security hole in the new beadstar

Hi, this is Camille. Yes, and I just wanted to tell you that there is a security hole, or at least I think it is a security hole in the new Beatstar. So, in the old, the packs were stored in one single file. It was already possible to extract them since it got open source, but it wasn't for a while and you can only open source if you have a BGT engine and with the extractor.bgt file. Now, it is so. So you have in your user folder, so c, backslash users, backslash your users. Backslash them. Your username and there you have a folder Beatpacks. And then, you have your folders. I have the folders AAC, default and vocalwriter and then the two files, I don't know, hashes I think it's the first one and the second one is the same. And, this is so good, but if you look into the folders you can just see all audio of the soundpacks. This shouldn't be possible in my opinion because... For example, in the AAC pack I think the maker don't want the sounds to be public. So, I won't make a new soundpack for Beatstar. So, I produced already a few. They are working in the BGT version and would also work in the BJS version, but not so. So, I would like, really would like to do this, but not if anyone can see myself. So, it was already possible in the BGT version, but it's so easy now. Thank you.

Yeah, I get your point. It's not exactly right Because I guess somebody could use your sounds if you if let's say you used your voice there Like somebody could just use you use the sounds again you against you use your voice against you or something and plus It's just a sick. Yeah, I agree. It is a security problem. I Don't like the fact that he done it this way I don't even like the new look of the B star to be honest I I like the old beat star and I have no idea why he changed stuff like that He changed everything like even the packs are different like what the hell I wish there was a way to come back to the old beats term Maybe you know there should be option in the menu saying go back to the old look of beat star old I don't know general all general Menu go back to the old menu go back to the old techniques. I don't know what to call it But I'm sure you know what I mean

The only good thing for us is that with this, it's really easy to convert this soundplex to the BJT game. Because now that the server for the BJT game got down, I may be able to bring that to work again because it was open source but the unopen source of the game. Oh my god. Yeah, he really did that. So I have the downloader source so I may be able to bring that to another working server. But the default isn't working anymore for the BJT game. For the new beats there it is, for the BJT game it is not. That's stupid indeed.

good morning everyone i suggest you to be careful when downloading any of oriol gomez audio games um don't know if it's a false positive by my antivirus scanner but at least one of his games is infected by a crypto mining trojan and yeah the bombakad game for example i downloaded it yesterday just to try it out and when unpacking the portable version my windows defender claims there is a crypto mining trojan packed into the game don't know if it's a false positive or a fact, i don't know but I don't think so. Pulse positives look a little different. I think there are other games on the website that should be taken carefully. Don't know if Oriole is aware of it and don't know if it's every game that is infected but yeah you should be careful when downloading things including the beat star games

Uh, Stefan, it seems like you missed this BGT thing. Almost every game is detected with some virus. I don't know why. Even Evira, I don't know what you are using, even tried to say my own game is infected, but that really isn't true. So I don't know what is that or what your thing finds out there, but that's BGT, so don't worry.

Okay, thanks, Carmen, for the explanation. But I'm wondering why my Windows Defender claims that it is a crypto mining trojan and not a heuristic one or a general EXE unpacking thing that most false positives print out. And it's not just a general warning of a crypto mining trojan. It's a specific one, namely T-I-G-G-R, Tigger or something. And that's what makes me suspicious. Yeah, maybe a false positive, but it's very strange that not just a general warning is given out, but a... specific warning about a crypto mining trojan.

But I can tell you a few games where you get warnings like this. So there is a game called 2D Platformer. You can find it at www.masons.com. There are projects where you can find 2DP-510. It's a platforming side-scroller. And there you also have warnings or red spots by some 2D productions. It also takes some time. And you may search for this virus where you can see if it's a virus. If it's really something special or not. Or if it's just how Windows Defender names normal crypto miners.

Yeah, Mason Armstrong, and that's his game, and yeah, I mean, that's the problem with BGTUC, with all these games, Defender isn't very happy with them, it seems like it anyway, and it's not something to worry about, unless you're really downloading stuff from, you know, if you're not downloading stuff from official sites, because after all, Oriol Gomez wants to, you know, bring the best games and stuff to us, you know, he wouldn't allow this type of thing to happen, he's experienced, and I would trust him. But if you download it from some unofficial site, or some torrents, or I don't know, whatever, dark web, then obviously that might be full of viruses, trojans, whatever, like, yeah, then it's a different sort of issue, to be honest.

I think you can trust V.A.G. Archive, so V.A.G. Archive is, you know what it is, basically it's an archive of audio games and I think you can trust those guys because I am downloading things from them almost every day and I don't have any viruses. Or IFSPGT viruses, which aren't really viruses, but yeah.

I never download stuff from other unofficial or untrusted sites. No dark websites or no download sites which are very popular. ZDNet or download.com or the other crap that installs toolbars and adware and all the other things that nobody likes. I always download stuff from the original homepages of the software developers and so I did with Ariel Gomez Games. So I'm wondering why a crypto mining Trojan warning is detected in the game. But okay, if you say it's false positive, maybe I tried the game but for now I leave it where it is. Okay.

that's exactly what we should do and so if you ever get a defender saying that there is a virus or something don't believe it because if it's from official site this is just impossible right unless the website is a whole the whole website is just a scam or something

The new games are not provided in BGT. They are in JavaScript. So maybe there are much security holes because it's so new. He programmed new in JavaScript.

do you know exactly how to change the value of bitcoins that you earn to another value for example if you earn 5,000 bitcoins and you have 5,000 you change and you open the game and you will have million bitcoins or something like this because I want to buy some packs for that beat star coins and I don't like that you download packs and you buy them I also want to experiment with safeguards or to experiments with something I want to able I want to be able to change the value of my bitcoins or if the pack is bought or not

maybe cheat engine will work with this i don't know if so then the amount of bitcoins is stored in your memory and you can change the value using cheat engine if you know how that works i can give you an example tutorial uh file if you want it it's an audio file where someone is demonstrating this on the blood rain the blood rain so if you want it you can pm me

Hi, I don't think that is possible with Cheat Engine. I know that in the BGT version that was open source. So you could download the source and stuff. And if you had run the game from source at BGT, you would get unlimited bitcoins. I want to say bitcoins, but that is a different thing.