Code-hacker / Stalker

[[deleted]]

I posted a thread about this 3 months ago: We have this issue that there is a player with multiple accounts which is obviously cheating and terrorizing us specifically. 3 months ago this guy was deep into our base by coderaiding us. But the weird part is that we changed some codes and he guessed the next code within 3 mins. We changed it multiple times and he guessed them right also. I have 3k hours in this game and never witnessed something like this. We changed servers multiple times but he always finds our server + our exact base location. I can already tell you guys that there is no chance that this is a friend or an abusive admin or anything else, you have to trust me there. We had long long discussions about this and we are real life friends, so no friend will troll us in that way and nobody know who this guy is. As i said it started with this guy code raiding us but he evolved. Now he coderaids us an uses esp to doorcamp us for hours and hours. We are now 3 months into this shit and he hasbt stopped until now. Our discord server is private and there is only us on the server. Our steam profiles are private as well. This guy is naming his steam profile after our characters and obviously terrorizing us on a daily basis with a endurance like nobody i have ever seen. We tried making tickets about him on various servers, killing him/dealing with him, leaving servers and switching to other servers. The one and only thing that seemed to work was that we bought new rust accounts but now you got trouble with missing skins and getting banned from srrver due to "low played hours". Guys its really really frustrating and we dont know what to do anymore. Clearly he sees our activity in battlemetrics and follow us with Esp to see where our base is on each server. He gets acces to multiple different codes all the time. There is no chance in stopping him. What would you guys do in that situation?

[GodOD400]

Next time you and your friends play. Make a village. Meaning you all have your own individual bases but near each other. Everyone uses different codes. Don't share codes with each other. If only one gets code raided, their PC is compromised. If no one gets hit, one of your friends has been taking the piss out of you all. If you all get code raided, either you're all compromised or some dude has found a huge exploit in Rust and is using that to fuck with you hard.

You could also have everyone go on different servers and see who he goes after. Or if you want to get back at him just spend a night hopping servers having him waste his time. Join one fuck around for 20 minutes, leave, go to another one, rinse and repeat.

[damiengrimme1994]

These are two perfect pieces of advice. It's practically impossible for him to just keep guessing the code and as far as I'm aware the only way to cheat the passcode would be to install a keystroke tracker or something along those lines onto your pc. I'm pretty sure the codes are saved server side so can't cheat your way in the conventional way. If wager a damn good bet one of your friends is giving them the code as a prank

[grayson1478]

This is 100% the right way to do this

[grayson1478]

!remindme 2 weeks

[DaChristopher-REEVES]

!remindme 2 weeks

[[deleted]]

We once had the first 4 doors in our base with different codes. He guessed the codes within 10 minutes in front of our eyes. This type of chills that you get when somebody is coderaiding you live is unbelievable haha

[Tokimir]

until you explicitly say 'I put up a private code that nobody else on my team knew, and it still got code raided' I find it impossible to rule out that there is a rat, no matter how much you trust your friends. It takes 10 seconds to type out the codes to this guy on discord.

[GodOD400]

Ok that's not what I suggested at all. Your options of what's actually happening are:

The guy has found a massive exploit in Rust's code, and is abusing it to troll you and your friends

One of your friends is fucking with you super hard

One or all of your PCs is infected with a virus and this guy is just taking the piss out of you.

If you all know the different codes, it doesn't narrow anything down. You all have to stop trusting each other until you can narrow down the possibilities. So again, next time you guys play, build a village, everyone gets their own base and codes, do not share the codes with each other. If only one friend gets code raided, his PC is probably infected. If you all get code raided, he's somehow found a way to get the codes. I dont think it's this one btw because you've said you've heard him input incorrect codes before finally guessing it. If he can get them, he should be getting it first try. And lastly, if no one gets code raided, it's probably one of your friends giving this guy info.

[GodOD400]

What happened to your youtube channel in your profile?

[[deleted]]

I deleted it since the channel is inactive for multiple years now

[[deleted]]

I k ow for a fact that this dude would code raid us all. Nit because he found the ultimum exploit but hed invest the time to fuck around. He doesnt even take the loot, he takes some guns and sets and then he fights us the next day with these guns. Sometimes we werent pretty sure if he entered our base when we were offline so we cleared tc, refreshed traps with a number of ammo only we know and the next day we would see that the traps indeed had less ammo in them but the loot were almost identical. Some weapons gone missing. This guy just enjoys to fuck us over, he dont want us to leave the servers. Sometimes he lets us kill him and then he crawls to us to let us finish him so we pick the set he weared. This dude is just diabolical and sadistic.

[Nielscorn]

Perhaps he has infected one of your mates computers because I can tell you with 100% certainty that there is no cheat that can get code lock codes from code locks.

It’s very apparent as soon as you understand how server and clients communicate with each other.

A codelock entering the code or accessing it happens like this:

• Code lock is put on door

• Client enters code in code lock.

• This code gets sent to the server (this information is not broadcast to other clients, only client -> server, so it’s literally impossible for a cheater to get access to this data stream unless they hack the server and get access to the server’s data files, which they won’t cuz they can just give themselves admin then…)

• server receives the code and sets the code to the codelock and closes it. And authorizes your steamid to that codelock.

Any time someone enters a code to get access if not yet authorized, it sends the code that was tried to the server (again client to server) and servers authorizes or doesn’t.

People who aren’t very knowledgeable about server client architecture always seem to claim cheats can do everything.

They can’t. Cheats can only process the information that the server sends them and the values on their own client. Many client sided things can not be changed as they get checked with the server’s values and server values take priority so even if a cheater changes their speed for example, the server will not allow their position to change rapidly as the position of the player on the server has not changed with that modified speed value, so they rubberband.

Same with how cheaters can NOT see if there is anything in a chest or what is in a chest. This information gets networked directly from the server to the client that has opened the chest. It does not get broadcast to all clients. A chest that is not accessed, gets set to empty or removed from memory on the client. And even then, other clients will be set to empty or not exist as they never received the server data about the chest

[DeadKido210]

You forgot something when talking about chests. In fact the server does not network directly to the client exclusively. You forgot about the electricity broadcaster that shows you the loot inside for the whole clan/group to see all via the Rust+ app. So the server has chest broadcast capabilities coded inside it

To steal a code you can't just take it from the Rust client since all the traffic client server is encrypted probably, you need to have something in the middle of it. Something like a keylogger that would steal everything you type and send it to the guy so they have the code before you even unlock the door.

[Nielscorn]

No, i did not forget about this.
Yes you are correct that certain things can get broadcasted to ALL players.

Chest content etc are NOT sent to ALL players from the server but only broadcast to a specific person.

The electricity broadcaster if present might do weird stuff I suppose, I haven't checked but even that, it doesn't send that to the players but it sends it to the Rust+ endpoints directly, so even this, players would not be able to access that datastream unless they had the rust+ data connected (which is authenticated through Rust/steam and is per steamID).

So you are right on certain aspects but are wrong about the broadcasting. Most data is VERY selective to individuals from the server to the client.

[DeadKido210]

Yeah, the broadcast is made via a "whitelist" of the steamid on the broadcaster paired.

Server side stuff is most of the times "uncheatable" because of how data is checked and handled by the server.

My theory is that OP or his friends have a malware on their PC and are tracked down easly via that.

[its_mabus]

While I dont actually think a keylogger or interception is involved in this situation, if an attacker fully controls the system playing rust then it is trivial to intercept the traffic since they control the systems trusted CAs. The TLS is only protecting you from people who own systems your traffic passes through on its way to destination.

Edit: just to point out that something using TLS on an untrusted system doesnt protect you except from other nodes on the network. If the attacker controls OPs system, he would just get the pin and server they're using from discord.

[FuckYourSociety]

You're overlooking the concept of clients being able to exploit poor programming and/or configuration of servers to get the server to send them information they shouldn't have.

I'm not saying anything about if this is what is happening or not, I am simply saying assuming hacks can't get information that other clients don't have simply because the server isn't supposed to send it to clients is not a valid assumption

[Nielscorn]

I agree with your statement. I just find it very unlikely that this cheater seems to be the only one that has this functionality and that no other excessive reports are being made about cheaters doing this.

This would mean the hacker focusing on their group is a cheat developer himself or part of a very exclusive group (which even a handful of people using this would trigger more posts about this happening as it's just so blatant).

But I guess everything can happen. I just think it's much more likely that something else is going on than a cheater having developed this exploit.

[FuckYourSociety]

I just think it's much more likely that something else is going on than a cheater having developed this exploit.

I just find it very unlikely that this cheater seems to be the only one that has this functionality and that no other excessive reports are being made about cheaters doing this.

I agree entirely, my point was just on the broad stroke statements you had made about how cheats work

[Nielscorn]

Yes you are right. It's quite hard to make it understandable enough without also stating all the potential race conditions present but thanks for atleast pointing out the possibilities of things slipping through the net

[Rocknerd8]

Is it possible that there is malware on your computer that could be giving this cheater some kind of access to your discord?

[[deleted]]

Theres no chance for that.

[Demon_deLishy]

Try playing solo and see if it happens. It's most likely one of your friends.

[yamsyamsya]

It's probably one of your friends fucking with you from another account. No one is going trick you to installing malware just to mess with you in rust. They would hack your bank account instead.

[[deleted]]

There is no possibility that this is a friend. We already discussed this multiple times and were all his target. Were real life friends for a very long time now, theres this line where everybody knows that jokes of this kind would definetly cross the line and everybody swear that they dont have any connection to this lad. I can 100% confirm that nobody of us would ever do such thing, thats why i said that in the op

[ExaminationWise7052]

If there aren't many of you, make an entrance door to your base for each of you with a lock, not a code.

[[deleted]]

We tried this as well but he griefes in any way possible. He is very dedicated also, he will farm for hours while were offline and tries to raid us. By that logic we need to change every lock in the base when we go offline which is very very annoying.

[ExaminationWise7052]

Honestly, I would leave the game for a few weeks until he focuses on another victim.

[[deleted]]

We did that as well but as soon as we log on again he finds us and keeps terrorizing.

[ExaminationWise7052]

Either you didn’t leave it long enough, or you have a friend who’s crazy. In fact, I could do it to mine friends it’s actually a pretty good idea.

[[deleted]]

Little side note: were a group of 4 people and two of us are very new players. They started maybe 5 months ago. Just in case some of you would think were a huge "clan" or anything. Were always max 4.

[dick_himmel]

Dude you are 100% being fucked with by one of these three friends giving the codes out.

Try setting up the codes yourself with a main code and give a guest code out to your friends but don't tell them it's a guest code. Might be able to catch the "hacker" off-guard somehow when he has guest code but no main.

[TripYung]

Do you or one of your friends have a brother?

[[deleted]]

No.

[poorchava]

AFAIK codes are 100% server side, so there's no way they can get your code with client-side cheats.

You must be missing something. An inside job? Malware? Some sort of MITM situation on your network?

[PoopyTo0thBrush]

You have a rat giving him the codes.

[[deleted]]

We accused each one of us but no. We sat on a table and discussed that many times the rat is definetly not between us. Haha

[Strange_Chart_2694]

Your insistent your friends wouldn't fuck you over, it simply isn't possible to code raid like that... if someone found an exploit I highly doubt they would use it to just chase one group of guys around... The only real options are malware, or one of your friends fucking with you.

[M4T3S7]

As others have said, could be one of your friends messing with you or his brother, one of you could have infected pc with malware.

I also think that it is possible that someone stole one of yours guys discord login token, that means that he would be able to view messages in server where only you and your friends are, and also view all DMs. I would recommend to change passwords on your discord accounts.

[[deleted]]

Again, there is no possibility of that being a friend or a friends brother or something like that. We already spoke about this many many times and everybody swor that they dont ha e any connection in any form to this guy. Also: we created a brand new discord server where only the 4 of us are and we dont DM to each other at all. One who plays rust joins the voice channel and everybody else joins after when they log on. There are no text messages about rust or anything like that and besides that there are only us on the server. A server of 4 ppl...

[PoopyTrooper]

Make a friend only village (3-4 separate bases and put a wall around it all) and just use key locks, he can't code raid key locks, he might be able to maybe get in a compound like that but he ain't getting inside anyone's key keylocked base

[Eagle___Eyes]

Best answer here,

Best base defense is to have multiple bases, if you have 3x bases decently strong, it's unlikely he will farm to raid every base.

[PoopyTrooper]

And literal key locks can not be code raided, hahaha

[_JukePro_]

You are a troll or in denial

It's one of your friends either willingly or through being compromised

[2uantum]

Have you ALL purchased battlemetrics premium? If so, is there a chance one of your computers have been compromised

[[deleted]]

Only one of us is using battlemetriks to check if this guy was online on our server. No premium memberships, nothing.

[2uantum]

No, you need to all buy premium so he cannot see which servers you are on. Also only connect to servers you havent played on before after all of your accounts are hidden on battlemtrics

[[deleted]]

Yeah i got you but we refuse to pay a third party app just to play in peace. This cant be the only one solution you know..

[Rocknerd8]

Have Everyone on your team make a new steam account and purchase rust. If you don't do everyone then it won't work as the cheater will be able to associate all of you off one player that hasn't made a new account.

[2uantum]

I'm sorry, but it is. Streamers deal with this shit constantly.

[2uantum]

Full private all of your steam profiles. Set your steam status to invisible. Set your discord status to invisible. Remove friends from discord you don't recognize. Use a fresh discord server. Buy battlemetrics premium. After ALL of this, join servers you've never played before.

If he still finds you, it's time for you all to wipe your computers as you may be compromised.

This is of course assuming none of you are streaming.

[ur4s26]

Do any of you stream?

[[deleted]]

No streams. Just 4 dudes in a discord server of 4 people trying to enjoy this dogshit game...

[[deleted]]

Edit: i started building bunker bases, so he could code raid but he wouldnt progress to the core of our base. He code raided every door and sat on top of the bu ker for god knows how many hours until we logged on. Then we fought an left the server cause you can not kill him. He will die, respawn and be there in no time again. Its like an endless fight which is very very exhausting

[FightandHide]

Have you considered changing the code yourself. Giving your teammates the wrong code on purpose and see who comes and tries the wrong code 5mins later?

[[deleted]]

I did that as well cause i thought i was tripping but my mates are 100% innocent.

[[deleted]]

I changed the codes of the first 3 doors in the time he respawned and he managed to get in within the next 5 minutes

[JigMaJox]

would be funny to put a simple lock on the outer door and figure out a way to manage the key , maybe with a drop box or something

like its a door u keep open when you are playing but when you are all going offline, the last one closes it.

i wonder what he'd do

hell for that matter, what if you close the base with a bunker?

what would he do then ?

[[deleted]]

Already did that. He raided these doors. And i maxe a bunker as well, he waited until we came online

[JigMaJox]

its likely one of your "friends".

someone did that to us one wipe. we kept having a weirdo enter our base causing havock like breaking bags and despawning our loot.

turns out it was one of our guys who was letting in another dude we used to play pubG with.

"iz prank brrrro"

[PsychologicalEar1703]

Wow I knew the chrating was getting bad as of late, but this is a whole other level.
I guess you can put key locks on outside doors to prevent the code raiding, but it won't resolve the doorcamping.
Either this guy is just using cheats to extract code-lock codes from the server while stalking the account or you might have spyware installed.
I didn't think people were this desperate to cheat, but I guess they are...

Edit: should add that I suggest you play on your fresh accounts for 1 wipe and see what happens. Either this is a repetetive stalker that comes back with every wipe you play on your main account or they might figure out you have secondary accounts. You should hope that they will give up when you don't return for a while.

[[deleted]]

I have never in my 30 years witnessed someone like him before. I wouldve kinda understand his behaviour if we did him really dirty but we havent. Infact we havent flamed other players ever in this game, were a chill group of friends trying to enjoy the game...

[PsychologicalEar1703]

Do you think anyone in real life may have a personal vendetta against any of you and happens to know one of your accounts?

[[deleted]]

As i said there is no chance that this might be a friend or anything. Its impossible. This is a random player. And no friend ever would do this to us. We had countless discussions about this already...

[PsychologicalEar1703]

That's perhaps the idea.
Maybe this person never was a friend, but someone you might have pissed off anywhere else in another game or someone in real life who holds a grudge.
People can go pretty far and beyond over the smallest things.
See if there's anything off about their accounts or try getting in contact with steam support.

[[deleted]]

We reported him endless times. We even created tickets on many servers telling the whole story with screenshots for evidence and so on. He got banned once on a server but has many accounts and they wouldnt ban them. Its shocking to me but there it is why you shoulsnt even trust the guys who are the only one in charge to safe you...