RE: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Bodek
I mean that informing people about fact that mods could have a malicious code is stupid (i got this message from bugtraq). Bodek -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pat Magnan Sent: Wednesday, July 30, 2003 12:36 AM To: [EMAIL PROTECTED]

Re: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread DAV
Nevertheless, the report makes sense and in the DLL part it is correct. We all know that we can place what ever code we want in the DLL files. A programmer with bad intensions could perfectly create a fake mod (or even a real one) and place the malicious code there... Davide (DAV) Email: [EMAIL

Re: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Steve Rukuts
Of course people can do that. It's an issue with all software you download, regardless of whether it's a mod for a game or a text editor or something. Software like that can potentially contain malicious code. It's just the whole stating the obvious thing that gets me. But people (in general)

Re: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Sebastian Steinlechner
Hallo, Wednesday, July 30, 2003, 11:20, Steve Rukuts [EMAIL PROTECTED] wrote: Of course people can do that. It's an issue with all software you download, regardless of whether it's a mod for a game or a text editor or something. Software like that can potentially contain malicious code.

RE: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Pat Magnan
Oi I'm sorry, I hpe you don't think I was calling you anything mate, talking about the 'researcher' :). At 10:25 AM 7/30/2003 +0200, you wrote: I mean that informing people about fact that mods could have a malicious code is stupid (i got this message from bugtraq). Bodek -Original

Re: [hlcoders] i figured this is the BEST place to ask this.. -- valve again =)

2003-07-30 Thread Marco Leise
Hmm, I'm sitting on hot coals already (I hope this is also an English saying and not only a German :p), but I see that the game is close to beeing perfect. If they invest the time to make it perfect on current computer systems and still good on slower machines I appreciate that. It will become the

Re: [hlcoders] Half-Life: fun with MODs / buffer overflow

2003-07-30 Thread Shaun Meckler
On Tue, 29 Jul 2003 18:38:16 -0400 Pat Magnan [EMAIL PROTECTED] wrote: umm wait, that's a local exploit anyhow, you'd have to crack the gameserver, modify the liblist.gam, then insert malicious code, not the world's biggest threat, I think? Pretty much, to exploit it to gain access to the

[hlcoders] Sourcecode hlds ?

2003-07-30 Thread Sven
Hello there! Maybe anyone could tell me where I can get the sources of hlds ? I like to compile the sources on my debian box try to increase the performace of all gameservers on that machine. Or do anyone have some references if there will be a smaller cpu consumption after recompile ? Thanks

Re: [hlcoders] Sourcecode hlds ?

2003-07-30 Thread botman
Maybe anyone could tell me where I can get the sources of hlds ? I like to compile the sources on my debian box try to increase the performace of all gameservers on that machine. Or do anyone have some references if there will be a smaller cpu consumption after recompile ? In the SDK in

RE: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Michael A. Hobson
Bodek: This statement is false. Games that use byte-code script interpreters which run a mod's code in secure sandboxes in Java fashion -- with no actually machine contained in the mod -- cannot be used to implement trojan mods. At 10:50 PM 7/30/2003 +0200, you wrote: No problem :) But in this

Re: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Sebastian Steinlechner
Hallo, Wednesday, July 30, 2003, 23:21, Michael A. Hobson [EMAIL PROTECTED] wrote: Games that use byte-code script interpreters which run a mod's code in secure sandboxes in Java fashion -- with no actually machine contained in the mod -- cannot be used to implement trojan mods. However,

Re: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Jeroen \ShadowLord\ Bogers
The interpreter could be bugged and the mod could still be a serious threat. Alsoe, these interpreters are not written for security, but for efficiency. So there will be most likely a lot of exploitable flaws to break out of the interpreters constraints. Anyways, the whole issue 'a mod could be a

Re: [hlcoders] FW: Half-Life: fun with MODs

2003-07-30 Thread Steve Rukuts
This is possible, but it is only a possibility, not something that is likely to happen. If a game is scripted, it's possible to crash through the scripting engine. I can design a level that crashes Half-Life if I want to. It's unlikely that anyone is going to do this, but people should use all due