<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hello Hazzie,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I don't think your view is wrong at all. I
personally favor the open approach to issues like this. It's worked for
the open source community and it can work for the gaming community as
well. Keeping this a secret is a bad idea.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Shockwave</FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=richardnharrison@btinternet.com
href="mailto:richardnharrison@btinternet.com">Richard Harrison</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=mohaa@icculus.org
href="mailto:mohaa@icculus.org">mohaa@icculus.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, November 03, 2002 10:30
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: [mohaa] "Spawn Hack" and
server crashes</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=036382415-03112002><FONT face=Arial color=#0000ff size=2>As a
sort of aside I am a little but unsure my self on the whole "security by
obscurity" thing works for games. It seems that not publishing the knowledge
of the 'hack' gives the game manufacturers no incentive to bring out a patch
because the knowledge is not widespread. It is however within a significant
minority to cause pain for the general populous. If the manufacturers are
told before hand that there's a problem, here's how its done, its repeatable
and I am going to post it, then they would have to do something. This is how
the bugs are announced generally for such os's as Windows. The manufacturers
get a chance to fix it before the general public get wind of how to do it. Why
should games be different? I am monumentally naive about
this?</FONT></SPAN></DIV>
<DIV><SPAN class=036382415-03112002><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=036382415-03112002><FONT face=Arial color=#0000ff
size=2>Hazzie.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> [-SF-]Shockwave
[mailto:shockwave@clanshortfuse.com]<BR><B>Sent:</B> 03 November 2002
15:00<BR><B>To:</B> mohaa@icculus.org<BR><B>Subject:</B> Re: [mohaa] "Spawn
Hack" and server crashes<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>Hello again,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>It seems that there is now a fix out for this
problem. Here are the links to the news item and the file
itself:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.mohadmin.com/nuke/">http://www.mohadmin.com/nuke/</A></FONT></DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.mohadmin.com/nuke/download/MoHAAPatch.zip">http://www.mohadmin.com/nuke/download/MoHAAPatch.zip</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The people involved in producing this patch
still haven't responded to my request for information about how this exploit
works which is disappointing. If anyone has any more information about
this, I think it would be a good idea to discuss it further. The idea
of compiling a new fgameded.so file from a Windows installation using an
unofficial patch program in order to fix an unexplained server exploit makes
me a bit uneasy. Maybe it's just me.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2>Shockwave</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>