<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=036382415-03112002><FONT face=Arial color=#0000ff size=2>As a
sort of aside I am a little but unsure my self on the whole "security by
obscurity" thing works for games. It seems that not publishing the knowledge of
the 'hack' gives the game manufacturers no incentive to bring out a patch
because the knowledge is not widespread. It is however within a significant
minority to cause pain for the general populous. If the manufacturers are
told before hand that there's a problem, here's how its done, its repeatable and
I am going to post it, then they would have to do something. This is how the
bugs are announced generally for such os's as Windows. The manufacturers get a
chance to fix it before the general public get wind of how to do it. Why should
games be different? I am monumentally naive about
this?</FONT></SPAN></DIV>
<DIV><SPAN class=036382415-03112002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=036382415-03112002><FONT face=Arial color=#0000ff
size=2>Hazzie.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> [-SF-]Shockwave
[mailto:shockwave@clanshortfuse.com]<BR><B>Sent:</B> 03 November 2002
15:00<BR><B>To:</B> mohaa@icculus.org<BR><B>Subject:</B> Re: [mohaa] "Spawn
Hack" and server crashes<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>Hello again,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>It seems that there is now a fix out for this
problem. Here are the links to the news item and the file
itself:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.mohadmin.com/nuke/">http://www.mohadmin.com/nuke/</A></FONT></DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.mohadmin.com/nuke/download/MoHAAPatch.zip">http://www.mohadmin.com/nuke/download/MoHAAPatch.zip</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The people involved in producing this patch still
haven't responded to my request for information about how this exploit works
which is disappointing. If anyone has any more information about this, I
think it would be a good idea to discuss it further. The idea of
compiling a new fgameded.so file from a Windows installation using an
unofficial patch program in order to fix an unexplained server exploit makes
me a bit uneasy. Maybe it's just me.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Shockwave</FONT></DIV></BLOCKQUOTE></BODY></HTML>