Leaderboard
Popular Content
Showing content with the highest reputation on 10/23/25 in all areas
-
4 points
-
There was an exploit which was disclosed through our bug bounty program. It was patched within minutes of it being reported and I found no evidence of it being abused prior to it being discovered and disclosed to me. Due to the nature of these sorts of exploits, I do not discuss it with anyone that’s not on a need to know basis. This is common practice to protect the integrity of our servers. Unfortunately it’s possible that your IP can be exposed by playing any multiplayer game and you should operate with the expectation that it will happen. If you’re rightfully concerned with this then i’d recommend you use a VPN at all times when connecting to multiplayer games. Providers like mullvad even include a “kill switch” which blocks all traffic that’s not run through the VPN. As for actions taken against players for breaking the rules I can’t discuss it with someone who does not have the full context and it would be wrong for me to disclose details of a situation to a person who has absolutely no involvement.3 points
-
I feel like many staff including rubik hear the word drama and either want to either fuel the flames of drama, or just not want to talk about it at all, everyone is guilty of doing this but I feel like something of this caliber coming to light should be a wake up call and anyone who even attempts to do something like this should just be removed Its crazy that vbov is trying to lighten the weight of his action, anyone who "accidentally" stumbles upon something like accessing player ips is obviously dipping their toes somewhere they are not supposed to be dipping their toes into.... (and yes there should absolutely be someone to look for stuff like this but everyone who seems to have the know-how in this sort of stuff likes to be malicious with it) And its very odd that there were people who were in that server where vbov mentioned the fact he found a way to grab ips of players who are staff and I feel should be investigated There should be no if ands or buts if there are community members collecting data,personal conversations, and any "dirt" on other members, and releasing it when they feel like doing so whether it be to hold it over peoples heads, or just ruin their status in the community. (I am aware I have collected dirt on other members aswell, It was not the right thing to do) And there should be no hesistation to remove a member who actively seeks to find ways to gather sensitive information of the server or other members2 points
-
Well I mean at the time when you made this post. We've both shared out opposing point of views since then and I think we both agree on the important parts that matter. I still feel confident that my decision will bring the desired outcome which is no more drama within the community but if I'm wrong then I'll take accountability for that and take a harder stance on it next time. You gave me good insights that I did not consider at the time but either way we're working to get the same result - the drama needs to end.2 points
-
IP addresses are not PII unless it’s accompanied by some other data which could be used to correlate it to a specific person. Your Steam username is not PII. There is no threat posed to anyone and this post is nothing more than an attempt to discredit my handling of the situation and sew distrust within the community based on one-sided facts and personal biases against certain groups of players.2 points
-
Kilobyte, the person you're portraying as a victim here, ran his own RAT which logged his Discord token to an unencrypted channel with who knows who in it. Some guy in the discord used that token to log into Kilo's account with the intention of exposing his plot to extort random people for cryptocurrency. This is all detailed in private chats between Kilo and others who were involved and that was the reason for the "leak". Saying he was doxxed and targeted for anything other than being a piece of shit for trying to extort innocent people and trying to paint him as a victim is sick. If you weren't so ill informed I would say you should go ahead and retract your entire statement. The exploit which was disclosed to me and patched within minutes has absolutely nothing to do with Kilo or bone. I understand that you're upset but you're drawing conclusions that are simply false. Everyone involved is banned from this community and legal action could be taken as well if necessary. That's what I'm here for and I don't have any reason or initiative to ignore it or take it lightly. Am I going to notify 150,000+ people in Discord that 13 people standing in spawn had their IP addressed collected by some skid? I hardly see how that's going to do anything except create a false sense of urgency and panic. The exploit is patched, no one's IP address has been leaked, and the doxxer got doxxed by his own stupidity. Let's not paint them as the victims here.1 point
-
I understand your concern but the fact that you're missing is that everyone responsible for the things you mentioned are perma banned. Rules against doxxing, ratting, exploiting have never changed and are strictly enforced. I'm not sure who else you're referring to. These people are not welcome here and if they try to alt they will be banned again and again.1 point
-
its the way its enforced, which is why it was dropped by past admin teams, because it gets to a point where something happens and it doesnt feel like a big enough 'drama' or 'toxicity' to actually warrant a perma ban. also teams just forgot who was on probation and for what because it began to get overused and staff teams would change 6months later. this one being enforced by rubik himself is more of a hopeful thing, and again the worry is just whether or not something small will warrant to a comm removal or if many little things will be fine bc its 'not enough for a perma' as has been seen in the past1 point
-
Lowkey tho, I swear you sent me an uncensored version of the ip list picture that day that you were telling people not to log onto the server, you deleted it a minute or two later but as far as I remember it was unredacted and I saw the actual ips. For clarification, he sent me the photo/description of what the exploit was capable of so that I wouldn't disagree with him on the discord when he was telling people not to hop on the server. But honestly it doesn’t matter too much because it’s not like I knew what players coordinated with what ip, to me it was just a random list of ips.1 point
-
1 point
-
1 point
-
October 20th Changelog updated basing rules to clarify what the “chill zone” is You may base in the underwater cave next to the sunken ship (known as the ‘chill zone’) but it must be a public base and accessible to everyone.1 point
-
Hello gmod friends, I make this post to publicise some things that the community may not be fully aware of and I feel they should be, this post is in no way intended to 'drama monger', or 'fear monger'. I would like for the community to become more knowledgeable on the recent events on the server and for the new staff team / rubik to be transparent on what is and isnt allowed and what falls under this new punishment format. Leaked IP Addresses and lack of disclosure: On the 1st of October there was an exploit that allowed users to gather IP Addresses of other users via the Boombox and a grabify link. This exploit was used by user 'vbov', who is since community removed, but the ban reason remains as 'Cheating' as to not inform the community. From what I am aware of, 50+ user's IP's were grabbed and those users were identifiable, some of these users are from the EU, but most are from America, and one from Australia etc. For some this may be the first time they are being made aware of this, but others already knew due to being members of the group of the user who did the exploit and spread it (There is a video of the IPs that has circulated). There was a lack of disclosure around this, typically any server/service involved in any sort of breach would have made an announcement informing the userbase, yet there was no announcement. The users who's IPs were leaked were also not contacted by Rubik/higher ups on the team who were aware, and instead vbov was paid money for reporting the bug and then it was swept under the rug, even now after vbov's community removal the community has not been made aware. As I said, some of the users are from the EU, this therefore means that the IP addresses count as personal information (if identifiable, which vbov was able to identify the IP by user), and thus makes it a GDPR Violation for this not to be disclosed to the playerbase. Yes this is a US server, but following GDPR regulations has been something Rubik has stuck by (as an excuse) to keep players that request Data Removals from returning - such as CaptainT. This lack of disclosure, alongside the lack of truth in vbov's ban reason suggest that for whatever reason this breach is being hidden from the playerbase. Personal data leak: There was a personal data leak of a community member's discord dms from 2020-2023, which included DMs of himself (minor at a time) and another minor speaking sexually and about very personal details (family, mental health etc) alongside all of his other dms. This user's dms were shared, the erotic and private messages were turned into things like notebooks, and users from this group also made audiobooks reading over the sexual messages that had been sent between 2 minors. The same group of people involved in this DM leak are those that vbov shared the information about the IP leak to, which is why I think users should be slightly concerned if their IPs have been leaked to this group that went out of their way to look for a discord token leak and spread this personal info around. Only one user from this group is banned for being the person who actually obtained the dataleak and spread it. Proof of another user (Caleb) spreading around other personal dms obtained by the discord token leak of the user was sent to Rubik, alongside proof of Caleb asking if he should put a backdoor into an addon being made for titsrp. Rubik himself got access to the entire file of personal-data via Caleb, which Caleb would not have access to in any good-faith, especially when it's taken into account that Caleb never reported this, despite Bill spreading around and making fun of these sexual / private messages from minors on various untraced alt accounts, alongside the fact that Caleb was spreading other DMs from this dataleak, meaning he was still sharing private dms that were obtained via data collected from accessing the user's discord token, and had most certainly checked other dms (as he had access to all of them). Proof was sent to Rubik, Caleb has since not been banned, but is instead on a new punishment called 'Probation', where for the next 6 months he is not allowed to be involved in drama. TLDR: You are allowed to get a community member's personal dms from a discord token, go through their DMs (which contained names/emails/actual personal data), share their DMs to others, share the entire file, be complicit in the spreading/exposure of the underaged sexual/erotic messages (caleb knew who was doing it, did not report, did nothing), and receive no punishment and be entirely allowed in the community. Any user threatening to do half of what Caleb did would be banned for 6 months or fully community removed, so why is it different for Caleb? If someone did this to Caleb, would that someone be banned? If someone did this to Rubik, would they be banned? If it was a new player, would they be banned? Things that the New Staff Team with New Approaches to Staffing should ponder. I would like for a discussion around player security, disclosure, and what constitutes as doxxing or not doxxing, what is allowed in terms of leaking (why is it leaking tene?) and why is a new punishment being used to avoid telling the community the truth? There have been community removals for sexual harassment (people saying they'd vore someone), /advert rape on kidnap, threats to doxx, bans/punishments administered over exposing someones social media that is linked to their username/account, Mass RDMs, Racism, Transphobia, threats to self-harm or harm others, and yet there is no punishment for what Caleb/others did except for one person out of the entire group (bare minimum). I would like to say I am singling out Caleb as he is one who I have the most proof of doing stuff (other than Bill), there were others involved that I have some proof of, but not enough to make it worth sending to Rubik since he has done nothing with the amount I've already given on this user. Can the staff team/Rubik please explain what is allowed and not allowed and when it crosses a line (like owning a whole file of years worth of someones private dms and sharing it) that leads to it being bannable? As of right now if someone logged on and killed 3 people they would have a larger punishment, and Sanzu has made me aware that this is a new staff team different to last and they handle things differently, so is player security also handled differently and if so can the playerbase please be made aware, since they are not even being told when their IPs have been leaked. Thank you. Any images are images that had already been obtained/sent to Rubik beforehand, anything since my contact with Rubik I have done by myself and without permission/discussion with others, I just think the community should be made aware. https://imgur.com/a/2oLgvsS Uncensored versions of the images can be sent + more images if it is a higher up member of staff that is curious, although this is not a report, simply an open discussion on what is and isn't a ban and if this is a new precedent, along with what counts for probation. 'Leak' counter: 140 points
-
Hello, who is breaking Rules. I will ban them for 6 months0 points
-
0 points
-
players are everywhere and i mean everywhere, the radius works in both left and right and up or down, for an example if you're in the sewers and you're trying to target someone specifically someone can be above you or if some guy just bhops outside your base when you're doing it. There's more scenarios, and it's clearly not that easy, aswell to mention not every player will follow you if you tell them to0 points
-
0 points
-
0 points
-
4/11/2022 added DO NOT add personal messages into your bans ( example:(GN) Isaac banned Rubik for Reason: Mrdm/Nitrp/ get a life nerd-1 points
-
Hello gang! it's me vbov, sorry for the no reply i just have been hella sick for the past 3 days, i've had 2 eye check ups and since then i've been sick. I wanted just to clear my name on my behalf, none of the IPS we're leaked, if i wanted to i'd be in hella legal trouble, and as a young 18 year old male person from a foreign country (not USA) would like to NOT get into any legal problems especially since i'm broke as fuck, i did not dox anyone or try to blackmail anyone using the ips, i have no logs of the ips, i wasn't trying to intimidate anyone or anything instead i was really scared for the community, since as soon as i found the exploit i reported it to rubik instantly due to the fear of my private info and others, really if i was a bad person would i've told sanzu to reset his router? think about it since me and sanzu had some what of a beef i guess, i'm not really such a bad person to just leak 50+ ips of people for literally no reason as it it's illegal and not in my interests, sorry for the trouble and the misunderstanding's i've caused, and honestly the reason i've talked to it so much is because i was proud of finding such a big exploit and i decided to talk about it to friends which i can say was a big fuck up from me i shouldn't have disclosed this exploit to anyone other than rubik and THAT i will take, i understood that i fucked up there, but the doxxing or leaking ips never happened... anyways sorry once again! oh yea i wanted to add some stuff about the screenshots from me in that imgur link, the reason i talked about the exploit is to just tell people that were in my server to be careful while playing titsrp as anybody could've found the same exploit as me, the backdoor comment was just me making a joke (i do not have a backdoor on titsrp, if i did i would've reported it to rubik and get free money lol)-1 points
-
ya I showed no one the ips that's what he's saying because I didn't-1 points
This leaderboard is set to New York/GMT-05:00
