How to deal with malicious CB apps?

[striped_speedo]

This is a question I hope that @punker barbie can help with, please.

I have clear proof that there is malicious functionality contained in one or more CB apps. I know the username of an alt account used by the developer to execute said functionality and a list of the apps running in a room where this functionality was executed. Using the list of apps I can narrow down who the developer actually is.

My question is: even with clear proof of malicious behaviour by apps, how can one get CB to take it seriously enough to take action, i.e., to remove the apps and ban the developer?

Thank you!

 

[cexmental]

I hope not. My all-in-one-app, Synergy, can not function in the v2 API. After 5 years of almost constant updates, I'd be rather upset to see them cut the v1 apps "just because."

Cheers,
Cexmental

 

[striped_speedo]

I hope not. My all-in-one-app, Synergy, can not function in the v2 API. After 5 years of almost constant updates, I'd be rather upset to see them cut the v1 apps "just because."

Cheers,
Cexmental

I've suspected for a while that they might choose to sunset V1 apps, though that will likely create a lot of chaos. The V2 app submission guidelines send the message that they know that V1 apps are not safe and have been used in multiple malicious ways that they have actively suppressed in the V2 framework.

 

[pbonACF]

I've suspected for a while that they might choose to sunset V1 apps, though that will likely create a lot of chaos. The V2 app submission guidelines send the message that they know that V1 apps are not safe and have been used in multiple malicious ways that they have actively suppressed in the V2 framework.

Another difference in v2 is that many v1 apps' code are obfuscated, functional but unreadable. This is in violation of v2 App Guidelines:

"code should not be obfuscated. If your app's code is obfuscated, it may be delisted. You can find the App guidelines on the Introduction page in the Developer Portal documentation."

So v2 apps, developed in the new IDE, are readable to CB staff, making it more difficult to hide malicious features.

Some decades ago I thought COBOL would take me to retirement. Not so We always have to upgrade our skillset and not become too attached to our tools.

 

[striped_speedo]

This is a conversation from just a few minutes ago with i0_ol, the author of The Menu, admitting to his app having backdoor commands. Feel free to pass this on to anyone you want. I will be submitting a ticket to CB Support now.

 

[punker barbie]

@striped_speedo Please contact support@chaturbate.com for assistance

 

[striped_speedo]

@striped_speedo Please contact support@chaturbate.com for assistance

@punker barbie Thank you! I have submitted a report.

 

[striped_speedo]

@punker barbie Thank you! I have submitted a report.

@punker barbie My email to CB Support was sent over 10 days ago. I received an automated response but no human response yet. I sent you a PM here as well if it possible to find out if my request has been looked at, please. Thank you!

 

[Iluvablow69]

I was in a room once who used a secret shovv app - I guess they meant secret show.
They started a hidden / ticket show, and it immediately added me to the show for free, along with about 50 other people haha
Not good for the model I know, but I love that app now haha (It's a joke, no hate)

However, being able to secretly silence Users is crazy.
I have seen that app in so many rooms, I have never personally experienced it though.
Who knows, maybe I just assumed the model doesn't read her chat and moved on. Pretty bad if it's true though.

 

[miadanes369]

Cwaps, I was using the menu for so long time...
Are you sure?

 

[striped_speedo]

Cwaps, I was using the menu for so long time...
Are you sure?

100% sure, unfortunately

 

[miadanes369]

well, then it might explaining some people saying that i ignore them, or that im busy with something when clearly as no nude, im just sitting there and chatting with them, mostly... wait, so we shall not use the menu... are we talking about v1 or v2 apps?

 

[striped_speedo]

well, then it might explaining some people saying that i ignore them, or that im busy with something when clearly as no nude, im just sitting there and chatting with them, mostly... wait, so we shall not use the menu... are we talking about v1 or v2 apps?

I encountered this behaviour with the V1 app, but I assign it to the developer so I won't trust any of this apps, V1 or V2.

 

[_pilya_]

I wonder if this explains why some of my users cannot send messages to me...Thanks I'll look into this more.

 

[Wolfjaeger]

As both a model and a viewer, I have seen a TON of the issues described here in my room, rooms I visit and rooms I moderate. I am now on all V2 apps and I am ruthless about banning suspect viewers. One of the rooms I mod, it took the Model and I almost a week to sweep out and clean up. Once we did, her room pops from maybe 100-200 to over 700 viewers and her tips are flowing.

Speaking as a model, we have to do a lot better job of choosing and working with our moderators so they know what to look for and help us keep things going.

I also work in IT, Enterprise Architect and *nix greybeard. While many models are tech savvy, I see a lot of cognitive bias that they think they understand technology better than they really do. Not sure how we can educate better cybersecurity awareness for models?

 

[tokensarentforkids]

You have the wrong understanding of what a blacklist is in this context. Say he puts your big tippers on his blacklist, and when they find themselves being ineffective in your room because no one is responding to their chat (because no one but themselves can see their chat messages) then they would feel disrespected and leave and you would lose their patronage. That's the real harm: not individual users losing their ability to chat, but models not having control of their rooms.

Almost all tippers use tip notes, PMs, pvts, and off site, inappropriately blocked messages would quickly be exposed. But I'd agree that the models should be able to see the code. ChatGPT can probably tell them if there is anything unusual if they ask the right questions.

 

[Wolfjaeger]

Almost all tippers use tip notes, PMs, pvts, and off site, inappropriately blocked messages would quickly be exposed. But I'd agree that the models should be able to see the code. ChatGPT can probably tell them if there is anything unusual if they ask the right questions.

I've had my stream knocked offline. I've had my stream while running appear to be offline. The number of

I encountered this behaviour with the V1 app, but I assign it to the developer so I won't trust any of this apps, V1 or V2.

Have you had any luck with your CB support tickets?

 

[striped_speedo]

Have you had any luck with your CB support tickets?

No. It's been almost a month and nothing from CB Support except the automated response after I submitted the ticket.

@punker barbie can you confirm if CB Support has reviewed the ticket or not, please?

 

[cbhours]

No. It's been almost a month and nothing from CB Support except the automated response after I submitted the ticket.

@punker barbie can you confirm if CB Support has reviewed the ticket or not, please?

Can you include like a ticket number or username or something for them?

 

[striped_speedo]

Can you include like a ticket number or username or something for them?

I sent details to @punker barbie in a PM over 3 weeks ago.

 

[punker barbie]

I sent details to @punker barbie in a PM over 3 weeks ago.

Support has confirmed that they have received your email and is currently being looked into. We appreciate your patience. Support will get back to you as soon as possible.

 

[striped_speedo]

Support has confirmed that they have received your email and is currently being looked into. We appreciate your patience. Support will get back to you as soon as possible.

Thanks @punker barbie