Hello,
First, thank you @
for taking the time to look into this.
We tried to ignore as much as we could this individual called 'ch3hp', since he's doing nothing but seeking for attention. But now, after all the attacks and efforts he made trying to put Rubinum project in a bad light, he also started spreading ridiculous fake news.
Maybe he ran out of methods and now he's literally trying everything.
I'm not sure what Rubinum has done to him that he hates it so much, may be because we gave a negative answer to all his blackmailing offers. (Not sure if you guys are aware, but I understood he is known for blackmailing M2 server owners to give him money in exchange for stopping his attacks/DDoS)
Therefore, he posted a new video in youtube called "Rubinum - BTC Mining Exposed", claiming that we are mining Bitcoins using our players' machines.
The methods he used and the proofs he brought in this video are so ridiculous that imho this video is actually more exposing him as being a 100% untrustworthy, lying and manipulative individual, than exposing anything bad regarding Rubinum.
Here is the video he posted:
First of all, we assure you that we never put something malicious in our client. We are aware that short time ago there was a fuss here in the forums regarding players' privacy, and we understand that players became more paranoiac because of this. But if someone is unaware of their players' privacy, this doesn't mean everyone is unaware.
Next, I will explain you what he does in his video:
In the first part, he basically opens the client and accuses the fact that the client is sending a packet to the server even if he does not try to login with user/pass.
This process is normal for any Metin2 client; the metin2 client is simply sending the "Channel Status Check Request", in which it simply requests the status of the channels so it can update statuses with OFF/NORM/BUSY/FULL.
Then he accuses the client that it doesn't use the standard Auth '3-way handshake' with the server, but he didn't even insert his user/pass in order to connect to the auth-server. Then he continues to analyze the "Channel Status Check Request" packet which doesn't make any sense.
In the second part, he explores the `rbclient.exe` process with Process Hacker and finds a string called "Bitcoin Wallet [TREZOR]" inside the process.
First let me explain one essential thing: when the client is launched, there are 2 processes started, the main one which is the game itself, and an instance of CEF (Chromium Embedded Framework). This CEF is basically the in-game browser engine, it runs in an additional process like in any application which uses it (Steam, Epic Games Launcher, even Metin2 Official).
When he scanned strings inside the process, he either searched only inside the CEF process, or in both game process + CEF process.
This string "Bitcoin Wallet [TREZOR]" can be found in any `libcef.dll`, the library needed in order to run the CEF inside your app.
Anyone can just open this file `libcef.dll` with even Notepad++ and search by `bitcoin` keyword and it will find this string.
And as @
mentioned, this is just an enumeration of hardware devices, but these are not ours nor related to Rubinum in any way. You can just download the official Metin2 (Gameforge) and check their `libcef.dll` and you will find the same enumeration with hardware. Also in Steam and I believe any CEF implementation.
This is the Metin2 (Gameforge) libcef.dll for example:
So my conclusion is similar to @
. It's obvious that the 'ch3hp' guy is just trying to put the project in a bad light.
You guys can see here how hard he tries to harm Rubinum by how many videos he uploaded on his YT channel in the last 2 days:
My question is: why would he put so much effort into this?
- just for attention?
- or maybe someone's paying him, who knows.
But with this video he just exposed himself as being full of cr*p.
@
, chill out, nobody is mining anything on your computer. By the way, in your screenshot from here (
) you're stating that Rubinum client is using 40% of your GPU, but that's false. The parent of the Rubinum process tree (the one with 75.7 MB RAM) just represents the total values from the 2 sub-processes. So basically it consumes 17.9% + 0% = 17.9% GPU.
Best regards,
Lawliet
