Dedimania forum

Feel free to express yourself on your favorite dedicated related tool.

You are not logged in.

#1 2024-12-05 22:35:59

gf.d
barret907k
Member
Registered: 2021-08-02
Posts: 11

the "upc1955" situation

as mentioned prior:

barret907k wrote:

not a cheater per-se, more of a record spammer here:

logins: papy99, gtx599, papy57, dha57, liege998, wcup484, unepausecafe2, unepausecafe, kb357, vicool, wb_xyz.
uids: too many to list, im afraid. also worth mentioning that they are driven both in rounds and in timeattack.

some of the more recent examples include yT6HEwkhIJ0efYyez7r0QpfGJ2b, Qjejocvu8VNVMQUqAYmdf9I09v7 and XK43GpQg9mOkfNIi_ymHOBo6A95 (all driven yesterday). in fact, going as far back as 2016/17, this behaviour can already be noticed, e.g.: wzWSKk6T3taGx2OJfGET6HuPahi and 8DSy7R7OzCVxuQyZiPo_b48G_88.

thought that ought to be reported after seeing this thread and this one.

edit: after a quick check, it appears logins slowplayer56, liege996, kw505, adh52 and kwup55 could also be related to this, as seen on 3Dun8q3n1akaG5S4Sp8m56yGBk8 and 1TWxuQwl5n0cetlaYptULeXvCzh.

in total, thats over 100k entries presumably driven by one person (not taking into account the logins where the nickname is different). probably one of the reasons for abnormal inflation of the coast records amount as seen here.

recently, the everpresence of that user in dedimania was questioned in a tmuf-related discord server. one of the replies stated: "iirc he drives a ton of times on various accounts because dedimania used to have a rule that in order to keep the database smaller maps without full 30 records have their times stored only temporarily, and the less replays there are the less time it takes to trigger the purge".

sounds like one way to abuse the system, if you ask me.

as xymph requested this be moved to a separate thread, this could now be discussed here.

Offline

#2 2024-12-07 12:58:47

Xymph
xymph
Administrator
Registered: 2009-05-26
Posts: 2006
Website

Re: the "upc1955" situation

This is a complex situation, and I have little time for TM anymore in recent years, so it took a while to get around to it. Yesterday I collected some stats, on HTML pages because BBCode doesn't do tables.

The servers that appear to be (historically/currently) involved are the following: https://www.gamers.org/tmf/1955-servers.html
The server comment on some of them links to these Dedi rules (archived as the site is dead), and on some other servers to the primary post of them. This confirms the motivation quoted by barret907k. Btw, those rules were relaxed in 2016, 2018/2021, and 2024.
All servers are hosted at the same IP at OVH, France (along with a lot of other servers, so that doesn't mean much).

The logins you mentioned are the following: https://www.gamers.org/tmf/1955-logins.html
The ID column is Nadeo's player id from their web services API, which is auto-incremental so it roughly indicates the age of each login; recently created logins get IDs in the 18.4M range. Btw, kwup55 doesn't exist, and cwup55 was probably meant.

Given the much lower participation and their use having ended in 2016, I doubt adh52 and cwup55 are involved.
The use of liege996 (with an unrelated nick) ended in 2021 but it is probably related because of its login likeness to liege998. All logins with upc*bye*1995 in the nicks are obviously involved in the scheme, and slowplayer56 & kw505 plausibly too.

But while previous track spamming by near-identical nicks happened on Stadium with Nations accounts, all these are United accounts (obviously, for driving on Coast), and my first hesitation is that I find it unlikely that one person purchased a dozen+ United licenses. That's pretty nuts.

The other thing I find puzzling is the timestamps of records by these logins often being very close together on the example tracks you listed. E.g. on Qjejocvu8VNVMQUqAYmdf9I09v7 in Rounds: 01:33:21, 01:35:10 and 01:36:47; 01:42:57 and 01:44:39; all on server vicool61 with XAseco.

The Dedi API method ChallengeRaceTimes does not use exact timestamps for the actual finishes on the server, but instead the master server uses the timestamp of the ChallengeRaceTimes invocation to assign to the records included in that call, and stores that in the database. That explains why often multiple records have the same timestamp. Like "2024-11-28 20:44:24" and "2024-12-03 20:13:49" here. But a track normally runs for about 5 minutes (TimeAttackLimit) or longer (until RoundsPointsLimit is reached). Having the record timestamps much closer together (within 2 minutes) means that the server operator must have performed a next/restart track after one finish to invoke ChallengeRaceTimes sooner. And that many many times; that is very nutty too.

Can a single person keep doing all that for many years, or does it involve multiple people?

Thoughts, anyone?

redshadow____ wrote:

I want to add on that the offending player made multiple (10+) alt accounts and got banned some time ago.

Banned from where, TMX? Can you share more information about this?

Offline

#3 2024-12-07 15:54:42

gf.d
barret907k
Member
Registered: 2021-08-02
Posts: 11

Re: the "upc1955" situation

xymph wrote:

But while previous track spamming by near-identical nicks happened on Stadium with Nations accounts, all these are United accounts (obviously, for driving on Coast), and my first hesitation is that I find it unlikely that one person purchased a dozen+ United licenses. That's pretty nuts.

i found that weird, too. however, to my knowledge, some united players tend to have multiple tmuf accounts to supply themselves with coppers, primarily for solomode, though. it could also be possible that some of the keys for those logins were bought during a steam sale, unfortunately, the chart data is very limited as seen here and it is difficult to prove whether those account keys were bought during a sale, since IDs do not provide a specific timeframe, really.

seeing how most (all?) of the servers are 70k+ LP, it is not unreasonable to assume that they were created for some sort of "copper farming", if you will. the top donators on all the servers are also "upcbye1955", sometimes reaching 100k+ coppers on several accounts.

xymph wrote:

But a track normally runs for about 5 minutes (TimeAttackLimit) or longer (until RoundsPointsLimit is reached). Having the record timestamps much closer together (within 2 minutes) means that the server operator must have performed a next/restart track after one finish to invoke ChallengeRaceTimes sooner. And that many many times; that is very nutty too.

as checked (had to ask a friend of mine, as i do not have 70k+ LP), all the servers run a somewhat normal setup for both TA and Rounds. the TA servers have a timelimit of 5 minutes, and the Rounds servers have a pointlimit of 100, with the winner getting 30 points per round. at first, i personally assumed that either the pointlimit was set to a very low value, or that the points for first place far exceeded the limit, thus making it skip/restart instantly. admittedly, that is not the case, and an admin/operator must have gotten involved with skipping/restarting the maps continuously after each round, pretty much. the operator list is also unavailable to me as a normal player on any of those servers, but the masteradmin on all of them is one of the "upcbye1955" accounts. i would assume that other similar logins have some sort of admin privilege on the servers, though.

xymph wrote:

Can a single person keep doing all that for many years, or does it involve multiple people?

this is a really tough call to make. i have personally never seen anything like this before. usually, such record spammers take down just one or two maps, but over 10 thousands? the dedication is quite impressive, should it be just one person.

most of the evidence, however, points to a "yes", but it is still not definitive without ip-logs of some sort. considering that person (or those people) really only play(s) on one server which is their own, we will never know for a fact. the only real proof is the tmx situation, which is what redshadow has described.

xymph wrote:

Banned from where, TMX? Can you share more information about this?

on behalf of owly (who is also a tmuf-x moderator):

problem is that he also multi accounted on tmx and tried to claim that the other accounts are being used by his friends

i could try to get him on here to comment on this situation in more detail, if needed.

Offline

#4 2024-12-07 16:46:47

Xymph
xymph
Administrator
Registered: 2009-05-26
Posts: 2006
Website

Re: the "upc1955" situation

Thanks for the feedback. Please do.
Is there a correlation between the (banned) TMX accounts and the TMUF logins?

Offline

#5 2024-12-08 01:31:19

*?a???? | Detective
redshadow____
New member
Registered: 2024-12-01
Posts: 3

Re: the "upc1955" situation

Hey again,

I'll get in contact with the TMX Crew about this. Unfortunately I am not allowed to send more information than that. If you want more details, Dedimania admins are welcome to contact upc1955 themselves. Sorry!

I'll check back here soon, I hope that is enough. smile

Last edited by redshadow____ (2024-12-08 01:31:47)

Offline

#6 2024-12-12 17:20:30

Xymph
xymph
Administrator
Registered: 2009-05-26
Posts: 2006
Website

Re: the "upc1955" situation

barret907k wrote:

i could try to get him on here to comment on this situation in more detail, if needed.

I followed up with: "Please do." Any luck, then?

Offline

#7 2024-12-13 14:25:57

gf.d
barret907k
Member
Registered: 2021-08-02
Posts: 11

Re: the "upc1955" situation

xymph wrote:

Any luck, then?

unfortunately not, i messaged the guy (owly) right away. to my surprise he refused to provide any assistance (i personally found it weird because his post elsewhere prompted me to post here), stating that since "the records aren't cheated, there's no point of removing them". he's also shared that it is possible that it could be "a group of LAN players", which could explain the IP match (i still doubt that's the case though, and either way, why would somebody create 10+ tmx accounts with similar names in that case). that's when i messaged redshadow instead, and his response is what you can see just above.

i don't know anything about how they handle the stuff on tmx behind the scenes, but it seems they consider this issue to be of no importance, despite it clearly being somewhat against the dedimania rules i believe. i was told that they'll contact eyebo (the site lead) to get more info out publicly, but again, no idea if eyebo is willing to greenlight this.

Offline

Board footer

Powered by PunBB
© Copyright 2002–2005 Rickard Andersson