Re: [hlds_linux] HLStastX usage
Keeper wrote:
> This right here is what I meant by "I'm no regex expert".
Well, it looks like this also applies to other persons, as the change
is unnecessarily expensive.
> if ($s_output =~ s/^(?:.*?)?L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//)
if ($s_output =~ s/^.*?L (\d\d)\/(\d\d)\/(\d{4}) - (\d\d):(\d\d):(\d\d):\s*//)
would suffice to get a non-greedy match.
Cheers, Daniel
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
It's not in the public downloadable version yet.
Do you have any idea if he plans on updating that one? Or is it only for
the premium customers that this is going to get fixed?
Keeper
-Original Message-
From: milchworld [mailto:[EMAIL PROTECTED]
Sent: Monday, June 23, 2008 2:03 PM
To: Half-Life dedicated Linux server mailing list
Cc: 'Half-Life dedicated Win32 server mailing list'
Subject: Re: [hlds_linux] HLStastX usage
I talked to Tobi and he fixed it:
Another way to catch this problem is to stop the regex from being too
greedy:
This was the original line 1822 in hlstats.pl:
if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
This is the new fixed line 1822 in hlstats.pl
if ($s_output =~ s/^(?:.*?)?L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
Have fun
Leopard
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
You can only be a regex expert if you were dropped on your head as a baby!
More than once helps!
Still no guarantees!
} -Original Message-
} From: [EMAIL PROTECTED] [mailto:hlds_linux-
} [EMAIL PROTECTED] On Behalf Of Keeper
} Sent: Monday, June 23, 2008 2:14 PM
} To: 'Half-Life dedicated Linux server mailing list'
} Subject: Re: [hlds_linux] HLStastX usage
}
} This right here is what I meant by "I'm no regex expert".
}
} if ($s_output =~ s/^(?:.*?)?L (\d\d)\/(\d\d)\/(\d{4}) -
} (\d\d):(\d\d):(\d\d):\s*//)
}
} Nice Leopard,
} Thanks!
}
} Keeper
}
} -Original Message-
} From: milchworld [mailto:[EMAIL PROTECTED]
} Sent: Monday, June 23, 2008 2:03 PM
} To: Half-Life dedicated Linux server mailing list
} Cc: 'Half-Life dedicated Win32 server mailing list'
} Subject: Re: [hlds_linux] HLStastX usage
}
} I talked to Tobi and he fixed it:
} Another way to catch this problem is to stop the regex from being too
} greedy:
}
} This was the original line 1822 in hlstats.pl:
}
} if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
} (\d\d):(\d\d):(\d\d):\s*//)
}
} This is the new fixed line 1822 in hlstats.pl
}
}
}
} Have fun
} Leopard
}
}
} ___
} To unsubscribe, edit your list preferences, or view the list archives,
} please visit:
} http://list.valvesoftware.com/mailman/listinfo/hlds_linux
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
This right here is what I meant by "I'm no regex expert".
if ($s_output =~ s/^(?:.*?)?L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
Nice Leopard,
Thanks!
Keeper
-Original Message-
From: milchworld [mailto:[EMAIL PROTECTED]
Sent: Monday, June 23, 2008 2:03 PM
To: Half-Life dedicated Linux server mailing list
Cc: 'Half-Life dedicated Win32 server mailing list'
Subject: Re: [hlds_linux] HLStastX usage
I talked to Tobi and he fixed it:
Another way to catch this problem is to stop the regex from being too
greedy:
This was the original line 1822 in hlstats.pl:
if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
This is the new fixed line 1822 in hlstats.pl
Have fun
Leopard
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
I talked to Tobi and he fixed it:
Another way to catch this problem is to stop the regex from being too
greedy:
This was the original line 1822 in hlstats.pl:
if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
This is the new fixed line 1822 in hlstats.pl
if ($s_output =~ s/^(?:.*?)?L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
Have fun
Leopard
Keeper schrieb:
> Ok, here is the exploit ... and one way to fix it.
>
> If you are playing in a server that has HLStatsX installed, you can put log
> output in chat to create fake events.
>
> You can just say or say_team the following to trick HLStatsX:
>
> L 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")
>
> The log output would be:
>
> L 06/23/2008 - 01:00:00: "Keeper<1>" say "L
> 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")"
>
> The way the current hlstats.pl perl script parses this, is it looks for the
> last occurrence of the date stamp. In this case, it would show that
> dm_no_such_map was loaded on your server ... even though it doesn't exist.
> So you could logically put in headshot kills with crowbars in hl2dm. Create
> fake captures and kills in TF2. You could even mimic VAC Bans that would
> eliminate players from being able to join servers with HLStatsX installed.
>
> These exploits could range from being a small nuisance, to being a huge
> headache for server operators.
>
> To fix this, and I'm no regex expert, I found the following to work with
> both streaming servers and importing logs from the command shell:
>
> In your hlstats.pl files do the following two things:
>
> [#1 - SEARCH] ( around line 1494 )
> my $last_attacker = "";
> my $last_attacker_hitgroup = "";
> [ADD AFTER]
> my $is_streamed= 0;
> my $test_for_date = 0;
> [END]
>
> [#2 - SEARCH] ( around line 1821 )
> # Get the datestamp (or complain)
> if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//)
> {
> [REPLACE WITH]
> # Get the datestamp (or complain)
> $is_streamed = 0;
> $test_for_date = 0;
> $is_streamed = ($s_output !~ m/^L\s*/);
>
> if ( !$is_streamed ) {
> $test_for_date = ($s_output =~ s/^L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//);
> } else {
> $test_for_date = ($s_output =~ s/^\S*L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//);
> }
>
> if ($test_for_date)
> {
> [END]
>
> This will allow the hlstats.pl parser to get the full event after the FIRST
> log stamp, and will stop this method of spoofing.
>
> Let me state, that I in no way support HLStatsX, nor will I do so in the
> future. But I wanted to post about this so server operators could keep the
> integrity of their databases.
>
> Keeper
>
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
>
>
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Yeah, it's a catch 22. But since community support has pretty much gone to zilch for HLStatsX, I figured it's worth the risk since this list is mainly for server operators. And yes, hopefully Tobi will update both versions otherwise a lot of self-managed stats servers could be vulnerable. Keeper -Original Message- From: Jani Tiira [mailto:[EMAIL PROTECTED] Sent: Monday, June 23, 2008 1:05 PM To: Half-Life dedicated Linux server mailing list Cc: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds_linux] HLStastX usage Great post.. dumb post.. all the same.. I personally would have mailed this to Tobi17 instead of posting it here. But good catch anyway.. -- Tirppa ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Sorry.. I'm not that active on the list.. But I'm pretty sure many people follow the list to find exploits before they are fixed. Anyway like I said it's a good catch.. any idea why my messages get posted by the bounce? On Mon, Jun 23, 2008 at 8:11 PM, Chris Brunelle <[EMAIL PROTECTED]> wrote: > You obviously don't read the mailing list everyday otherwise you would have > known that he did in fact email Tobi already. I'd prefer to know about > this > myself so that I can patch it without waiting for Tobi. > > --Chris > > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
You obviously don't read the mailing list everyday otherwise you would have
known that he did in fact email Tobi already. I'd prefer to know about this
myself so that I can patch it without waiting for Tobi.
--Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jani Tiira
Sent: Monday, June 23, 2008 11:05 AM
To: Half-Life dedicated Linux server mailing list
Cc: Half-Life dedicated Win32 server mailing list
Subject: Re: [hlds_linux] HLStastX usage
Great post.. dumb post.. all the same.. I personally would have mailed this
to Tobi17 instead of posting it here. But good catch anyway..
--
Tirppa
On Mon, Jun 23, 2008 at 7:22 PM, Keeper <[EMAIL PROTECTED]> wrote:
> Ok, here is the exploit ... and one way to fix it.
>
> If you are playing in a server that has HLStatsX installed, you can put
log
> output in chat to create fake events.
>
> You can just say or say_team the following to trick HLStatsX:
>
> L 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")
>
> The log output would be:
>
> L 06/23/2008 - 01:00:00: "Keeper<1>" say
"L
> 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")"
>
> The way the current hlstats.pl perl script parses this, is it looks for
the
> last occurrence of the date stamp. In this case, it would show that
> dm_no_such_map was loaded on your server ... even though it doesn't exist.
> So you could logically put in headshot kills with crowbars in hl2dm.
> Create
> fake captures and kills in TF2. You could even mimic VAC Bans that would
> eliminate players from being able to join servers with HLStatsX installed.
>
> These exploits could range from being a small nuisance, to being a huge
> headache for server operators.
>
> To fix this, and I'm no regex expert, I found the following to work with
> both streaming servers and importing logs from the command shell:
>
> In your hlstats.pl files do the following two things:
>
> [#1 - SEARCH] ( around line 1494 )
> my $last_attacker = "";
> my $last_attacker_hitgroup = "";
> [ADD AFTER]
> my $is_streamed= 0;
> my $test_for_date = 0;
> [END]
>
> [#2 - SEARCH] ( around line 1821 )
> # Get the datestamp (or complain)
> if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//)
> {
> [REPLACE WITH]
> # Get the datestamp (or complain)
> $is_streamed = 0;
> $test_for_date = 0;
> $is_streamed = ($s_output !~ m/^L\s*/);
>
> if ( !$is_streamed ) {
> $test_for_date = ($s_output =~ s/^L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//);
> } else {
> $test_for_date = ($s_output =~ s/^\S*L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//);
> }
>
> if ($test_for_date)
> {
> [END]
>
> This will allow the hlstats.pl parser to get the full event after the
FIRST
> log stamp, and will stop this method of spoofing.
>
> Let me state, that I in no way support HLStatsX, nor will I do so in the
> future. But I wanted to post about this so server operators could keep
the
> integrity of their databases.
>
> Keeper
>
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
No virus found in this incoming message.
Checked by AVG.
Version: 8.0.100 / Virus Database: 270.4.1/1514 - Release Date: 6/23/2008
7:17 AM
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
well in a way it is kinda better for here since a lot of servers use
this program and it does work in all version custom and premium.*
*Jani Tiira wrote:
> Great post.. dumb post.. all the same.. I personally would have mailed this
> to Tobi17 instead of posting it here. But good catch anyway..
>
> --
> Tirppa
>
> On Mon, Jun 23, 2008 at 7:22 PM, Keeper <[EMAIL PROTECTED]> wrote:
>
>
>> Ok, here is the exploit ... and one way to fix it.
>>
>> If you are playing in a server that has HLStatsX installed, you can put log
>> output in chat to create fake events.
>>
>> You can just say or say_team the following to trick HLStatsX:
>>
>> L 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")
>>
>> The log output would be:
>>
>> L 06/23/2008 - 01:00:00: "Keeper<1>" say "L
>> 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")"
>>
>> The way the current hlstats.pl perl script parses this, is it looks for the
>> last occurrence of the date stamp. In this case, it would show that
>> dm_no_such_map was loaded on your server ... even though it doesn't exist.
>> So you could logically put in headshot kills with crowbars in hl2dm.
>> Create
>> fake captures and kills in TF2. You could even mimic VAC Bans that would
>> eliminate players from being able to join servers with HLStatsX installed.
>>
>> These exploits could range from being a small nuisance, to being a huge
>> headache for server operators.
>>
>> To fix this, and I'm no regex expert, I found the following to work with
>> both streaming servers and importing logs from the command shell:
>>
>> In your hlstats.pl files do the following two things:
>>
>> [#1 - SEARCH] ( around line 1494 )
>> my $last_attacker = "";
>> my $last_attacker_hitgroup = "";
>> [ADD AFTER]
>> my $is_streamed= 0;
>> my $test_for_date = 0;
>> [END]
>>
>> [#2 - SEARCH] ( around line 1821 )
>> # Get the datestamp (or complain)
>> if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
>> (\d\d):(\d\d):(\d\d):\s*//)
>> {
>> [REPLACE WITH]
>> # Get the datestamp (or complain)
>> $is_streamed = 0;
>> $test_for_date = 0;
>> $is_streamed = ($s_output !~ m/^L\s*/);
>>
>> if ( !$is_streamed ) {
>> $test_for_date = ($s_output =~ s/^L (\d\d)\/(\d\d)\/(\d{4}) -
>> (\d\d):(\d\d):(\d\d):\s*//);
>> } else {
>> $test_for_date = ($s_output =~ s/^\S*L (\d\d)\/(\d\d)\/(\d{4}) -
>> (\d\d):(\d\d):(\d\d):\s*//);
>> }
>>
>> if ($test_for_date)
>> {
>> [END]
>>
>> This will allow the hlstats.pl parser to get the full event after the FIRST
>> log stamp, and will stop this method of spoofing.
>>
>> Let me state, that I in no way support HLStatsX, nor will I do so in the
>> future. But I wanted to post about this so server operators could keep the
>> integrity of their databases.
>>
>> Keeper
>>
>>
>> ___
>> To unsubscribe, edit your list preferences, or view the list archives,
>> please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>
>>
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
>
>
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Great post.. dumb post.. all the same.. I personally would have mailed this
to Tobi17 instead of posting it here. But good catch anyway..
--
Tirppa
On Mon, Jun 23, 2008 at 7:22 PM, Keeper <[EMAIL PROTECTED]> wrote:
> Ok, here is the exploit ... and one way to fix it.
>
> If you are playing in a server that has HLStatsX installed, you can put log
> output in chat to create fake events.
>
> You can just say or say_team the following to trick HLStatsX:
>
> L 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")
>
> The log output would be:
>
> L 06/23/2008 - 01:00:00: "Keeper<1>" say "L
> 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")"
>
> The way the current hlstats.pl perl script parses this, is it looks for the
> last occurrence of the date stamp. In this case, it would show that
> dm_no_such_map was loaded on your server ... even though it doesn't exist.
> So you could logically put in headshot kills with crowbars in hl2dm.
> Create
> fake captures and kills in TF2. You could even mimic VAC Bans that would
> eliminate players from being able to join servers with HLStatsX installed.
>
> These exploits could range from being a small nuisance, to being a huge
> headache for server operators.
>
> To fix this, and I'm no regex expert, I found the following to work with
> both streaming servers and importing logs from the command shell:
>
> In your hlstats.pl files do the following two things:
>
> [#1 - SEARCH] ( around line 1494 )
> my $last_attacker = "";
> my $last_attacker_hitgroup = "";
> [ADD AFTER]
> my $is_streamed= 0;
> my $test_for_date = 0;
> [END]
>
> [#2 - SEARCH] ( around line 1821 )
> # Get the datestamp (or complain)
> if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//)
> {
> [REPLACE WITH]
> # Get the datestamp (or complain)
> $is_streamed = 0;
> $test_for_date = 0;
> $is_streamed = ($s_output !~ m/^L\s*/);
>
> if ( !$is_streamed ) {
> $test_for_date = ($s_output =~ s/^L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//);
> } else {
> $test_for_date = ($s_output =~ s/^\S*L (\d\d)\/(\d\d)\/(\d{4}) -
> (\d\d):(\d\d):(\d\d):\s*//);
> }
>
> if ($test_for_date)
> {
> [END]
>
> This will allow the hlstats.pl parser to get the full event after the FIRST
> log stamp, and will stop this method of spoofing.
>
> Let me state, that I in no way support HLStatsX, nor will I do so in the
> future. But I wanted to post about this so server operators could keep the
> integrity of their databases.
>
> Keeper
>
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
[hlds_linux] HLStastX usage
Ok, here is the exploit ... and one way to fix it.
If you are playing in a server that has HLStatsX installed, you can put log
output in chat to create fake events.
You can just say or say_team the following to trick HLStatsX:
L 06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")
The log output would be:
L 06/23/2008 - 01:00:00: "Keeper<1>" say "L
06/23/2008 - 01:00:00: Started map "dm_no_such_map" (CRC "-123456789")"
The way the current hlstats.pl perl script parses this, is it looks for the
last occurrence of the date stamp. In this case, it would show that
dm_no_such_map was loaded on your server ... even though it doesn't exist.
So you could logically put in headshot kills with crowbars in hl2dm. Create
fake captures and kills in TF2. You could even mimic VAC Bans that would
eliminate players from being able to join servers with HLStatsX installed.
These exploits could range from being a small nuisance, to being a huge
headache for server operators.
To fix this, and I'm no regex expert, I found the following to work with
both streaming servers and importing logs from the command shell:
In your hlstats.pl files do the following two things:
[#1 - SEARCH] ( around line 1494 )
my $last_attacker = "";
my $last_attacker_hitgroup = "";
[ADD AFTER]
my $is_streamed= 0;
my $test_for_date = 0;
[END]
[#2 - SEARCH] ( around line 1821 )
# Get the datestamp (or complain)
if ($s_output =~ s/^.*L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//)
{
[REPLACE WITH]
# Get the datestamp (or complain)
$is_streamed = 0;
$test_for_date = 0;
$is_streamed = ($s_output !~ m/^L\s*/);
if ( !$is_streamed ) {
$test_for_date = ($s_output =~ s/^L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//);
} else {
$test_for_date = ($s_output =~ s/^\S*L (\d\d)\/(\d\d)\/(\d{4}) -
(\d\d):(\d\d):(\d\d):\s*//);
}
if ($test_for_date)
{
[END]
This will allow the hlstats.pl parser to get the full event after the FIRST
log stamp, and will stop this method of spoofing.
Let me state, that I in no way support HLStatsX, nor will I do so in the
future. But I wanted to post about this so server operators could keep the
integrity of their databases.
Keeper
___
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Actually, you're more or less striking a deal with Valve. As a GSP, you host a server, thereby making their game actually worth something, and in return, you can keep all the profits you make. As for applications like HLStatsX: they do not use anything created by Valve (SDKs, header files) whose usage Valve can restrict (AFAIK, logfiles do not fall into the categories of files that can be copyrighted), so they can make you pay. (Take all this with a grain of salt; I'm not Yahn Bernier. A lawyer, I mean.) ~~ Ondra On 22.06.08 17:36 Uhr, ics wrote: > You got some weird sense of humour. Valve should instead pay us because > we run their server software and even enhance its features with extra > stuff like Hlstatsx. Those sheeps (aka players) always demand vanilla > stuff but try sometimes run a vanilla server without any kind of stats. > Its way less popular than with stats. > > -ics > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
You got some weird sense of humour. Valve should instead pay us because we run their server software and even enhance its features with extra stuff like Hlstatsx. Those sheeps (aka players) always demand vanilla stuff but try sometimes run a vanilla server without any kind of stats. Its way less popular than with stats. -ics John kirjoitti: > Its strange that these companies can operate making profit without giving > Valve a share :\ > > On 6/22/08, Console Admin <[EMAIL PROTECTED]> wrote: > >> I posted a comment about the hlstatsx forums on the steam forums, but >> someone at VaLve decided they didn't like my post and removed it. Someone >> else had posted asking what happened to the forums and I replied to it with >> my opinion on what happened. As a result of that exchange, I decided to ask >> the hlstatsx team what was up. Here's their response. I can only assume >> this >> is the "official" response and we probably won't ever see the hlstatsx >> forums again. I can only imagine what the "legal rights" would be. >> >> [EMAIL PROTECTED] to me >> >> show details 5:14 AM (3 hours ago) >> >> >> Reply >> >> >> Hello, >> >> at the moment the public forums are not available due legal rights. We >> think >> we will setup new forums in the future, but we sadly cannot tell you any >> estimated time. >> >> >> Best regards, >> The HLstatsX - Team >> >> -- >> HLstatsX is a service of the TTS Oetzel & Goerz GmbH >> >> TTS Oetzel & Goerz GmbH >> Postfach 30 11 08 >> 04251 Leipzig >> >> Internet: www.hlstatsx.com >> Phone: +49 900 1 101 520 (1.86 EUR/minute) >> Fax: +49 180 5 999 187 (0.14 EUR/minute) >> Email: [EMAIL PROTECTED] >> >> Managing Directors: Tobias Oetzel, Thomas Görz >> Registered Office: Arndtstr. 25C, 04275 Leipzig, Germany >> Commercial Register: Amtsgericht Leipzig, HRB23686 >> USt-Id: DE 253347143 >> >> ___ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> > ___ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Why not? All they do is parse the logs and connect through rcon etc. GSP'd aren't giving vALVE a share either =] -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens John Verzonden: zondag 22 juni 2008 13:01 Aan: Half-Life dedicated Linux server mailing list Onderwerp: Re: [hlds_linux] HLStastX usage Its strange that these companies can operate making profit without giving Valve a share :\ On 6/22/08, Console Admin <[EMAIL PROTECTED]> wrote: > > I posted a comment about the hlstatsx forums on the steam forums, but > someone at VaLve decided they didn't like my post and removed it. Someone > else had posted asking what happened to the forums and I replied to it with > my opinion on what happened. As a result of that exchange, I decided to ask > the hlstatsx team what was up. Here's their response. I can only assume > this > is the "official" response and we probably won't ever see the hlstatsx > forums again. I can only imagine what the "legal rights" would be. > > [EMAIL PROTECTED] to me > > show details 5:14 AM (3 hours ago) > > > Reply > > > Hello, > > at the moment the public forums are not available due legal rights. We > think > we will setup new forums in the future, but we sadly cannot tell you any > estimated time. > > > Best regards, > The HLstatsX - Team > > -- > HLstatsX is a service of the TTS Oetzel & Goerz GmbH > > TTS Oetzel & Goerz GmbH > Postfach 30 11 08 > 04251 Leipzig > > Internet: www.hlstatsx.com > Phone: +49 900 1 101 520 (1.86 EUR/minute) > Fax: +49 180 5 999 187 (0.14 EUR/minute) > Email: [EMAIL PROTECTED] > > Managing Directors: Tobias Oetzel, Thomas Görz > Registered Office: Arndtstr. 25C, 04275 Leipzig, Germany > Commercial Register: Amtsgericht Leipzig, HRB23686 > USt-Id: DE 253347143 > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux __ Information from ESET NOD32 Antivirus, version of virus signature database 3207 (20080622) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 3207 (20080622) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Its strange that these companies can operate making profit without giving Valve a share :\ On 6/22/08, Console Admin <[EMAIL PROTECTED]> wrote: > > I posted a comment about the hlstatsx forums on the steam forums, but > someone at VaLve decided they didn't like my post and removed it. Someone > else had posted asking what happened to the forums and I replied to it with > my opinion on what happened. As a result of that exchange, I decided to ask > the hlstatsx team what was up. Here's their response. I can only assume > this > is the "official" response and we probably won't ever see the hlstatsx > forums again. I can only imagine what the "legal rights" would be. > > [EMAIL PROTECTED] to me > > show details 5:14 AM (3 hours ago) > > > Reply > > > Hello, > > at the moment the public forums are not available due legal rights. We > think > we will setup new forums in the future, but we sadly cannot tell you any > estimated time. > > > Best regards, > The HLstatsX - Team > > -- > HLstatsX is a service of the TTS Oetzel & Goerz GmbH > > TTS Oetzel & Goerz GmbH > Postfach 30 11 08 > 04251 Leipzig > > Internet: www.hlstatsx.com > Phone: +49 900 1 101 520 (1.86 EUR/minute) > Fax: +49 180 5 999 187 (0.14 EUR/minute) > Email: [EMAIL PROTECTED] > > Managing Directors: Tobias Oetzel, Thomas Görz > Registered Office: Arndtstr. 25C, 04275 Leipzig, Germany > Commercial Register: Amtsgericht Leipzig, HRB23686 > USt-Id: DE 253347143 > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
I posted a comment about the hlstatsx forums on the steam forums, but someone at VaLve decided they didn't like my post and removed it. Someone else had posted asking what happened to the forums and I replied to it with my opinion on what happened. As a result of that exchange, I decided to ask the hlstatsx team what was up. Here's their response. I can only assume this is the "official" response and we probably won't ever see the hlstatsx forums again. I can only imagine what the "legal rights" would be. [EMAIL PROTECTED] to me show details 5:14 AM (3 hours ago) Reply Hello, at the moment the public forums are not available due legal rights. We think we will setup new forums in the future, but we sadly cannot tell you any estimated time. Best regards, The HLstatsX - Team -- HLstatsX is a service of the TTS Oetzel & Goerz GmbH TTS Oetzel & Goerz GmbH Postfach 30 11 08 04251 Leipzig Internet: www.hlstatsx.com Phone: +49 900 1 101 520 (1.86 EUR/minute) Fax: +49 180 5 999 187 (0.14 EUR/minute) Email: [EMAIL PROTECTED] Managing Directors: Tobias Oetzel, Thomas Görz Registered Office: Arndtstr. 25C, 04275 Leipzig, Germany Commercial Register: Amtsgericht Leipzig, HRB23686 USt-Id: DE 253347143 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Hi, Please release the fix. Tobi screwed up his business plan a long time ago by pulling official support for this. Some of our systems still partly rely on HLstatsX, so if any security issue exists, we'd really like to know about it. Cheers, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keeper Sent: Saturday, June 21, 2008 9:18 PM To: 'Half-Life dedicated Linux server mailing list' Subject: Re: [hlds_linux] HLStastX usage I want to give Tobi a chance to fix it himself first. This problem is caused by a person in the server playing. It's not a web interface kind of problem. Keeper -Original Message- From: eric beaujard [mailto:[EMAIL PROTECTED] Sent: Saturday, June 21, 2008 2:18 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] HLStastX usage Could you please give me the fix concerning the fault of security? Tobi to close the support but I do not know why: ( > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED]; hlds_linux@list.valvesoftware.com > Date: Sat, 21 Jun 2008 12:12:43 -0400 > Subject: [hlds_linux] HLStastX usage > > I know this is not a source game issue, but since it is written for and used > by source game operators I wanted to ask here: > > Is there no longer any community based support for HLStatsX? I noticed Tobi > has removed the forums from his site. Somebody has pointed out a serious > security flaw to me that we fixed. If it isn't rolled out into the free > downloaded version I wanted to make the fix public. > > I will of course post it here, but wanted to know if there was anywhere else > off-list that I could inform users of HLStasX. Thankfully it's an easy fix. > > We have found a security hole, but to our knowledge it hasn't been exploited > yet at any of the servers that we have checked out. > > Thanks, > Keeper > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux _ Avec Hotmail, vos e-mails vous suivent partout ! Mettez Hotmail sur votre mobile ! http://www.messengersurvotremobile.com/?d=hotmail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Hi, Please release the fix. Tobi screwed up his business plan a long time ago by pulling official support for this. Some of our systems still partly rely on HLstatsX, so if any security issue exists, we'd really like to know about it. Cheers, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keeper Sent: Saturday, June 21, 2008 9:18 PM To: 'Half-Life dedicated Linux server mailing list' Subject: Re: [hlds_linux] HLStastX usage I want to give Tobi a chance to fix it himself first. This problem is caused by a person in the server playing. It's not a web interface kind of problem. Keeper -Original Message- From: eric beaujard [mailto:[EMAIL PROTECTED] Sent: Saturday, June 21, 2008 2:18 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] HLStastX usage Could you please give me the fix concerning the fault of security? Tobi to close the support but I do not know why: ( > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED]; hlds_linux@list.valvesoftware.com > Date: Sat, 21 Jun 2008 12:12:43 -0400 > Subject: [hlds_linux] HLStastX usage > > I know this is not a source game issue, but since it is written for and used > by source game operators I wanted to ask here: > > Is there no longer any community based support for HLStatsX? I noticed Tobi > has removed the forums from his site. Somebody has pointed out a serious > security flaw to me that we fixed. If it isn't rolled out into the free > downloaded version I wanted to make the fix public. > > I will of course post it here, but wanted to know if there was anywhere else > off-list that I could inform users of HLStasX. Thankfully it's an easy fix. > > We have found a security hole, but to our knowledge it hasn't been exploited > yet at any of the servers that we have checked out. > > Thanks, > Keeper > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux _ Avec Hotmail, vos e-mails vous suivent partout ! Mettez Hotmail sur votre mobile ! http://www.messengersurvotremobile.com/?d=hotmail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
move to www.psychostats.com. the new version is out now for a few weeks and it rocks! On Sat, 21 Jun 2008 18:12:43 +0200, Keeper <[EMAIL PROTECTED]> wrote: > I know this is not a source game issue, but since it is written for and > used > by source game operators I wanted to ask here: > > Is there no longer any community based support for HLStatsX? I noticed > Tobi > has removed the forums from his site. Somebody has pointed out a serious > security flaw to me that we fixed. If it isn't rolled out into the free > downloaded version I wanted to make the fix public. > > I will of course post it here, but wanted to know if there was anywhere > else > off-list that I could inform users of HLStasX. Thankfully it's an easy > fix. > > We have found a security hole, but to our knowledge it hasn't been > exploited > yet at any of the servers that we have checked out. > > Thanks, > Keeper > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux -- Erstellt mit Operas revolutionärem E-Mail-Modul: http://www.opera.com/m2/ ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
I want to give Tobi a chance to fix it himself first. This problem is caused by a person in the server playing. It's not a web interface kind of problem. Keeper -Original Message- From: eric beaujard [mailto:[EMAIL PROTECTED] Sent: Saturday, June 21, 2008 2:18 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] HLStastX usage Could you please give me the fix concerning the fault of security? Tobi to close the support but I do not know why: ( > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED]; hlds_linux@list.valvesoftware.com > Date: Sat, 21 Jun 2008 12:12:43 -0400 > Subject: [hlds_linux] HLStastX usage > > I know this is not a source game issue, but since it is written for and used > by source game operators I wanted to ask here: > > Is there no longer any community based support for HLStatsX? I noticed Tobi > has removed the forums from his site. Somebody has pointed out a serious > security flaw to me that we fixed. If it isn't rolled out into the free > downloaded version I wanted to make the fix public. > > I will of course post it here, but wanted to know if there was anywhere else > off-list that I could inform users of HLStasX. Thankfully it's an easy fix. > > We have found a security hole, but to our knowledge it hasn't been exploited > yet at any of the servers that we have checked out. > > Thanks, > Keeper > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux _ Avec Hotmail, vos e-mails vous suivent partout ! Mettez Hotmail sur votre mobile ! http://www.messengersurvotremobile.com/?d=hotmail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
To earn more money. The downloadable version of HLStatsX doesn't even support most HL1 games :\ -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens eric beaujard Verzonden: zaterdag 21 juni 2008 20:18 Aan: Half-Life dedicated Linux server mailing list Onderwerp: Re: [hlds_linux] HLStastX usage Could you please give me the fix concerning the fault of security? Tobi to close the support but I do not know why: ( > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED]; hlds_linux@list.valvesoftware.com > Date: Sat, 21 Jun 2008 12:12:43 -0400 > Subject: [hlds_linux] HLStastX usage > > I know this is not a source game issue, but since it is written for and used > by source game operators I wanted to ask here: > > Is there no longer any community based support for HLStatsX? I noticed Tobi > has removed the forums from his site. Somebody has pointed out a serious > security flaw to me that we fixed. If it isn't rolled out into the free > downloaded version I wanted to make the fix public. > > I will of course post it here, but wanted to know if there was anywhere else > off-list that I could inform users of HLStasX. Thankfully it's an easy fix. > > We have found a security hole, but to our knowledge it hasn't been exploited > yet at any of the servers that we have checked out. > > Thanks, > Keeper > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux _ Avec Hotmail, vos e-mails vous suivent partout ! Mettez Hotmail sur votre mobile ! http://www.messengersurvotremobile.com/?d=hotmail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux __ Information from ESET NOD32 Antivirus, version of virus signature database 3205 (20080621) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 3205 (20080621) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] HLStastX usage
Could you please give me the fix concerning the fault of security? Tobi to close the support but I do not know why: ( > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED]; hlds_linux@list.valvesoftware.com > Date: Sat, 21 Jun 2008 12:12:43 -0400 > Subject: [hlds_linux] HLStastX usage > > I know this is not a source game issue, but since it is written for and used > by source game operators I wanted to ask here: > > Is there no longer any community based support for HLStatsX? I noticed Tobi > has removed the forums from his site. Somebody has pointed out a serious > security flaw to me that we fixed. If it isn't rolled out into the free > downloaded version I wanted to make the fix public. > > I will of course post it here, but wanted to know if there was anywhere else > off-list that I could inform users of HLStasX. Thankfully it's an easy fix. > > We have found a security hole, but to our knowledge it hasn't been exploited > yet at any of the servers that we have checked out. > > Thanks, > Keeper > > > ___ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux _ Avec Hotmail, vos e-mails vous suivent partout ! Mettez Hotmail sur votre mobile ! http://www.messengersurvotremobile.com/?d=hotmail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
[hlds_linux] HLStastX usage
I know this is not a source game issue, but since it is written for and used by source game operators I wanted to ask here: Is there no longer any community based support for HLStatsX? I noticed Tobi has removed the forums from his site. Somebody has pointed out a serious security flaw to me that we fixed. If it isn't rolled out into the free downloaded version I wanted to make the fix public. I will of course post it here, but wanted to know if there was anywhere else off-list that I could inform users of HLStasX. Thankfully it's an easy fix. We have found a security hole, but to our knowledge it hasn't been exploited yet at any of the servers that we have checked out. Thanks, Keeper ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
