Kill Switch update: Amanda's Letter add-on for The Pig has been Kill Switched due to an issue with incorrect RBT count.

http://dbd.game/killswitch

VPNs are unhealthy.

Big ping and hit validation put together. Do I need to write anything else about already survivor sided game?

«1

Comments

  • Cramps
    Cramps Member Posts: 121

    No it isn't, at all. No physical harm can come from not using a VPN. That's absurd.

  • Pulsar
    Pulsar Member Posts: 23,147

    I mean, probably not.

    I pissed off a booting squad who had decent stuff. That wasn't fun, for sure.

  • StarLost
    StarLost Member Posts: 8,076

    What?

    Why?

    I resorted to making my Steam profile private, because I managed to beat someone smurfing on stream, along with his mates and had a bit of a back-and-forth with them in postgame. That...was an experience.

    I still don't like the idea of someone knowing my IP. Nothing good can come of that.

    I ran a small political/academic channel on YouTube for a few years, and had no less than four attempts to phish or dox me. None were successful, fortunately - but there are some very odd, very bad people on the internet that you wouldn't even want to know your shoe size.

  • Cramps
    Cramps Member Posts: 121

    Your IP address is always puiblic, it's supposed to be public and it's trivially easy to get someone's IP address. It's useless, but easy. IP addresses are not supposed to be private information.


    People using any and every dodgy VPN they find and trusting them, despite many collecting and selling your activity to the highest bidder, is a bigger issue than a random stranger having your IP address. Some of the VPN's I've seen recommended since this whole DDoS wave started do just that. I'd rather a script kiddie trying to DDoS me have my IP address then a dodgy VPN company have access to all of my internet traffic.

    Phishing is a different story altogether and can largely be avoided if people pay more attention to the address bar / links they're clicking.

  • Pulsar
    Pulsar Member Posts: 23,147

    I don't think IP's should be public until there are better protections against DDoS attacks.

    I usually get hit offline at least once a week.

  • Seanzu
    Seanzu Member Posts: 7,525

    Up until recently VPNs only benefitted killers as the hits were based off their connection, survivors have had to put up for years with VPN'ing killers and now everyone has to put up with it because of the lack of security on dead by daylight, I'm sorry that this is frustrating but if survivors can put up with it for years with barely a thread every 6 months over it, you can put up with a few months of it causing EVERYONE issues.

  • Cramps
    Cramps Member Posts: 121
    edited November 2021

    The evidence is in the fact that it's not possible to get a person's physical address from their IP address. At worst you can be DDoS'd - no problem, reset router and you have a new IP. Problem solved.

    Post edited by Gcarrara on
  • Tr1nity
    Tr1nity Member Posts: 5,047

    Yes, also please tell me your IP and service provider.

    Thank you.


    /s

  • Cramps
    Cramps Member Posts: 121

    They have to be public. If your IP address wasn't visible you wouldn't be able to use the internet. You wouldn't hide your address from the mail man and still expect to receive mail.

    Once a week is extremely excessive - really, really excessive. Popular streamers aren't DDoS'd that often so I'd be more curious about your connection. Infact, I don't think I've ever heard of anyone being DDoS'd that much so regularly.

  • Pulsar
    Pulsar Member Posts: 23,147
    edited November 2021

    Well, I only usually against the same 3 or 4 teams. After I play those teams, I get a bunch of random players. In total, per week, I see maybe 90 different players only because of MMR being wack. They recognize me and decide that I don't get to play. It's fun, they also send me messages but I turned those off since they usually just had some variation of "#########" in them.

  • Cramps
    Cramps Member Posts: 121

    Your ISP really should be doing a better job of mitigating DDoS attacks, particularly if it's happening that often. That sounds awful for you to be honest. You probably would benefit from using a reputable VPN in that case, though generally, resetting your router and being assigned a new IP should be enough.

    Whoever is targeting you must be very dedicated, that's quite sad really.

  • Pulsar
    Pulsar Member Posts: 23,147

    It's multiple groups. DBD brings out the worst in people, I think.

    I heard through the internet grapevine (so who knows how reliable it is) that one of the groups who were messing with me tried to hit someone off of a network but they were on a military base. So, understandably, they are in hot water.

  • SunsetSherbet
    SunsetSherbet Member Posts: 1,607
    edited November 2021

    Basically impossible to play late night west coast without most of your team being vpn users from China.

  • Kalinikta
    Kalinikta Member Posts: 709

    You act as if you have any idea what you are talking about, but then make general assumptions on how every single ISP in the world functions. Even dynamic IPs can be reassigned for multiple hours, based on the ISP internal handling of the DHCP protocols. While it is true that for many hard resetting their modem or router can provide a solution as your ISP might assign you a new IP, acting like it is always the case is untruthful.

    Games leaking information such as IPs has been creating the possibility to swat people in the US for decades now. Once again it seems like you have no actual understanding of what people can do.

  • RainehDaze
    RainehDaze Member Posts: 2,695

    Also, depending on where the VPN is in relation to the player and the server the protocol used, it's not going to make any appreciable difference in ping because you have to route through major traffic hubs anyway.

  • PerfectlyPink
    PerfectlyPink Member Posts: 435

    Also, thought I'd mention that I used to have bad internet. Like really damn bad, 500 kbs upload, 10 mbps down, and constant packet loss

    That was nothing but a handicap, no way in hell did it give me any advantage over survivors or killers. If your connection to the killer is #########, then that's on you.

  • Cramps
    Cramps Member Posts: 121

    I do know what I'm talking about. I haven't made a single assumption in my posts. For the majority of people, resetting your router is enough.

    I don't think this is really the place to go into more technical detail regarding IP addresses, how ISP's worldwide function and whether or not IP addresses are reassigned as most of this would be lost on the average user, hence "resetting your router and being assigned a new IP should be enough." Note: I did mention being assigned a new IP, which nullifies your "dynamic IP's can be reassigned" statement. I didn't touch on static IP addresses either which wouldn't change by resetting your router, since most people don't have a static IP. The point was not to give people a full educational breakdown of how ISP's and IP addresses operate. Again, this isn't the place for that.

    IP addresses aren't private, they're public, they're supposed to be public, so saying that they're ever "leaked" is a bit silly - unless you're referring to a leak while using a VPN.

    You cannot "swat" a person using their IP address, that is not possible. So no, games have not been creating the possibility to "swat" people by leaking your IP address for decades. People do this themselves with careless social media posts, as is the case with "Elix", who was "swatted" recently while streaming DBD - incidentally, "Elix" is the only person on this planet who plays DBD and has been verified to have been "swatted".

    Instead of ignorantly telling me what I do or do not know, why don't you tell me why you think I'm wrong?

  • Pulsar
    Pulsar Member Posts: 23,147

    How do you know so much about this?

    Additionally, I know it's a lot to ask, but do you think you could go into a full educational breakdown of this subject? I'm always trying to learn and other than information I've gleaned from those responsible for DDoS attacks, I know precious little on the subject.

    Knowledge on this topic may make it easier to both defend myself and to help others whilst also furthering my own knowledge base. So, in short, I'd be interested.

  • Cramps
    Cramps Member Posts: 121

    I worked in the IT sector for a little over 20 years. I currently run and maintain 3 online stores independently, several servers for games I play and have had my servers DDoS'd more times than I care to remember.

    Your ISP assigns you an IP address. An IP address identifies a specific device and "tells" the router on the network how to find the device which is currently assigned that particular IP address. Geolocation services (IP lookups) show where your IP address enters the internet, in other words, they show the location of wireless provider's data centre. Geolocation services do not and will never show the location of the device that an IP address is assigned to, this is not possible since the actual location of the IP address is the data centre, not the device itself.

    Nobody other than your ISP knows or can see which device is assigned a specific IP address and nobody other than your ISP can see where the device which has been assigned a specific IP address is located.

    Imagine a long street full of houses (devices), you live in one of these houses. Each house is assigned a randomly generated number (IP) in order to receive mail (connect to the internet). However, there are no numbers on any of the doors to these houses. The numbers are all publicly visible, but, they're stored on a large wall 20 miles away at a post office (data centre). The only person who knows which number belongs to which door is your mail man (ISP). Now imagine each number has a tracking device embedded. I want to break into "Pulsar's" house, I know he lives at number 843 and I can trace where the number 843 is located thanks to the embedded tracking device (geolocation service / IP lookup). Now, unless I know which house the number 843 has actually been assigned to, I can't break in to your house. I can find where your house number (IP) is located easily enough and maybe make a guess as to the general radius of where your house may be, but, I can't find out which specific house has been assigned the number 843 unless I go directly to the only person who knows - your mail man (ISP). Sure, I can send you 100,000 letters a day (DDoS) harassing you, but, I will never be able to find out where you're actually located.

    The idea that you can trace a person's location via their IP address is a myth which has existed as long as the internet. Criminals often take advantage of the fact that most people do not really understand what an IP address is and will state that they can do all manner of things if they have your IP address. This has fuelled the myth for a large part.

    I'm not the best at explaining these things to the average person sometimes and things are obviously a little more complicated than my house analogy, but, in a nutshell, this is how IP addresses essentially work.

  • Kalinikta
    Kalinikta Member Posts: 709

    Once again you are assuming that it will be the case while that is based on your ISP and no not each one will provide you with a new one with a reset on your end. They are dynamic IPs because that is what most people have, just because they can be reassigned by a reset doesn't mean they are. You claim no assumptions, yet solely work on a "majority" basis while ignoring a huge amount of people that might be stuck to lease periods, etc. I already indicated that many people can reset, but acting like it is a fool proof fix for all is inaccurate.

    You have no valid evidence that the security breach is not holding such a risk of being swatted, you are assuming it is because it is the only case you know of and without evidence whether it played a part or not. Is it solely done based off a single IP address, no. Yet what other information is in the security breach, what information can be extrapolated from it and all that. It wouldn't be the first time it is possible based on a leak in a game and most likely not the last either. Once again all you have are your assumptions and pre-judgement that it has nothing to do with DbD. You don't have the full picture and making statements that people are not at risk based on no evidence, pure assumptions and speculations... while it is a known fact that there is a security risk which provides personal information.

  • StarLost
    StarLost Member Posts: 8,076
  • dugman
    dugman Member Posts: 9,714

    At least to my more limited understanding, IP addresses aren’t necessarily “public” in the sense that your IP address only needs to be shared between you and the server you are connecting to. For peer to peer connections, yes, the other peer needs to know an IP address. But the Steam Networking API, for example, allows for your IP address to be shared to a relay instead of directly to another peer, so in that case your IP address isn’t publicly available.

    So while IP addresses have to be shared somehow, they don’t need to be shared with the public at large, only with whatever is relaying it to the server or peers you connect to. Of course connecting to a relay might impact connection speed, which can be a consideration in an action oriented multiplayer game like DbD and may be why they just have peer to peer connections.


    P.S. I have no opinion one way or another on alleged SWAT complaints. DDOS is definitely an issue though.

  • Ripley
    Ripley Member Posts: 867

    Resetting router in my country does not give you a new IP. Another thing to consider is playing in a region where the state is anti-LGBT and like to monitor everything their citizens do online.

  • Cramps
    Cramps Member Posts: 121
    edited November 2021

    You are clearly only here to be pedantic and argue with strangers. Leave that childish nonsense on Reddit, please.

    At no point have I stated that resetting your router will immediately reset every single person's IP address on this planet - that is obviously not the case and there are many many other factors. But, I will say it one more time, since you are not paying attention, this is not a technical support website, this is a forum for a video game - it is not really the place to go into heavy detail in regards to how ISP's operate and how the internet as a whole works. You are being utterly silly for no apparent reason. Resetting your router IS sufficient for the vast majority of people - if it doesn't work for someone because they're reassigned an IP, or they have a static IP, then guess what? They'll figure that out pretty much immediately as the DDoS attacks continue. So again, no problem. Contact your ISP directly and they can assign you a new IP - not an issue.

    As I've already stated, the evidence is in the fact that you cannot get any personal information, from a person, based on their IP address - you cannot gain any information on a person other than who their ISP is and roughly where their ISP is located.

    Whoever swatted that person recently 100% did not do it using an IP address, this is a undisputable fact. It is not "the only case I know of", it is the only verified case in existence regarding this game. Please, just stop.

    I'm not obliged to post there, I don't have to offer anyone solutions to DDoS attacks and I do not have to help people understand how IP addresses work, I chose to voluntarily - I am not obliged to cover all bases as though I'm being employed to address this issue. If my post helps one single person, then it was worth it. If you wish to pay me for my time and for a more thorough explanation, then you're free to do so and I will be far more thorough. Otherwise, I will post as an average user, just like you.

    That said, the second anyone starts getting too technical on forums like these, the average user tends to switch off. I make a conscious effort not to use too much "technical jargon" and overcomplicate matters for this very reason.

    It is not a known fact that there is a security breach which provides personal information - you are being disingenuous here. Your IP address is NOT personal information. It is public. What personal information do you have tied to your DBD account which could possibly be leaked during gameplay?

    Again, I am not making any assumptions in any of my posts.

    Post edited by Cramps on
  • Cramps
    Cramps Member Posts: 121

    It doesn't give me a new IP either. I'm aware that it isn't a "fix all" solution, but it will help the majority. In the case of state monitoring a VPN absolutely makes sense, but, that's another issue.

  • Cramps
    Cramps Member Posts: 121
    edited November 2021

    You're right, Steam offers a relay on their network if games are configured to use the Steam Networking API (this is their own DDoS/privacy protection which is offered because your IP address is public) - DBD doesn't use the Steam Networking API and hasn't used peer to peer connections since 2019. Your IP address is still "public" in the sense that it's visible to whatever server/s you're connecting to when online.

    I suspect that BHVR don't utilise the Steam Networking API due to their coding and/or the fact that it was not available back when this game was released in 2016.

  • Ecstasy
    Ecstasy Member Posts: 426

    That's... that's that's just not how evidence works though. O_o

    You're reversing the burden of proof here in a process that validates literally any supposition imaginable. Like, equally true: "you have no evidence that they DON'T have definitive evidence of all the facts!" and now you've got to prove they don't have all sorts of video evidence and wire-taps and an informant we just don't know about yet...

    The thing is we're not even talking about burden of proof in that typical realm concerning something we know that happens which maybe happened or maybe didn't happen, where there's merely an absence of evidence one way or the other yet, giving weight to some "well lets just wait and see" stance.

    If the above comparison isn't clear, I guess consider the example of XYZ saying they got swatted at all. Unless it's something happening on stream, then you usually can't KNOW whether XYZ was swatted even when they say so--however--we do know that's a thing that happens in this world. It's that lesser question of "did this happen" rather than "does/could/would this happen," which much more readily invites that good-faith presumption.

    For a historical example of where good-faith becomes good-grief: when a toddler tells you they were abused under the batcave as witches flew through the air, it's not a violation of "believe victims!" to think "wait--uh, what?" about the basic proposition being totally bonkers. We're not quite at that level here, but we're definitely in that realm of implausible unless proven otherwise.

    There's simply zero reason to believe that this one SWAT claim has anything to do with the other attacks, when (1) we're not seeing the same elsewhere with people who've been compromised, (2) there's numerous other places/means of exposure that could have gotten them SWATTED separately, and (3) the sort of information exposed/exposable here shouldn't even make that POSSIBLE on its own.

    It doesn't make any sense. For all we know, sure, maybe it's the same perpetrators out there doing both things. Nevertheless, we've got absolutely zero reason to think this game will get you--or anyone else--SWATTED, and we've got every reason in the world to DOUBT THAT.

    Don't sideline the facts. It's far more likely the initial assumption about how they got swatted was totally off-base.

    This is down to simple fear-mongering now. It really is.


    In the meantime...

    [[[ BRIGHT NEON AD:: DANGER! YOUR COMPUTER IS BROADCASTING AN IP ADDRESS!!! CLICK HERE TO FIX IT NOW! ]]]

  • Cramps
    Cramps Member Posts: 121

    Talk about ignorance. One person has been "swatted" in Las Vegas, I've said this numerous times, but, mods here keep editing my posts and removing it, I suspect that the same will happen to this one.

    The one person who was swatted, has all of their personal information posted on social networks. I found it in ten minutes, despite them being a drag queen and using a pseudonym online. It DID NOT happen because that particular streamer was DDoS'd and had their IP leaked. You are wrong, I'm afraid.

  • Cramps
    Cramps Member Posts: 121

    An IP address does not and can not give your address. Your IP is not linked to your physical location in any way.

  • Pulsar
    Pulsar Member Posts: 23,147
  • Cramps
    Cramps Member Posts: 121

    Yes. The ISP knows which IP is assigned to which specific device and where that device is located, nobody other than your ISP can see this information though.

  • Pulsar
    Pulsar Member Posts: 23,147

    I see.

    So the only way to get an address from an IP is to find a security flaw within the ISP. Which is...unlikely.

  • Kalinikta
    Kalinikta Member Posts: 709
    edited November 2021

    Once again, your majority statements when considering this is a game that is played world wide is simply not factually correct. Just dumbing down the inner workings of ISPs globally to suit your narrative and then have the audacity to state that no assumptions are made. You are making assumptions based on a sense of majority. You are giving information freely, but you aren't being 100 accurate and yes I can call you out on that.

    If you want to tell people that just reset the router, at least include that it is not a 100% result and that it is important to check afterwards. You can give out free information all you want, but less knowledgeable people might just take your word for it. You aren't tech support, but if you want to act like it do it right.

    @Ecstasy You can act all you have the right to doubt it, sure you do. Yet to be able to make a blatant claim as:

    There is an issue in the encryption of ones data and just downplaying it based on one known parameter that is being used. Unless you have solid evidence or knowledge of what exactly is the security risk; you have no idea whether or not personal data in included and guess what if someone was swatted during this time period after being targeted... if they are the same people they might have used information to extrapolate what they needed.

    I am not sidelining the facts, the only fact that we know is that there is a security risk which placed people at risk with unknown information being extractable. It is not a toddler telling me about bat cave, it is more like someone is waving a gun around and one person was shot around that time. Yet now you are telling me the gun doesn't have bullets? Is it better to be cautious until more information is provided or just assume it is alright?

    Thank god the country I live in has better law enforcement, that I don't even require to consider such a threat seriously.

    I am done with this conversation, if people want to act as if they are know it alls and experts on what is and isn't in the security leak to advice people what to worry about or not... be my guest. The fact is that our IPs should have been encrypted to begin with, so who the hell knows what other information is sent in those exact packages. If you live in a country where swatting is an actual threat, I would advise people to maybe not play the game and if they do use a VPN - at least until a patch comes out.

  • Cramps
    Cramps Member Posts: 121

    I'm not employed by BHVR. It's not my job to cover all bases in regards to helping others avoid DDoS attacks. My advice will help the majority, which is enough of a reason to share it. Once again, your post exists solely to argue online while providing no actual benefit to anyone reading it. If you have anything additional to add to my posts, why don't you do that instead of being pedantic and arguing that I'm not going into enough detail according to your standards? The majority of what you're adding is common sense anyway. If you're resetting your router because you're being DDoS'd with the aim being to change your IP address, who wouldn't confirm it afterwards? And who wouldn't notice the DDoS attack/s continue and put two and two together to figure out that they must still have the same IP address? Pedantic, as I said.

    What assumption exactly are you claiming that I'm making here? Resetting your router will assign most users with a dynamic IP address a new one, this isn't an assumption, it's a fact. "Majority" does not mean "100%". I never said that "it is a 100% result". I've specifically stated numerous times that it will give the intended result for the MAJORITY, so I don't feel the need to clarify anything. If someone is confused between the definitions of "majority" versus "100%" then that's on them.

    Do you have a shred of evidence that an IP address leak was in any way responsible for someone being swatted? (I know you don't, because it's not possible) Anything at all?

    What "personal information" are you submitting to BHVR's servers that could link to your address and why are you doing it? More importantly, how are you submitting any personal information which could lead to tracking your location to BHVR's servers at all?

    You live in a country that has better law enforcement than where? (this was an odd statement to make) Why do you think "better law enforcement" means anything in this regard?

    Your advice is scaremongering nonsense. Play the game if you want to, you have nothing to worry about by doing so other than DDoS attacks, which are nothing more than a nuisance and can be easily rectified/avoided.

    You have not added anything valid or meaningful to this discussion so it is probably best that you're done with it.

    Enjoy the rest of your day.

  • Kalinikta
    Kalinikta Member Posts: 709

    And what use was this post, you complain about argumentative without a point... yet you are just as guilty of it.

    The fact is that even if a slimmer of information can be linked between the city you live in and an indication of who you are, the majority of people can be found that way. We are far less 'anonymous' with very little and yes you provided information to BHVR. Once again you don't know what is in these packages, acting like you do and telling people it is impossible is just an assumption.

    Everyone should make a choice for themselves, yet you stated to me that you didn't make assumptions and yes you do. You downplay the series of events that happened to someone in the public eye, because they are easier to track down and therefore you state are unrelated. You claim I have to prove a correlation? They were DDosed and eventually Swatted in that order, people should assess that situation on their own merits and not through your assumptions. If people are worried of pure DDOS attacks, then we agree it is annoying and yet able to be solved with max a couple of hours. That is the reality.

    I am not fearmongering, I am just not filling in the narrative for others based on assumptions without any backing. If swatting is a concern for someone they should be extra careful, based on the country you live in there is a big difference in how much that would be a threat. It is better to be safe than sorry these are not joking matters.

  • Cramps
    Cramps Member Posts: 121
    edited November 2021

    The only thing I'm guilty of is addressing misinformation you're posting and statements you're incorrectly attributing to me. I have no interest in arguing with you.

    There is no guarantee that an IP lookup would reveal what city you're in at all - it's that vague and useless as an identifier. Different Geolocation services pull their information from different databases too, so you may well look up an IP using one service and get one location, then type the same IP address into another geolocation service and get a completely different location. Nobody can be found using their IP address, I have stated this enough times, you cannot argue with it as it is not my opinion, it is a fact.

    You said: "yes you provided information to BHVR. Once again you don't know what is in these packages, acting like you do and telling people it is impossible is just an assumption." - What are you even talking about here? Packages? I asked YOU what information you're submitting to BHVR's servers that is personal. I didn't state that I haven't submitted anything to BHVR at all. I have linked my Steam account to their servers, for example, so that wouldn't be true, therefore I wouldn't make that claim in the first place.

    I didn't ask you to prove a correlation. I asked if you have any evidence at all that an IP leak led to someone being swatted - the answer is, you don't. Nobody does, because it's not possible. Nobody needed that particular streamers IP address to find out their location. They publish it on all of their social pages. It's already public. That said, if I kick you and then 24 hours later you fall into a river, does that mean that you fell into that river because I kicked you? Do you think that's proof of correlation? There is no proof that one had anything to do with the other, just because one thing happened and then another. Now YOU are making assumptions.

    I could give you my IP address, my city, even my name and you wouldn't be able to find out a thing about me, anywhere. Do you know why? Because I don't publish personal information online and never have. I don't exist online in any identifiable manner. Like I said previously, if people were more careful about what information they share publicly then things like "swatting" wouldn't happen in the manner it has done here. All I needed to find out everything about the person who was recently swatted was an image they posted and two words of text they posted, both to their own social media account. This is careless on the part of that streamer if they want privacy.

    Swatting based on an IP address alone is not a concern for anyone unless they're misinformed.

  • Kalinikta
    Kalinikta Member Posts: 709
    edited November 2021

    I haven't said that swatting only on IP is a concern. Yet you are undermining the experience of someone else by attributing it to external factors, while this is unknown and you don't know it to not be correlated just in the same way I don't know if it is. Act as if you know exactly what is part of this security breach and have the insider information needed, but you don't.

    I have not spread misinformation, you are blatantly assuming that there is minor risk. Just because you understand a single parameter as an IP isn't a huge risk, who states that this is the only aspect compromised.

    You can act like a security expert all you want, but unless you know what information is included in the breach you cannot guarantee anyone's safety. Just because you don't have the information out there, you claim to care about a majority of people... guess what they do have information out there! I am fairly safe as well, but that doesn't mean that I can claim everyone else is as well.

  • Pulsar
    Pulsar Member Posts: 23,147

    I've done my own external research, there is no way to get an address from an IP.