[cod] COD4 players can enable cheats via cvars without RCON password

Lukasz Awiorko wubepe at o2.pl
Thu Jun 12 14:21:36 EDT 2008


/rcon devmap mp_mapname
----- Original Message ----- 
From: "|T-OC|Morpheus|:.Web" <morpheus at clantoc.org>
To: <cod at icculus.org>
Sent: Thursday, June 12, 2008 6:03 PM
Subject: Re: [cod] COD4 players can enable cheats via cvars without RCON
password


> For almost 8 months, I've tried to set the sv_cheat var to 1, but even
> without punkbuster, it has never worked. I wanted it to have the ability,
> with the noclip, to follow the magic nades I wanted to work on. It is also
> very useful for all strating concerns, but there's no "strat" gametype as
> there was in cod2 (built into PAM mod if I'm not wrong).
>
> Does anyone know a (mini)mod that integrate some sort of strat mode ? I
> did not find it in the PAM4, and found nothing the web (maybe I don't use
> the right words)...
>
> Christopher Simmons wrote:
>> I have created the mod, it is very basic.
>>  check it out on
>>  http://acm.umflint.edu/~chsimmon/cod4mods/
>> <http://acm.umflint.edu/%7Echsimmon/cod4mods/>
>>
>> On Wed, Jun 11, 2008 at 9:29 PM, Tyson <twisted at twistedgamingservice.com
>> <mailto:twisted at twistedgamingservice.com>> wrote:
>>
>>     From what I understand as long as sv_cheat is at zero, they cannot
>>     exploit
>>     the cheat-protected cvars. Therefore, I would think that all you
>>     would need
>>     to do is continually set sv_cheat 0 once a second or so.
>>
>>     However, as I stated already Tony of Even Balance said they would
>>     scan for
>>     the cvar themselves and since they have, the ability to do some
>> things
>>     straight off their master servers without updates so we may not
>>     see a client
>>     or server update for them to stop this exploit.
>>
>>     I do see that ET of Escapted Turkey GSP contacted Even Balance as
>>     was given
>>     the same info as PunksBusted.com was.
>>     http://www.escapedturkey.com/forums/viewtopic.php?f=50&t=5588
>>     <http://www.escapedturkey.com/forums/viewtopic.php?f=50&t=5588>
>>
>>     Tyson
>>     Twisted Gaming Service
>>     http://www.twistedgamingservice.com
>>     <http://www.twistedgamingservice.com/>
>>
>>
>>
>>     -----Original Message-----
>>     From: Christopher Simmons [mailto:twinbcss at gmail.com
>>     <mailto:twinbcss at gmail.com>]
>>     Sent: Wednesday, June 11, 2008 5:47 PM
>>     To: cod at icculus.org <mailto:cod at icculus.org>
>>     Subject: Re: [cod] COD4 players can enable cheats via cvars
>>     without RCON
>>     password
>>
>>     The only other option I can come up with is to create a mod to fix
>> the
>>     problem
>>
>>     In the _callbacksetup.gsc file (maps/mp/gametypes), create a
>>     thread that
>>     runs as the user connects. Inside the tread create an infinite
>>     loop that
>>     continually changes the required dvars by using the following
>>     function:
>>
>>     self SetClientDvars( "cg_drawhud", "0", "cg_draw2d", "0", ... );
>>
>>     more information on modding can be found at
>>
>>     http://www.infinityward.com/wiki/index.php?title=Main_Page
>>
>>     I will work on this mod to see if I can get it working. No
>>     promises though.
>>
>>     On Wed, Jun 11, 2008 at 4:07 PM, Tyson
>>     <twisted at twistedgamingservice.com
>>     <mailto:twisted at twistedgamingservice.com>>
>>     wrote:
>>
>>
>>            Nope. It will take a patch from the Dev's.
>>
>>
>>            Tyson
>>            Twisted Gaming Service
>>            Http://www.twistedgamingservice.com
>>     <http://www.twistedgamingservice.com/>
>>     <http://www.twistedgamingservice.com/>
>>
>>
>>
>>
>>            -----Original Message-----
>>
>>            From: "Regissounet" <regissounet at free.fr
>>     <mailto:regissounet at free.fr>>
>>            To: cod at icculus.org <mailto:cod at icculus.org>
>>
>>            Sent: 6/11/08 10:16 AM
>>            Subject: Re: [cod] COD4 players can enable cheats via cvars
>>     without
>>     RCON password
>>
>>
>>            Hello,
>>
>>            The only solution to prevent this kind of cheat is to enable
>>     Punkbuster? Is
>>            there any other solution without it?
>>
>>            On Wednesday 11 June 2008, Geoff Goas wrote:
>>
>>            > Tyson, do you have a source that shows that the PB client
>> was
>>     updated?
>>            > Evenbalance normally posts these releases to their website.
>>            >
>>            > On Wed, Jun 11, 2008 at 8:59 AM, Tyson
>>     <twisted at twistedgamingservice.com
>>     <mailto:twisted at twistedgamingservice.com>>
>>            >
>>            > wrote:
>>            > > Actually there were two in that thread relating to the
>>     HUD that
>>     would
>>            > > kick "all" players in hardcore servers.
>>            > >
>>            > > If you are running hardcore server, do not check these two
>>     because they
>>            > > are dynamically turned on and off.
>>            > >
>>            > > pb_sv_cvar ui_hud_hardcore IN 0
>>            > > pb_sv_cvar ui_uav_allies IN 0
>>            > >
>>            > > Remove them.
>>            > >
>>            > > In addition, some of you might have notice the COD4
>>     Punk Buster
>>     client
>>            > > updated last night, reason is that Punk Buster software
>>     is now
>>     checking
>>            > > for the sv_cheat cvar client side so you should not
>>     have to put
>>     that list
>>            > > in your pbsv.cfg anymore but it does not hurt to keep
>>     it around.
>>            > >
>>            > > Tyson
>>            > > Twisted Gaming Service
>>            > > http://www.twistedgamingservice.com
>>     <http://www.twistedgamingservice.com/>
>>     <http://www.twistedgamingservice.com/>
>>            > >
>>            > >
>>            > >
>>            > > -----Original Message-----
>>            > > From: Stephan De Jonge
>>     [mailto:stephanovitsj at hotmail.com <mailto:stephanovitsj at hotmail.com>]
>>            > > Sent: Wednesday, June 11, 2008 2:28 AM
>>            > > To: cod at icculus.org <mailto:cod at icculus.org>
>>            > > Subject: RE: [cod] COD4 players can enable cheats via
>> cvars
>>     without RCON
>>            > > password
>>            > >
>>            > > Please check this thread:
>>            > >
>>            > >
>>     http://www.infinityward.com/community/forum/index.php?topic=42769.0
>>            > >
>>            > > All necassary cvars are included, gl hf!
>>            > >
>>            > > Stephan
>>            > >
>>            > >
>>            > >
>>            > >
>>            > >
>>            > > ________________________________
>>            > >
>>            > > > From: info at ronny-schedel.de
>>     <mailto:info at ronny-schedel.de>
>>            > > > To: cod at icculus.org <mailto:cod at icculus.org>
>>            > > > Date: Wed, 11 Jun 2008 09:01:53 +0200
>>            > > > Subject: [cod] COD4 players can enable cheats via cvars
>>     without RCON
>>            > >
>>            > > password
>>            > >
>>            > > > Hello,
>>            > > >
>>            > > > players can change some cvars to enable built in cheats
>>     without RCON
>>            > >
>>            > > access.
>>            > >
>>            > > > To prevent this add the following line to the pbsv.cfg:
>>            > > >
>>            > > > pb_sv_cvar sv_cheats IN 0
>>            > > >
>>            > > > Restart the pb server with pb_sv_restart.
>>            > > >
>>            > > > The long story behind this in German:
>>            > > >
>>     http://cod.esgnserver2.de/?w=news&action=detail&id=5226&t=1
>>     <http://cod.esgnserver2.de/?w=news&action=detail&id=5226&t=1>
>>            > > >
>>            > > > Best regards
>>            > > >
>>            > > > Ronny
>>            > > >
>>            > > >
>>            > > > ---
>>            > > > To unsubscribe, send a blank email to
>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>            > > > Mailing list archives:
>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>            > >
>>            > > ---
>>            > > To unsubscribe, send a blank email to
>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>            > > Mailing list archives:
>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>
>>            ---
>>            To unsubscribe, send a blank email to
>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>            Mailing list archives:
>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>
>>
>>
>>
>>            ---
>>            To unsubscribe, send a blank email to
>>     cod-unsubscribe at icculus.org <mailto:cod-unsubscribe at icculus.org>
>>            Mailing list archives:
>>     http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>
>>
>>
>>
>>
>>
>>
>>     ---
>>     To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
>>     <mailto:cod-unsubscribe at icculus.org>
>>     Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>>
>>
>>
>
> ---
> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
>
>




More information about the Cod mailing list