[cod] SecurityFocus

[todd at simops.com]

Ok, i missed the link to the patch...
Wanna post it again for the blind?
TLP
----- Original Message -----
From: "Jay Vasallo" <jayco1 at charter.net>
To: <cod at icculus.org>
Sent: Thursday, February 17, 2005 12:50 AM
Subject: Re: [cod] SecurityFocus


> The beauty of running one main install versus one install per client.
> Update one server and the rest get updated auto.
> But yes his patch was nice, seeing that the lastest sof2 binaries were not
> patched fully.
>
> ----- Original Message -----
> From: "Matthew Keen" <Tali at heavenly-existance.net>
> To: <cod at icculus.org>
> Sent: Wednesday, February 16, 2005 11:41 PM
> Subject: Re: [cod] SecurityFocus
>
>
> > Yeah we ran this patch on our SoF2 servers here down in the server farm,
> > works a treat, no more problems...
> >
> > Only annoying thing was taking the servers down first (or waiting for
> > someoen to crash it) before I applied the patch on each server :)
> >
> > Jay Vasallo wrote:
> >
> >> I can feel your fustration. Untill recently, I had no idea I had a
> >> "non-patched" sof2 linux binaries. Well someone banned someone for
> >> cheating. So the little prick tracked down my range and keep taking the
> >> servers down three to 8 times a day. Since sof2 takes barely nothing to
> >> run, we place them on all one box. The exploit would crash every server
> >> on the box. Delta Ray fixed me right up with the Luigi patch and the
> >> little hacker is now non-existant. So his patches certainly work. I
could
> >> guarantee that Ryan is gonna fix it up for the official release. Ryan
has
> >> always done us right!
> >>
> >> -Jay
> >>
> >>
> >> ----- Original Message ----- From: "Ian mu" <mu.llamas at gmail.com>
> >> To: <cod at icculus.org>
> >> Sent: Wednesday, February 16, 2005 1:56 PM
> >> Subject: Re: [cod] SecurityFocus
> >>
> >>
> >>> Yeah just want to apologise, if he has approached everyone and had
> >>> negative feedback from them in terms of them fixing it (but then again
> >>> its tricky, if they aren't going to patch it for sure, isnt that more
> >>> reason to release a patch and not release the exploit?), then yes I
> >>> can understand it more in truth, and I'm getting more of an impression
> >>> at least whilst I still wouldn't do it, he seems like someone who at
> >>> least has gone down the path of contacting the correct people, so in
> >>> that respect I'm probably a little hasty with comments, and fair play
> >>> to him on that side.
> >>>
> >>> I'm just in a bad mood as been trying to fix servers all day because
of
> >>> it hehe.
> >>>
> >>
> >
> >
>
>
>