Duplicate HWIDs

[-=CoN=-Strych9]

Today on my server I had 2 players on at the same time and they had the same IP and same HWID. My understanding was that ACE generated a unique HWID. So wanted to see what some thoughts are on this and what it could be? I am running ACEv08h.

Code: Select all

[ACEv08h]: [Player1]: [IP] xxxx
[ACEv08h]: [Player1]: [OS] Microsoft Windows 7/2008 R2 x64 (Version: 6.1.7601)
[ACEv08h]: [Player1]: [CPU]          Intel(R) Pentium(R) CPU G630 @ 2.70GHz
[ACEv08h]: [Player1]: [CPUSPEED] Measured: 2689.525249 Mhz - Reported: 2693.998846 Mhz
[ACEv08h]: [Player1]: [NIC] Intel(R) 82579LM Gigabit Network Connection
[ACEv08h]: [Player1]: [MAC1] 0D14B8668BED2EE600BCDDA863F7572A
[ACEv08h]: [Player1]: [MAC2] EF9601A030518A718D69368845A2708E
[ACEv08h]: [Player1]: [HWID] 5582F8FDF9E2C061CFC4DC377657F358
[ACEv08h]: [Player1]: [UTVER] 436
[ACEv08h]: [Player1]: [UTCMD] <none>
[ACEv08h]: [Player1]: [RENDEV] D3DDrv.D3DRenderDevice
[ACEv08h]: [Player1]: [SNDDEV] Galaxy.GalaxyAudioSubsystem
[ACEv08h]: [Player1]: [TIME] 15-07-2015 / 14:33:10


[ACEv08h]: [Player2]: [IP] xxxx
[ACEv08h]: [Player2]: [OS] Microsoft Windows 7/2008 R2 x64 (Version: 6.1.7601)
[ACEv08h]: [Player2]: [CPU]          Intel(R) Pentium(R) CPU G630 @ 2.70GHz
[ACEv08h]: [Player2]: [CPUSPEED] Measured: 2693.893041 Mhz - Reported: 2693.924919 Mhz
[ACEv08h]: [Player2]: [NIC] Intel(R) 82579LM Gigabit Network Connection
[ACEv08h]: [Player2]: [MAC1] 3AAAEFE8D19C18A24CAA1D90B3A4D3BF
[ACEv08h]: [Player2]: [MAC2] C8FB9C3E32877C2216FB652F8D6634D6
[ACEv08h]: [Player2]: [HWID] 5582F8FDF9E2C061CFC4DC377657F358
[ACEv08h]: [Player2]: [UTVER] 436
[ACEv08h]: [Player2]: [UTCMD] <none>
[ACEv08h]: [Player2]: [RENDEV] D3DDrv.D3DRenderDevice
[ACEv08h]: [Player2]: [SNDDEV] Galaxy.GalaxyAudioSubsystem
[ACEv08h]: [Player2]: [TIME] 15-07-2015 / 14:33:10

Thanks,

-=CoN=-Strych9

[JackGriffin]

It's possible to bypass the ACE checks. There are a couple of tools around that sanitize your HWID if you are using certain types of hardware. If I had to guess this is someone with a couple of similar surplus win7 boxes. Was the IP anyone we know?

If they were a problem or you need to flag them let me know and I'll fix something up for you.

[Chamberly]

Edit: Nvm, go ahead and ignore.

[-=CoN=-Strych9]

It's possible to bypass the ACE checks. There are a couple of tools around that sanitize your HWID if you are using certain types of hardware. If I had to guess this is someone with a couple of similar surplus win7 boxes. Was the IP anyone we know?

Even if it was a similar box it should have a different HWID I would think and I thought a sanitizer would just be blank. I now have a possible 3rd with the same HWID, but same IP, Still looking through logs. I don't think the IP is anyone known, but I will PM it to you.

What made me start looking is I had a report someone was on with the clan tag and so I got to looking. No other issues yet, but the same HWID and same IP caught my eye and if they had not been on the server at the same time I would have just tough someone was changing names.

If they were a problem or you need to flag them let me know and I'll fix something up for you.

Really appreciate it. Will let you know.
Thanks for the reply.

[JackGriffin]

The program I have will allow you to assign your own ID as well as blank it out. It might be that they are duplicating the default settings across multiple boxes.

[sektor2111]

Just a question before to continue: How do you think I've tested FriendlyFire in MH2 for player vs player, ALONE in a LAN test server ? I was working in that time to solve red skin featured TeamGamePlus color specific separators. Eh ? I'll bet I had the same IP, the same HWID and the same... Keyboard and mouse, LOL.

[JackGriffin]

I get what you are saying but it makes no sense to run multiple play instances on a single client box when you are connecting to a server. Well, unless you were up to no good.

[sektor2111]

I get what you are saying but it makes no sense to run multiple play instances on a single client box when you are connecting to a server. Well, unless you were up to no good.

That guy maybe has a few purposes: fill player slots, looking if some admin is watching, spy if admin do check his logs and here it is a TOPIC right here. I would like to know that IP...

[-=CoN=-Strych9]

I get what you are saying but it makes no sense to run multiple play instances on a single client box when you are connecting to a server. Well, unless you were up to no good.

That guy maybe has a few purposes: fill player slots, looking if some admin is watching, spy if admin do check his logs and here it is a TOPIC right here. I would like to know that IP...

Only problem with this theory is I was on with them and they were both playing and shooting other players, so I am thinking it had to be 2 different people.

[Dr.Flay]

One thing is clear
They have not discovered the newer renderers.

Are you listed on Gametracker ?
You may be able to see if the game names are attached to user accounts.