Well recently the server I help to manage and configure properly (Sunrise - A new era) was hit by a exploit fixed in the latest Source engine update( TF2 /DOD:S / L4D for those of you that don’t understand look at the change log on STEAM). Specifically my server hit by “Fixed an exploit that allowed files to be uploaded to the server at arbitrary locations in the file system”.
This could all be avoided and never happen again if Garry merges GMod with the latest code for the OB engine. I posted this on the bug tracker but Garry never seems to notice anything on it so I posted it here to.
(http://getsatisfaction.com/facepunch/topics/major_security_issues_caused_by_gmod_not_using_the_latest_version_of_the_ob_engine). This is a major security issue that should be fixed ASAP.
tl;dr = Security issue with Source that was fixed but not fixed in GMod because Garry needs to merge GMod with these changes.
List of servers that have shutdown untill Garry fixes this:
Pirate Ship Wars Enhanced.
Sunrise - A New Era.
All space Spaceage servers are now private. (4)
||VM|| Vent Mob [Semi-Serious]
||VM|| Vent Mob [Experiment]
||VM|| Vent Mob [Open Beta]
Winservars ( 5 )
Some random server…
GMod World (10)
Total servers so far: 41
Join our effort and try and make Garry do something about this! Shutdown your server and post the name of it here to show support.
Q. Okay why would I close my server down for this?
A. Well it would help us get Garry to do something and if you have a private gamemode or lua script ect… then it can currently be stolen fairly easily and someone can damage the operating system on your server to a point where the server will not boot anymore. Main reason to do it is safety of your server and its players.