[mohaa] "Spawn Hack" and server crashes

[André Rivotti Casimiro]

Hi all,

There is a CVAR that it's supose to prevent clients of using diferent pk3
than the ones in the server: sv_pure. It's suposed to checksum the clientes
pk3 and the server pk3 to validade ...or not. It's supose... but I thing it
doesn't work... anyone knows nothing about this? I have it like: sv_pure 1.
I know that the server can checksum the client pk3, but how? Anyone knows
how?
Another thing, were's a little anti-cheat mod that preventes the use of
Force-Models and illegal skins... it's not much but it's something. Put it
in the main directory like the maps... it works :).

Regards
André Rivotti Casimiro

-----Mensagem original-----
De: Antonio Cristovão [mailto:acristovao at compulab.pt]
Enviada: segunda-feira, 4 de Novembro de 2002 10:11
Para: mohaa at icculus.org
Assunto: RE: [mohaa] "Spawn Hack" and server crashes


I know a way to stop cheaters to enter with wallhack

install POINT40, you can download at www.alliedassault.dk
<http://www.alliedassault.dk>

but this is for windows... not linux

-----Mensagem original-----
De: Perry Heath [mailto:perry at phs-technology.net]
Enviada: domingo, 3 de Novembro de 2002 15:26
Para: mohaa at icculus.org
Assunto: RE: [mohaa] "Spawn Hack" and server crashes


Hi Shockwave,

As a supplier of game servers ( www.fragserv.co.uk
<http://www.fragserv.co.uk> ) I am worried about a new cheat that has
come to light. As we use Linux servers you seemed to be the right person
2 ask.

Its a wallhack lets u see right through walls! its in a .pk3 format is
there anyway the server could see if someone is using this and kick
them?

Regards

Perry
fragserv.co.uk

-----Original Message-----
From: [-SF-]Shockwave [mailto:shockwave at clanshortfuse.com]
Sent: 03 November 2002 15:00
To: mohaa at icculus.org
Subject: Re: [mohaa] "Spawn Hack" and server crashes


Hello again,

It seems that there is now a fix out for this problem.  Here are the
links to the news item and the file itself:

http://www.mohadmin.com/nuke/ <http://www.mohadmin.com/nuke/>
http://www.mohadmin.com/nuke/download/MoHAAPatch.zip
<http://www.mohadmin.com/nuke/download/MoHAAPatch.zip>

The people involved in producing this patch still haven't responded to
my request for information about how this exploit works which is
disappointing.  If anyone has any more information about this, I think
it would be a good idea to discuss it further.  The idea of compiling a
new fgameded.so file from a Windows installation using an unofficial
patch program in order to fix an unexplained server exploit makes me a
bit uneasy.  Maybe it's just me.


Shockwave