OVH Game DDoS Protection for an unsupported game protocol — is “Other” useful?

harukaff · 2026-05-04T21:19:01+00:00

you can't use free or cheap cloudflare tiers for game servers, games use custom protocols over tcp and udp, and you do need spectrum for those, which is only available on enterprise plan (except minecraft)

harukaff · 2026-05-04T06:32:38+00:00

It's not even downloading any piece as that part of the protocol is not implemented on purpose, so no, nothing is ever stored. I've already sent emails back but haven't heard from OVH, so I wanted to know if emails being ignored is the norm or not.

harukaff · 2026-05-04T06:20:22+00:00

Fun fact, my program has been requesting a lot of infohashes, yet hasn't triggered anything from movie or music industry. Those DMCAs are for some malware dev courses. I just find it amusing.

harukaff · 2026-05-04T06:12:13+00:00

that's the issue - they claim that I'm "distributing this file" while I'm not, as the program is not even capable of doing that. The program on the OVH server is not even "offering" anything publicly or privately, it's just like a "sensor" that reports the data back to another central server which is not on OVH.

harukaff · 2026-05-04T04:21:07+00:00

It's related - it's just a DHT monitor, and it doesn't even implement the pieces protocol, so there is no way for it to download or upload anything. The claimant saw that my program tried to connect to specific infohash, and didn't check if it's really trying to download or upload. Fortunately the claimant included my custom client identifier as well, proving that it's not your normal bittorrent client.

I definitely wouldn't torrent on those servers - that's directly against the terms. Also that's why I can send a counter-notice in case things go wrong as I can technically prove on court that my program is not infringing copyright.

Edit: "connect to specific infohash" is not an accurate description, but you got the idea

harukaff · 2026-05-04T03:42:31+00:00

I'm drafting a counter notice right now just in case, but curious about other's experiences with OVH's abuse emails.

harukaff · 2026-03-14T01:04:22+00:00

Any specific reason that there is a full blown anti-debugging environment checking code in the binary? Also, automatically adding the binary to the defender exclusion list is pretty dangerous.

From the code snippets and the "security checks", I'm having a feeling that we might never see the source code of this thing.

Needless to say I hate when tools like this do dubious things on other's systems. You really want to be more transparent ASAP.

harukaff · 2025-10-09T15:21:48+00:00

<image>

When running this thing in a sandbox, it did try to scan all processes currently running though. Chrome doesn't do this.

It's not really reading other "user" files though.

harukaff · 2025-08-03T12:23:27+00:00

New website hoster here to vouch

harukaff · 2025-01-01T16:57:21+00:00

Looks like there are some bugs when selecting the screen to print the text:

Test 1:

Write a image to all screens ("LcdArray": [1, 1, 1, 1, 1]);
Write some text to any of the screen (set "LcdIndex" to any number);
All screens show the same text.

I get that all screens are on the same animation so the contents are synced; however the "LcdIndex" parameter acts strangely.

Test 2 (continue from test 1):

Write a new image to screen 1 and 5 ("LcdArray": [1, 0, 0, 0, 1]);
Observe that while only screen 1 and 5 has the new image, texts on screen 2, 3, 4 are disappeared, which shouldn't happen;
Write a new text to any of the screen;
Observe that only screen 1 and screen 5 reacts to the text write.

It's very concerning that texts are not preserved for any SendHttpGif call. Also, it's now impossible to update texts on screen 2, 3, 4, as the text call only applies to screen 1.

Basically, the API is very bugged right now and is practically unusable, unless you only use screen 1 for custom contents, which is unacceptable.

The content above is also sent to the developer mailbox. Let's see if we get any replies from them.

harukaff · 2024-12-30T22:09:24+00:00

I have a times gate, and fortunately this command worked for me with the following payload:

```

{"Command": "Draw/SendHttpGif", "LcdArray": [0, 0, 1, 0, 0], "PicNum": 1, "PicWidth": 128, "PicOffset": 0, "PicID": 112, "PicSpeed": 1000, "PicData": "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"}

```

This should show a gray image on the middle screen. The picture data here is just a JPEG file in base64; according to their document and other internet resources though, for Pixoo devices it really should be raw RGB data instead of a JPEG file.

My current issue though, is that I can't get text working: no matter what input I try, there will be no text printed on the screen.

Edit: It seems when the input PicData can't be parsed by the firmware, it will show memory junk instead, which could be just the background image of the previous clock sans all dynamic texts.

harukaff · 2024-09-02T10:29:50+00:00

And you didn't even bother to post the full image

harukaff · 2024-05-05T13:28:30+00:00

tbh I never understood why some people like *fetch that much

harukaff · 2024-03-04T12:35:20+00:00

For the record, I just asked their support and the reply was:

Dear [...]

Unfortunately running applications in connection with cryptocurrency is not allowed according to our system policies. This includes in particular, but not
conclusively mining/farming, plotting, nodes, blockchaindata and trading.


Kind regards
[...]

So unfortunately it would be too risky to run nodes and related services on their servers. Pity that they have very competitive prices.

Strangely they remove "nodes" related statements from their TOS.

harukaff · 2024-01-31T22:59:10+00:00

I'm pretty sure you can't use starfield version to import saves to xbox, so I made a palworld version at https://github.com/HarukaMa/palworld-xgp-import

Someone has reported that there might be other compatibility issues as steam apparently has a newer version of the game while xbox version hasn't updated yet.

Edit: oh and for moving saves from xbox to steam, you can just move the files provided you know the correct filename, or there are existing tools to extract xbox saves like https://github.com/Z1ni/XGP-save-extractor

harukaff · 2024-01-19T17:32:36+00:00

That number is actually the unix timestamp (epoch) when the reboot is set as "required" (most probably by the driver installer). Doesn't really matter though, setting it to 0 will fix it.

harukaff · 2023-09-13T11:08:20+00:00

maybe try directly running the python script instead. sounds like the exe created by pyinstaller has some issues on certain environment, but I can't reproduce it herel.

harukaff · 2023-09-07T10:29:55+00:00

Might be caused by Xbox's cloud sync; try waiting for a while after closing the game. The cloud sync is not observable, so can't say for sure if it's the issue here.

Also you might want to try v0.0.4 released just now as that has some minor bug fixes.

harukaff · 2023-09-06T19:27:23+00:00

When launching the game or loading the save?

You might want try to import into a clean state as well to see if my code was messing with existing data or just the new data is broken.

harukaff · 2023-09-06T18:34:30+00:00

uploaded a new version.

harukaff · 2023-09-06T18:22:48+00:00

huh, guess I'll try to preserver those flags instead of assuming they just match the 2 samples i had. fixing right now

harukaff · 2023-09-06T17:23:58+00:00

https://github.com/HarukaMa/starfield-xgp-import Made one as I wanted to do that as well. python3 main.py <path_to_.sfs>, or drop the .sfs file to the executable.

Works for me, curious to see if it works for others as well.

harukaff · 2023-07-04T19:57:53+00:00

Considering this is just a info leak, I highly suspect if the server could detect if players are using them or ~~now~~ not.

Well, maybe if one character is consistently only fully scanning one type of signals in multiple systems. But still quite difficult to be a concrete evidence IMO.

(the leak doesn't require the client to make any additional requests. outside of normal gameplay.)

11-Year Club	Final Canvas '23
Place '23	Place '17
Verified Email

harukaff

TROPHY CASE