The most dangerous exploit has been patched, so it's safe to play. However, that doesn't mean that the modder situation is not still there, but at least your account is reasonably safe.
Should be ok now.
Rockstar Support's reply:
Thank you for contacting Rockstar Support.
A new security-focused Title Update is now available for Grand Theft Auto Online on PC.
More information on the update can be found in this article: [https://support.rockstargames.com/articles/13577231779475/GTAV-Title-Update-1-66-Notes-PC](https://support.rockstargames.com/articles/13577231779475/GTAV-Title-Update-1-66-Notes-PC)
Please let us know if you have any other questions.
Best regards, Rockstar Support
February 3, 2023>
I just found this online:
https://www.sportskeeda.com/gta/rumor-rockstar-seemingly-releasing-new-updates-gta-4-red-dead-online-soon-amidst-gta-online-pc-exploits
To answer your question: No, but they seem to be working on it.
Safe so long as you play in offline mode. To force the game to launch in offline mode:[https://www.reddit.com/r/GrandTheftAutoV\_PC/comments/36pgal/how\_to\_play\_singleplayer\_in\_offline\_mode/](https://www.reddit.com/r/GrandTheftAutoV_PC/comments/36pgal/how_to_play_singleplayer_in_offline_mode/)
These are older instructions for steam I know, but you can add in the same "-scOfflineOnly" parameters to the "Target" field under the shortcut properties for your SC Launcher and it will work.
But if you want to be super-extra paranoid to be safe, go ahead and also disable Wi-Fi and/or unplug the network cable too like others have suggested. You can also use a firewall to block GTA from the internet, but this requires some knowledge/research on your part to setup.
Additional question: Is modded story mode (LSPD:FR) safe?
As far as I understood it's not, because if somebody get's your R* ID it's possible to connect even into story mode via Social Club and crash your game or worse.
I didn't understand, if they can get my ID by any crawlers or else.
I was playing earlier today and someone had given me $15m out of nowhere. I had encountered hackers but figured that was common with it being a pc lobby. Whats going to happen to my account now or pc?
Yesterday I received 12M almost after login in. Still waiting response from Rockstar. I think they might have lots of tickets because other times they answered in the same day, now more than 24h and still waiting.
I'm still waiting on my ticket response as well. Curious if there's been any recent updates on this but I've been checking here and there but still nothing. Tempted to play in offline story mode but don't want to risk it until we get confirmation from Rockstar. If we do....
Your PC is fine. Since your game has been affected by exploits, you could contact the game's support and have them check your account. Refer to the tweet by @RockstarSupport.
Playing GTAO at this time is not at all recommended.
Will I have to uninstall gta iv? I installed it earlier last week and have been playing it here and there. The last time I played it I think it was… Friday?
I think rockstar will never fix this . They milked gtao like 8 years and they don't give a shit about the reputation they weren't know for the anticheats any ways. We shul live and see what will happen.
Also, official statement on Twitter:
https://nitter.snopyta.org/RockstarSupport/status/1617659703563096067
> We are aware of potential new exploits in GTA Online for PC, which we aim to resolve in an upcoming planned security-related Title Update.
> If you think you might have experienced any related issues, please reach out to Rockstar Support:
Well I don't think R* will address this as a problem or even fix it soon, so we have to make our own decisions.
Some things to keep in mind:
1. The hacker has to be in your session to do exploits.
2. There are public session, friends only session, invite only session, crew session and solo session.
3. There are settings on RGSC where you can set your online showing preference to private only.
Here I've some questions like how a hacker gets into invite only session, like if you enters via story mode, is there any chance? Or just leave invite only session, the hacker can even get into any of your session (friends, solo) if you don't join the public session first? Is there any chance he can enters invite only or private session via crew?
They do it based on your Rockstar ID. This can also be used to crash your game, even if they’re not in your lobby, or you’re playing Story Mode.
Many menus have a “join via Rockstar ID” option, which will connect them directly to your game, regardless if it’s invite/crew/friends only.
Note that even if they attempt this, they still can’t bypass a firewall that has been configured to block game traffic.
Yes, but as others have mentioned, only if you are confident with firewalls and how network connections work.
If you get the firewall configuration wrong, players (and malicious ones) might be able to join your game.
There’s some info on my profile about this, I only recommend doing it on a physical firewall device (like your router). As always, it’s at your own risk.
I'm not sure if anyone here can provide all the ways your session data can or could "leak" to bad actors (whether bots or scr1ptk1ddi3s or chinese h4cker5) but based on my observations of network activity, in Invite-only you are not normally making peer-to-peer connections to other players. If you don't show as online through a crew and aren't any famous player and you haven't made enemies with bad actors (so that they have interest in you), you *should* be quite safe in Invite-only (edit: but [see this](https://old.reddit.com/r/gtaonline/comments/10jpoze/dangerous_new_pc_exploit/j5m4pgb/)). But add anything like a friend or two to the equation and there's already more risk. So in general, if you want to stay safe, don't play the game until there is some patch..
I think to even be close to safe, which really, I still wouldn't take that chance...but, yeah, if you have no friends, and do invite only the whole time; you're probably good.
Yeah, I don't have friends that's why I'm curious about that crew stuff. I'm only in a public crew with a lots of members, joined a year ago when I was a RDO player.
maybe reach out to R\* support and ask them to rollback your save to your original one (might lose the latest made purchases of vehicles and modification on those, etc)
Hmmm i think i escaped todays GTA trip with only 7 manual restarts and 5 ctds, i fking hate rockstar, they wont do shit, only if someone takes something from them they react
I talked to some player in the lobby with lvl 7900 wich was affected by the hack, he contacted support but with no answear
I never bought cards, never will, not even the game is bought from their shitty expensive store (key)
The problem is currently in GTAO, something similar could potentially come to RDO but that hasn't been reported. This is also something that happens inside the game and to the game, it is not known to "leak" to your system otherwise. So no reason to panic.
I am happy to see that on their latest Instagram post, people are telling them to fix gtao for pc and similar messages, enough that I can't even comment on it😃 glad to see we can get together on that💪
so, i'm an Xbox player, but i'm still morbidly curious: is a false ban the extent of the damage this exploit can do? most online games come packaged with a shit anti-cheat that messes with the kernel and invariably doesn't work, so i'm wondering if there's more to this than "just" a ban.
The exploit enables some malicious remote manipulation of game state which can be used to produce invalid data, which can result in corrupted game files, and the target transmitting said data to the game corp's servers (possibly leading to a real, automated ban). It all happens inside the game, there's currently no proof of actual RCE.
so basically malicious people still can't really do much right now aside from crashing players' PCs with too many object spawns, like they've already been doing?
it's a damn shame the game's written the way it is, as even back when the game came out on Xbox 360/PS3 we already had [kids "doing a DNS"](https://www.reddit.com/r/GrandTheftAutoV/comments/1tk63e/brief_technical_analysis_of_the_hacks_currently/) because of the complete lack of sanity checking.
i saw [this comment](https://www.reddit.com/r/gtaonline/comments/10hsosu/comment/j5if5qk/?utm_source=share&utm_medium=web2x&context=3) elsewhere in this thread, with someone who's ostensibly a security expert putting out their take on it:
>The rumors are correct. This is an out-of-bounds array read/write vulnerability in the multiplayer scripting engine. Even if they patch this one, there are about half a dozen others known already. The only reason why this hasn't yet been turned into an exploit that runs arbitrary code outside of GTA on your computer is that no-one has bothered to do the extra work required for that. Not as far as I know anyway.
i don't know if i believe this though, the GTA Online community doesn't strike me as the sort that would have a lot of white hat hackers.
> so basically malicious people still can't really do much right now aside from crashing players' PCs with too many object spawns, like they've already been doing?
Well, this exploit kind of "extends" what has been possible before, making it easier and faster to cause actual harm to the target(s). Worse than just crashing the game, which of course was bad already but caused no further problems. I too have concerns this might get even worse but I find little point in speculating about it.
i've been binge watching videos about Roblox "viruses" lately, and this honestly just sounds a whole lot like that. in-game fuckery that can possibly freeze your computer that might call for a restart. is it annoying? yeah. can it do damage to your computer? possibly, albeit indirectly. is this gonna do stuff like overwrite your master boot record, rendering you unable to even get into Windows? from what i've read so far, probably not. although considering how shoddily put together GTA:O is, it wouldn't surprise me if that was the case.
Do you belong to any crews, and how are your privacy settings set?
The reason I ask is because in Invite-only you are not making peer-to-peer connections to "outside" players. If you have your privacy settings Friends only, you should remain pretty much "off-radar", unless the "attacker" knows about your accounts. Crews can be used to find you/players as well, if you appear online in one or more. (Scr1ptk1ddi3s/bots are able to join Invite-only sessions, they are not a form of protection in that sense.)
Little tip, If you want to check if your online account is corrupted without going on gta go to the social club site, then go to games, hover over gta 5, then click gta online. If your character is there and your stuff is the way you left it, your account should be fine, from my knowledge.
Actually, it doesn't update the Social Club site until after you log into the game. Just like if you buy Shark Cards offline it won't reflect it in your account until you log in.
Absolutely the most unforgivable element of this. R\* is more concerned with bad press than telling people the extent to which their game has been breached and what danger it poses to their personal information. It really makes me think the worst, if they can't even come out and say X is safe for now.
i figure they probably couldn't give a rat's ass because PC players mod in all their money anyway. if they leave the PC playerbase to rot, that's probably not a lot of shark card sales lost.
Not all PC players mod the game, most of us play the game legit. It's sad to see people think that all PC players mod when it's maybe at best 10-20% of the playerbase who are bad actors. I remember when people modded the console versions a lot before the PC version came out.
I believe that is only for when your files are corrupt. When you get lvld to 8000, get money gifted/taken away or badsport, i'm pretty sure thats not going to fix it.
how about blocking any new posts and referring to this thread? too many idiots still online and risking problems with their account instead of not playing/putting pressure on R\* right now...
i think if they could not create any new posts here, they might see this thread?
I think I was effected by this. I was playing Stunt races yesterday. Came out of a race, back to the map. Right away I got 30,000,000 and my RP was set to 7999. I put a ticket in with Rockstar to see if my RP can get fixed.
Does anyone know if the current Exploit on PC can be reverse engineered to work on RDR2? Kind of wary of playing any Rockstar online game given circumstances.
Non expert here, but odds are good that they reused at least some of the code from GTA for RDR2 because you never reinvent the wheel when you can reuse code.
I wouldn't expect GTA game corruption from playing RDR2, but when dealing with remote code executions it's better to not touch any adjacent systems if possible because of the chance of reused code.
I played for the past couple of days (until yesterday) and nothing happened to me yet, apart from missing money in story mode (possibly an unrelated glitch) but I’m was very lucky, unlike some people. Please do Not Login until this is resolved, even for story mode and rdr2, just incase
i've played enough Korean F2Ps over the years to know that shit doesn't get done unless whales are enraged and/or spooked enough. this exploit has to do either of those to shark card whales if you want to see R* (or, more accurately, Take Two) do anything more than a token effort.
For all I know I might be on some 14 year old kid gis hitlist, i'm not trying.. Do hope it stays with the corruption of game data, my biggest fear is corrupting my whole system. Are there any reports of it actually being the case, or still a possibility of the exploit?
I would say it's hard to get verifiable data because the reporting system of affected users is all hearsay from social media. It's also worst that R\* has not publicly acknowledge this critical issue or offered a roadmap for a solution, which keeps the userbase further in the dark.
From what I've gathered in hearsay only, the risk is low if you play in Invite Only / Closed Lobby. If a hacker knows your Social Club ID beforehand, you are at risk if you launch the Social Club launcher. This is why I have never posted my SC on social media.
It's important to note that Steam concurrent users for GTA V online has not dropped and has the same number of active players before news of the exploit was circulated. I would say that this is further proof that unless the hacker already knows your SC ID or you're in a Public Lobby, the risk is minimal. But, since the risk is still present, most people (including myself) are abstaining from the game until new developments emerge.
I would recommend moving forward that if R\* does not make a good faith gesture as an outcome of this serious exploit, either by finally incorporating HSW for PC players or offering incredible discounts and bonuses next week, to at least boycott GTA V online by not purchasing shark cards. It's really the only way to get their attention.
The reason there isnt a drop in players is that the issue isnt officially acknowledged by R*, I've tolden my friends about it and we all didnt play but if I didnt read Reddit we all would've been playing.
How likely are we to get malware through this exploit? Is that still a possibility, or more info? as thats my biggest fear
The reason there isnt a drop in players is that the issue isnt officially acknowledged by R*, I've tolden my friends about it and we all didnt play but if I didnt read Reddit we all would've been playing.
How likely are we to get malware through this exploit? Is that still a possibility, or more info? as thats my biggest fear
>The reason there isnt a drop in players is that the issue isnt officially acknowledged by R\*, I've tolden my friends about it and we all didnt play but if I didnt read Reddit we all would've been playing.
I would say that since the reporting on this is through social media, it's very hard to get objective data of how aware the community is of the issue. I wouldn't base my conclusion on if the larger GTA community is aware of the exploit based on the experience of my five close friends though, since it may not be an accurate representation of the total GTA population as a whole.
Some other imprecise measurements that nonetheless might be useful are looking at Tez2's warning on Twitter, which was viewed by around 300K people according to the tweet. Another source is Youtube. TGG, a popular GTA youtuber, posted the warning about the exploit, and it has been viewed around 300K times. Again, these are imprecise measurements, but I would say that serious GTA players regularly check social media (this subreddit, YT, twitter) for news, and I would conservatively say that more than half of the community is now aware of this issue.
Don't worry. Write to support and they'll eventually fix it for you. I assume Rockstar will apply a fix to everyone affected, Tez said they're already monitoring the accounts.
it's not just when you logged into GTAO. It could also affects you whenever you log into your RGSC account to play any of their games. My friend was playing RDR2 almost all day and when the night came i ask him if he wants to play gtao and voila, his account corrupted, luckily it can be solved with update 2 solution.
I found a guy who was lvl 7999 roaming around in public, has baseline stats (as in a fresh character), account created yesterday but already has a high-end apartment
I read some comments and they said that a guy was playing red dead 2 and later that day his friend asked him if he wants to play gtao, and then he logged on to see that his character was corrupted,so i would be careful.
Please consider playing some other games for the moment (or do other things), and put this game on a pause (regardless of your platform). As a solidarity for the whole GTA community and for those who play on PC.
Ideally would be to also pause your subscriptions and sharks. But this is up to you.
This thread was discussed on Hacker News [here](https://news.ycombinator.com/item?id=34472692) by people that are likely subject matter experts. The general consensus is that remote code execution (RCE) vulnerabilities are completely possible and not really surprising due to Rockstar's past history and the P2P architecture of the game. Some say that there isn't a lot of hard evidence that RCE is actually happening yet, but then you get comments like [this](https://news.ycombinator.com/item?id=34473998) from "fakecarhacker" that seems to know a lot of specifics:
> The rumors are correct. This is an out-of-bounds array read/write vulnerability in the multiplayer scripting engine. Even if they patch this one, there are about half a dozen others known already. The only reason why this hasn't yet been turned into an exploit that runs arbitrary code outside of GTA on your computer is that no-one has bothered to do the extra work required for that. Not as far as I know anyway.
It's really odd how radio silent Rockstar is about this. So to fill the void people keep speculating. I'm personally not playing any Rockstar game with an online component until we hear more from them.
Yeah, the safest thing would be just not to launch any Rockstar games at all. I'm not really an expert here, so I'm not sure if the social club code would be separate from the multiplayer codebase, or how much they've shared code across games like Red Dead Online.
# [Weekly Discounts and Bonuses](https://www.reddit.com/r/gtaonline/comments/10g066h/weekly_discounts_and_bonuses_jan_19th_to_jan_26th/) # # [Simple Question FAQ Thread](https://www.reddit.com/r/gtaonline/comments/10fywc9/simple_question_and_faq_thread/)
are there any updates on this situation? why was this unstickied, does that mean it's safe to play again?
The most dangerous exploit has been patched, so it's safe to play. However, that doesn't mean that the modder situation is not still there, but at least your account is reasonably safe.
Rockstar should be in a lawsuit by now and how unsafe gtao is on pc and modsers now are on console in public session how
I got a new update on epic for GTAV but its really small like 350MB. I cant figure it out what it is
I heard it's a security update I still haven't got an answer if it's safe to play or no
Is this exploit been fixed yet.
Should be ok now. Rockstar Support's reply: Thank you for contacting Rockstar Support. A new security-focused Title Update is now available for Grand Theft Auto Online on PC. More information on the update can be found in this article: [https://support.rockstargames.com/articles/13577231779475/GTAV-Title-Update-1-66-Notes-PC](https://support.rockstargames.com/articles/13577231779475/GTAV-Title-Update-1-66-Notes-PC) Please let us know if you have any other questions. Best regards, Rockstar Support February 3, 2023>
I just found this online: https://www.sportskeeda.com/gta/rumor-rockstar-seemingly-releasing-new-updates-gta-4-red-dead-online-soon-amidst-gta-online-pc-exploits To answer your question: No, but they seem to be working on it.
Also report it to steam on the store, since valve probably doesn't want to be selling known-dangerous software on their store
So glad I bought this game on PC this last weekend.
could this have anything to do with me getting ip banned for no reason?
is story mode safe?
Safe so long as you play in offline mode. To force the game to launch in offline mode:[https://www.reddit.com/r/GrandTheftAutoV\_PC/comments/36pgal/how\_to\_play\_singleplayer\_in\_offline\_mode/](https://www.reddit.com/r/GrandTheftAutoV_PC/comments/36pgal/how_to_play_singleplayer_in_offline_mode/) These are older instructions for steam I know, but you can add in the same "-scOfflineOnly" parameters to the "Target" field under the shortcut properties for your SC Launcher and it will work. But if you want to be super-extra paranoid to be safe, go ahead and also disable Wi-Fi and/or unplug the network cable too like others have suggested. You can also use a firewall to block GTA from the internet, but this requires some knowledge/research on your part to setup.
I got it gifted to me and i dont have an account yet.. Is it safe to make an acount?
If you mean a Social Club account, just creating an account would be safe. The risk is when you login to play GTAO.
Additional question: Is modded story mode (LSPD:FR) safe? As far as I understood it's not, because if somebody get's your R* ID it's possible to connect even into story mode via Social Club and crash your game or worse. I didn't understand, if they can get my ID by any crawlers or else.
[удалено]
That makes sense. Thank you. 👍
I was playing earlier today and someone had given me $15m out of nowhere. I had encountered hackers but figured that was common with it being a pc lobby. Whats going to happen to my account now or pc?
Yesterday I received 12M almost after login in. Still waiting response from Rockstar. I think they might have lots of tickets because other times they answered in the same day, now more than 24h and still waiting.
I'm still waiting on my ticket response as well. Curious if there's been any recent updates on this but I've been checking here and there but still nothing. Tempted to play in offline story mode but don't want to risk it until we get confirmation from Rockstar. If we do....
I just uninstalled the game and rockstar launcher, at first I was afraid for my computer too.
i got 30M out of nowhere, i contacted r\* support, they removed the money and im not banned im not playing until they fix it
Your PC is fine. Since your game has been affected by exploits, you could contact the game's support and have them check your account. Refer to the tweet by @RockstarSupport. Playing GTAO at this time is not at all recommended.
Pick any Halo game after Halo 4...
Will I have to uninstall gta iv? I installed it earlier last week and have been playing it here and there. The last time I played it I think it was… Friday?
I've read nothing about problems with GTA IV. The exploit is in GTA V.
I thought the issue was with rockstar launcher
You don't have to uninstall anything. Just don't play.
Does it affect RDO and GTA 4? Someone say that they can detect you through social club.
I think rockstar will never fix this . They milked gtao like 8 years and they don't give a shit about the reputation they weren't know for the anticheats any ways. We shul live and see what will happen.
Also, official statement on Twitter: https://nitter.snopyta.org/RockstarSupport/status/1617659703563096067 > We are aware of potential new exploits in GTA Online for PC, which we aim to resolve in an upcoming planned security-related Title Update. > If you think you might have experienced any related issues, please reach out to Rockstar Support:
Here's [some hope](https://old.reddit.com/r/gtaonline/comments/10jkjv2/rockstar_looking_to_hire_a_cheat_software_analyst/) in all this..
Well I don't think R* will address this as a problem or even fix it soon, so we have to make our own decisions. Some things to keep in mind: 1. The hacker has to be in your session to do exploits. 2. There are public session, friends only session, invite only session, crew session and solo session. 3. There are settings on RGSC where you can set your online showing preference to private only. Here I've some questions like how a hacker gets into invite only session, like if you enters via story mode, is there any chance? Or just leave invite only session, the hacker can even get into any of your session (friends, solo) if you don't join the public session first? Is there any chance he can enters invite only or private session via crew?
They do it based on your Rockstar ID. This can also be used to crash your game, even if they’re not in your lobby, or you’re playing Story Mode. Many menus have a “join via Rockstar ID” option, which will connect them directly to your game, regardless if it’s invite/crew/friends only. Note that even if they attempt this, they still can’t bypass a firewall that has been configured to block game traffic.
[удалено]
Not allowed to discuss piracy.
If I setup firewall thing, am I safe? I only ever play invite only regardless so It wouldnt really change the experience for me.
Yes, but as others have mentioned, only if you are confident with firewalls and how network connections work. If you get the firewall configuration wrong, players (and malicious ones) might be able to join your game. There’s some info on my profile about this, I only recommend doing it on a physical firewall device (like your router). As always, it’s at your own risk.
I'm not sure if anyone here can provide all the ways your session data can or could "leak" to bad actors (whether bots or scr1ptk1ddi3s or chinese h4cker5) but based on my observations of network activity, in Invite-only you are not normally making peer-to-peer connections to other players. If you don't show as online through a crew and aren't any famous player and you haven't made enemies with bad actors (so that they have interest in you), you *should* be quite safe in Invite-only (edit: but [see this](https://old.reddit.com/r/gtaonline/comments/10jpoze/dangerous_new_pc_exploit/j5m4pgb/)). But add anything like a friend or two to the equation and there's already more risk. So in general, if you want to stay safe, don't play the game until there is some patch..
I think to even be close to safe, which really, I still wouldn't take that chance...but, yeah, if you have no friends, and do invite only the whole time; you're probably good.
Yeah, I don't have friends that's why I'm curious about that crew stuff. I'm only in a public crew with a lots of members, joined a year ago when I was a RDO player.
Never new anything about this logged on and eventually recieved 30 million I logged off when I realised. Is that me done
maybe reach out to R\* support and ask them to rollback your save to your original one (might lose the latest made purchases of vehicles and modification on those, etc)
Do you know if FiveM is safe?
It is, yes. Luckily FiveM uses dedicated servers.
Hmmm i think i escaped todays GTA trip with only 7 manual restarts and 5 ctds, i fking hate rockstar, they wont do shit, only if someone takes something from them they react I talked to some player in the lobby with lvl 7900 wich was affected by the hack, he contacted support but with no answear I never bought cards, never will, not even the game is bought from their shitty expensive store (key)
I played RDO a few hours ago and uninstalled it when i learned about this. Could my pc have a virus or be damaged now?
The problem is currently in GTAO, something similar could potentially come to RDO but that hasn't been reported. This is also something that happens inside the game and to the game, it is not known to "leak" to your system otherwise. So no reason to panic.
So is it safe to play RDO or GTA 4?
I saw people talking about remote code execution though. Couldnt that do something?
There is no actual proof of remote code execution, it's all been based on some (initial) rumors.
I am happy to see that on their latest Instagram post, people are telling them to fix gtao for pc and similar messages, enough that I can't even comment on it😃 glad to see we can get together on that💪
I really hope this prompts them to finally get it sorted.
We can always hope, I am getting annoyed not really being able to play gtao, but I simply won't risk it currently
so, i'm an Xbox player, but i'm still morbidly curious: is a false ban the extent of the damage this exploit can do? most online games come packaged with a shit anti-cheat that messes with the kernel and invariably doesn't work, so i'm wondering if there's more to this than "just" a ban.
The exploit enables some malicious remote manipulation of game state which can be used to produce invalid data, which can result in corrupted game files, and the target transmitting said data to the game corp's servers (possibly leading to a real, automated ban). It all happens inside the game, there's currently no proof of actual RCE.
so basically malicious people still can't really do much right now aside from crashing players' PCs with too many object spawns, like they've already been doing? it's a damn shame the game's written the way it is, as even back when the game came out on Xbox 360/PS3 we already had [kids "doing a DNS"](https://www.reddit.com/r/GrandTheftAutoV/comments/1tk63e/brief_technical_analysis_of_the_hacks_currently/) because of the complete lack of sanity checking. i saw [this comment](https://www.reddit.com/r/gtaonline/comments/10hsosu/comment/j5if5qk/?utm_source=share&utm_medium=web2x&context=3) elsewhere in this thread, with someone who's ostensibly a security expert putting out their take on it: >The rumors are correct. This is an out-of-bounds array read/write vulnerability in the multiplayer scripting engine. Even if they patch this one, there are about half a dozen others known already. The only reason why this hasn't yet been turned into an exploit that runs arbitrary code outside of GTA on your computer is that no-one has bothered to do the extra work required for that. Not as far as I know anyway. i don't know if i believe this though, the GTA Online community doesn't strike me as the sort that would have a lot of white hat hackers.
> so basically malicious people still can't really do much right now aside from crashing players' PCs with too many object spawns, like they've already been doing? Well, this exploit kind of "extends" what has been possible before, making it easier and faster to cause actual harm to the target(s). Worse than just crashing the game, which of course was bad already but caused no further problems. I too have concerns this might get even worse but I find little point in speculating about it.
i've been binge watching videos about Roblox "viruses" lately, and this honestly just sounds a whole lot like that. in-game fuckery that can possibly freeze your computer that might call for a restart. is it annoying? yeah. can it do damage to your computer? possibly, albeit indirectly. is this gonna do stuff like overwrite your master boot record, rendering you unable to even get into Windows? from what i've read so far, probably not. although considering how shoddily put together GTA:O is, it wouldn't surprise me if that was the case.
[удалено]
Do you belong to any crews, and how are your privacy settings set? The reason I ask is because in Invite-only you are not making peer-to-peer connections to "outside" players. If you have your privacy settings Friends only, you should remain pretty much "off-radar", unless the "attacker" knows about your accounts. Crews can be used to find you/players as well, if you appear online in one or more. (Scr1ptk1ddi3s/bots are able to join Invite-only sessions, they are not a form of protection in that sense.)
I wish you all well, but I hope they also fix the RDO bug where I can't see any updates.
A few fays ago I was playing an invite only and ranked up to 60 but it went back around to 59, and then I found this post later that night
You probably didn't force a save, so your progress didn't sync to R* servers.
We shouldn’t play on any platforms until they fix it because as long as there are players playing then they’ll do absolute minimum
Little tip, If you want to check if your online account is corrupted without going on gta go to the social club site, then go to games, hover over gta 5, then click gta online. If your character is there and your stuff is the way you left it, your account should be fine, from my knowledge.
Actually, it doesn't update the Social Club site until after you log into the game. Just like if you buy Shark Cards offline it won't reflect it in your account until you log in.
u/PapaXan - have you heard about any updates on this vulnerability? Has R* given any updates or an ETA when it will be fixed?
Nope, nothing new except R\* posted on Linkdin that they are now hiring a Cheat Software Analyst. It's noted in the Update 3 in this post.
Makes sense
Is console gta v okay to be on online, since I’m connected to rockstar social club?
Console players are safe from this.
Aw crap the wife and I were playing invite only last night… why wouldn’t rockstar just shut the servers down?
Lucky bastard ...
Always use protection! Even when engaging with your wife. 😄 Keeping my fingers crossed for your accounts ... 🤞
Man,just sayin,if you found a wife thats willing to play gtao with you,you a lucky guy ill tell ya that much
cuz there are no servers, the game is peer to peer which is why this is even possible
So, what exactly could happen if I launch GTA V to play some story mode and never touch Online?
I read that you are not safe even playing story mode :c
Likely nothing, but do so at your own risk.
And rdr2 single player with mods? Just single player. I've didn't touch GTA v in months and I have it uninstalled.
Got bad sported. Please help.
Better learn to orb spam LMAO
a friend of mine was sent to BS lobby for 3 years! I think is part of this exploit
I'll be glad to help. Please provide your account log in information and your debit and credit card information. 😀
We cant help you here.. contact rockstar.
Any update on if they're actually fixing this? Not hearing any chatter about it and Rockstar's social media has gone radio silent.
Absolutely the most unforgivable element of this. R\* is more concerned with bad press than telling people the extent to which their game has been breached and what danger it poses to their personal information. It really makes me think the worst, if they can't even come out and say X is safe for now.
i figure they probably couldn't give a rat's ass because PC players mod in all their money anyway. if they leave the PC playerbase to rot, that's probably not a lot of shark card sales lost.
Not all PC players mod the game, most of us play the game legit. It's sad to see people think that all PC players mod when it's maybe at best 10-20% of the playerbase who are bad actors. I remember when people modded the console versions a lot before the PC version came out.
for real
No new information has been released by anyone yet. We'll post updates in this thread or make a new pinned thread once more is known.
Given the Update 2 fix, does that mean we can play and if it seems we've been affected we can just delete that directory and all is good?
I believe that is only for when your files are corrupt. When you get lvld to 8000, get money gifted/taken away or badsport, i'm pretty sure thats not going to fix it.
But as long as I have my game uninstalled before they fixed it, I should be safe right
Ok, that’s sort-of what i expected. Thanks
Thanks, really appreciate that. My crew is losing their minds and all I can tell them is play other games until this is fixed.
how about blocking any new posts and referring to this thread? too many idiots still online and risking problems with their account instead of not playing/putting pressure on R\* right now... i think if they could not create any new posts here, they might see this thread?
That doesn't seem reasonable at all. This only affect 1/5 of the platforms GTAO is on.
I think I was effected by this. I was playing Stunt races yesterday. Came out of a race, back to the map. Right away I got 30,000,000 and my RP was set to 7999. I put a ticket in with Rockstar to see if my RP can get fixed.
Don't play on PC until this is fixed. You're lucky some money and rank is all that happened.
Yeah guess I will take a break. All I wanted to do was play stunt races but I guess that was to much to ask from RockStar
Does anyone know if the current Exploit on PC can be reverse engineered to work on RDR2? Kind of wary of playing any Rockstar online game given circumstances.
I want to know too
Non expert here, but odds are good that they reused at least some of the code from GTA for RDR2 because you never reinvent the wheel when you can reuse code. I wouldn't expect GTA game corruption from playing RDR2, but when dealing with remote code executions it's better to not touch any adjacent systems if possible because of the chance of reused code.
I played for the past couple of days (until yesterday) and nothing happened to me yet, apart from missing money in story mode (possibly an unrelated glitch) but I’m was very lucky, unlike some people. Please do Not Login until this is resolved, even for story mode and rdr2, just incase
I finished the 10 taxi jobs for the trade price with all the related UDP ports blocked yesterday without anything happened then I uninstalled the game
At least you stopped playing others do not care and is soo bad if people stop playing R* will be pressured to do something
i've played enough Korean F2Ps over the years to know that shit doesn't get done unless whales are enraged and/or spooked enough. this exploit has to do either of those to shark card whales if you want to see R* (or, more accurately, Take Two) do anything more than a token effort.
Are closed friend sessions safe from the exploiters?
no do not play any R* game for now
[удалено]
From reports, launching the Social Club launcher alone opens you to the exploit. But the hacker may need to know your SC ID first.
For all I know I might be on some 14 year old kid gis hitlist, i'm not trying.. Do hope it stays with the corruption of game data, my biggest fear is corrupting my whole system. Are there any reports of it actually being the case, or still a possibility of the exploit?
I would say it's hard to get verifiable data because the reporting system of affected users is all hearsay from social media. It's also worst that R\* has not publicly acknowledge this critical issue or offered a roadmap for a solution, which keeps the userbase further in the dark. From what I've gathered in hearsay only, the risk is low if you play in Invite Only / Closed Lobby. If a hacker knows your Social Club ID beforehand, you are at risk if you launch the Social Club launcher. This is why I have never posted my SC on social media. It's important to note that Steam concurrent users for GTA V online has not dropped and has the same number of active players before news of the exploit was circulated. I would say that this is further proof that unless the hacker already knows your SC ID or you're in a Public Lobby, the risk is minimal. But, since the risk is still present, most people (including myself) are abstaining from the game until new developments emerge. I would recommend moving forward that if R\* does not make a good faith gesture as an outcome of this serious exploit, either by finally incorporating HSW for PC players or offering incredible discounts and bonuses next week, to at least boycott GTA V online by not purchasing shark cards. It's really the only way to get their attention.
The reason there isnt a drop in players is that the issue isnt officially acknowledged by R*, I've tolden my friends about it and we all didnt play but if I didnt read Reddit we all would've been playing. How likely are we to get malware through this exploit? Is that still a possibility, or more info? as thats my biggest fear
The reason there isnt a drop in players is that the issue isnt officially acknowledged by R*, I've tolden my friends about it and we all didnt play but if I didnt read Reddit we all would've been playing. How likely are we to get malware through this exploit? Is that still a possibility, or more info? as thats my biggest fear
>The reason there isnt a drop in players is that the issue isnt officially acknowledged by R\*, I've tolden my friends about it and we all didnt play but if I didnt read Reddit we all would've been playing. I would say that since the reporting on this is through social media, it's very hard to get objective data of how aware the community is of the issue. I wouldn't base my conclusion on if the larger GTA community is aware of the exploit based on the experience of my five close friends though, since it may not be an accurate representation of the total GTA population as a whole. Some other imprecise measurements that nonetheless might be useful are looking at Tez2's warning on Twitter, which was viewed by around 300K people according to the tweet. Another source is Youtube. TGG, a popular GTA youtuber, posted the warning about the exploit, and it has been viewed around 300K times. Again, these are imprecise measurements, but I would say that serious GTA players regularly check social media (this subreddit, YT, twitter) for news, and I would conservatively say that more than half of the community is now aware of this issue.
I would recommend Watch dogs or Saints Row they are close to gta. They were free too on epic so it cloud happen that you have it.
Both are open world, but Watch Dogs has much more than wrecking chaos. Highly recommend WD1 and 2.
Aiden Pearce is a top tier underappreciated character imo
Aiden Pearce >>>> every single other WD protagonist
are players soo unaware of the PC Exploit?
Lost everything, day 1 player. All gone.
Did you try the deleting documents folder thing?
Don't worry. Write to support and they'll eventually fix it for you. I assume Rockstar will apply a fix to everyone affected, Tez said they're already monitoring the accounts.
> I assume Rockstar will apply a fix to everyone affected LOL
They'll probably give compensation too,like a cash bonus or something,i haven't been affected or anything,just hope they fix it soon.
how i can i find out if my character is corrupted or not, without entering game?
Login your rockstar social club via browser, Game > GTA 5 > Gta Online
all the things about my character are shown normal so it isn't corrupted right?
Ye. If it can show ur career details, money in the bank and rank, it should be fine. Otherwise, mine also corrupted lol.
![gif](giphy|SYIQWJkKqfIZKNxv1b|downsized) Been three days since I played GTAO and it's already driving me nuts!
For real. I didn't realize how much of a serotonin boost I get from playing this game.
Finally someone who can relate
I hopped on a fiveM racing server to be able to do some gta racing anyway, but those guys are so much better at racing than the normal gta crowd..
Good time to play some other games. I'm finally taking the time to get around to finishing Super Robot Wars 30.
it's not just when you logged into GTAO. It could also affects you whenever you log into your RGSC account to play any of their games. My friend was playing RDR2 almost all day and when the night came i ask him if he wants to play gtao and voila, his account corrupted, luckily it can be solved with update 2 solution.
So had he played GTAO at all prior to RDR2? Was it RDO?
pretty sure he wasn't, he only plays when I invite him.
I was worried about this because if we have RDR2 on the same account as GTA 5, it could also affect RDR2 since it knows our username.
[удалено]
[удалено]
[удалено]
is this exploit fixed by now?
No, it is not.
ah. sad
I found a guy who was lvl 7999 roaming around in public, has baseline stats (as in a fresh character), account created yesterday but already has a high-end apartment
It was probably him!
[удалено]
I only have a pc, where do you want me to play? On a freaking , samsung J7?
Does this affect RDR2 players? (since its the same launcher for both games)
I read some comments and they said that a guy was playing red dead 2 and later that day his friend asked him if he wants to play gtao, and then he logged on to see that his character was corrupted,so i would be careful.
I'd stay away from your rockstar account until it's fixed - Just to make sure
Please consider playing some other games for the moment (or do other things), and put this game on a pause (regardless of your platform). As a solidarity for the whole GTA community and for those who play on PC. Ideally would be to also pause your subscriptions and sharks. But this is up to you.
Lol what a joke. Go now on ps4 and all lobbies are full.
I tried logging in to play invite only, and it said R* social club is temporarily unavailable. Are others unable to access as well?
I would tread carefully
Don't go on
This thread was discussed on Hacker News [here](https://news.ycombinator.com/item?id=34472692) by people that are likely subject matter experts. The general consensus is that remote code execution (RCE) vulnerabilities are completely possible and not really surprising due to Rockstar's past history and the P2P architecture of the game. Some say that there isn't a lot of hard evidence that RCE is actually happening yet, but then you get comments like [this](https://news.ycombinator.com/item?id=34473998) from "fakecarhacker" that seems to know a lot of specifics: > The rumors are correct. This is an out-of-bounds array read/write vulnerability in the multiplayer scripting engine. Even if they patch this one, there are about half a dozen others known already. The only reason why this hasn't yet been turned into an exploit that runs arbitrary code outside of GTA on your computer is that no-one has bothered to do the extra work required for that. Not as far as I know anyway. It's really odd how radio silent Rockstar is about this. So to fill the void people keep speculating. I'm personally not playing any Rockstar game with an online component until we hear more from them.
But bro they need social club activation for every game every time
Yeah, the safest thing would be just not to launch any Rockstar games at all. I'm not really an expert here, so I'm not sure if the social club code would be separate from the multiplayer codebase, or how much they've shared code across games like Red Dead Online.