Kicked from xrazy - Why?

[yahoo]

xrazy kept kicking me out of the server by forcing me to say "goto desktop". Anyone know how this works? Is it some kind of built-in protection against spawn fragging?

Hi, someone from *.user.veloxzone.com.br was exploiting a bug in WallFly.  Looks like their most commonly used alias is Curumim.

I have banned this person's subnet for now.  (They have a very dynamic IP, so, the ban won't hold forever.)

Meanwhile, I'll need to fix the bug.

I sometimes play at whale and its a fact there that curumin has been banned for cheating. Even null said that he is trying all sort of cheats and ways to get pass his ban. Maybe you can talk to null what sort of tactics Curumin is using.




http://www.netdoo.com/ninclan/board/YaBB.cgi?num=1271581703

I have reviewed the video and just don't see it.  Since the source of the demo recording appears to be from Curmim or balashark, you should consider the source.  I.e. since Curmmim or balashark has been sneaking on as Player or Qbert, etc. from time to time, It is curious to note someone named Player in camera mode with a ping of 198 during the demo.  Check the IP if you are interested otherwise not.  He vowed to get console kicked or banned as revenge for him being banned.  Since his IP is dynamic, I guess that can't be enforced.  I would also be interested as to who the source of the "desktop goto's" has been?  Is this also the work of Curmmim? or other? 

[yahoo]

BTW, i think he also uses wallhack.

[V!RaL]

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS PARCHEEZI? NO!
THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

IS JENGA!!!!!!!!!

[[BTF]Gator]

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS PARCHEEZI? NO!
THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

IS JENGA!!!!!!!!!

[peewee_RotA]

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

THIS IS PARCHEEZI? NO!
THIS IS JENGA!!!!!!

THIS IS JENGA!!!!!!

IS JENGA!!!!!!!!!

This is Jenga???????

[[BTF]Sigma]

[|iR|Focalor]

Curumin is a whiney problematic bitch. Trust me Quadz, keep him banned permanently, save yourself some work later.

[Kl33r]

Is not a bug, is a limitation of wallfly...

He kicks a player using the same name of the player + command "goto desktop" + change name...

Example: kick a player called XYZ:

name XYZ
say goto desktop
name xxx

...and the player is kicked!


Solutions:

- disable "goto desktop" command (q2 client have the quit command);

- add a delay time for change name (5 sec is enough);

- avoid 2 or more players with same name.

[console]

Is not a bug, is a limitation of wallfly...

He kicks a player using the same name of the player + command "goto desktop" + change name...

I know, thanks.  I prefer to categorize it as a bug (which needs to be fixed.)

Example: kick a player called XYZ:

name XYZ
say goto desktop
name xxx

...and the player is kicked!

Yep.

Note that if I observe anyone abusing this exploit, I'll ban them at least until it's fixed.

Solutions:

- disable "goto desktop" command (q2 client have the quit command);

No good.  Also works with any other GOTO destination.

- add a delay time for change name (5 sec is enough);

- avoid 2 or more players with same name.

A delay will likely be involved. 

The fix is complicated by several factors, including the script that currently runs GOTO doesn't see name changes soon enough.  But anyway... it's on my TO-DO list.

[|iR|Focalor]

Dammit man, I should've thought of that before now!

Then again, I was under the impression that things like goto and mymap wouldn't work properly with duplicate names on the same server. I thought it'd spit back some kind of private message saying something like, "Unable to uniquely identify you, is someone else using your name?"

[console]

I was under the impression that things like goto and mymap wouldn't work properly with duplicate names on the same server. I thought it'd spit back some kind of private message saying something like, "Unable to uniquely identify you, is someone else using your name?"

That's true in general, but there's a brief timing window where it can be fooled.

WifiMan reported this to me quite awhile ago, actually.  I've looked into fixing it several times, but it was going to be enough of a PITA that I never followed through.  (Perhaps this weekend.)

[|iR|Focalor]

A pita? MAN, I LOVE GYROS!

[Kl33r]

Solutions:

- disable "goto desktop" command (q2 client have the quit command);

No good.  Also works with any other GOTO destination.

addcommandban "say goto desktop"

AND

addcommandban "goto desktop"

...works fine!

[console]

addcommandban "say goto desktop"

AND

addcommandban "goto desktop"

...works fine!

...Until someone says goto vanilla dm dm2 dm8 xatrix mutant railz lithctf lithium bang btfffa btftdm ctf ctf-match rogue eom ethics ffaheat gumby hookrailz instawod jail jump pygmy ra2 railztdm sconfig sheridan tdm-noalias tdm-novice tourney tourney2 tourney4 t4-noalias trainer ts500 nadl vanilla2 wallhackers wod-x xquake aq2ffa aq2tdm ra2-match ra2-railz chicken bball coop lox niq chaos vanctf speedway qpong holywars nail hell hardcore rotamods rotamaps whale irtdm irtdm2 pantera west tourney3 wastoid xrazy coop2 coop3 lithium2 lithrailz killerpings happyfriar freeze

Gnome sane?

[|iR|Focalor]

Gnomes and gyros and other gwords with gsilent gG's.