[mohaa] "Spawn Hack" and server crashes

[[-SF-]Shockwave]

MessageHello Perry,

I appreciate your confidence in me as a source, but I am really just a Linux server administrator who loves the game and has spent a lot of time poking at the game server to see how it works.  Unfortunately I've only been able to work with it in a black box scenario.  I really don't know a lot about how it works internally.  Ryan is really the man to ask and apparently he is extremely busy working on a couple of big projects.

Having said that, I think that the new expansion pack has a fix for the sv_pure cvar which is supposed to be able to keep players from using PK3 files that don't match what the server has.  This might be helpful in solving this particular issue.

The problem is really that there are too many ways for players to cheat.  I remember when my team was playing Unreal Tournament on OGL there was a set of video card drivers that were released that could render walls invisible.  This kind of thing is completely outside the scope of what game manufacturers can handle.

It's really sad that a few can cause so much grief for the majority of people who are only interested in having a good time.



Shockwave


  ----- Original Message ----- 
  From: Perry Heath 
  To: mohaa at icculus.org 
  Sent: Sunday, November 03, 2002 10:26 AM
  Subject: RE: [mohaa] "Spawn Hack" and server crashes


  Hi Shockwave,

  As a supplier of game servers (www.fragserv.co.uk) I am worried about a new cheat that has come to light. As we use Linux servers you seemed to be the right person 2 ask.

  Its a wallhack lets u see right through walls! its in a .pk3 format is there anyway the server could see if someone is using this and kick them?

  Regards

  Perry
  fragserv.co.uk
    -----Original Message-----
    From: [-SF-]Shockwave [mailto:shockwave at clanshortfuse.com] 
    Sent: 03 November 2002 15:00
    To: mohaa at icculus.org
    Subject: Re: [mohaa] "Spawn Hack" and server crashes


    Hello again,

    It seems that there is now a fix out for this problem.  Here are the links to the news item and the file itself:

    http://www.mohadmin.com/nuke/
    http://www.mohadmin.com/nuke/download/MoHAAPatch.zip

    The people involved in producing this patch still haven't responded to my request for information about how this exploit works which is disappointing.  If anyone has any more information about this, I think it would be a good idea to discuss it further.  The idea of compiling a new fgameded.so file from a Windows installation using an unofficial patch program in order to fix an unexplained server exploit makes me a bit uneasy.  Maybe it's just me.


    Shockwave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://icculus.org/pipermail/mohaa/attachments/20021103/12c61897/attachment.htm>