{"id":32457,"date":"2022-08-01T20:51:37","date_gmt":"2022-08-01T20:51:37","guid":{"rendered":"https:\/\/harchi90.com\/bungie-shuts-destiny-2-text-chat-to-stop-malicious-exploit\/"},"modified":"2022-08-01T20:51:37","modified_gmt":"2022-08-01T20:51:37","slug":"bungie-shuts-destiny-2-text-chat-to-stop-malicious-exploit","status":"publish","type":"post","link":"https:\/\/harchi90.com\/bungie-shuts-destiny-2-text-chat-to-stop-malicious-exploit\/","title":{"rendered":"Bungie shuts Destiny 2 text chat to stop malicious exploit"},"content":{"rendered":"<div itemprop=\"articleBody\">\n<figure class=\"intro-image intro-left\">\n  <figcaption class=\"caption\">\n<div class=\"caption-text\">enlarge <span class=\"sep\">\/<\/span> It&#8217;s quiet&#8230; too quiet&#8230;<\/div>\n<\/figcaption><\/figure>\n<aside id=\"social-left\" class=\"social-left\" aria-label=\"Read the comments or share this article\">\n<\/aside>\n<p><!-- cache hit 13:single\/related:531efe48590316ece9270effe6cc39ab --><!-- empty --><\/p>\n<p>Over the weekend, players in the <em>Destiny 2<\/em> community started to notice a game-breaking bug that could be activated just by sending in-game chat messages to other players.  bungie <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/BungieHelp\/status\/1553509036741406720\" target=\"_blank\">responded on Saturday<\/a> by temporarily disabling all in-game chat while it investigates the issue.<\/p>\n<p>&#8220;The team is aware of the exploit right now that is causing some players to be kicked and are actively working on identifying what&#8217;s causing the issue and addressing it,&#8221; <em>Destiny 2<\/em> Community Manager Liana Rupert <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/DirtyEffinHippy\/status\/1553503725750169600\" target=\"_blank\">wrote on Twitter<\/a> just before chat was disabled across the game.<\/p>\n<h2>Scrub those inputs<\/h2>\n<p>The damaging exploit involved a string over 200 characters long, composed mostly of Chinese characters, according to multiple players who came across it over the weekend (and who shared the forbidden text with Ars Technica).  The specific way those Chinese characters are encoded in Unicode means each one can take up more memory space than a single-byte ASCII character.<\/p>\n<aside class=\"ad_wrapper\" aria-label=\"In Content advertisement\">\n    <span class=\"ad_notice\">Advertisement <\/span>    <\/p>\n<\/aside>\n<p>Observers suggest that difference means the message, as encoded, could overflow into other areas of in-game memory, even if the message itself seemed to meet the usual character-length checks meant to prevent this.  The result of that overflow was a so-called WEASEL error that immediately crashed the recipient&#8217;s game, as can be seen in <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/ritzzcar\/status\/1553494302210367488\" target=\"_blank\">this sample video<\/a>.<\/p>\n<p>Before the shutdown, players could be hit by the exploit through the game&#8217;s targeted &#8220;whisper&#8221; chat messages or through local chat messages sent from members of your own Fireteam.<\/p>\n<p><em>Destiny<\/em>&#8216;s text troubles come months after Amazon&#8217;s <em>New World<\/em> MMO faced trouble from players who figured out how to process HTML strings in the in-game chat box.  This led to multiple exploits including one that flooded players&#8217; screens with pictures of giant sausages and another that crashed games when players hovered over a specially formatted link.<\/p>\n<p>Bungie had already <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/BungieHelp\/status\/1553863073940783107\" target=\"_blank\">scheduled a hotfix rollout<\/a> for Tuesday, August 2, so this whole issue could be fully resolved rather shortly.  But let this be a lesson to all you coders out there: make sure you&#8217;re fully sanitizing your inputs before letting them get sent across your gaming chat!<\/p>\n<\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>enlarge \/ It&#8217;s quiet&#8230; too quiet&#8230; Over the weekend, players in the Destiny 2 community started to notice a game-breaking bug that could be activated just by sending in-game chat messages to other players. bungie responded on Saturday by temporarily disabling all in-game chat while it investigates the issue. &#8220;The team is aware of the &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/harchi90.com\/bungie-shuts-destiny-2-text-chat-to-stop-malicious-exploit\/\"> <span class=\"screen-reader-text\">Bungie shuts Destiny 2 text chat to stop malicious exploit<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[4],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":32678,"url":"https:\/\/harchi90.com\/destiny-2-players-abuse-chat-to-crash-games-bungie-steps-in\/","url_meta":{"origin":32457,"position":0},"title":"Destiny 2 Players Abuse Chat To Crash Games, Bungie Steps In","date":"August 2, 2022","format":false,"excerpt":"screenshot: bungieOver the weekend, Bungie disabled Destiny 2's in-game text chat across all platforms after trolls discovered a way to use it to crash other players' games. Now, the chat still remains off and Bungie hasn't provided an ETA for when it will return. On Saturday, I hopped online to\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":31556,"url":"https:\/\/harchi90.com\/bungie-disables-destiny-2-text-chat-due-to-massive-exploit\/","url_meta":{"origin":32457,"position":1},"title":"Bungie disables Destiny 2 text chat due to massive exploit","date":"July 31, 2022","format":false,"excerpt":"It appears Destiny 2 players will have limited options as far as comms go for the time being, as developer Bungie has briefly pulled the plug on text chat due to the presence of a game-breaking bug. Player reports indicate that the bug is the result of a specific copypasta\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":18328,"url":"https:\/\/harchi90.com\/bungie-sues-troll-amid-swirl-of-destiny-2-giant-harassment\/","url_meta":{"origin":32457,"position":2},"title":"Bungie Sues Troll Amid Swirl Of Destiny 2 Giant Harassment","date":"July 18, 2022","format":false,"excerpt":"Image: bungieBungie is taking a Destiny 2 troll to court. the freshly minted PlayStation studio filed a lawsuit last Friday accusing one of the loot shooter's players of serially cheating and harassing its developers. The complaint comes as toxic elements within the Destiny fanbase have led Bungie to be more\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"LG OLED 55\" SmartTV","src":"https:\/\/i0.wp.com\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fill,fl_progressive,g_center,h_180,q_80,w_320\/8d033efff6c3b6cbcd8264c09af81e81.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":19279,"url":"https:\/\/harchi90.com\/bungie-sues-serial-destiny-2-cheater-who-threatened-employees\/","url_meta":{"origin":32457,"position":3},"title":"Bungie sues serial Destiny 2 cheater who threatened employees","date":"July 19, 2022","format":false,"excerpt":"enlarge \/ Artist's conception of Leone dodging yet another account ban. When it comes to players cheating in online games, a permanent ban is usually the worst punishment a publisher will dish out (either for that specific game or the company's whole catalog). Now, though, Bungie is going to court\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":27260,"url":"https:\/\/harchi90.com\/bungies-destiny-2-silence-is-due-to-real-threats-towards-our-people-and-studio\/","url_meta":{"origin":32457,"position":4},"title":"Bungie&#8217;s &#8216;Destiny 2&#8217; Silence Is Due To &#8216;Real Threats Towards Our People And Studio&#8217;","date":"July 27, 2022","format":false,"excerpt":"Destiny 2 bungie If you're a Destiny 2 player, chances are you may have noticed a shift in communication from Bungie, where its employees were normally pretty open about chatting about the game, and we'd get massive, deep-dive TWABs or State of the Game posts with relative frequency. Interactions on\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"fifu_image_url":"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2022\/08\/destiny2quiet-760x380.jpg","_links":{"self":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/32457"}],"collection":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/comments?post=32457"}],"version-history":[{"count":0,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/32457\/revisions"}],"wp:attachment":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/media?parent=32457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/categories?post=32457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/tags?post=32457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}