[cod] COD4 players can enable cheats via cvars without RCON password

Christopher Simmons twinbcss at gmail.com
Thu Jun 12 02:33:05 EDT 2008


I have created the mod, it is very basic.

check it out on

http://acm.umflint.edu/~chsimmon/cod4mods/

On Wed, Jun 11, 2008 at 9:29 PM, Tyson <twisted at twistedgamingservice.com>
wrote:

> From what I understand as long as sv_cheat is at zero, they cannot exploit
> the cheat-protected cvars. Therefore, I would think that all you would need
> to do is continually set sv_cheat 0 once a second or so.
>
> However, as I stated already Tony of Even Balance said they would scan for
> the cvar themselves and since they have, the ability to do some things
> straight off their master servers without updates so we may not see a
> client
> or server update for them to stop this exploit.
>
> I do see that ET of Escapted Turkey GSP contacted Even Balance as was given
> the same info as PunksBusted.com was.
> http://www.escapedturkey.com/forums/viewtopic.php?f=50&t=5588
>
> Tyson
> Twisted Gaming Service
> http://www.twistedgamingservice.com
>
>
>
> -----Original Message-----
> From: Christopher Simmons [mailto:twinbcss at gmail.com]
> Sent: Wednesday, June 11, 2008 5:47 PM
> To: cod at icculus.org
> Subject: Re: [cod] COD4 players can enable cheats via cvars without RCON
> password
>
> The only other option I can come up with is to create a mod to fix the
> problem
>
> In the _callbacksetup.gsc file (maps/mp/gametypes), create a thread that
> runs as the user connects. Inside the tread create an infinite loop that
> continually changes the required dvars by using the following function:
>
> self SetClientDvars( "cg_drawhud", "0", "cg_draw2d", "0", ... );
>
> more information on modding can be found at
>
> http://www.infinityward.com/wiki/index.php?title=Main_Page
>
> I will work on this mod to see if I can get it working. No promises though.
>
> On Wed, Jun 11, 2008 at 4:07 PM, Tyson <twisted at twistedgamingservice.com>
> wrote:
>
>
>        Nope. It will take a patch from the Dev's.
>
>
>        Tyson
>        Twisted Gaming Service
>        Http://www.twistedgamingservice.com<http://www.twistedgamingservice.com/>
>  <http://www.twistedgamingservice.com/>
>
>
>
>
>        -----Original Message-----
>
>        From: "Regissounet" <regissounet at free.fr>
>        To: cod at icculus.org
>
>        Sent: 6/11/08 10:16 AM
>        Subject: Re: [cod] COD4 players can enable cheats via cvars without
> RCON password
>
>
>        Hello,
>
>        The only solution to prevent this kind of cheat is to enable
> Punkbuster? Is
>        there any other solution without it?
>
>        On Wednesday 11 June 2008, Geoff Goas wrote:
>
>        > Tyson, do you have a source that shows that the PB client was
> updated?
>        > Evenbalance normally posts these releases to their website.
>        >
>        > On Wed, Jun 11, 2008 at 8:59 AM, Tyson
> <twisted at twistedgamingservice.com>
>        >
>        > wrote:
>        > > Actually there were two in that thread relating to the HUD that
> would
>        > > kick "all" players in hardcore servers.
>        > >
>        > > If you are running hardcore server, do not check these two
> because they
>        > > are dynamically turned on and off.
>        > >
>        > > pb_sv_cvar ui_hud_hardcore IN 0
>        > > pb_sv_cvar ui_uav_allies IN 0
>        > >
>        > > Remove them.
>        > >
>        > > In addition, some of you might have notice the COD4 Punk Buster
> client
>        > > updated last night, reason is that Punk Buster software is now
> checking
>        > > for the sv_cheat cvar client side so you should not have to put
> that list
>        > > in your pbsv.cfg anymore but it does not hurt to keep it around.
>        > >
>        > > Tyson
>        > > Twisted Gaming Service
>        > > http://www.twistedgamingservice.com
> <http://www.twistedgamingservice.com/>
>        > >
>        > >
>        > >
>        > > -----Original Message-----
>        > > From: Stephan De Jonge [mailto:stephanovitsj at hotmail.com]
>        > > Sent: Wednesday, June 11, 2008 2:28 AM
>        > > To: cod at icculus.org
>        > > Subject: RE: [cod] COD4 players can enable cheats via cvars
> without RCON
>        > > password
>        > >
>        > > Please check this thread:
>        > >
>        > >
> http://www.infinityward.com/community/forum/index.php?topic=42769.0
>        > >
>        > > All necassary cvars are included, gl hf!
>        > >
>        > > Stephan
>        > >
>        > >
>        > >
>        > >
>        > >
>        > > ________________________________
>        > >
>        > > > From: info at ronny-schedel.de
>        > > > To: cod at icculus.org
>        > > > Date: Wed, 11 Jun 2008 09:01:53 +0200
>        > > > Subject: [cod] COD4 players can enable cheats via cvars
> without RCON
>        > >
>        > > password
>        > >
>        > > > Hello,
>        > > >
>        > > > players can change some cvars to enable built in cheats
> without RCON
>        > >
>        > > access.
>        > >
>        > > > To prevent this add the following line to the pbsv.cfg:
>        > > >
>        > > > pb_sv_cvar sv_cheats IN 0
>        > > >
>        > > > Restart the pb server with pb_sv_restart.
>        > > >
>        > > > The long story behind this in German:
>        > > > http://cod.esgnserver2.de/?w=news&action=detail&id=5226&t=1
>        > > >
>        > > > Best regards
>        > > >
>        > > > Ronny
>        > > >
>        > > >
>        > > > ---
>        > > > To unsubscribe, send a blank email to
> cod-unsubscribe at icculus.org
>        > > > Mailing list archives:
> http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>        > >
>        > > ---
>        > > To unsubscribe, send a blank email to
> cod-unsubscribe at icculus.org
>        > > Mailing list archives:
> http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>
>        ---
>        To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
>        Mailing list archives:
> http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>
>
>
>
>        ---
>        To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
>        Mailing list archives:
> http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>
>
>
>
>
>
>
> ---
> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://icculus.org/pipermail/cod/attachments/20080612/0eda2970/attachment.htm>


More information about the Cod mailing list