[mohaa] "Spawn Hack" and server crashes

[-SF-]Shockwave shockwave at clanshortfuse.com
Sun Nov 3 10:46:29 EST 2002


Hello Hazzie,

I don't think your view is wrong at all.  I personally favor the open approach to issues like this.  It's worked for the open source community and it can work for the gaming community as well.  Keeping this a secret is a bad idea.


Shockwave
  ----- Original Message ----- 
  From: Richard Harrison 
  To: mohaa at icculus.org 
  Sent: Sunday, November 03, 2002 10:30 AM
  Subject: RE: [mohaa] "Spawn Hack" and server crashes


  As a sort of aside I am a little but unsure my self on the whole "security by obscurity" thing works for games. It seems that not publishing the knowledge of the 'hack' gives the game manufacturers no incentive to bring out a patch because the knowledge is not widespread. It is however within a significant minority to cause pain for the general populous. If the manufacturers are told before hand that there's a problem, here's how its done, its repeatable and I am going to post it, then they would have to do something. This is how the bugs are announced generally for such os's as Windows. The manufacturers get a chance to fix it before the general public get wind of how to do it. Why should games be different? I am monumentally naive  about this?

  Hazzie.
    -----Original Message-----
    From: [-SF-]Shockwave [mailto:shockwave at clanshortfuse.com]
    Sent: 03 November 2002 15:00
    To: mohaa at icculus.org
    Subject: Re: [mohaa] "Spawn Hack" and server crashes


    Hello again,

    It seems that there is now a fix out for this problem.  Here are the links to the news item and the file itself:

    http://www.mohadmin.com/nuke/
    http://www.mohadmin.com/nuke/download/MoHAAPatch.zip

    The people involved in producing this patch still haven't responded to my request for information about how this exploit works which is disappointing.  If anyone has any more information about this, I think it would be a good idea to discuss it further.  The idea of compiling a new fgameded.so file from a Windows installation using an unofficial patch program in order to fix an unexplained server exploit makes me a bit uneasy.  Maybe it's just me.


    Shockwave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://icculus.org/pipermail/mohaa/attachments/20021103/209b3603/attachment.htm>


More information about the Mohaa mailing list