Re: [hlds] Eventscripts - Creating Windows Account

2010-03-03 Thread Kerry Dorsey
; and about and we know how to secure ourselves agents them. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers > Sent: Tuesday, March 02, 2010 4:45 PM > To: 'Half-Life dedicated

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-03 Thread TheNob HLDS
I am running all my gameserver services (L4D, CoD, TS3) with the local service account. A useful guide by Microsoft "The Services and Service Accounts Security Planning Guide" can be found as PDF here which has the main goal to help administrators reduce the effect of a compromised service on a hos

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-03 Thread Shane Arnold
because we what treats are out > and about and we know how to secure ourselves agents them. > > -Original Message- > From: hlds-boun...@list.valvesoftware.com > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Steven Crothers > Sent: Tuesday, March 02, 2010 4:45 PM > T

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Mike Stiehm
nt: Tuesday, March 02, 2010 4:45 PM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] Eventscripts - Creating Windows Account Well this can easily turn into a "Flame TCAdmin" thread, but I'll simply leave it with this: TCAdmin is NOT a secure panel, p

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Steven Crothers
oftware.com] On Behalf Of Mike Stiehm Sent: Tuesday, March 02, 2010 5:28 PM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] Eventscripts - Creating Windows Account This is true for the default setting. However TCAdmin can be set to use a specific user for all game se

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Andrew Armstrong
Of Mike Stiehm Sent: Wednesday, 3 March 2010 9:28 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] Eventscripts - Creating Windows Account This is true for the default setting. However TCAdmin can be set to use a specific user for all game servers created from

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Mike Stiehm
ed Win32 server mailing list' Subject: Re: [hlds] Eventscripts - Creating Windows Account That is a simple solution to the problem. However if you are a GSP or otherwise using TCAdmin like many do, there are some side issues that go along with setting a game server to use a limited access. (Impor

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread DontWannaName!
> De : Saul Rennison > Expéditeur :hlds-boun...@list.valvesoftware.com > À :Half-Life dedicated Win32 server mailing list > Répondre à :Half-Life dedicated Win32 server mailing list > Objet : Re: [hlds] Eventscripts - Creating Windows Account > Envoyé : 2 mar, 2010 17:02 > > If y

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Jean-Philippe Mailloux
h 02, 2010 3:14 PM > > To: Half-Life dedicated Win32 server mailing list > > Subject: Re: [hlds] Eventscripts - Creating Windows Account > > > > Nothing new, Everybody can upload files to your server, becouse Valve > > dont wanna to u

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Lane Eckley
, March 02, 2010 5:03 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Eventscripts - Creating Windows Account If you run the server as a limited user, then it can't touch the registry or create other users... simple :/ Thanks, - Saul. On 2 March 2010 20:51, ics wrote: &

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Saul Rennison
> is for mod makers to make their mods secure. > > > > -Original Message- > > From: hlds-boun...@list.valvesoftware.com > > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of w4rezz > > Sent: Tuesday, March 02, 2010 3:14 PM > > To: Half-Life dedicated Win3

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread ics
10 3:14 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] Eventscripts - Creating Windows Account > > Nothing new, Everybody can upload files to your server, becouse Valve > dont wanna to use whitelist system, to allow only specific file > extensions to be

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Steven Crothers
PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Eventscripts - Creating Windows Account Nothing new, Everybody can upload files to your server, becouse Valve dont wanna to use whitelist system, to allow only specific file extensions to be downloaded to only specific

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread w4rezz
Nothing new, Everybody can upload files to your server, becouse Valve dont wanna to use whitelist system, to allow only specific file extensions to be downloaded to only specific game directories. ___ To unsubscribe, edit your list preferences, or view t

Re: [hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Matthew Gottlieb
I posted this up on SRCDS.com as well: http://forums.srcds.com/viewtopic/13843 Thanks for the heads up. ~ Matt On Tue, Mar 2, 2010 at 1:39 PM, Lane Eckley wrote: > Hi Guys, > > > > I wanted to shoot out an email to everyone in regards to an exploit we have > come across today for those who are r

[hlds] Eventscripts - Creating Windows Account

2010-03-02 Thread Lane Eckley
Hi Guys, I wanted to shoot out an email to everyone in regards to an exploit we have come across today for those who are running Eventscripts & windows based servers. Apparently a user is able to upload "corelib.pyc" to the game server without using the common FTP/Control panel and via the