• Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • TuanHA is logging information about you!

    Discussion in 'Honorbuddy Forum' started by Rainman, Sep 23, 2013.

    Thread Status:
    Not open for further replies.
    1. Rainman

      Rainman New Member

      Joined:
      Jul 14, 2012
      Messages:
      3
      Likes Received:
      0
      Trophy Points:
      0
      Just to let you all know, ever since TuanHA changed his combat routine?s so it requires that you all log in with e-mail and PW (Special Edition?s only) and it all goes through his login-server he also made it send in information about you and your characters.


      &username=<username>
      &password=<password-plaintext>
      &msp=s
      &md5=<md5-sum>
      &char=<level-faction-class>
      &realm=<realm-name>
      &version=<wow-client-version>



      The above string is what he is getting everytime you log in and using his routine. In short it send in information on what character name, realm, level, class you are using.

      Personally i do not like this and i?ve stopped using his routines as i see no reason for him to know this and for what purpose?! Blackmail botters perhaps?
       
    2. TopTen

      TopTen New Member

      Joined:
      Nov 2, 2012
      Messages:
      90
      Likes Received:
      0
      Trophy Points:
      0
      Lol I have tuanha on my realid.

      If you're scared that this awesome coder is taking your character info, oh well.

      You run the risk of being banned regardless.
       
    3. OhaiDur

      OhaiDur New Member

      Joined:
      Aug 2, 2013
      Messages:
      284
      Likes Received:
      0
      Trophy Points:
      0
      Thats a little concerning, if its true that is.
       
    4. TopTen

      TopTen New Member

      Joined:
      Nov 2, 2012
      Messages:
      90
      Likes Received:
      0
      Trophy Points:
      0
      In what file is he gathering the information? I think we need proof.
       
    5. panYama

      panYama Community Developer

      Joined:
      Jan 15, 2010
      Messages:
      2,629
      Likes Received:
      49
      Trophy Points:
      0

      Don't think he is saving info about "us" and you are just being paranoid.

      &username=<username> - actual username of his website so he can tell if your the person that purchased the product instead of some random guy that obtained the files through some one else.
      &password=<password-plaintext> - password that goes with the username, again the stuff from his own website. If you use the same for wow your just....*fill in here*
      &msp=s
      &md5=<md5-sum>
      &char=<level-faction-class> - level of character, faction of character, and class of character info but I don't see it's asking for your char name.
      &realm=<realm-name> - realm of the character, wooptie doo! do you care that much? maybe this will give him insight that some realms with diff languages don't work
      &version=<wow-client-version> wow client is most likely for debugging to see if you are using the up-to-date version, else it might not connect the cc.

      All in all bet he can explain that it's not your own info.
       
    6. TopTen

      TopTen New Member

      Joined:
      Nov 2, 2012
      Messages:
      90
      Likes Received:
      0
      Trophy Points:
      0
      Trust me when I say you're safe. No one wants your character or account, or wants to get you banned. Tuanha is a great gentleman and he would never give away the information of his buyers.
       
    7. panYama

      panYama Community Developer

      Joined:
      Jan 15, 2010
      Messages:
      2,629
      Likes Received:
      49
      Trophy Points:
      0
      think he is just being paranoid and the info that is sent to tua is just info from his site and the info about char is purely for debugging purpose. Singular also has info on chars and such, didn't see anyone complain about that. HB knows stuff about your char too, nobody complains about that too.
       
    8. Staffix

      Staffix Banned

      Joined:
      Dec 20, 2012
      Messages:
      1,085
      Likes Received:
      8
      Trophy Points:
      0
      It's obviously a dude who is paranoid...
      if Tuanha would "ninja" ur username and pw, don't you think that he'd do it alot earlier :) ?


      *GO TEAM TUANHA* !
       
    9. Insanityy

      Insanityy New Member

      Joined:
      Feb 4, 2013
      Messages:
      240
      Likes Received:
      2
      Trophy Points:
      0
      dam i could say some bad words right now, tuan would never do this.....f..f..u is coming ! tuan is great !!
       
    10. GIVEMEANAME

      GIVEMEANAME Active Member

      Joined:
      Dec 17, 2010
      Messages:
      1,533
      Likes Received:
      14
      Trophy Points:
      38
      change the password for then, derp

      its the info to login to his server;

      highly doubt tuanha is going to rip off accounts when he makes a shit tonne in premium cr's

      tuanha is a pro man
       
    11. handnavi

      handnavi Well-Known Member Buddy Store Developer

      Joined:
      Jan 15, 2010
      Messages:
      2,489
      Likes Received:
      59
      Trophy Points:
      48
    12. Mirabis

      Mirabis Community Developer

      Joined:
      Jun 14, 2010
      Messages:
      4,475
      Likes Received:
      86
      Trophy Points:
      48
      I partially disagree, but I do understand that some of us don't like to share that information.

      - Realm, could beremoved, no real debugging purpose for that.
      - Character Lvl, could be handy to debug certain spells, as people use his routine for leveling too.
      - Version, I've absolutely no idea...
      - Username, to TRY and protect his routine
      - Password, same as username.
       
    13. Stormchasing

      Stormchasing Community Developer

      Joined:
      Jan 15, 2011
      Messages:
      4,029
      Likes Received:
      48
      Trophy Points:
      48
      many of the devs around here, private or public stuff, are gathering some informations
      Why we do that? We love numbers and statistics, or simply ... we would like to know in which case our stuff is used a lot, to do some more tweaks for specific parts of our code.
      Some of us also thought bout gathering the Exceptions on our own websites for better debugging, like:
      - Exception
      - State of the toon
      - Location of the toon
      - Target informations
      - anything we think is necessary

      we don't care bout your toons, we want to have more details about stuff/code that is failing when u use our stuff ;)
      for example:
      PureRotation - Trinket / Engieneering
      - working for me
      - not working for some users
      - log says nothing specific except - it tries to use these items
      - some user report this issue

      now i could implement an error handler which is sending this error to my assembla place, and create a new ticket for me, without me looking at the forum and asking for any specific stuff (like a log that is again not attached, or whatever)
       
    14. xsilverdicex

      xsilverdicex New Member

      Joined:
      Jan 15, 2010
      Messages:
      1,389
      Likes Received:
      14
      Trophy Points:
      0
      this is a dumb thread, the username and password are for his login servers...not your wow account
       
    15. handnavi

      handnavi Well-Known Member Buddy Store Developer

      Joined:
      Jan 15, 2010
      Messages:
      2,489
      Likes Received:
      59
      Trophy Points:
      48
      Yeah, everyone knows that. But for what purpose he needs the realm you play on?
      Charname + realmname is really a bad combination. :D
       
    16. tuanha

      tuanha Well-Known Member

      Joined:
      Nov 29, 2011
      Messages:
      6,998
      Likes Received:
      124
      Trophy Points:
      63
      Hi guy, I just wanna explain a bit about these.

      First of all NO PRIVATE information tracked. If someone break into my database, you are still safe because:

      1. Username: That my website login username - NOT your WoW username
      2. Password: That my website login password - NOT your WoW password
      3. Char level: That anonymous because it use Me.SafeCharName same like any Log in any combat routine. No one can know who is Level 90 Alliance Shaman => I've remove that because someone may feel uncomfortable.
      4. Realm: That anoymous, no one know who is playing in Jubei'Thos for example => I've remove that because someone may feel uncomfortable.
      5. Version: That version of my CR, serve for debug purpose.

      All in all, the only username and password for MY WEBSITE is tracked and I'm sorry if you feel uncomfortable with it.

      Happy botting xD
       
    17. xsilverdicex

      xsilverdicex New Member

      Joined:
      Jan 15, 2010
      Messages:
      1,389
      Likes Received:
      14
      Trophy Points:
      0
      I'm lost...where does it say it is logging charname?
       
    18. tuanha

      tuanha Well-Known Member

      Joined:
      Nov 29, 2011
      Messages:
      6,998
      Likes Received:
      124
      Trophy Points:
      63
      Ah one more thing about md5, that string do not contains any private information too. It's just a anti-DDOS.

      The main purpose of MD5 string is trying to stop someone querrying non-stop my server to get your username and password

      It's just a simple combination check of

      Classname.CreateMD5Hash("RandomText" + PasswordText + "RandomText" + UsernameText + "RandomText")
       
    19. handnavi

      handnavi Well-Known Member Buddy Store Developer

      Joined:
      Jan 15, 2010
      Messages:
      2,489
      Likes Received:
      59
      Trophy Points:
      48

      I really like the "RandomText" you are using! :D
       
    20. tuanha

      tuanha Well-Known Member

      Joined:
      Nov 29, 2011
      Messages:
      6,998
      Likes Received:
      124
      Trophy Points:
      63
      The random text is "Please don't hack me" xD
       
    Thread Status:
    Not open for further replies.

    Share This Page