Cultcow EvaXephon / Yanderedev / Alex Mahan / Alexander Stuart Mahan / cannotgoogleme - Edgy weeaboo coomer with pedo tendencies and 15+ years internet history as a lolcow, now known as a disaster developer behind eternal debug build called "Yandere Simulator", confirmed groomer and dollfucker

The end of EvaXephon?


  • Total voters
    2,413
Looking at it a bit more objectively, there's only so much you can do with what access it sounded like they had:

They said they got access via a password reset so it was likely social engineering, which would be loud and inherently time limited. You're only going to have so much time before other 2FA or support tickets will lock you out, so you can't set up anything or do any "monitoring".

Knowing that and you wanted to have maximum fun, what would your targets be?

  • Discord: No good, 2FA
  • Reddit: The man paid $3k to sooth his ego, fucking with that is a worthwhile goal
  • Emails: The account provider is so fucking shit it doesn't have non-webmail access, and downloading clients don't work. You won't have enough time to write a custom script to rip everything, so you do what you can to grab some stuff
  • Github: Since the dump doesn't have the .git directory (where all code history is kept) and the poster said his "internet was being shit", I'm guessing his connection was bad enough that a full git clone (which would pull down all previous history too) would be too time intensive, so he went with the lighter approach of downloading a zip via GitHub. This is why we don't have any of the assets (submodules aren't included).
  • Tumblr: Dead, but sure why not
  • Other social media: Protected via 2FA
Doing donuts and claiming you're Dear Feeder is a bit cringe but I think we got the best we could've. Maybe with some more coordination we could've gotten more, but we're not the illuminati here; this is probably just a caper that accidentally succeeded.

I mean, the source code itself is still pretty good; we knew it'd be pretty stupid from the decompiled assemblies but seeing it in source form proves there's not some masterful work behind it, despite what alex claims.

Of course, if it turns out these assumptions aren't true and there was more time, this was indeed kind of a flop.
 
Looking at it a bit more objectively, there's only so much you can do with what access it sounded like they had:

They said they got access via a password reset so it was likely social engineering, which would be loud and inherently time limited. You only going to have so much time before other 2FA or support tickets will lock you out, so you can't set up anything or do any "monitoring".

Knowing that and you wanted to have maximum fun, what would your targets be?

  • Discord: No good, 2FA
  • Reddit: The man paid $3k to sooth his ego, fucking with that is a worthwhile goal
  • Emails: The account provider is so fucking shit it doesn't have non-webmail access, and downloading clients don't work. You won't have enough time to write a custom script to rip everything, so you do what you can to grab some stuff
  • Github: Since the dump doesn't have the .git directory (where all code history is kept) and the poster said his "internet was being shit", I'm guessing his connection was bad enough that a full git clone (which would pull down all previous history too) would be too time intensive, so he went with the lighter approach of downloading a zip via GitHub. This is why we don't have any of the assets (submodules aren't included).
  • Tumblr: Dead, but sure why not
  • Other social media: Protected via 2FA
Doing donuts and claiming you're Dear Feeder is a bit cringe but I think we got the best we could've. Maybe with some more coordination we could've gotten more, but we're not the illuminati here; this is probably just a caper that accidentally succeeded.

I mean, the source code itself is still pretty good; we knew it'd be pretty stupid from the decompiled assemblies but seeing it in source form proves there's not some masterful work behind it, despite what alex claims.
This could have been done far, far more competently. Alex is in Pacific Time and it would have been 3AM (probably when he decides to hit the hay). There was all the time in the world to run git clone (deep) and cap everything funny in the email. The high-value targets were not adequately recognized and the leak was made too public far too quickly. This could have been gold and now it's fucking pyrite.
 
This could have been done far, far more competently. Alex is in Pacific Time and it would have been 3AM (probably when he decides to hit the hay). There was all the time in the world to run git clone (deep) and cap everything funny in the email. The high-value targets were not adequately recognized and the leak was made too public far too quickly. This could have been gold and now it's fucking pyrite.
Unbanning everyone was a good play but he should have made a post with why he did this, being Alex is scamming everyone. Maybe link a video or two about the issue. Post the tinybuild email. And that's it. Saying they were Null and le KF was cringe and a bad play.
 
This could have been done far, far more competently. Alex is in Pacific Time and it would have been 3AM (probably when he decides to hit the hay). There was all the time in the world to run git clone (deep) and cap everything funny in the email. The high-value targets were not adequately recognized and the leak was made too public far too quickly. This could have been gold and now it's fucking pyrite.

Absolutely this. Hell, I'm one of the people who believes that the hack should have been left unnoticed until the high-value targets were securely obtained. Most likely, YandereDev would never know what occurred, and the hacker would be able to nab all that information without anyone guessing before publicizing the leak.

Instead, they screwed up, impersonated Null, made sure that Alex got even more asspats and sympathy than he did before, and set game development back... one or two weeks. If that. This was a wasted opportunity, which is disappointing considering that if the hacker had quietly hacked in and given us lots of information, we would have a much bigger goldmine than we do now.

And, considering all the "support" Alex gets from his fans, he might just be motivated to finish Osana sooner.
So not only was the hack an epic failure, it also failed to glean any useful information and essentially gave Alex even more support than before.
 
I have pretty powerful internet (350mbps), is it possible for myself to just drag the GitHub out
It's already been deleted; as I said, if you've reset someone's password you won't have too much time until someone notices.
This could have been done far, far more competently. Alex is in Pacific Time and it would have been 3AM (probably when he decides to hit the hay). There was all the time in the world to run git clone (deep) and cap everything funny in the email. The high-value targets were not adequately recognized and the leak was made too public far too quickly. This could have been gold and now it's fucking pyrite.
It sounded like it took the poster hours (multiple) to upload a 1.7 GB zip file; assuming his upload is about an eighth of his download speed, I genuinely think it would've taken them too long to run a deep clone on whatever arseworld connection they're using.

Of course, the smart thing to do would've been to either try and ask someone to help who has decent internet, or just use the Project Import feature of literally any other git service. This wasn't exactly perfect, but I think getting actual source code is still a pretty good outcome considering the circumstances.

I guess one of the downsides is we're going to get a fresh wave of cringey programming """reviewers""" pointing at trees and laughing about how alex really should've used a forest on that line.
 
I'm looking at the source code. From what I know about YandereDev, the big thing he promised over years was Osana, but looking at the directory tree I see almost no scripting assets for it what so ever. It's mostly voice lines and shit. I mean, needless to say, this is all a big fucking mess.
 
I'm looking at the source code. From what I know about YandereDev, the big thing he promised over years was Osana, but looking at the directory tree I see almost no scripting assets for it what so ever. It's mostly voice lines and shit. I mean, needless to say, this is all a big fucking mess.
Is Osama just using the code already in the game or is there just nothing?
 
I'm looking at the source code. From what I know about YandereDev, the big thing he promised over years was Osana, but looking at the directory tree I see almost no scripting assets for it what so ever. It's mostly voice lines and shit. I mean, needless to say, this is all a big fucking mess.
I'm fairly certain that functionally Osana is essentially just another student NPC and doesn't really do anything special until the very last day of the week where she puts a letter in a shoebox and you get a cutscene, then a form of game over. Just glancing over the code I believe I saw various reactions Alex's insert has depending on how Osana is violently dispatched, but most of the actual code Osana "needs" doesn't really involve her and instead deals with NPCs doing things in her presence, like the bodyguard NPC.
 
Is Osama just using the code already in the game or is there just nothing?
She has a few different event files and nothing else. From what I can see, he uses the "#if UNITY_EDITOR" compiler tokens to prevent these events from being put into compiled versions of the game. So there should be no Osana doing anything in the live game. Does that align with what you guys see?
 
Is Osama just using the code already in the game or is there just nothing?

Osama? Never knew a high school student could be a terrorist.

To answer your question - yes, code for Osana's and Raibaru's events does exist in the game. However, some of it is simply used to destroy Osana and Raibaru (because Alex doesn't want you seeing her), and other code specifically for their events does exist.

She has a few different event files. From what I can see, he uses the "#if UNITY_EDITOR" compiler tokens to prevent these events from being put into compiled versions of the game. So there should be no Osana doing anything in the live game. Does that align with what you guys see?

Yes - I have the decompiled code and source code both on my computer, and I can see that, according to the compiler, Osana won't do anything in the live game. On the source code, it's clearly marked as #if UNITY_EDITOR.
(I don't actually have the game, though, so I can't test this right now.)

Screenshot:
Screen Shot 2020-07-05 at 12.14.04 AM.png
 
Alrigth. Im the autist who spent the last 30min looking through yan devs code. Im now reporting on all interesting discoveries I made. All stuff listed is stuff, that exists only in the editor. It is not commented out. (For the programmers among us, everything was inside a #if UNITY_EDITOR) YanDev is using and testing it. There are things in there we already now about. Just thought to include them anyway.
  • Osanas suitor is boy 6
  • Raibarus routine changes, if her reputation is low, osana is dead, or she is dating someone
  • Osanas routine changes, if raiberu is dead or a loner
  • senpai witnessing osana die is game over
  • after seeing a corpse raibaru's personality changes from protective to lovestruck
  • lovestruck personas run to their lovestruck target or flee school
  • Osana has a pool routine, consisting of sunbathing
  • there is void godess stuff that can spawn blood, bloody limps, bloody uniform
  • there is a debug command for Jojo and Nude (makes yanderchan nude, censor steam disabled)
  • blacklight easter egg
  • miyuki and kizunaAI easter egg
  • Osana has a Talk with Musume event
  • osana has a club event
  • osana has a vending machine event
Osana reaches her destination and performs an animation.
Osana waits for the drink to come out.
Osana gets mad when the drink doesn't come out.
Osana kicks the machine
Osana gives up and decides to leave
  • Osana has a monday before class event, where she has 2 bento boxes
  • there is a scene to introduce amai at a bus stop
//"Um...excuse me..."
//"I couldn't help but notice that you seem quite sad about something. Would you like to talk about it?"
//"Huh? Um...have we...met before?"
//"Oh! I'm sorry, my name is Amai Odayaka..."
//Senpai talks about Osana's death.
//"Oh...I...I'm so sorry to hear about that..."
//"Hey...it's not much, but...maybe this will take your mind off of it for a moment?"
//Switch to donut box
//"Oh...um...thank you."
//"Go ahead, take one!"
//Switch to artistic shot of trees
//"Mm...it's good!"
//"Of course! Nobody makes better pastries than my mom and dad!"
//"Actually, I'm heading to my parents' bakery right now. Would you like to come with me?
//It'll take your mind off things for a while!"
//"Oh...no, it's okay...I wouldn't want to be a bother..."
//"It wouldn't be a bother at all! If I just leave you here, I'll worry about you!"
//"Heh. Well, I guess it would be better than moping around."
//Switch to shot of both characters at bench
//"Then let's get going!"
//Fade to black

//////////////////////////////////////////////////
///// Senpai and Amai talk in Amai's bakery. /////
//////////////////////////////////////////////////

While the incedent was handled in the worst way possible, at least something of value was recovered.
But the price Null, the infamous hacker and terrorist, has to pay for this info was not worth it.

Please like, share and subscribe.
 
It's possible to restore a Github repo after it's been deleted. I noticed that the Github repo actually belonged to somebody else because private repos used to cost money. It might be possible to impersonate Alex and get the man who actually owns the repo to restore it. Do we still have access to Alex's Github profile?
 
Back