• PSA - Source engine download exploit
    20 replies, posted
Not sure if this was posted yet, but apparently joining a multiplayer game can get you vac banned. [video]https://youtu.be/bvrMHl80su8[/video] Edit: I know this has existed before, notably in Gmod but I was not aware that it is [I]currently [/I]unpatched.
pisses me off that, knowing this exploit is out there, i can't enjoy my games without turning off sprays and hoping nobody is feeling malicious at least i don't got anything good in my steam inventory :v:
Do people not use Steam Guard or what? Even if they got my password they have to go through my two factor authenticated email to even get the code to log in on a new machine.
[QUOTE=CommanderPT;48639130]Do people not use Steam Guard or what? Even if they got my password they have to go through my two factor authenticated email to even get the code to log in on a new machine.[/QUOTE] It been using a nasty RAT malware... yes they have your email too and steam guard code too.
[QUOTE=CommanderPT;48639130]Do people not use Steam Guard or what? Even if they got my password they have to go through my two factor authenticated email to even get the code to log in on a new machine.[/QUOTE] In this case people get infected by [URL="https://en.wikipedia.org/wiki/Remote_administration_software"]a rat[/URL] aka they really don't need your password to do stuff on your account since they can just do everything they want on your computer.
So wouldn't it be blocked by anti-virus/malwarebytes tho?
[QUOTE=mralexs;48639248]So wouldn't it be blocked by anti-virus/malwarebytes tho?[/QUOTE] as someone who had to reformat because of this bs happening in tf2c, no.
Jesus Fuck. That is pathetic that it was in until 2013. [editline]8th September 2015[/editline] That puts into question so many VAC bans and shit.
[QUOTE=Quark:;48639101]pisses me off that, knowing this exploit is out there, i can't enjoy my games without turning off sprays and hoping nobody is feeling malicious at least i don't got anything good in my steam inventory :v:[/QUOTE] Keep in mind this only applies to the less-popular third-party mods. Really popular stuff like TF2 and CS:GO patched this out ages ago.
[QUOTE=Mort Stroodle;48639730]Keep in mind this only applies to the less-popular third-party mods. Really popular stuff like TF2 and CS:GO patched this out ages ago.[/QUOTE] Not all, CSS for one is still vulnerable.
[QUOTE=Satane;48640836]If you use something like comodo, yes.[/QUOTE] There are ways for malware to get around this as well. In the end its up to common sense and a good active protection system.
Of course this happens shortly after I start playing Dino D-Day.
Update for people in this thread who dont pay attention to the Team Fortress 2 Classic thread: [quote= HLDS Mailing List]We've released a beta update for the Source SDK Base 2013 Multiplayer depot. The updated depots include several security fixes. We're also working on updates for Counter-Strike: Source, Day of Defeat: Source, and Half-Life 2: Deathmatch. We'll have more information about those soon.[/quote] There is also now a beta-test branch under Source SDK 2013 Multiplayer's betas.
In case that you get VAC banned through Valves mistakes, you can always count on the steam support unbanning you. :v:
[url]https://www.mail-archive.com/hlds@list.valvesoftware.com/msg56062.html[/url] Does enabling ASLR with the enhanced mitigation experience toolkit actually help against this exploit?
[QUOTE=DMGaina;48645640]In case that you get VAC banned through Valves mistakes, you can always count on the steam support unbanning you. :v:[/QUOTE] Haha, no. VAC "never makes mistakes" and "VACs are permanent no matter what".
I wonder if Valve issues VAC unbans in this case. Though most likely not, knowing their track record...
Sorry, you need to Log In to post a reply to this thread.