I don't think making server code resistant to attack is stupid at all. You have to remember that Q2 was designed as a single player game first, multiplayer second and the philosophy of the net at the time was "everybody plays by the rules". Then the Morris worm came out and all hell broke loose.
Quote from: QwazyWabbit on March 19, 2012, 05:44:10 PMI don't think making server code resistant to attack is stupid at all. You have to remember that Q2 was designed as a single player game first, multiplayer second and the philosophy of the net at the time was "everybody plays by the rules". Then the Morris worm came out and all hell broke loose. you do realize the worm made by robert morris was out a full decade ahead of q2 right?
Quote from: |iR|Focalor on March 19, 2012, 01:34:38 AMUnless he took the time to create a bind that would drop 1000+ ammo packs all at once, that's not the method he was using. Cajmere said he never saw any ammo packs dropped before it crashed.It's pretty stupid that anyone should HAVE to make changes to the server to prevent this from happening again when it would be a hell of a lot quicker and simpler to keep the assholes doing it off the server with a ban until they agree to stop doing obnoxious shit. Play by the rules or play somewhere else.I don't think making server code resistant to attack is stupid at all. You have to remember that Q2 was designed as a single player game first, multiplayer second and the philosophy of the net at the time was "everybody plays by the rules". Then the Morris worm came out and all hell broke loose. Original Q2 was riddled with vulnerabilities, hence all the admin tricks and add-ons to plug the holes.One of the most annoying shortcuts taken by the Q2 developers IMHO, is the good old crash-the-app-because-something-bad-happened. This is exactly what you saw with the coop server. This is fine if you're developing but it sucks when you're an admin. Fortunately, quadz has Wallfly and server monitor/reset automation in place but from the degree of upset caused by all the complainers in this thread I'd say making the servers resistant to the exploit would be a better solution.The patch would appear to be minimal and it's already written so why not take advantage of it if it exists. We only need to prove it works.
Unless he took the time to create a bind that would drop 1000+ ammo packs all at once, that's not the method he was using. Cajmere said he never saw any ammo packs dropped before it crashed.It's pretty stupid that anyone should HAVE to make changes to the server to prevent this from happening again when it would be a hell of a lot quicker and simpler to keep the assholes doing it off the server with a ban until they agree to stop doing obnoxious shit. Play by the rules or play somewhere else.
Quote from: QwazyWabbit on March 19, 2012, 05:44:10 PMQuote from: |iR|Focalor on March 19, 2012, 01:34:38 AMUnless he took the time to create a bind that would drop 1000+ ammo packs all at once, that's not the method he was using. Cajmere said he never saw any ammo packs dropped before it crashed.It's pretty stupid that anyone should HAVE to make changes to the server to prevent this from happening again when it would be a hell of a lot quicker and simpler to keep the assholes doing it off the server with a ban until they agree to stop doing obnoxious shit. Play by the rules or play somewhere else.I don't think making server code resistant to attack is stupid at all. You have to remember that Q2 was designed as a single player game first, multiplayer second and the philosophy of the net at the time was "everybody plays by the rules". Then the Morris worm came out and all hell broke loose. Original Q2 was riddled with vulnerabilities, hence all the admin tricks and add-ons to plug the holes.One of the most annoying shortcuts taken by the Q2 developers IMHO, is the good old crash-the-app-because-something-bad-happened. This is exactly what you saw with the coop server. This is fine if you're developing but it sucks when you're an admin. Fortunately, quadz has Wallfly and server monitor/reset automation in place but from the degree of upset caused by all the complainers in this thread I'd say making the servers resistant to the exploit would be a better solution.The patch would appear to be minimal and it's already written so why not take advantage of it if it exists. We only need to prove it works.You just love to fucking argue with me lately, don't you? Your little "solution" may work, but it's still a stupid one in my opinion. Some guy pisses on your shoes and you're worried about doing what you can to make your shoes piss-proof, meanwhile some guys pissing on my shoes and I'm kicking him in the dick until he's pissing blood and can't walk. I bet you my shoe pisser won't make the mistake of pissing on my boots again. And I didn't even have to waste the time and money it'd take to go shopping for a new pair of piss-proof shoes like you did.
Quote from: VaeVictis on March 19, 2012, 07:07:15 PMQuote from: QwazyWabbit on March 19, 2012, 05:44:10 PMI don't think making server code resistant to attack is stupid at all. You have to remember that Q2 was designed as a single player game first, multiplayer second and the philosophy of the net at the time was "everybody plays by the rules". Then the Morris worm came out and all hell broke loose. you do realize the worm made by robert morris was out a full decade ahead of q2 right? Less than a decade actually... more like 6 years or so, late '88 to late 96. But the lesson was not learned was it?
VaeVictis:i find it funny that you even consider grammar a sign of intelligence, that itself is a very uneducated claim