← Back to Epicmafia

Oracle is potential spyware

deleteddeletedalmost 9 years ago

So I just downloaded Oracle and I performed a login on EM and looked under Chrome's network activity tab and this is what Oracle is doing.

https://imgur.com/a/z1JnL

If you look at the part that is boxed in red, you can see that EVERY time you log in, Oracle is automatically sending a GET request to the following ip address: http://45.63.17.67/

Included with that request are a few suspicious parameters. I believe the p parameter (circled in red) is a hashed version of your password.

So whats probably going on is...every time you log in...Oracle takes a copy of your password, sends it to 45.63.17.67 (a server that is "epicmafia.net" and saves it somewhere. So the extension is just building a database of usernames and passwords.

For reference..here is what a log on looks like without Oracle.

https://imgur.com/a/9K1ov

Notice how without Oracle there is just a simple login POST to epicmafia.

You can try this yourself with the following steps.

Install Oracle on the chrome web store

Log out of your account

Right click on your screen and click inspect element

Go to the Network tab

Perform a login

Then you'll see in the network tab that your browser is making a get request to an ip address owned by lailai and its sending a few hashed parameters

There is no reason why Oracle needs to make this request. Nothing about oracle's functionality requires it. It's very likely that it is just logging your password and saving it

deleteddeletedalmost 9 years ago
Haha, with my new Oracle software, Epicmafia injustice will not go unpunished! Beware, evil-doers, for I am a moderator!
2
Shwartz99almost 9 years ago
This is why Epicmafia Enhancement Suite is better. Thanks, croned!
Thealmost 9 years ago
xxerox
Why would he get arested for this... People hack sites all the time and don't get punished.
Because they don't get caught/are anonymous
xxeroxalmost 9 years ago
If he hacked it for paypal or etc etc, then yeah, thats bad, but if he hacked it just for epicmafia...
Jeffalmost 9 years ago
I wonder how many people use their Epicmafia passwords for their bank accounts.
1
deleteddeletedalmost 9 years ago
holy sht lmfaooooo
1
xxeroxalmost 9 years ago
Why would he get arested for this... People hack sites all the time and don't get punished.
somethingwhateveralmost 9 years ago
god if this flows into IRL im gonna laugh so much
one side i think what he did is awesome and so he should go unpunished
on the other side if he gets arrested for this, it will be hilarious
2
deleteddeletedalmost 9 years agoedited
Dalypso
Anacletus
i think that anyone who cares enough about epicmafia to install an epicmafia browser addon deserves their paypal to be broken into and also put to death
in what order?
the admins then the people who still play competitive then the pedophiles then the weebs
deleteddeletedalmost 9 years ago
Think about it: Mod team spends all this time trying to catch cheaters at epicmafia, has spyware installed to do it


It's funny on so many levels. Like an onion.
1
Jeffalmost 9 years ago
PUT HIM IN JAIL LMAOOOO.
deleteddeletedalmost 9 years ago
Anacletus
i think that anyone who cares enough about epicmafia to install an epicmafia browser addon deserves their paypal to be broken into and also put to death
in what order?
shaGuaralmost 9 years agoedited
Registrar Abuse Contact Email: abuse @ namecheap.com
Registrar Abuse Contact Phone: +1.6613102107

If you want to shut his s­hit down here's the domain contact info
deleteddeletedalmost 9 years agoedited
i mean it made sense. i dont really follow the current mod team

but from an outsider's perspective, it looks like the mods treated him like dirt so i get why he did it

not that its okay though
somethingwhateveralmost 9 years ago
lailai rules now honestly
1
deleteddeletedalmost 9 years agoedited
i think that anyone who cares enough about epicmafia to install an epicmafia browser addon deserves their paypal to be broken into and also should be put to death
2
xxeroxalmost 9 years ago
Yo, bell, add me in lol . I want to see what is happening :3
deleteddeletedalmost 9 years ago
Jeff
LMFAOOOOO. The dude literally became admin, set up a way to hack everyone, then left on claims of mental illness while leaving his script running and collected everyone’s passwords.
Brilliant, honestly
Thealmost 9 years ago
shaGuar
What do you guys think.. did he throw that code in at the last second, or was it his plan all along when writing the thing
He added the code in when he went on that trip to the US with other EM users. I thought it was odd he'd be updating his extension during that time
xxeroxalmost 9 years ago
Miki
xxerox
The
Lailai currently has the password of everyone who is using the script. Uninstall immediately and change your password.
Who would even install Oracle.. -.- Your lazyness to do things the "easy way" got you here.

Any reasonable person did not install it.
scripts can be pretty useful for mods
I urged the mods to not install it.
jessalmost 9 years ago
i got drunk w lailai lmfao
somethingwhateveralmost 9 years ago
its too bad lucid doenst log in enough to know and have used oracle
Jeffalmost 9 years ago
LMFAOOOOO. The dude literally became admin, set up a way to hack everyone, then left on claims of mental illness while leaving his script running and collected everyone’s passwords.
1
deleteddeletedalmost 9 years ago
This is why you never logout and use saved passwords. They can't keylog you if you don't type your password.
Mikialmost 9 years ago
xxerox
The
Lailai currently has the password of everyone who is using the script. Uninstall immediately and change your password.
Who would even install Oracle.. -.- Your lazyness to do things the "easy way" got you here.

Any reasonable person did not install it.
scripts can be pretty useful for mods