The way this guy talks about me makes me think even more that it is him. Hotkeys also match perfect (what a coincidence). In addition to that he appeared in the clan fml channel on northrend yesterday, so obviously he is back from his retirement of wc3. For those who can't remember there was a big discussion opened by F10EX, because he assumed me and PBM to team in our fml game.

PS: We are coming closer to the solution  :icon_wink:
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Mage on August 03, 2012, 10:05:21 am
Disagree, it could be F10 has just grown dumber or is disguising himself well, but he spoke nearly flawless English.  Plus, he was always dead set against hacking.  MHCleaner clearly has English as a second language while F10 spoke it as either a native language or a second language that he learned very early on. 

Ad hominem attacks directed at you are merely the easiest way to divert attention.  I doubt it means that whoever it is has a grudge against you though it is certainly possible.

P.S. Why was that hacker Renaud removed from the poll  :icon_smile:?
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Renaud on August 03, 2012, 12:12:15 pm
probably because I was winning despite being only meant as a joke choice? :P
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Mage on August 03, 2012, 12:25:18 pm
Sure... joke.  Also can one of you do an IP check on that post to see where it's from.
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|WorpeX on August 03, 2012, 12:30:26 pm
Disagree, it could be F10 has just grown dumber or is disguising himself well, but he spoke nearly flawless English.  Plus, he was always dead set against hacking.  MHCleaner clearly has English as a second language while F10 spoke it as either a native language or a second language that he learned very early on. 

This. Also LW, there are A LOT of people who don't like you so I don't think that is necessarily a good judge of who it is. Also appears to be quite a lot of people who use 1, 2 and 3 as their hotkeys...

Quote
Sure... joke.  Also can one of you do an IP check on that post to see where it's from.

Someone from the US. Looks like Denver. IP doesn't match anyone on the site, but its probably a proxy anyway.
Title: Re: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 03, 2012, 12:35:23 pm
Hmmm, if he is from the us i can close this thread, then i have no clue who this guy might be.

@Worpex: I can read between the lines and i know how most of the guys flame/insult me so i can distinguish them pretty well. In this case i am pretty clueless now, it is also not that important and this was planned as a funny thread not more  :icon_wink:

Renaud was just a joke choice, i pretty much abused his name to generate comments (sry).
Title: Re: Mysterious Hacker on FFAReplays
Post by: Persuade on August 03, 2012, 12:40:02 pm
mage was vacationing in COLORADO LAST WEEK

BAN HIM
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Mage on August 03, 2012, 12:51:06 pm
/whistles innocently?  Who me? 

No but really, if someone pays for my vacation there I'll take the ban.
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Renaud on August 03, 2012, 01:39:55 pm
np lol, I knew it was a joke, and I'm pretty sure the guys who voted for me are all friends ^^ (I even voted for me myself!)

As far hating LW: it depends.  He seems to transform from time to time to go from a nice guy to a jerk.  I hate his jerk mode, but he hasn't been one in a while now!

Also, MH_Cleaner is most likely from the league, and I would go for mmmmmmmmmmmmk (mostly considering how he was winning the votes before MH_Cleaner appeared, and how often he visited this topic w/o posting anything a few times)

But then again, whoever he is, I don't think he would hack in a FML game
Title: Re: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 03, 2012, 02:43:20 pm
Wow you can view how often someone visits a topic?  :icon_mrgreen:

If you are right about mkkkkk then how could we explain that Worpex said it must be someone from USA? Mkk is from Belgium.

And yeah you are right, somehow i find myself in the nice guy stage, but i slowly feel the bad guy lightweight coming on top again inside me  :icon_neutral:
Title: Re: Mysterious Hacker on FFAReplays
Post by: FML|Renaud on August 03, 2012, 02:47:39 pm
The IP of MH_Cleaner is from the USA, but there are way to change your IP to confuse admins!
Title: Re: Mysterious Hacker on FFAReplays
Post by: CatLikeThief on August 03, 2012, 08:19:07 pm
The IP of MH_Cleaner is from the USA, but there are way to change your IP to confuse admins!

that tool is a ducks best friend

Hey what if lightweight posted the topic to throw it off his trail! Just incase we should ban him, whether we ban him or the real hacker a piece of shit is banned either way!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

oh duck you are so bad mannered
Title: Re: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 04, 2012, 11:52:55 am
Would be pretty sick if i would be the mh-cleaner.  :icon_mrgreen:
Title: Re: Mysterious Hacker on FFAReplays
Post by: Lightweight! on August 07, 2012, 02:29:41 pm
I've lost the track. I guess we will never find this guy. :icon_cry: