The W2 Report

Updated for Christmas! Join us for The W2 Report #LIVE as we make our tour this year. Catch all three of us at The Washington Chronicles and then Catch the Sanjin in person at The Irving Tales. *all pending approval of course

@RubyStar823 @MaplePrism DMs are open. You can send the files my way.

@MaplePrism I have this virus and do you still need it？

For the Duet Night Abyss players If you see this and you're affected, if you have quarantined the files and can safely place them in a zip folder, please contact me so I can get them to the malware analysts that have found the quoted tweet and are now hungry for a sample LOL

@vxunderground Have you tried using the Wayback Machine? I had a few hits if I edited the website just slightly.

IT'S NOT FAIR The samples the dorks over on Reddit shared are (sort of) a dead end. The SHA256 file hash they shared is a basic bitch malware loader. It's literally called "monthly.vbs", it isn't obfuscated, and it makes a plain HTTP (not HTTPS) call with WinHTTP to a clearly malicious Alibaba OSS (Object Storage Service) instance. The Threat Actor(s) didn't even have the common courtesy to make it look non-malicious. When you try cURLing that bby it replies: "AccessDenied You have no right to access this object because of bucket ACL" THEY MADE IT NON-PUBLIC BUT IT STILL EXISTS. LET ME IN

@Saboogus Ooh that's not a good look.

Their subreddit mod team is in damage control mode. Every thread discussing it has to have 20 disclaimers or they nuke the threads. (Rule 6 is "Low quality/Generic topics") I think discussing the first hack is kinda important here. Considering Pan did nothing to patch it up.

Duet Night Abyss has had their backend hacked twice in the past two weeks and the newest update potentially had keyloggers installed by a third party. If you got this game because of my video, I suggest not updating, uninstalling and changing passwords ASAP. Pic still relevant.

@MaplePrism I will need those that submit files to RUN the game as you capture it using wireshark.

As a follow-up to this If you can get a wireshark file to @W2Report to analyze the net traffic that would help as well

@MaplePrism A follow-up question is do you play any games that are listed here: en.wikipedia.org/wiki/Anti-Chea…

@MaplePrism So I have a question. Did Duet Night Abyss quietly ask for Kernel level access recently (post-Update)?

@MaplePrism By sample size I mean a number of victims.

@MaplePrism Do you have more of a sample size? DMs are open.

PSA FOR DUET NIGHT ABYSS PLAYERS THE LATEST GAME UPDATE INSTALLS MALWARE ON YOUR PC AS WELL AS A DELAYED TASK TRIGGER. PLEASE ENSURE YOU CHECK YOUR PC FOR THIS IF YOU'VE UPDATED THE GAME. The official subreddit has been suppressing and down playing this situation, shameful.

@TorvarZ @bauerrr__ @GundamIsHere web.archive.org/web/2010082906… Was it this?

@bauerrr__ @GundamIsHere The article was during the developer campaign against the used games market, around 2010. The developers were arguing that every used game bought directly took a sale away from them. I can't find the article anymore, probably taken down.

They told us digital would make games cheaper, they lied. It was about killing the used games market and controlling every aspect of ownership & now dynamic pricing may the gaming industry burn.

Splish Splash Your Opinion is trash Early about a Monday Morn Rub Dub, just relaxing online Thinking everything is alright.

@Zuby_Tech Whatever you say chief, but when your horse wants Dynamic Pricing on video games, you will ultimately get fucked in the end.

PlayStation Studios First Party Output From The Launch Of PlayStation 5 Have Released & Pipeline Ahead Announced Games So Far: #PlayStationStudios #WWS #SIE #PS5 #PlayStation5 #PlayStation #PlayHasNoLimits

@ThatGenericEric Assumes facts not in evidence. You can upgrade your PC infinitely to play the latest games, you can't with a console Soyboi.

PC dorks. PS5 Pro won. We get the games you want. You have to wait. Our games look better in 4k, you play at 1080p, have compilation stutter and low image quality. We pay less per year to play our games, even with PS Plus. We also did it for under $1000. #CopeandSeethe

@4x0nn @OutOfContext247 Screenshot for the uninitated?

@OutOfContext247 Imagine really liking the Dorito pope lol. He's been nothing but a corpo shill since day 1

4pm US EST. The Sanjin will tell this sack of you know what where to put his precedent.

A Sanji Rant Thursday at the top of the show. Thanks @RossmanGroup for pointing this to our attention with this video: youtube.com/watch?v=V099NR…

@MSFoxPro9 @prestonjbyrne Actually, how about we do not and tell you to fuck off. That's why there is a legal case going on right now.

@prestonjbyrne Simple answer mate, just follow the UK law or get fined and banned. And Ofcom is following the UK's online safety law, it is not a censorship agency. The nasty crap you allow to be posted is your problem to sort not ours.

BREAKING: the UK's Internet censorship agency, Ofcom, is fining 4chan. Again. They are refusing to send us the decision before they publish the outcome, so as to deny us the opportunity for a public rebuttal. This is their e-mail and our reply.

@hodsgod @prestonjbyrne The UK has no authority on an American company. Fuck off.

@prestonjbyrne Simple, comply with the laws, of the UK or have your website blocked in UK! No one is trying to stop free speech (apart from maga!), just follow the laws of the land you want to operate in!

@GeminiSprk @678Hank @prestonjbyrne Tell that to the GDPR. While the GDPR is a good law to have, the enforcement thereof should have stopped at the EU border and not be enforced world-wide. The GDPR is the slippery slope.

@myarch10 @RamblingsNerd @prestonjbyrne 1984 is not a guidebook

@RamblingsNerd @prestonjbyrne They're building a file of 'problematic activity' and 'non-compliance', so they can impose draconian controls domestically - a way to introduce Digital ID 'as a last resort'. Our government has lost the narrative and wants it back 1984 under construction :/ 🇬🇧

@prestonjbyrne Well done.

Explaining: 1) Ofcom's original demand in August Ofcom originally sent 4chan a demand to explain its content moderation practices. That demand was refused on 1st, 4th, and 5th Amendment grounds; 4chan is not required to explain its content moderation decisions, is not required to hand over internal information without a warrant, and cannot be compelled to be a witness against itself. That was the subject of our DC case. Ofcom has no lawful power in the United States to compel my client to surrender these rights. Ofcom has renewed its demand from August in this latest notice. Ofcom has also now said it will fine 4chan for: 2) Not including provisions in its Terms of Service specifying how individuals are to be protected from "illegal content." "Illegal content" in the UK includes constitutionally protected speech, such as e.g. "grossly offensive" speech or politically controversial speech. 4chan cannot, under the First Amendment, be compelled to explain how it intends to comply with UK law nor is it required to implement UK content moderation law on its US platform. 3) Not conducting age verification. 4chan is an anonymous web board. 4chan's users have the right to be anonymous, and 4chan has the right to permit anonymous speech, under the First Amendment. In each case, Ofcom has no lawful power in the United States to compel my client to de-anonymize its users. The Constitution would bar any American court from domesticating Ofcom's orders to do these things. 4) Also, in all cases, Ofcom has made these demands to 4chan by e-mail. It is axiomatic, private international law 101, that Ofcom cannot compel an American company to do something in America without domesticating its orders in an American court. We have explained to Ofcom - on many, many occasions - that it is required to seek our courts' permission first if it wants to compel my client to lift so much as a pinky finger. Ofcom doesn't want to do this in American courts, because it knows that our courts would refuse to domesticate Ofcom's orders on First Amendment grounds. We asked a court in D.C. to confirm this for us. Ofcom's response to our lawsuit was to invoke America's Foreign Sovereign Immunities Act, or FSIA, to shield them from our courts. In effect, Ofcom’s position is that American law doesn’t protect Americans from the UK when the UK threatens Americans, but it absolutely protects the UK from Americans when we seek judicial protection from the UK. This is why the GRANITE Act proposals invite Congress to amend the FSIA. Foreign censors are using America's own laws as a shield for their terrible behavior. We should take that shield away. Ofcom doesn't want to play by America's rules. That's not my client's problem. It's not America's problem. It's Ofcom's problem.