Glasnost: forum

[image: ffscouter.com]

FFScouter · Low Friction Loss Trading

Buy & Sell Losses

Automated contracts · Instant payments · Flexible pricing

Buying Losses

Tired of choosing between expensive loss selling services and tedious manual management? Now there is a third option from one of Torn's largest services!

No sign-up or API key needed, just open the page and place your order. Order for yourself or others quickly and easily!
Payments are automatic, paid with Xanax, and your contract starts within 60 seconds of opening it. No more waiting for service staff or joining Discord.
Not sure what you need? The Buy Losses page shows exactly which merits you're missing that losses can help you unlock.
Set your own price, anywhere from $350,000 to $1,000,000 per loss. Unlike fixed-price alternatives, you're in control.
Our fee is just 20%, lower than many competitors. More of your budget goes directly to the seller.
Completion Report - A complete list of all attack logs as proof of delivery.

ffscouter.com/buy-losses

Selling Losses

All contracts are prepaid. All our contracts have already been paid. No chasing, no figuring out if they are going to rip you off. Every contract has a guaranteed payout, for the price listed.

Payments are made quickly. No waiting around. Once a buyer opens a contract, things move fast.

Trusted platform. FFScouter is used by nearly 33,000 Torn players. Developed and maintained by a well-known member of the community, not a newcomer with no track record.

ffscouter.com/sell-losses Join Discord

Join our Discord to get notifications when new contracts are available.

Guide to Selling Losses YouTube Selling Losses Guide

[image: ffscouter.com]

TornPal has now closed. Thankyou for the support everyone has expressed for the project over the months, it was a pleasure, but I think it has run its course.

I am proud to announce, that after a long time lurking around with my tools, dropping hints about what I am doing and giving out sneak peeks with certain event leaderboards, TornPal is now going public.

There is still so much to build and add, but I think it is time to start shouting about what it can do so far, and let the community figure out where it best fits into your style of gameplay.

TornPal Login

Requires a Torn API key. I recommend using a "Limited" or "Full" key to take full advantage of features.

Fundamentally, TornPal hoovers up vast quantities of data, then will try to do useful things with it. Don't worry - your private data remains private though, I do not offer any private information for sale now or ever.

Here are some things TornPal already does:

• User Profiles [Public]
• Bazaar Searching
• Cheap item alerts (join our Discord for this)
• Working Stat Searches See our Company Recruitment Tool Below!
• Stock Benefit Block ROI Calculator
• Unofficial Leaderboards [Public]
• Chain/Level List Generator (Exportable to YATA)
• Dollar Sale Bazaars
• Arrest Target Finder
• Buy Losses (fulfilled via our partner Nebula)
• Faction Recruitment Tool
• Company Recruitment Tool

Did you know you can also earn additional credit to spend how you like by referring users to TornPal? Check out your Account Credit page for more information.

I have so much in the works, I am not going to list them all. It is extensive, but to give you an idea of some things on my mind:

• Faction and company recruitment tools, search by almost any metric you can imagine Released!
• Trader reputation tools - identify who has a history of mugging their trading partners
• RW analysis tools (ie analyse when your target is at their most vulnerable and their weaknesses)
• Event log sharing (prove something did/didn't happen doing between two times, without sharing your API key)
• Custom item market and bazaar alerting
• Machine-learning powered battle stat predictions
• Open market for buying/selling losses, spies, mercs and more (always get the best rates between all providers with less fees)

Some data will become available over my API, take a look at what is on offer already:

TornPal API Documentation

Anyone is welcome to build tools on top of this API. I just ask that you make as few API calls as needed to get information.

Weav3r's Bazaar Script

If you'd like to see TornPal's bazaar listings in the item market directly to avoid needing to open the website, check out his script below:

https://www.torn.com/forums.php#/p=threads&f=67&t=16451791&b=0&a=0

Video: https://www.youtube.com/shorts/GxU5YJDl_6E

TornTools FairFight Scouter

TornTools has already implemented our FairFight Scouter, originally designed by rDacted, now overhauled and back better than ever! (Original Topic).

To activate it, open up TornTools and go to the "FFScouter" menu, and enable it there and in the "External Services" section. This will now show you the FairFight difficulty scores of your target! You must use a Limited key or higher to activate this feature.

Once activated, it may take a few minutes before target scores are retrieved, as the system will need to receive your key, calculate targets and then returned them to your script to display.

If anyone wants to implement this in your own scripts, tools or make an official version for TornPDA etc, please get in touch.

So, this post has been a long time in the making, but after receiving the OK from Chedburn, here it goes.

Between 2017 and 2018, some of you may remember Torn was being hit with DDoS attacks constantly. You may remember some of the announcements:

https://www.torn.com/forums.php#/p=threads&f=1&t=16046850&b=0&a=0

https://www.torn.com/forums.php#/p=threads&f=1&t=16039600&b=0&a=0

Now I work in cybersecurity, so I know how petty but damaging these can be, so I wondered what I could do about it. During one attack in particular, somebody sent me an interesting Pastebin, containing a chat from a username which was purportedly the attacker, so I decided to dig deeper.

Here is the original Pastebin: https://pastebin.com/LMKj1dj7

Using the alias, I found a variety of Torn accounts, and accounts on the internet, all matching the original name of "Mezy" or variants of it. Also with that, I was able to locate his full name, date of birth, phone number, home address, names of relatives, social media accounts and more (I even found a whole bunch of unflattering pictures of him which have since been removed). FYI much of this information has been removed for various reasons since lots of the websites involved were taken down by police.

Some of his Torn Accounts:
https://www.torn.com/profiles.php?XID=2118604

https://www.torn.com/profiles.php?XID=2145649

https://www.torn.com/profiles.php?XID=2118584

https://www.torn.com/profiles.php?XID=2151999

https://www.torn.com/profiles.php?XID=2151997

https://www.torn.com/profiles.php?XID=2136835

As part of the findings, it appeared he also ran a website called stress.wtf - offering "booting" services. For those unfamiliar, a "booter" is when somebody offers a DDOS-for-hire service in exchange for (usually stolen) money or cryptocurrency. I had some pretty solid connections to show it was him running it or at least heavily involved.

Sensing an easy win, I forwarded my findings to Chedburn. We had several conversations in verifying the data, but also guided him through the process of getting it reported to the correct UK government agency for the police to take action, since not all police forces really know how to handle cybercrime reports like a DDOS.

Fast forward a few weeks to September 2018, our guy is arrested. I'll quote the email Ched sent me, but it was safe to say my information on him was spot on:

Hi {my real name}, 
So thanks to the information you provided and that reporting link you gave me...  
Our DDoS attacker was picked up by the police yesterday for an interview.
- 15 years old
- Mother attended (was shocked and didn't know as expected)
- He is the sole owner of the website stress.wtf, it's being shut down
- Was completely open and provided read access to the police
- Obviously very apologetic now that he's been caught
- He had also attacked other sites, including law and financial institutions
- Prosecution very likely
Thanks again.

Surprise surprise, the attacks stopped, and Ched posted this: https://www.torn.com/forums.php#/p=threads&f=1&t=16061308&b=0&a=0

And then fast forward a few more weeks to October 2018, some quotes from the detectives investigating when providing a summary to Ched:

>In summary, the 3000+ User DDoS collective have been greatly disrupted and have abandoned the Stresser and its social media platforms from which attacks were launched.
>the matter has snowballed the investigation into the detection of literally hundreds of crimes worldwide. Thank you for your engagement once again.  
>DDoS attacks have been confirmed from this group on multiple law enforcement sites, Justice Depts, Servers, financial institutions, even PPV boxing events! Moreover, a network involving credit card fraud has also been exposed.  
>We are branching out in respect of suspects and have 50+ nominals confirmed as buying the stresser globally
>In respect of our Suspect, the attacks on Torn were the tip of the iceberg, the volume of activity has been incredible, particularly the credit card fraud element.  
> the volume is unprecedented.

Nominals in police work is a way of saying people/suspects. So yeah, 50 people involved were identified.

Now some of this was a surprise of course, but being quite used to working in cybercrime areas, it wasn't shocking really. Often, people paying for these "booter" services use stolen credit cards bought online. Nevertheless, it was good to see the matter was being taken seriously.

Thanks to a variety of factors, such as the UK court system being painfully slow to prosecute and Covid-19, it took a long time to move further with this. However, in January 2023, "Mezy" finally pleaded guilty to 19 offences and received a 20 month suspended prison sentence. There were plenty of news articles covering this since it also impacted several pay-per-view streams of high profile people and some mentioned Torn too, but I won't link to them here.

A little opinion here - this isn't to demonize somebody. He was a 15 year old kid at the time, who made some very stupid mistakes, but it shouldn't define him going forward. I really hope he can move on and put his skills to legitimate use. I hope nobody in the community gives him a hard time for that. That being said, if anyone gets a feel for doing something similar, these are crimes, and they will be investigated. There is always somebody smarter than you, and you only need to make 1 mistake to get caught.

I speak from personal experience. Many years ago when I was a teenager I was like this kid. I used my skills for questionable purposes. Now yes I never started DDOSing people or started a fraud ring and had the police get involved because of it, but I did do some things for the kudos. The thing to keep in mind is that the internet doesn't forget - long after that kudos fades away and you stop talking to those people (because you will outgrow it), those news articles will linger and impact everything like your jobs, your future kids will see it, your family will be disappointed in what you've done and you could end up with a criminal record. Just don't do it.

Tldr:

Read the data use policy on the website

Add your API key to the "Getting Started" form

Use the same API key in the script you use to retrieve the estimates (see below for options)

Visit: ffscouter.com

Then download a supported tool to see the estimates

Supported Tools:

TornTools - FF Scouter (Weav3r & xentac)

Need help? Join Our Discord!

FFScouter Video by Yenna (TornPDA)

https://www.youtube.com/shorts/R3v0DswJW54

FFScouter Target Finder Video by Yenna (Mobile/Desktop)

https://www.youtube.com/shorts/SWt_bJxpCRU

Torn's Most Accurate Battle Stat Predictor

[image: uploads.glasnost.dev]

Source: Omanpx [1906686] 29/03/2026

Fair Fight ratings

Each tool will use their own difficulty ratings, however, in my view the following are approximately right:

< 3 - Easy

3-3.8 - Manageable

3.8 - 4.5 Very difficult

> 4.5 - Almost impossible

With all the recent drama and controversy, it makes sense to narrow the scope of individual projects rather than an "All-In-One" approach, and today is the first step in that move. With the release of FFScouter, it is now recommended to use a Custom API Key to narrow down the API data required, it is in line with the template provided for the data policy, and additional information is provided for how the data is used.

Importantly, I have run this by a developer (Admin), who is happy this policy sets out things in a clear way. I have also set out he and another member of staff can have full database and code access whenever they desire.

If you are interested in the only data stored on the database, you can check out how my data appears here and here.

What Does FFScouter Do?

FFScouter is a free tool designed to help estimate the relative difficulty (and therefore battle stats) of your opponent. It is not as accurate as a spy, but independent data analysis by Omanpx has shown it as the most accurate tools on Torn, and is completely free of charge, open to everyone.

The process utilises the Fair Fight score you receive during an attack. This score gives you an idea of how difficult an opponent is compared to your own battle stats. So by knowing your own battle score and the fair fight rating, you can approximate their difficulty.

[image: torn-wiki-uploads.s3.amazonaws.com]

[image: torn-wiki-uploads.s3.amazonaws.com]

Our Fair Fight score, unlike Torn's goes above 3. We believe this is useful to help distinguish a 3.66 FairFight target (approximate to your own difficulty) versus an opponent who may be a theoretical Fair Fight of 8, which is in all practical sense impossible for you to defeat alone.

How accurate is it?

Well, the answer is more complicated than is easily explained without a lot of statistical caveats - but pretty damn accurate for the most part. Targets with stats above 25bn are generally less accurate due to the limitations of the math and less players in that stat range. However, targets below 25bn and have a reasonably recent update to their estimate (less than 3-4 weeks old), you can expect to be in the right ballpark.

It is not possible without spy data to give you a breakdown of the stats of your opponents. This is an approximation only of their total stats, so their battle stat build, armor, weapons and other factors can hugely impact the outcome of a fight still.

What can I do with FFScouter?

Well, as stated on the data policy - anything. The estimates are public, as is access to the tools. You are free to make your own tool to use the API endpoint created too.

Generally, if you cannot afford spies or the cost of the spies is not worth it, FFScouter is the ideal tool for the job, particularly at a quick glance. In future I am aiming to enable other tools to integrate, allowing you to share your spy data from TornStats and other tools with friends, factions or anyone else you want. When this is available, it will be announced and you will have to opt-in to take advantage of this.

Join our Discord to receive any future alerts and updates!

I mean a Google could answer that. Hashing functions can be used for data integrity checks, such as a CRC32. No sane person would use that in cryptography.

I think you misunderstand my position. I'm not bothered about that point, I use a lot of AI so the existence or not is somewhat moot these days, I am always more keen if they could answer it without AI if they really wanted to. They are simply wrong in their counter point and should probably just stick to the matter being discussed instead of venturing into other topics which they clearly don't understand as it does nothing for the original point of debate. A proverbial "look over there".

You seem to be confusing cryptography and hashing functions. Hashing functions can be used as one part of strong cryptography, but are not themselves cryptography.

I can assure you, your confusion between the two is quite telling that you may not comprehend it either.

Honestly, this seems for the best albeit I come at it from another angle. I am deeply uneasy with most gambling on a personal level, but it does extend into Torn and I know a lot of people sink a lot of IRL money to buy DPs and then gamble on Torn. They can self exclude which is great, but then these off-site casinos would circumvent that protection.

I disagree with suggestions of having higher requirements or implementing some kind of technical controls etc. I mean this as kindly as I can, bogie/PJ et al have limited time and aren't tech people by nature in the sense of developers, and the time to investigate such things with a high degree of confidence is far higher than how long it takes a vibe coder to shart out some code which might violate any such frameworks. I'd like to think they have better things to be doing.

I am all for it.

I think you have the wrong thread.

Boop

I offered several times, they've always said no :P

If you are unable to follow an instruction, such as using a pillow, which is highlighted to you several times in the process (and in the guides), then this is not the platform for you.

Buyers are expecting a good service, which includes minimising the risk of accidental damage. Arguments like "I didn't manage to hit them" or "I did no damage" are silly, as you only find that out after risking causing damage in the first place.

Damage then accumulates and could easily disrupt their kill streak. That, in turn, damages the reputation of the whole service. Because you can't be bothered to change an attack item.

Server got hammered at the start of eliminations, should all be working again now after some emergency optimizations.

My question is what percentage of this did you write, understand and test yourself?

My second is how much of it you can test and understand without needing AI.

[image: uploads.glasnost.dev]

There is no obvious link to your ToS which is not obviously stated anywhere and took me a little digging around to find it. It needs to be present wherever the user is asked to enter their API key.

[image: uploads.glasnost.dev]

[image: uploads.glasnost.dev]

https://ffscouter.com/target-finder

Just added elimination mode for Target Finder and gave a huge usability/experience update to mobile users on Target Finder so it isn't quite as shit :)

Enjoy!

Bump

Somewhat in the works. So approving things in plain English is perhaps trickier. What I am looking to implement is a series of common checks - for example, does any selection allow the user to see sensitive data like logs, cash on hand, trades, attack data and so on. Part of the analytical data is also statistical analysis, so I can aggregate data behind the scenes to identify common services (say TornW3b), and then use that to spot any requests out of the ordinary, such as somebody using a comment of "TornW3b" but not from the correct IP range or requesting unusual selections.

But, for it all to work well, wanted to see it in use first which is why the beta has come out at this stage :)

Reserved

Reserved

Beta Notice:

This tool is new. It may have bugs, it may have incomplete or inconsistent data. Please be patient and report issues to me.

Website: watchtower.glasnost.dev

Ever wanted to know who is using your API key?

Need to know how it is used over hours, days or weeks?

WatchTower Features

• Find out what data your API key is pulling
• Keep long-term usage records you can download in full
• Group, filter and sort by numerous parameters
• Share reports, logs and more in a verifiable way
• 100% Free, Forever
• Immutable - once a key is added, it is there for 90 days. No hiding*

* - Once a key is added, it is there for 90 days unless you renew it. Pausing or deleting the key will naturally stop this, of course, but as these require logging in to your Torn account, it is more protected than simply requiring the API key itself. It is designed to prevent a third party with access to your key from disabling the logging mechanisms. This approach has been approved by the admin/developer team.

The Settings page in Torn does not show a long history, and even the API only shows relatively recent API key usage. This makes tracking usage difficult. As more scripts pop up, I have looked into several to highlight issues and found that tracking how a key is used is no easy task, even for myself (a reasonably seasoned developer).

So, I figured making a tool to make tracking easier would be a good idea.

Screenshots

Graph View:

[image: uploads.glasnost.dev]

Table View:

[image: uploads.glasnost.dev]

Request Grouping (by IP and comment):

[image: uploads.glasnost.dev]

Doughnut Visualisation:

[image: uploads.glasnost.dev]

[image: uploads.glasnost.dev]

There have, you have missed them is all. With an event coming up the frequency of contracts has temporarily dropped, all providers are having this.

You're welcome 😊

To answer the question, debuffs, armor, weapons etc are excluded. Only baseline total battle stats factor into it and nothing else can impact it.

[image: uploads.glasnost.dev]

Are you really using AI in a reply to me raising concerns about your technical over-reliance on AI in your tools?

My concern is you have no capability to verify what an AI agent is doing. That, if not dangerous, is at least irresponsible. Using AI is fine if you could do it yourself and it is speeding up development, or using it to verify your work, or even giving alternative approaches. But all of thos rely on a base level of understanding which just isn't coming across at all.

My concern/advice would be to learn the fundamentals first and do things without AI, and not lean on them so hard you lose sight as to how any of it actually works.