Fire Maltiez

[Stoney Martyr]

Just now, Mrozak said:

You seem to have a very strange understanding of what the word "fact" means.

Read the screenshots posted in the thread. Read the moddb TOS.

 

lmao

[icesharkk]

Just now, Mrozak said:

You seem to have a very strange understanding of what the word "fact" means.

you might just be out of the loop. which part of this do you believe isnt a fact? we can provide the links as needed

[Dilan Rona]

For the time being, and until we get an official response, how about we let this topic rest.

Yes the damage was done, but now we need to wait for the devs to get their side in.

[Stoney Martyr]

4 minutes ago, icesharkk said:

you might just be out of the loop. which part of this do you believe isnt a fact? we can provide the links as needed

Bro is in my DMs basically claiming the screenshot of discord and of the TOS are fake LMAO. Sweep sweep sweep

[icesharkk]

Just now, Stoney Hawk said:

Bro is in my DMs basically claiming the screenshot of discord and of the TOS are fake LMAO. Sweep sweep sweep

oh that's just adorable.

[PhotriusPyrelus]

6 minutes ago, Dilan Rona said:

For the time being, and until we get an official response, how about we let this topic rest.

Yes the damage was done, but now we need to wait for the devs to get their side in.

Yeah, just sweep it under the rug.  Stop talking about it.  The devs won't even have to make a response then!

[Stoney Martyr]

1 minute ago, PhotriusPyrelus said:

Yeah, just sweep it under the rug.  Stop talking about it.  The devs won't even have to make a response then!

We should most definitely be allowed to discuss it. Especially considering there seems to be a decent portion of people intent on quite literally sweeping it under the rug

 

”it was anticheat, deal with it”

 

This is how Im choosing to deal with it

Edited Wednesday at 02:39 PM by Stoney Hawk

[icesharkk]

8 minutes ago, Dilan Rona said:

For the time being, and until we get an official response, how about we let this topic rest.

Yes the damage was done, but now we need to wait for the devs to get their side in.

i want to be playing vintage story next year. that isnt going to happen if they retain a significant supply chain risk on their dev team. neither from a risk to my own users standpoint nor from a simple ethical principles standpoint. the facts that outline maltiez action and culpability are already nailed down and not up for debate. how cognizant the VS team was is another matter that remains to be seen as well as what they are going to do about this. but maltiez has already crossed the Rubicon.

[Dilan Rona]

What I said was to let the topic rest, and let the devs get their side in.

If they fail to address the matter, then that itself is a response (a lack of a response in itself is a response). So from my side, i'm going to adopt a wait and see stance. And let the story unfold itself.

[PhotriusPyrelus]

3 minutes ago, Dilan Rona said:

So from my side, i'm going to adopt a wait and see stance. And let the story unfold itself.

Cool.  You do that.  Doesn't mean you need to tell us we need to do that, too.

[Stoney Martyr]

6 minutes ago, icesharkk said:

i want to be playing vintage story next year. that isnt going to happen if they retain a significant supply chain risk on their dev team. neither from a risk to my own users standpoint nor from a simple ethical principles standpoint. the facts that outline maltiez action and culpability are already nailed down and not up for debate. how cognizant the VS team was is another matter that remains to be seen as well as what they are going to do about this. but maltiez has already crossed the Rubicon.

Im so happy theres another adult in here.

 

We’re nothing more than propics and usernames to eachother. You cant be sneaking code into the stuff Im trusting you not to sneak code into. You’re essentially nobody to me. Propics dont get second chances after pulling that stuff. 
 

trust is a big issue in this stuff. We saw it with calamity a few weeks ago. Literally a single adult with a thinking brain could have prevented that entire situation. But for some reason everyone blindly trusts and roll over for propics and usernames

Edited Wednesday at 02:46 PM by Stoney Hawk

[Nossin]

Unfortunately innocent people are getting affected which is how we learned about this in the first place. The malware targeting was broad enough to affect other mods that had the misfortune of fulfilling the conditions

Now said malware distributor is a developer for the game

[Stoney Martyr]

1 minute ago, Nossin said:

Now said malware distributor is a developer for the game

And you’ll get banned from the discord if you point it out because they’re trying to move the conversation somewhere else so they can easily quell dissent.

Sorry I work 40 hours a week at the factory and didnt check pins on my way into the discord server I lurk in for troubleshooting and mod stuff

if he’s a dev the conversation belongs in the primary topic too

Edited Wednesday at 02:50 PM by Stoney Hawk

[icesharkk]

Just now, Nossin said:

Unfortunately innocent people are getting affected which is how we learned about this in the first place. The malware targeting was broad enough to affect other mods that had the misfortune of fulfilling the conditions

Now said malware distributor is a developer for the game

we cant even scope the damage down to innocent users because *checks notes* maltiez code erased its logging footprint and covered its execution environments tracks to prevent attribution of the crash to configlib.

[Stoney Martyr]

Just now, icesharkk said:

we cant even scope the damage down to innocent users because *checks notes* maltiez code erased its logging footprint and covered its execution environments tracks to prevent attribution of the crash to configlib.

That was the point I was trying to make when I brought up “We dont even know if it worked correctly”

I could have been hit by it too. I remember a weird CTD issue me and my friend were having trying to connect to the server. Ended up removing a few mods to find the culprit.

 

what if it was just configlib? My job is to literally troubleshoot factory equipment. Dont obfuscate that stuff from me, we’ve cussed out engineers for less

[Nossin]

4 minutes ago, icesharkk said:

we cant even scope the damage down to innocent users because *checks notes* maltiez code erased its logging footprint and covered its execution environments tracks to prevent attribution of the crash to configlib.

For the longest time the server I hosted for myself and a friend, I would randomly crash every 30 min to 4 hours. Coincidentally, their malware does exactly that so now I'm left wondering if they were the cause.

[Grish]

The guy hid malicious code that was undisclosed in his mods,malware.

It caused crashes, then went on to hide the crashes it caused when it had conflicts with other mods,not just cheats

He wasted peoples time and energy chasing down crashes,made others mods look broken and unstable

He works for Anego studios.

Apparently? the team knew about it so he didn't break their trust.

Gee whizz isn't that nice,apparently our trust means so little?

 Fired should be the only outcome, along with him not allowed to ever make another mod for VS. If it was actually known about, a massive apology for knowingly allowing 10s of thousand of users that trusted you to install malware. An actual crime in places

Quite baffling how there could be any other response

 

 

 

 

[Stoney Martyr]

1 minute ago, Grish said:

 Fired should be the only outcome, along with him not allowed to ever make another mod for VS. If it was actually known about, a massive apology for knowingly allowing 10s of thousand of users that trusted you to install malware. An actual crime in place

The dev response included in this post is actually insane. Especially paired with the 142000 MINIMUM computers it infected considering configlib has been top page of Most Trending for as long as I’ve been playing.

 

more screenshots considering I have an issue with facts apparently @Mrozak

[VANTABlack2000]

17 minutes ago, Stoney Hawk said:

The dev response included in this post is actually insane. Especially paired with the 142000 MINIMUM computers it infected considering configlib has been top page of Most Trending for as long as I’ve been playing.

 

more screenshots considering I have an issue with facts apparently @Mrozak

The Discord screenshot is the worst one IMO. If I am understanding the Discord screenshot correctly then the devs knew ALL the details of what the Anti-Cheat was doing and helped hide it's impacts on users which makes the whole thing impact trust even more. We need to wait for a potential dev response publicly though (Not just Discord) before we can make rash decisions though.

[PhotriusPyrelus]

26 minutes ago, Stoney Hawk said:

"...known about it months ago. The thing is, he told us about it."

Was that before or after you hired him?  Either way, you just sat on it?  *Knowing* it was a powder keg just waiting to explode?  Smart.

[icesharkk]

22 minutes ago, VANTABlack2000 said:

The Discord screenshot is the worst one IMO. If I am understanding the Discord screenshot correctly then the devs knew ALL the details of what the Anti-Cheat was doing and helped hide it's impacts on users which makes the whole thing impact trust even more. We need to wait for a potential dev response publicly though (Not just Discord) before we can make rash decisions though.

 

13 minutes ago, PhotriusPyrelus said:

"...known about it months ago. The thing is, he told us about it."

Was that before or after you hired him?  Either way, you just sat on it?  *Knowing* it was a powder keg just waiting to explode?  Smart.

thats my screenshot and there is something i want to clarify about it: the bigger issue is not that they knew about it since it is not clear what was known by whom. maltiez was unsurprisingly not truthful with them either. the bigger issue is that seleksta seems to think that its okay since he didnt break the devs trust only the users trust and the devs can trust him to commit safe code in the future. which is a shit take for two obvious reasons. ignoring the broken trust of the users is egregiously tonedeaf and trusting a known malicious actor with access to the supply chain is an insane litigation risk. 
 

its entirely possible maltiez told them "hey I put anti cheat in one of my mods" and they were like yeah sure seems fair. which is different than him saying i put deliberately malicious crash codes into my mod library, hid my tracks, committed it from the public github and covers all logging tracks on it. I'm not ready to assume that the devs were fully informed when they took no action yet. but it is still a possibility. 
 

[VANTABlack2000]

7 minutes ago, icesharkk said:

 

thats my screenshot and there is something i want to clarify about it: the bigger issue is not that they knew about it since it is not clear what was known by whom. maltiez was unsurprisingly not truthful with them either. the bigger issue is that seleksta seems to think that its okay since he didnt break the devs trust only the users trust and the devs can trust him to commit safe code in the future. which is a shit take for two obvious reasons. ignoring the broken trust of the users is egregiously tonedeaf and trusting a known malicious actor with access to the supply chain is an insane litigation risk. 
 

its entirely possible maltiez told them "hey I put anti cheat in one of my mods" and they were like yeah sure seems fair. which is different than him saying i put deliberately malicious crash codes into my mod library, hid my tracks, committed it from the public github and covers all logging tracks on it. I'm not ready to assume that the devs were fully informed when they took no action yet. but it is still a possibility. 
 

That's fair. All of this could be clarified if we get a official response from Anego. Unfortunately all I have seen is the Mastodon account posting pictures of horses.

[Stoney Martyr]

7 minutes ago, icesharkk said:

the bigger issue is that seleksta seems to think that its okay since he didnt break the devs trust only the users trust and the devs can trust him to commit safe code in the future. which is a shit take for two obvious reasons. ignoring the broken trust of the users is egregiously tonedeaf and trusting a known malicious actor with access to the supply chain is an insane litigation risk. 
 

its entirely possible maltiez told them "hey I put anti cheat in one of my mods" and they were like yeah sure seems fair.
 

I think it’s beyond obvious Maltiez didnt give them the full story.

Maltiez had every option to make it a seperate mod. Every option, every chance. However, that would require people to go out of their way to get it.

He wanted to attack unsuspecting users. Not only is it malware by definition but he distributed it like malware too.

 

literally who knows how many issues his code was actually causing. Some people on moddb are noting PERFORMANCE improvements, which is crazy, what was it just spamming the cpu for checks for his target?

 

dude was sneaky and vindictive for a reason and deserves to be removed.

[Diff]

14 minutes ago, Stoney Hawk said:

literally who knows how many issues his code was actually causing. Some people on moddb are noting PERFORMANCE improvements, which is crazy, what was it just spamming the cpu for checks for his target?

 

Wouldn't read much into that without hard numbers to back it. Placebo effect's strong when performance is in question. Reflection (the type of code needed for code to analyze itself at runtime) is relatively slow, but not *that* slow.

I'm also, like, not seeing that on the ModDB myself. Who's saying it? What are they saying? I see one comment related to performance and it's just:

Quote

Ps. I heard you also maybe caused my game to lag when it wasn't doing it before...

Edited Wednesday at 04:28 PM by Diff

[Stoney Martyr]

16 minutes ago, Diff said:

Wouldn't read much into that without hard numbers to back it. Placebo effect's strong when performance is in question. Reflection (the type of code needed for code to analyze itself at runtime) is relatively slow, but not *that* slow.

I'm also, like, not seeing that on the ModDB myself. Who's saying it? What are they saying? I see one comment related to performance and it's just:

Would you look at that. One of Mal’s janitors showed up.

maybe if Maltiez didnt obfuscate it this bad we’d know what issues it caused for sure . Thats what trust is, and he broke it.

 

so far we actually only have evidence of it working improperly. Again, thanks to his obfuscation.

I owe no trust to a malware dev.

 

heres some screenshots because you’re too lazy to take them. “One comment”

Edited Wednesday at 04:39 PM by Stoney Hawk