http://u.com.my/plans/roaming-idd/guess-the-destination

I was playing the online game contest by U mobile and curious how this guy can score 1600 points.
According to terms and condition, each correct answer will receive 150 points.
With total 5 questions, the total score will be 750 points. Player will get double points if share the post in FB.

So the maximum will be 1500 points only.

So I dig the codes and found out actually maximum point for each question is 160 points and maximum points for the contest will be 160*5 = 800 * double points = 1600.

In order to get full points for each question, user must be submit the answer immediately and no delay. This is based on the codes to calculate points in the attached document.

It is impossible to score full mark for each questions because player need to check the photo and enter/copy paste the location and submit. I would say minimum 1 second required for each questions. Except the first question which photo already displayed before game start.

So it is very suspicious game scores. In fact, it is very easy to cheat the game by sending the manipulated scores to server as the scores were transmitted without encryption. Any experience programmer should be able to do the same.

If you google that guy name, he had won several online GAME contest too.
https://www.google.com.my/search?q="peck+chin+fai"

This post has been edited by zstonez: Jan 13 2017, 08:49 PM


Attached thumbnail(s)

Make a report direct to Umobile. Not here

indeed....he won a lot.... kia picanto, vespa, rm10k cash, ipad, trip to brazil etc etc
better than lottery
now im jealous

This post has been edited by one punch man: Jan 13 2017, 09:46 PM

this guy is an IT guy who cheat his way with codes la. Amazing u mobile got hacked so many times. someone should just make a police report and lock him up. Hacking contest to win prizes is same as hacking a bank to steal money

Wow. What happen if you mobile know about this. Popcorn ready

May be he is really lucky or professional gamer? Anyway, those contest ended and will be difficult to investigate.

Do you know the guy?

Quickly report to U Mobile.

If you click on the link above you can actually get his full ic number already hehe

just google his name Peck Chin Fai

Like this also can.

he seem to win contest from certain organisers only.

so he might have inside help as well.

but yeah I already know some contests are rigged.

like nestle's contest as it's run by an outsourcing company in PJ...

Have u report to umobile?

Wow. This is really a popcorn material.


Can be a police case right?

Wow maybank also win 10k... What else he got from maybank I wonder..

Good topic

Bookmarked. For magnificent/k/ army work of art. See you all in news.

bookmark

ini macam ada permainan dalaman

Upon google, he does won a lot of contest lol

All the competitions done by the same company and this guy is related some how to the company la. Easy win lol

Sudah report ke ts? I wonder what is their response.

Menarik

i also have a friend who won a lot of contest but not this big la like motorcycle and car

Hacker detekted.

Or maybe is just the same PR guy that the organisers use to fake win grand prize.

let's share in fb and viralkan

It is good to create awareness to public especially to game developers that how vulnerable their games to being hacked. Yet, we don't have solid evident to proof he is cheating, only the game owner can confirmed that. Thats why I said suspicious activities.

Https being used in this case, but it is only to protect data during transmission only.

I got my friend reported to u mobile and they already taken action to disqualify suspicious participants and feedback to relevant team to take necessary action.

This post has been edited by zstonez: Jan 15 2017, 01:39 PM

orang dalam kot

all this contest wayang jer lebih

Umobile already taken down the game link

U mobile announce the winner GuessTheDestination contest proof that my investigation is correct and this guy is cheating and was disqualified.

Any online game contest going on? Lets share and we will catch cheater once again.

cool

Ktards so powerful. As a team we can catch any cheaters!

wow

Hohoho...

Another potential tered.

When the rules and formula is clear, it is easier to calculate.

Those CC swipe and win competition, you can never catch them.

Interesting sharing of your topic, bro.

btw, can u share the finding from U Mobile?

How the guy is cheating again? Ayam interested to know

but damage is done, he has already won more than rm100k ++ worth of prizes by using his IT expertise to cheat his way.

but anyway here's another online contest, but this time quite hard to cheat as some of the answers are based on real time events (stock market):

https://warrior.malaysiawarrants.com.my/

"nobody will notice their money is missing"

He is not the luckiest but definitely the most notorious.
He is a programmer and app developer and a very good one too.

He uses his skills to his advantage to write scripts to favor himself.

He has been disqualified many times.

Some of the contest organizers are aware of this but reluctant to take further action.

Some of the notable contests which he entered and caused the organizers to either change the selection criteria or cancel it altogether.

1. RHB (many years ago) Ducatis x3 ( top 10 qualifies for live finals)
He parked his name and of his friends in top 10. But he wsnt the only one using programming skills. and they battle eac other until the scores became very absurd.
report was lodged with the bank and also BNM. RHB investigate. Finally decided to invite top 70 players (if not mistaken.) Live finals non of the top players could reproduce their
magnificent scores whihc they achieved behind the PC.

2. TGV cinemas (2 cars ) for the best slogan among the top 20 players . He parked all his proxies there . Imagine answering 5 random questions in under 3s. TGV was alerted.
They remove all the top 20 players plus many more. And they chose winners solely based on slogan.

3. He and the wife also tried their hands in winning trips under Hokkaido brand mushroom. Voting contest. Most votes win. Yea. they hacked their entries until over 30000 votes. The
votes were going up so fast, even najib will laugh. In the end DISQUALIFIED.

4. I can say all of his winnings are online games. He can only do so behind the PC. He is not a pro gamer. But a PROgrammer.

Organizers are too stupid to realise. People who write games know of these loopholes. Those bosses sit on top knows nothing. When poeple cheat they also dont care .

Correction.

He has won over Rm2 million.

His latest projects are games from Techninier which he earlier won at Umobile and then at Celcom using proxies as his name is already busuk.

His proxies are Teoh family and one old proxy by the name of OH BJ.

The trick is just to qualify for the top 10 finals by using all his proxies. Then final event who ever wins, he wins.

His prowess is programming, not gaming. He has been disqualified in so many contests from gaming to hacking vote apps using his wife's name WCM.

Problem is not one oragnizer wants to help put a stop to his cheating ways. Orgainzers and event organizers who hire game developers are keeping quiet. Which game developer would want to admit that their game is hackable? Whihc agency would tell their client yes our game has been hacked? Malu case, right?

That's why they will continue to cheat and cheat. Even we noobs trying to get evidence is so difficult. Lodging police report also futile. Lodging report with mcmc lagi useless because those morons sit there dont know abt gaming.

Just accept that gaming is hackable by those who know how. Ask those who do programming.

oh this contest.

ran in 2017.

yeah the times was near impossible to achieve bcos basically all questions answered in less than 3 seconds (even speed readers can't read that fast, much less answer a question)

iinm the finals was held in sunway pyramid but IINM he was not one of the contestant.

The competition on day 1 had been rigged. They just massage the name make it fair. Like every week sure got 1 racing win first prize. Then grand prize is confirm orang sendiri punya.

Is the cheater still cheating?

yes u r right. his name and many of his prozies were in top 20 but NONE of them were at the finals. All dis qualified for CHEATING. hahahaha

Yes of course.
He has many proxies including malay names

Hope one day he kena tangkap if proven guilty.

This post has been edited by FlyingVCLplayer: May 8 2020, 05:34 PM

which contest u referring to?

Majority of Malaysia contest

oh when u say Racing u meant to say Race and skin color is it?

Yes. Some contest they do that. But this is pure hacking and cheating using IT skills. Nothing to do with gaming. If so good they would be winning world tournaments like DOTA or PUBG. But this is even better money because lesser competition and organizers are just after the money spent by 95% of the people while 5% cheats and they dont care when u tell them

Only stupiak people join contest. Never in my life join contest2 from big company. last2 dah Tau siapa menang
. All rigged

not every thing is rigged. like these contests they r not rigged just that people cheat. problem lies with organizers. they dont care. like tgv they know they cheated but no action taken. so the cheaters move to other contests. no laws will stop them because no one wants to file a case against them.

apparently he still around

yetiman laulk2020 so you're saying you cheating the contests but the organizer too dumb to realized and dont give a shit about this?

Come come let me explain: That’s what you get when you expose your function name of sending scores from the front end LMAOOOOOO

The codes are like written by a uni student.

Especially when the functions are so public even TS can inject those function with bogus data eg addscore(“1600”) using your console.

TS got basics of programming but encryption won’t prevent this.

What the website should do is : send responses of the user-clicked coordinates to the server. Server should calculate the score based on server time difference and where the user clicked. All these functions SHOULD NOT be exposed in the front end LOL. Why do you expose your score algorithms like that?

Once the server calculates the data, send total score value back for showing purposes. The server SHOULD NOT accept scores values, nor should the programmers expose the answer on the front end. These values MUST ONLY be sent back to client

It’s that simple. If the website calculates the timer on front end You could freeze it technically. Same idea and you can get max points. Since the calculate score is done on front end I presume

Rule 1 in programming: don’t trust your clients.

This post has been edited by KekTart: Dec 3 2020, 02:40 AM

It seems like all these "cheaters" are getting exposed. The other hot discussion in /K was regarding Lau Li Kung, another frequent "winner".

How TS and u know their story ?

This is like modern thief movie plot

Money Heist in real life

Haha.. You sure want to know? Well~ he will reply u like this..



LMAO.. XD

This post has been edited by JuneResources: Dec 3 2020, 03:24 PM

Edited: /srs k

This post has been edited by ChaosXP: Dec 3 2020, 07:56 PM