[USA][Custom] SoE RPG - New Release! - Champion creatures! - Clue scrolls! - Zathroth returns! [11.21.25]

[M4rcin]

He will dissapear and come back under new name after next scam

Wild thing to say for an account less than a month old

It will happen once SoE team decide to kick him out (they already talked about it lmfaoo).

I didn't change my name after I got kicked from Brutera, btw, how is the project going?

 

[geekhex]

Quoting M4rcin: "Fortunately for you guys, as someone wise once said, cry is free"

You're right, Marcin. Crying is free. A full forensic analysis of a client that feels fundamentally untrustworthy, however, is not. But we did one anyway.

People on this thread are talking about scams, fake streamers, and seasonal servers. It all starts to make sense when you look at the code. Let's talk about what's actually in your client, shall we?

* Undisclosed Tracking: You have a native function, g_app.getMachineFingerprint(), that creates a unique, persistent hardware ID for every single player. Your privacy policy doesn't mention this. You call it "legitimate interest," but the reality is that you're fingerprinting and tracking your players' machines without their informed consent.

* Covert Data Channel: You hide this hardware fingerprint by pre-encrypting it with RSA (rsaSetPrivateKey) and then piggybacking it onto the main XTEA game stream via Protocol.send(). This isn't "security," as you claim; it's a classic covert channel designed to exfiltrate data without being detected by firewalls. These are techniques used in malware, not reputable game clients.

* A Potential Backdoor: Your client contains a native function, g_platform.requestAccess, which has the capability to access files outside of the game's own directory. It's an undisclosed security risk, a backdoor waiting for a purpose.

You mock players and tell them "you still cheat and blame me". But the evidence shows you're the one using deceptive techniques. You build a client that doesn't respect its players' privacy or security, and then act surprised when the community feels scammed.

And don't bother checking my account age. The data doesn't lie, no matter who presents it.

Fortunately for you guys, filing a GDPR complaint is also free. And all the evidence is now ready.

Like sands through the hourglass, buddy.

 

[MC Kresha]

Quoting M4rcin: "Fortunately for you guys, as someone wise once said, cry is free"

You're right, Marcin. Crying is free. A full forensic analysis of a client that feels fundamentally untrustworthy, however, is not. But we did one anyway.

People on this thread are talking about scams, fake streamers, and seasonal servers. It all starts to make sense when you look at the code. Let's talk about what's actually in your client, shall we?

* Undisclosed Tracking: You have a native function, g_app.getMachineFingerprint(), that creates a unique, persistent hardware ID for every single player. Your privacy policy doesn't mention this. You call it "legitimate interest," but the reality is that you're fingerprinting and tracking your players' machines without their informed consent.

* Covert Data Channel: You hide this hardware fingerprint by pre-encrypting it with RSA (rsaSetPrivateKey) and then piggybacking it onto the main XTEA game stream via Protocol.send(). This isn't "security," as you claim; it's a classic covert channel designed to exfiltrate data without being detected by firewalls. These are techniques used in malware, not reputable game clients.

* A Potential Backdoor: Your client contains a native function, g_platform.requestAccess, which has the capability to access files outside of the game's own directory. It's an undisclosed security risk, a backdoor waiting for a purpose.

You mock players and tell them "you still cheat and blame me". But the evidence shows you're the one using deceptive techniques. You build a client that doesn't respect its players' privacy or security, and then act surprised when the community feels scammed.

And don't bother checking my account age. The data doesn't lie, no matter who presents it.

Fortunately for you guys, filing a GDPR complaint is also free. And all the evidence is now ready.

Like sands through the hourglass, buddy.

 

[fridai]

quick reminder miracle also had gm tools and no one gives a damn anymore [USA][7.4] Miracle 7.4 - Launch on May 28th (https://otland.net/threads/usa-7-4-miracle-7-4-launch-on-may-28th.289134/page-10#post-2765297) its most likely just some custom anticheat, otses are alredy half legal so who cares. If no one reported any steals its just assumptions, if at least one person reported their bank account wiped no one would ever trust him, do you really think anyone who has server developed to this point would risk it?

 

[M4rcin]

You guys are tripping balls if you blame us for using XTEA xD

quick reminder miracle also had gm tools and no one gives a damn anymore [USA][7.4] Miracle 7.4 - Launch on May 28th (https://otland.net/threads/usa-7-4-miracle-7-4-launch-on-may-28th.289134/page-10#post-2765297) its most likely just some custom anticheat, otses are alredy half legal so who cares. If no one reported any steals its just assumptions, if at least one person reported their bank account wiped no one would ever trust him, do you really think anyone who has server developed to this point would risk it?

Every single OT use RSA/XTEA because it is part of cipsofts protocol, here forgottenserver's line for reference.

Rest is not even true, stay safe with that AI slop.

 

[Swizz]

Quoting M4rcin: "Fortunately for you guys, as someone wise once said, cry is free"

You're right, Marcin. Crying is free. A full forensic analysis of a client that feels fundamentally untrustworthy, however, is not. But we did one anyway.

People on this thread are talking about scams, fake streamers, and seasonal servers. It all starts to make sense when you look at the code. Let's talk about what's actually in your client, shall we?

* Undisclosed Tracking: You have a native function, g_app.getMachineFingerprint(), that creates a unique, persistent hardware ID for every single player. Your privacy policy doesn't mention this. You call it "legitimate interest," but the reality is that you're fingerprinting and tracking your players' machines without their informed consent.

* Covert Data Channel: You hide this hardware fingerprint by pre-encrypting it with RSA (rsaSetPrivateKey) and then piggybacking it onto the main XTEA game stream via Protocol.send(). This isn't "security," as you claim; it's a classic covert channel designed to exfiltrate data without being detected by firewalls. These are techniques used in malware, not reputable game clients.

* A Potential Backdoor: Your client contains a native function, g_platform.requestAccess, which has the capability to access files outside of the game's own directory. It's an undisclosed security risk, a backdoor waiting for a purpose.

You mock players and tell them "you still cheat and blame me". But the evidence shows you're the one using deceptive techniques. You build a client that doesn't respect its players' privacy or security, and then act surprised when the community feels scammed.

And don't bother checking my account age. The data doesn't lie, no matter who presents it.

Fortunately for you guys, filing a GDPR complaint is also free. And all the evidence is now ready.

Like sands through the hourglass, buddy.

If u dont file that GDPR tell me in that case i can do it

 

[M4rcin]

If u dont file that GDPR tell me in that case i can do it

Sue us for not sending plain text over internet please

 

[wtfisthiss]

Sue us for not sending plain text over internet please

As someone that has donated alot this is concerning

3. g_platform.requestAccess being able to read files outside the game folder
Huge red flag.

A legitimate game client should never need to read:

desktop files

documents

browser data

system files

Unless the server has published code explaining what it does, a function like this is:

A potential backdoor
A major security risk
A thing malware commonly includes

Even if currently unused, its existence is concerning.

brother u are not spying on 15 years old anymore, i have work stuff, crypto seed phrases in my computer which is the same reason i dont download random stuff from the Internet but i thought ur client is legit, what is this? U have 10 gms to manual check players, ticket system, record system wtf do u need this stuff for? Idk why that guy says is not being used if we all know u already blacklisted riftbot process.
Like all this to avoid botting is insane im even thinking of charging back and delete this shit, isnt it easier to just Block riftbot from being able to work in ur ot instead of making all this chinese spyware shit?

Ps: i got sent this thread by a friend hence the new acc, i dont use this shit site

 

[M4rcin]

Let's start with the fact that it doesn't contain a method like that, their (yours?) AI hallucinated it.
Second of all, any OTC can open and read any (given rights) file since edubart and earlier.
Last but not least, our client does not read the contents of your files to find cheaters, that's simply inefficient and would probably flag AV.
There are other measures that can be taken to accurately detect malicious activity without ever violating users' privacy.

Ps: i got sent this thread by a friend hence the new acc, i dont use this shit site

Sure you are not this @Volka guy who got banned today writing the same crap?

 

[wtfisthiss]

I really hope it doesn't cuz u never know who could abuse something like that.

Let's start with the fact that it doesn't contain a method like that, their (yours?) AI hallucinated it.
Second of all, any OTC can open and read any (unprotected, protected files require elevation) file since edubart and earlier.
Last but not least, our client does not read the contents of your files to find cheaters, there are other measures that can be taken to accurately detect malicious activity, without ever violating users' privacy.

Sure you are not this @Volka guy who got banned today writing the same crap?

And bro i just made this account and im quoting a guy above, why so paranoid lmao never had a motive to post in this site but this seems weird af
I can dm u all my paypal donations which has been multiple if u would like

 

[M4rcin]

And bro i just made this account and im quoting a guy above, why so paranoid lmao never had a motive to post in this site but this seems weird af

That guy, as you, is freshly created account, but that might be a coincidence.

Yeah, well then all I can say is "do your own research", as you can see, there are a ton of people (some already banned) trying to manipulate you to quit SoE and play their OT

... and no, pasting stuff into GPT do not count.

 

[blusterdevtfs]

Marcin looks like they gottcha ass this will be the falldown for SOE not only this edition (already dead) but for the future aswell. GG

You're insulting him and he's making money

 

[Gofrion]

full of bots everywhere, if you report after 3 days they still botting.

 

[M4rcin]

full of bots everywhere, if you report after 3 days they still botting.

Why mislead people into getting banned?

Marcin looks like they gottcha ass this will be the falldown for SOE not only this edition (already dead) but for the future aswell. GG

You wish, we are only starting.
How delusional you have to be to call the most popular OT on OTland "dead", just because you got banned for cheating

Some screenshots from yesterday's Retro Quest

 

[Gofrion]

where is anti bot system finally? too expensive?

Post automatically merged: Dec 3, 2025

Who lie? I report by myself multiple times and i know how its works. You can't ban your friends from every edition they botting every day, full day. Stop write lie to me man.

 

[M4rcin]

where is anti bot system finally? too expensive?

Post automatically merged: Dec 3, 2025

Who lie? I report by myself multiple times and i know how its works. You can't ban your friends from every edition they botting every day, full day. Stop write lie to me man.

I mean, it's a simple pattern - insulting and completely detached from reality.
Anyone can tell you are mad coz bad at cheating or jealous of the player count.

I suggest you keep to one version, because you guys are all over the place.

 

[Gofrion]

I mean, it's a simple pattern - insulting and completely detached from reality.
Anyone can tell you are mad coz bad at cheating or jealous of the player count.

I suggest you keep to one version, because you guys are all over the place.

No one is bad, I am writing what I think about your project. I played it for a very long time and even a few editions. Of course, I will never go there again. Why are you avoiding answering about the anti-bot system? Do you know that if you introduce it, the server will be empty or what? Mr Know-it-all

 

[M4rcin]

No one is bad, I am writing what I think about your project. I played it for a very long time and even a few editions. Of course, I will never go there again. Why are you avoiding answering about the anti-bot system? Do you know that if you introduce it, the server will be empty or what? Mr Know-it-all

You are a completely delusional - we banned over 800 players this edition (this could alone support 10 OTs here), and anyone who tried cheating got a taste. Our exile list speaks for itself.

Not to mention, that people on cheating boards are well aware that it is getting harder and harder.


You are aware that some of your friends might be reading that, they will end up banned and unhappy, blaming you.

 

[Gofrion]

Ok man im not alone WHO gonna say that.

Add anti bot system.

 

[M4rcin]

Ok man im not alone WHO gonna say that.

This doesn't necessarily make it true, my lil jelly bro