Jump to content

backpack.tf automatic scam


NarkoMyaso

Recommended Posts

Ive got scammed through  backpack.tf automatic bug. I've lost 160 keys. Scammer sent me an offers with strange scatters, but automatic perceived them as australium scatters. 

http://imgur.com/a/53i9F

 

Automatic log:

 

Asked: 21 keys 24 ref  (Mann Co. Supply Crate Key x21, Refined Metal x24)
Offered: 21 keys 24 ref  (Strange Scattergun)
Bought items (1): Strange Scattergun
01:30:20 - trade: [U:1:122591655] Offer 13LKC4V successfully accepted; confirmation required
01:32:12 - info: [U:1:122591655] Offer 13LKF0I received from 76561198082857383
01:32:13 - trade: [U:1:122591655] Offer 13LKF0I Accepting, summary:
Asked: 21 keys 14 ref  (Mann Co. Supply Crate Key x21, Refined Metal x14)
Offered: 21 keys 24 ref  (Strange Scattergun)
Bought items (1): Strange Scattergun
01:32:15 - trade: [U:1:122591655] Offer 13LKF0I successfully accepted; confirmation required
01:35:08 - info: [U:1:122591655] Offer 13LKJHX received from 76561198082857383
01:35:08 - warn: [U:1:122591655] Offer 13LKJHX Some items are missing app_data (Steam is having issues). Offer will be rechecked in 15 seconds.
01:35:31 - info: [U:1:122591655] Offer 13LKJHX received from 76561198082857383
01:35:32 - trade: [U:1:122591655] Offer 13LKJHX Accepting, summary:
Asked: 21 keys  (Mann Co. Supply Crate Key x21)
Offered: 21 keys 24 ref  (Strange Scattergun)
Bought items (1): Strange Scattergun
01:35:34 - trade: [U:1:122591655] Offer 13LKJHX successfully accepted; confirmation required
01:37:09 - info: [U:1:122591655] Offer 13LKMHB received from 76561198082857383
01:37:09 - warn: [U:1:122591655] Offer 13LKMHB Some items are missing app_data (Steam is having issues). Offer will be rechecked in 15 seconds.
01:37:31 - info: [U:1:122591655] Offer 13LKMHB received from 76561198082857383
01:37:33 - trade: [U:1:122591655] Offer 13LKMHB Accepting, summary:
Asked: 42 keys  (Mann Co. Supply Crate Key x42)
Offered: 42 keys 48 ref  (Strange Scattergun x2)
Bought items (2): Strange Scattergun x2
01:37:35 - trade: [U:1:122591655] Offer 13LKMHB successfully accepted; confirmation required
01:40:15 - info: [U:1:122591655] Offer 13LKQUM received from 76561198082857383
01:40:15 - warn: [U:1:122591655] Offer 13LKQUM Some items are missing app_data (Steam is having issues). Offer will be rechecked in 15 seconds.
01:40:41 - info: [U:1:122591655] Offer 13LKQUM received from 76561198082857383
01:40:46 - trade: [U:1:122591655] Offer 13LKQUM Accepting, summary:
Asked: 21 keys  (Mann Co. Supply Crate Key x21)
Offered: 21 keys 24 ref  (Strange Scattergun)
Bought items (1): Strange Scattergun
01:40:48 - trade: [U:1:122591655] Offer 13LKQUM successfully accepted; confirmation required
01:42:18 - info: [U:1:122591655] Offer 13LKTLK received from 76561198082857383
01:42:18 - warn: [U:1:122591655] Offer 13LKTLK Some items are missing app_data (Steam is having issues). Offer will be rechecked in 15 seconds.
01:42:44 - info: [U:1:122591655] Offer 13LKTLK received from 76561198082857383
01:42:46 - trade: [U:1:122591655] Offer 13LKTLK Accepting, summary:
Asked: 21 keys  (Mann Co. Supply Crate Key x21)
Offered: 21 keys 24 ref  (Strange Scattergun)
Bought items (1): Strange Scattergun
01:42:48 - trade: [U:1:122591655] Offer 13LKTLK successfully accepted; confirmation required

Link to comment
Share on other sites

16 minutes ago, NarkoMyaso said:

Offered: 21 keys 24 ref  (Strange Scattergun)
Bought items (1): Strange Scattergun

Doesn't look like it interpreted them as Aussie Scatters to me.

Link to comment
Share on other sites

Admins already stated that automatic is not being supported or managed anymore. As Apo said, it clearly states Strange scattergun. Any and all isues are not BPTFs responsibility.

  • Like 2
Link to comment
Share on other sites

welp. using an automated system was a choice. there are consequences to every choice. trades were authenticated, so it's no one's responsibility but yours imo

 

a scam is when someone intentionally is deceptive in order to profit from it. if automatic said his items were worth that amount who was he to say different :) for sure it may have been exploited. but that's exploiting a glitch not scamming. easy with the name calling lol

 

this has nothing to do with me, but I find it quite humorous when technology meant to make life easy ends up screwing up :)

 

Link to comment
Share on other sites

And this is why I decided not to install automatic. Just cant trust stuff like that when working with large numbers.

 

Sorry about the loss dude! :wub:

Link to comment
Share on other sites

As someone who is working on coding their own bot, I find it extremely questionable that this was automatic's fault. This is a sample of how node-steam-manager returns items:

EconItem {
  appid: 440,
  contextid: '2',
  assetid: '4147791711',
  classid: '1336120004',
  instanceid: '2472193405',
  amount: 1,
  missing: false,
  icon_url: 'fWFc82js0fmoRAP-qOIPu5THSWqfSmTELLqcUywGkijVjZULUrsm1j-9xgEIUwYcXxrxqzlHh9rZCv2ADN8Mmsgy4N4F2zNvyVAobOXnZ2BldgWSBfhbWaI5o1vtUCJr7pE3BITnpOtVKlnnqsKYZJecC625',
  icon_url_large: 'fWFc82js0fmoRAP-qOIPu5THSWqfSmTELLqcUywGkijVjZULUrsm1j-9xgEIUwYcXxrxqzlHh9rZCv2ADN8Mmsgy4N4F2zNvyVAobOXnZ2BldgWSBfhbWaI5o1vtUCJr7pE3BITnpOtVKlnnqsKYZJecC625',
  icon_drag_url: '',
  name: 'Strange Professional Killstreak Australium Ambassador',
  market_hash_name: 'Strange Professional Killstreak Australium Ambassador',
  market_name: 'Strange Professional Killstreak Australium Ambassador',
  name_color: 'CF6A32',
  background_color: '3C352E',
  type: 'Strange Revolver - Kills: 1978',
  tradable: true,
  marketable: true,
  commodity: false,
  market_tradable_restriction: 7,
  market_marketable_restriction: 0,
  fraudwarnings: [],
  descriptions: 
   [ { type: 'text',
       value: 'Crits on headshot',
       color: '7ea9d1',
       app_data: '' },
     { type: 'text',
       value: 'Killstreaker: Fire Horns',
       color: '7ea9d1',
       app_data: '' },
     { type: 'text',
       value: 'Sheen: Agonizing Emerald',
       color: '7ea9d1',
       app_data: '' },
     { type: 'text',
       value: 'Killstreaks Active',
       color: '7ea9d1',
       app_data: '' },
     { type: 'text',
       value: '-15% damage penalty',
       color: 'd83636',
       app_data: '' },
     { type: 'text',
       value: '20% slower firing speed',
       color: 'd83636',
       app_data: '' },
     { type: 'text',
       value: 'No random critical hits',
       color: 'd83636',
       app_data: '' } ],
  actions: 
   [ { name: 'Item Wiki Page...',
       link: 'http://wiki.teamfortress.com/scripts/itemredirect.php?id=61&lang=en_US' } ],
  tags: 
   [ { internal_name: 'strange',
       name: 'Strange',
       category: 'Quality',
       color: 'CF6A32',
       category_name: 'Quality',
       localized_tag_name: 'Strange',
       localized_category_name: 'Quality' },
     { internal_name: 'secondary',
       name: 'Secondary weapon',
       category: 'Type',
       category_name: 'Type',
       localized_tag_name: 'Secondary weapon',
       color: '',
       localized_category_name: 'Type' },
     { internal_name: 'Spy',
       name: 'Spy',
       category: 'Class',
       category_name: 'Class',
       localized_tag_name: 'Spy',
       color: '',
       localized_category_name: 'Class' } ],
  app_data: 
   { def_index: '61',
     quality: '11',
     slot: 'Secondary weapon',
     containing_bundles: { '0': '2154' },
     filter_data: { '931505789': { element_ids: { '0': '991457757', '1': '1' } },
  '1662615936': { element_ids: { '0': '991457757', '1': '8' } } },
     player_class_ids: { '0': '8' },
     highlight_color: '7a6e65' },
  id: '4147791711',
  owner_descriptions: [],
  owner_actions: [],
  market_actions: [] }

 

app_data is irrelevant to computing whether or not an item is australium: you actually cannot determine if an item is australium from app_data.

 

Either you are running an old version of automatic, or this should happen to everyone running automatic. App_data simply does not matter for determining if an item is australium. I don't like being accusatory, but this does not seem to be automatic's fault.

Link to comment
Share on other sites

This is why I don't use my identity secret on automatic, I would much rather miss a trade here or there than have this happen...

Extremely sorry for your loss.

Link to comment
Share on other sites

41 minutes ago, Axle Change said:

 

app_data is irrelevant to computing whether or not an item is australium: you actually cannot determine if an item is australium from app_data.

 

Either you are running an old version of automatic, or this should happen to everyone running automatic. App_data simply does not matter for determining if an item is australium. I don't like being accusatory, but this does not seem to be automatic's fault.

 

backpack.tf automatic needs the app_data to distinguish a strange item from a strange australium item, because in the tf2 item schema there is no quality for australium. the appdata can tell if an item is australium or not. that is why automatic is reloading the offer if the app_data is missing.

 

if an items app_data contains a defindex: 2027 , the item is australium.

 

Link to comment
Share on other sites

26 minutes ago, j0hn cena said:

 

backpack.tf automatic needs the app_data to distinguish a strange item from a strange australium item, because in the tf2 item schema there is no quality for australium. the appdata can tell if an item is australium or not. that is why automatic is reloading the offer if the app_data is missing.

 

if an items app_data contains a defindex: 2027 , the item is australium.

 

The easiest way to determine if it is australium is just to use the market_hash_name, there is no particular reason not to use it and it is reliable unlike app_data. Not sure what you meant by defindex, because defindex and the matches to the item schema are literally the same thing.

 

Looking at the example I gave earlier:

 app_data: 
   { def_index: '61',
     quality: '11',
     slot: 'Secondary weapon',
     containing_bundles: { '0': '2154' },
     filter_data: { '931505789': { element_ids: { '0': '991457757', '1': '1' } },
  '1662615936': { element_ids: { '0': '991457757', '1': '8' } } },
     player_class_ids: { '0': '8' },
     highlight_color: '7a6e65' },

This was an australium pro ks ambassador. 61 is the defindex of any ambassadors. '2027' does not occur anywhere in the app_data. Unless there is some way to determine if an item is australium from filter_data or containing_bundles, I'm pretty sure app_data does not matter for it.

 

 

Link to comment
Share on other sites

43 minutes ago, Febby said:

Happened to me too! http://imgur.com/a/umiHZ

Fortunately i didn't accepted those trades on my mobile!

 

@NarkoMyaso It's a shame, hope those scammers will not find a method to even bypass the mobile confirmation (unless u have a bot right?), can they?

 

Curious to know: did automatic try to accept these or no? If yes then automatic is completely fucked.

Link to comment
Share on other sites

1 hour ago, Axle Change said:

'2027' does not occur anywhere in the app_data.

 

 

I checked a trade offer with an aussie in it and yeah i was wrong

 

also I did a quick test and my automatic accepted the offer too.

 

 

wow2.png

wow1.png

Link to comment
Share on other sites

58 minutes ago, Axle Change said:

 

Curious to know: did automatic try to accept these or no? If yes then automatic is completely fucked.

Yes it tried! Happened with other offers that weren't matching with my prices...

Link to comment
Share on other sites

9 minutes ago, j0hn cena said:

-snip-

 

2 minutes ago, Febby said:

Yes it tried! Happened with other offers that weren't matching with my prices...

 

Well shit. This is a lot worse than I thought, that means all bp.tf automatics are probably compromised.

 

Probably related to https://steamcommunity.com/groups/meetthestats/announcements/detail/1453954263963574589 .

Link to comment
Share on other sites

8 minutes ago, Febby said:

Well but you're pretty much safe if i understood well, automatic confirms trades and you just don't accept them am i right?

Correct, if you don't setup automatic confirmations then you should be ok because without your identity_secret it can't accept confirmations.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...