Multiplayer hackable by host for godlike mode?
So I logged in yesterday shortly after the patch was released and I see one player already with Reegar Carbine rank X. I thought that was strange since the patch had only been out for hours, but maybe some people with money to burn already had full inventory and could quickly buy premium packs to get it to X. I knew the money hack from ME3 MP was fixed in ME:A, so I just stopped thinking about it.
Forward to today when I join a group with quick-match. I end up joining an in-progress match at the end of wave 1. I start shooting and things are dying quickly. I figured some other player was focus-firing my targets too or my Black Widow was just hitting all the right spots. Then I realize my Black Widow is stuck at 15 clip size and never uses up any ammo. Then I switch to hurricane and it also is stuck at 15 main ammo and 999 spare and also one-shots everything. Everything is one-shot kill except things with shields, then its 1 shot for shield and 1 shot for health. My shield could be damaged, but would jump to full very quickly. There was a rare death with one of the other players. Powers were also instant cooldown refresh, but power cell abilities ran out like normal and needed to be refilled at supply box.
As you might imagine, this was pretty epic fun and I realized two of the other three players just sat at the extraction point in cover. The match ends and I stay in the lobby with the group. One of the players leaves and a new 4th joins, but the two that stayed in cover remained. Next match was the same thing. I was riding this wave as it was great fun. This lasted for about 5 matches and then the host drops right after the full extraction message where it says finding a new host. Then I was in some weird solo round of wave 7. I quit out because the god mode was no longer active, normal damage, clip usage, etc.
Anyway, I am fairly certain that the host of that game was doing some memory hack to lock values in place similar to the old money hack. Since multiplayer games are hosted by one of the players, whoever is host is "the server" and thus the other clients would trust its current state, etc.
Anyway, has anyone else seen this behavior yet?
