<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hello Perry,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I appreciate your confidence in me as a source, but
I am really just a Linux server administrator who loves the game and has spent a
lot of time poking at the game server to see how it works. Unfortunately
I've only been able to work with it in a black box scenario. I really
don't know a lot about how it works internally. Ryan is really the
man to ask and apparently he is extremely busy working on a couple of big
projects.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Having said that, I think that the new expansion
pack has a fix for the sv_pure cvar which is supposed to be able to keep players
from using PK3 files that don't match what the server has. This might be
helpful in solving this particular issue.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The problem is really that there are too many ways
for players to cheat. I remember when my team was playing Unreal
Tournament on OGL there was a set of video card drivers that were released that
could render walls invisible. This kind of thing is completely outside the
scope of what game manufacturers can handle.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>It's really sad that a few can cause so much grief
for the majority of people who are only interested in having a good
time.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Shockwave</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=perry@phs-technology.net href="mailto:perry@phs-technology.net">Perry
Heath</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=mohaa@icculus.org
href="mailto:mohaa@icculus.org">mohaa@icculus.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, November 03, 2002 10:26
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: [mohaa] "Spawn Hack" and
server crashes</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff size=2>Hi
Shockwave,</FONT></SPAN></DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff size=2>As a
supplier of game servers (<A
href="http://www.fragserv.co.uk">www.fragserv.co.uk</A>) I am worried about a
new cheat that has come to light. As we use Linux servers you seemed to be the
right person 2 ask.</FONT></SPAN></DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff size=2>Its
a wallhack lets u see right through walls! its in a .pk3 format is there
anyway the server could see if someone is using this and kick
them?</FONT></SPAN></DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2>Regards</FONT></SPAN></DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2>Perry</FONT></SPAN></DIV>
<DIV><SPAN class=305072315-03112002><FONT face=Arial color=#0000ff
size=2>fragserv.co.uk</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
[-SF-]Shockwave [mailto:shockwave@clanshortfuse.com] <BR><B>Sent:</B> 03
November 2002 15:00<BR><B>To:</B> mohaa@icculus.org<BR><B>Subject:</B> Re:
[mohaa] "Spawn Hack" and server crashes<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>Hello again,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>It seems that there is now a fix out for this
problem. Here are the links to the news item and the file
itself:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.mohadmin.com/nuke/">http://www.mohadmin.com/nuke/</A></FONT></DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.mohadmin.com/nuke/download/MoHAAPatch.zip">http://www.mohadmin.com/nuke/download/MoHAAPatch.zip</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The people involved in producing this patch
still haven't responded to my request for information about how this exploit
works which is disappointing. If anyone has any more information about
this, I think it would be a good idea to discuss it further. The idea
of compiling a new fgameded.so file from a Windows installation using an
unofficial patch program in order to fix an unexplained server exploit makes
me a bit uneasy. Maybe it's just me.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2>Shockwave</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>