Don't use shubla's client(Purus Pasta), it's spyware

[kmarad]

Who needs a keylogger when you store the credentials locally ?

Well its nice to get access into bank accounts etc. as well, not only client credentials?

Sure you can make it look like fun, but you are actually logging passwords in plaintext.
That sucks dude, and imho that's even worse than logging hats and IG locations.
Do you even care about your clients safety?

[telum12]

Who needs a keylogger when you store the credentials locally ?

Well its nice to get access into bank accounts etc. as well, not only client credentials?

Sure you can make it look like fun, but you are actually logging passwords in plaintext.
That sucks dude, and imho that's even worse than logging hats and IG locations.
Do you even care about your clients safety?

Shubla should definitely store tokens instead of creds but also if someone has that level of access you’re probably fucked regardless of how hnh creds are stored..

[telum12]

Also wtf is this thread just add a opt-out button in settings. Most people don’t care and the few that do can disable it. Yay. Everyone happy

[shubla]

Improved tokens sensible as a reusable authentication were added only recently. All other clients ever have always done the same, so maybe go blame on their threads too.

[ATHF]

Hello, I started to use Purus Pasta client recently. Out of curiosity I opened the big map, which is ALT+R. Usually, when I launch the client first time it is empty, with zero markers on it. But for some reason I had this blue "Hideout" marker, which is not mine at all. I have zero relation to this location, at neither level it belongs to me.

Below attached is evidence #1.

Closer look at location and marker.


I previously heard of spyware software implementation in Purus client.

shubla reported that video evidence of him killing sprucecaps is actually an Experiment on topic of water warfare.

I doubt it. Report him for illegal software.

This is actual spyware, delete your saved sessions where you entered password. Do not enter it manually, neither copy the password into the Purus client field, because it will send it to shubla.

[ATHF]

bump

[Audiosmurf]

Bumping 3 minutes after your initial post undermines your point by making you look like a retarded person. Hope this helps.

[BoxingRock]

This is a fairly well known fact among regular players in the community.

Even loftar himself has made damning public comments about how the client seems to gather unnecessary private data and confirms that shubla would absolutely have access to all of our private maps, markers and information but the only single reason it has not been removed entirely is because "he doesn't think shubla would do that."

You can find these comments in the Ethically-Sourced Copy-Pasta Client thread

Thankfully most of the community knows shubla better than loftar and we know he would definitely use this data to cheat and steal.

Thank you for making this thread. I have seen a lot of new people joining the community in discord lately and it is a good idea to have this information being frequently talked about to protect new users who may not know who shubla is and what he is capable of.

[abt79]

+1

Even if devs read the forum they probably still wouldn’t care very much tho. Loftar’s response the last time someone brought this up amounted to “yeah shubla you should probably, uh, do something about that? If that’s convenient to you.”

Must be the only person here that makes them feel smart idk

[Nightdawg]

Why would the client download someone else's map in your computer?

I'm not being sarcastic or anything, I'm genuinely wondering what happened there.

Random chunks usually appear when the map attatches older chunks cause it's retarded. But I don't think it's supposed to read the map files from other clients, unless it's reading from the vanilla client? I have no clue, but I am curious, have you played on another client? Have you wiped your hnh memory since last world?

I'm not defending shubla, I'm just curious about why this could happen on a technical level. That's not how "collecting extra data" works, it's not supposed to go from one client to another client lol.