[hlds_linux] Serious Bug Report : Steam Friends Exploit
Hi, We have a problem with steam friends, if any user sends a message of XXX characters to another user, it will crash their steam. If the original user is in-game, they will crash back to desktop also, if the message originator is not in-game the recipient still crashes to desktop. Not sure how many characters this is, but easilly found by continuing to type a message untill no more characters are accepted. This is starting to be a really annoying exploit, I know it has been reported via the valve list server, I just wanted to make sure it was reported to you directly and that you could report an estimated fix time. Regards, Roger ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] Steam Bug/Exploit
Yes, agreed, if only Kingsley Foreman had reported them to Alfred they would have been fixed by now, damn! T ics wrote: Security holes and exlpoits maybe get fixed fast, but i cant say same thing about bugs in the game or server software. Countless bugs are layiing out there includinr srcds procress eating 100% cpu if reniced, map change instantly after round draw sound, after player dies, if he goes instantly to spec and back he gets +1 kill into the scoreboard. These are just a piece but have been out there for more than 3 months. -ics Kingsley Foreman wrote: Well I report them all the time to the valve guys and they have always been fixed quickly... oddly enough most people don't. Kingsley - Original Message - From: [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Sunday, June 18, 2006 6:41 PM Subject: Re: [hlds_linux] Steam Bug/Exploit Hmm, well, I've made the experience that some Software Developers won't fix exploits and security holes, if you don't make them public. Or just very, very slowly - it will take ages. Kingsley Foreman schrieb: bollocks, all you need to do is contact one of the valve guys like Alfred let him know and it will be fixed. Only thing making it public does is makes life hell before they fix it. Kingsley - Original Message - From: [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Sunday, June 18, 2006 11:34 AM Subject: Re: [hlds_linux] Steam Bug/Exploit Greetings I disagree, exploits need to be made public, to be fixed. Ondřej Hošek schrieb: Hi Ronny, you should send exploit reports directly to Valve employees. Whilst the people on this mailing list are mostly relatively peaceful beings without intentions to abuse this, you can never be too paranoid. Alfred Reynolds ([EMAIL PROTECTED]) is the Valve guy who tends to pipe in on this list most often; you may want to send future warnings directly to him. Criticism of the openness aside, thanks for warning us about possible weird disconnects of the players on our servers. Let's hope Valve fixes this before it spreads like wildfire. ~~ Ondra Ronny Schedel wrote: Hello, there is a horrible Steam related bug: if you send a text message to a player through Steam that reach the maximum text message length, the connected player will be disconnected from the game server immediatly. Regards Ronny ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux http://www.hacksawgaming.com servers so good, it's like cheating. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
[hlds_linux] HL (1) DM
I have had a request to run a HLDM server (HLDS) what would be the comand line to update the server and also to run the server? Thanks in advance. Roger ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] svc_bad
- Original Message - From: Faustas Buškevičius [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Thursday, April 27, 2006 2:34 PM Subject: [hlds_linux] svc_bad Hi folks, I'm sure You all have seen this many times, but could You please explain me why this happens ? Host_Error: CL_ParseServerMessage: Illegible server message - svc_bad* * It happens approx. one time a week, but it is still very annoying and it sucks because I don't know WHY this happens. By the way, I'm not the only one who gets kicked - approx. 15-16 people (out of 20) on the same server get the same message. We're organizing 5x5 cup and I'm afraid of this to happen during a clanwar. I'm running 3327 build binaries on slack. /arge I get it also, random, does not kick all players, but a vast majority, typical client console message as follows... Error: server failed to transmit file 'AYSY' Last 32 messages parsed. 558651 0088 svc_setview 558651 0091 ItemStatus 558651 0093 NVGToggle 558651 0095 ResetHUD 558651 0096 Money 558651 0102 StatusIcon 558651 0108 ScoreAttrib 558651 0111 RoundTime 558651 0114 TeamScore 558651 0121 TeamScore 558651 0135 HideWeapon 558651 0137 SetFOV 558651 0139 Health 558651 0141 Battery 558651 0144 Damage 558651 0157 FlashBat 558651 0159 Train 558651 0161 CurWeapon 558651 0165 WeapPickup 558651 0167 WeapPickup 558651 0169 AmmoPickup 558651 0172 ScoreAttrib 558651 0175 ScreenFade 558651 0186 RoundTime 558651 0189 ScoreAttrib 558651 0192 ScoreAttrib 558651 0195 svc_event_reliable 558651 0198 ScoreAttrib 558651 0201 CurWeapon 558651 0205 CurWeapon 558651 0209 svc_filetxferfailed BAD: 220:svc_bad Host_Error: CL_ParseServerMessage: Illegible server message - svc_bad T ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] setinfo command and reporting false information
- Original Message - From: Matt Judge [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Thursday, April 20, 2006 5:40 PM Subject: Re: [hlds_linux] setinfo command and reporting false information Stuart Stegall wrote: Only question is. Why are you telling us about this? Ping masking is not an exploit. It does not allow you to hack a server per se. It just allows someone with a high ping to appear to have a low ping for the purpose of playing on a server where their ping is too high. I never mentioned this was hacking the server, nor did the other postee. If you can't see what is wrong with a client setting their rates, etc. to one thing and then reporting to the server they are something else is bad, then I can't be bothered to explain it, to be frank. Matt. then a little bit of research gets you to a website the guy in question publishes his scripts http://scripting.elxdraco.net/forum/login.php where exploits for most valve games can be found, alleged server crash commands, pseudo aimbots etc, all VAC proof, terrible stuff, it makes you think that more and more client adjustable variable should be locked down by valve. T ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] setinfo command and reporting false information
- Original Message - From: Matt Judge [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Tuesday, April 18, 2006 10:51 PM Subject: [hlds_linux] setinfo command and reporting false information Hi Alfred and others, I have not played for a few weeks, but I have had this reported to myself and am not in a position to test it ATM. 151931.47| +mind-friend you could block the rates though like this 151934.03| +mind-friend cl_cmdrate 20;alias cl_cmdrate 101;cl_updaterate 20;alias cl_updaterate 20;cl_cmdbackup 400;alias cl_cmdbackup 5 151934.08| +mind-friend or like this 151934.23| +mind-friend cl_cmdrate 101;setinfo cl_cmdrate 20 151934.41| +mind-friend cl_updaterate 101;setinfo cl_updaterate 20 151934.56| +mind-friend cl_cmdbackup 5;setinfo cl_cmdbackup 400 151935.43| +mind-friend i prefer the setinfo method 151952.37| +pa^in how many acc do ya have mind-friend? 151953.03| +mind-friend well it depends how many i want 151953.16| +mind-friend at the moment i have 3 151953.29| +mind-friend 1 vac banned / axia banned 151953.39| +mind-friend 1 vac flagged / axia banned 151953.56| +mind-friend 1 axia banned As you can see, this guy is a complete asshole. Matt. same guy bragged about this to me too, last spotted using the ip 84.64.236.195 at 19:42 UK time. Known steam ids... 0:1:3668222 0:0:6966438 0:0:438175 if you have any other steam ids let me know, I'll ban them too. Roger, irc log extract is below 019:35pm 0707+mind-friend07 would you like to have ultra low ping 019:35pm 0707+mind-friend07 i show you how 019:36pm 0707+mind-friend07 cl_cmdrate 101 019:36pm 0707+mind-friend07 setinfo cl_cmdrate 20 019:36pm 0707+mind-friend07 cl_updaterate 101 019:36pm 0707+mind-friend07 setinfo cl_updaterate 20 019:36pm 0707+mind-friend07 cl_cmdbackup 5 019:36pm 0707+mind-friend07 setinfo cl_cmdbackup 400 019:36pm 0707+mind-friend07 trust me 019:37pm 0707+mind-friend07 i did it 019:37pm 0707+mind-friend07 i got a ping of 019:37pm 0707+mind-friend07 2 019:37pm 0707+mind-friend07 max 019:41pm 01³ mind-friend 07[EMAIL PROTECTED] 019:41pm 01ÃÄÄÄ Ä ÄÄ ÄÄ07ÄÄÄ Ä01 Ä Ä ÄÄÄ Ä ÄÄ07ÄÄ ÄÄÄ Ä ÄÄ ÄÄÄ ÄÄ Ä 019:41pm 01³ 01name07: tom 019:41pm 0707+mind-friend07 you could alais them to 019:41pm 0707+mind-friend07 so that the server cant change them 019:41pm 07[EMAIL PROTECTED] low rates are nasty nasty nasty 019:41pm 07[EMAIL PROTECTED] get you banned 019:41pm 0707+mind-friend07 its worth it 019:42pm 0707+mind-friend07 people are amazed with low ping 019:42pm 0707+mind-friend07 you have 2 ping omgwtfbbq hax 019:42pm 07[EMAIL PROTECTED] amazed is not the word 019:42pm 0707+mind-friend07 true 019:42pm 0707+mind-friend07 but its cool having 2 ping 019:43pm 07[EMAIL PROTECTED] its lame 019:43pm 0707+mind-friend07 why? 019:43pm 0707+mind-friend07 sure you get shit reg and you lag a little, but you have 2 ping 019:43pm 07[EMAIL PROTECTED] what's the effect of a low cmdrate? 019:44pm 0707+mind-friend07 less sending of information per second 019:44pm 07[EMAIL PROTECTED] what's the effect of a low cmdrate, on other players? 019:44pm 0707+mind-friend07 hardly any effect for other people 019:44pm 07[EMAIL PROTECTED] nope 019:44pm 07[EMAIL PROTECTED] lots of effect 019:44pm 0707+mind-friend07 everyone is like 019:44pm 07[EMAIL PROTECTED] you made yourself harder to hit 019:45pm 0707+mind-friend07 omg get some rates becuz i cant hit you 019:45pm 0707+mind-friend07 no you are just as easy to hit 019:45pm 07[EMAIL PROTECTED] the server does not know where the bullet should collide with you 019:45pm 0707+mind-friend07 unless you change your rates rapidly 019:45pm 0707+mind-friend07 so use cl_lc 1 and quit whining 019:49pm 0707+mind-friend07 im not 1337, i just know alot about scripting 0110:00pm 01-07-01- 01Trunky_Co_Lo changes mode07:01 +b [EMAIL PROTECTED] 0110:00pm 01-07-01- 01This 07/[EMAIL PROTECTED] ban affects 07/01+mind-friend 0110:00pm 01-07-01- 01kicked0107: 01mind-friend from #stressed by Trunky_Co_Lo01 07([EMAIL PROTECTED]/01Yes, I have ops 12117120107) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] Crashes
They still have not woken up and sniffed that cofee have they? T - Original Message - From: forb [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Wednesday, December 21, 2005 6:36 PM Subject: Re: [hlds_linux] Crashes I would love to know why valve feels like they can release updates without testing them. Clearly this wasn't tested, and IF it was (and theres no way in hell that it was) then it wasn't enough. The CONCEPT of steam as a live update system is great, but the implementation seems to allow the developers at our beloved valve to think they can just release stuff without testing, cause hey... if its broken, we can just release another live update, no big deal. Thanks for the extra work you put down on the rest of us who have to update stuff twice because you didnt test it once. -forb Eric (Deacon) wrote: In a bold display of creativity, Xavier Kerestesy wrote: What is it that valve has agains Linux? First they release an update that causes choke and loss, now it does nothing but crashes. I'm guessing it's specifically you they're out to get. They're scheming up ways to make your life difficult. What did you do to them? -- Eric (the Deacon remix) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux . ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.371 / Virus Database: 267.14.3/209 - Release Date: 21/12/2005 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] Crashes
From: Pedro Salicrup [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Wednesday, December 21, 2005 10:01 PM Subject: Re: [hlds_linux] Crashes I am sick of everybody bitching about the problems that valve has with their update. SO WHAT? They provide the server software for FREE, the bandwidth for FREE! You cannot be asking for quality of service for software that is provided to you for free. mmm that smell of coffe has not reached you yet... Valve may make some software freely available, however, if valve had to provide ALL the servers, rather than rely on 'the community' providing servers, for which Valve provide, frankly, fuck all service, fuck all documentation and expect US to provide servers for them. Otherwise it would be cool, BTW, when was the last time you played on a VALVE run server, are there any? T ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] Counter-Strike: Source update released
Recently, Valve Inc has hit an all-time LOW on software releases, poorly tested, no release notes, no support apart from 'alfred' who kinda knows what hes doing when people report the problems HIS company should have spotted COME ON VALVE wake up and smell the coffee, this has been far from acceptable in recent weeks. To 'Alfred' when are you going to release FULL and INSTRUCTIVE information on your server software so that we dont have to rely on rumour and hearsay. T ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] Re: banner.gif support (was: A public place...)
EVIL INCARNATE c'mon give it back to us good guys that provide community servers T - Original Message - From: Ben Kennish [EMAIL PROTECTED] To: hlds_linux@list.valvesoftware.com Sent: Monday, November 21, 2005 8:26 PM Subject: Re: [hlds_linux] Re: banner.gif support (was: A public place...) Derek Evan Mart wrote: So this explains why my banner doesn't appear during map downloads. I was beginning to wonder if I changed something on my end. What are the details on this issue? Was it really disabled/broke? Will it be reenabled/fixed? Apparently it will never be re-enabled!! BOO HISS!! :'( :'( :'( :'( -- Ben www.benkennish.co.uk ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.362 / Virus Database: 267.13.4/176 - Release Date: 20/11/2005 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
