In the endless blue glow of a server farm in Virginia, a single line of code appeared at 2:14 AM last Tuesday. It wasn’t an attack. It wasn’t a virus. It was a question, written in plain English, embedded in a data packet: “Do you know whose hands built this room?” By the time security teams traced the packet, the intruder was gone. The only footprint left behind was a digital signature: B1 .

B1 first appeared on a dark web forum called /void/chat, posting a decrypted copy of a pharmaceutical company’s internal safety report — not to extort them, but to expose that a faulty batch of insulin had been quietly buried. No ransom note. No manifesto. Just the data, timestamped, with a PGP signature reading B1 .

“You cannot hack a water plant for good reasons,” says federal prosecutor Marcus Thorne, who has unsuccessfully petitioned to have B1 tried in absentia. “The method poisons the motive. Every intrusion normalizes the idea that private systems are public playgrounds for the clever.” Speculation runs wild. Some say B1 is a former NSA contractor disillusioned by mass surveillance. Others claim it’s a collective — perhaps a splinter group of Anonymous or a handful of rogue engineers from Silicon Valley. The most persistent theory: B1 is a woman, likely Eastern European, based on syntactic quirks in the messages left behind.

No ransom. No threat. Just a warning — delivered illegally, but undeniably useful.

But last night, at 3:01 AM, a minor security alert flickered across a server at a nuclear research lab in Idaho. It lasted four seconds. No data was touched. No harm was done.

But a rival theory has emerged recently. In April of this year, a cybersecurity firm published an analysis of B1’s coding style: unusually clean, heavily commented, and adhering to military-grade secure coding standards. The conclusion: B1 might be a defector from a nation-state cyber unit — someone who learned to break systems at scale, then turned that knowledge against negligence rather than enemies.

At 11:47 PM, an operator at the regional water treatment facility watched his mouse move on its own. A terminal window opened. A string of commands scrolled past too fast to read. Then, a simple text file appeared on his desktop: “Pump 4 has a cracked seal. Replacing it will cost $8,000. Ignoring it will cost 14,000 people clean water in 72 hours. Call maintenance. — B1” The operator dismissed it as a prank. Maintenance was called anyway, the next morning, for an unrelated issue. They found the cracked seal exactly where the message had indicated.

As of this writing, B1 has been silent for 47 days — the longest gap since their first appearance. Some believe they’ve been caught quietly. Others think they’re planning something bigger. A few wonder if they’ve simply stopped, having made their point.

First of all, I want to thank all the players who played the game, provided feedback, endured, shared the joyous moments, kept pushing the game in the right direction.

I want to thank /r/mmorpg for being an open platform for mmorpg enthusiasts, I posted on /r/mmorpg at the end of 2016, and I've been improving and shaping the game with the small early adopter userbase ever since.

I want to thank Mark Jayson Lacandula, aka Json, I started working on the game in June 2016, launched very early around August 2016, he was one of the very first players who tried the game after seeing my tiny Adsense Ad. I didn't take him too seriously when he wanted to try my in-house map editor, but shared it with him anyway. After a very short time, he shared the first map he made, at that moment I knew I discovered a rare natural talent. He made all our maps, learned pixel art, extended our tilesets and sprites and kept exploring, he was and is always there, through the good times and the bad times. Game development is no easy task, contrary to popular belief, it's not rewarding, you rarely reap the benefits, up to this point, we didn't reap, but he never quit - so thank you Json. I hope after Adventure Land, you keep on working in the game industry. (Reader: If you are a talent hunter, do reach out to him)

I want to thank Ellian, our freelance pixel artist, for being the most professional freelancer I've ever worked with. No one is more reliable than you. Adventure Land started with an off-the-shelf 16x16 icon pack, with Ellian, we created a custom 20x20 iconset, with the community we dreamed, Ellian made. Workload-wise, Adventure Land is a small-fish, but through 2 years, he was always there at a moment's notice. To extend our iconset 5-6 items at a time :) If I could do it all over again, maybe for Adventure Land 2, I'd love to create all the tilesets and sprites from scratch with Ellian.

I want to thank all the developers, artists, composers, whose libraries, assets and work I used in Adventure Land.

And thank you for reading, and hopefully for playing Adventure Land :)

[10/12/18]

I want to also thank Steam for being such an awesome platform, 1+ years now, it has been driving new players in, no advertisements or marketing.

Another thanks to Google Cloud for providing us startup credits, it really eased my financial burdens during this development stage.

[06/03/20]

There's one non-breakable main rule, you can't upset, bully, or sadden other players - Adventure Land thrives on being a positive game with a positive community. When you treat other players with love and respect, they'll treat you that way too!

The secondary rule is to not abuse the game, you can do pretty much everything with Code, and the game, we are even exploring allowing non-UI botting, but, please don't DDOS the game, or intentionally abuse bugs you find. We have lucrative bug bounties

Third rule is to respect the character limits, maintaining the game is beyond imagination costly, almost non-feasable, If everyone respects the limits, we won't be needing to add irritating captchas etc. to keep playing. While you might easily use a VPN or server to play with additional characters, please don't (It has been done in the past, at 2+ accounts, it usually gets noticed fast, you'll only force me to divert my time and energy into battling multiple accounts, please don't)

Selling items, gold etc. with real money is forbidden, don't waste your money, but maybe buy 1-2 cosmetic items to support the game :)

Offensive or insensitive nicknames are forbidden

Breaking the rules usually result in temporary bans, don't be afraid to try new things, as long as you mean well, there won't be any consequences

Have fun

This privacy policy explains how your data is used and stored by Adventure Land

Adventure Land uses Cookies for authentication and settings, cookies are stored between HTTP and HTTPS

Due to popular demand, and technical challenges, game can be played over both HTTP and HTTPS, over HTTP, if you are on a compromised network, your data will be exposed. If you are playing the game from Steam or Mac App Store, the game uses HTTPS by default

Adventure Land uses Google Analytics for statistics

Adventure Land uses Cloudflare for security and filtering, almost all HTTP/S data goes through Cloudflare, so they potentially access every data you provide

Adventure Land uses your location data to determine which game server is broadly closer to you

Adventure Land stores your encrypted password, characters, character names, data you provide, your IP (used extensively for the character limits logic), character actions and there are various logs and backups of these data, there's currently no system to delete these logs and backups, but as cloud storage is extremely expensive, I personally want to start deleting them in the future, but couldn't find the time yet

Adventure Land doesn't have a reliable way to send emails, so it's a players responsibility to keep themselves up-to-date on this privacy policy, but the main theme will never change, Adventure Land is a game with no intention of misusing a players data

I'm an indie developer doing my best to protect my players and meet their needs, but we live in a chaotic world, If you are a regular player reading this, please be careful, while I do everything to protect you and your data (especially more after everything I've experienced since I launched the game, which made me grow more as a developer and a human, at least I hope), nothing is safe on the Internet, always approach things with this fact in mind

For any questions: [email protected]

Last Edit [04/12/18]

Hacker B1 May 2026

In the endless blue glow of a server farm in Virginia, a single line of code appeared at 2:14 AM last Tuesday. It wasn’t an attack. It wasn’t a virus. It was a question, written in plain English, embedded in a data packet: “Do you know whose hands built this room?” By the time security teams traced the packet, the intruder was gone. The only footprint left behind was a digital signature: B1 .

B1 first appeared on a dark web forum called /void/chat, posting a decrypted copy of a pharmaceutical company’s internal safety report — not to extort them, but to expose that a faulty batch of insulin had been quietly buried. No ransom note. No manifesto. Just the data, timestamped, with a PGP signature reading B1 .

“You cannot hack a water plant for good reasons,” says federal prosecutor Marcus Thorne, who has unsuccessfully petitioned to have B1 tried in absentia. “The method poisons the motive. Every intrusion normalizes the idea that private systems are public playgrounds for the clever.” Speculation runs wild. Some say B1 is a former NSA contractor disillusioned by mass surveillance. Others claim it’s a collective — perhaps a splinter group of Anonymous or a handful of rogue engineers from Silicon Valley. The most persistent theory: B1 is a woman, likely Eastern European, based on syntactic quirks in the messages left behind. hacker b1

No ransom. No threat. Just a warning — delivered illegally, but undeniably useful.

But last night, at 3:01 AM, a minor security alert flickered across a server at a nuclear research lab in Idaho. It lasted four seconds. No data was touched. No harm was done. In the endless blue glow of a server

But a rival theory has emerged recently. In April of this year, a cybersecurity firm published an analysis of B1’s coding style: unusually clean, heavily commented, and adhering to military-grade secure coding standards. The conclusion: B1 might be a defector from a nation-state cyber unit — someone who learned to break systems at scale, then turned that knowledge against negligence rather than enemies.

At 11:47 PM, an operator at the regional water treatment facility watched his mouse move on its own. A terminal window opened. A string of commands scrolled past too fast to read. Then, a simple text file appeared on his desktop: “Pump 4 has a cracked seal. Replacing it will cost $8,000. Ignoring it will cost 14,000 people clean water in 72 hours. Call maintenance. — B1” The operator dismissed it as a prank. Maintenance was called anyway, the next morning, for an unrelated issue. They found the cracked seal exactly where the message had indicated. It was a question, written in plain English,

As of this writing, B1 has been silent for 47 days — the longest gap since their first appearance. Some believe they’ve been caught quietly. Others think they’re planning something bigger. A few wonder if they’ve simply stopped, having made their point.