Author Topic: Ethics Based Server? (Read 28154 times)

magical pig · « **Reply #60 on:** February 28, 2007, 08:02:45 PM »

haunted pwnt by console - no surprise

gg

console · « **Reply #61 on:** February 28, 2007, 11:41:14 PM »

Haunted was a teenager then. He's in college now.

haunted · « **Reply #62 on:** February 28, 2007, 11:50:53 PM »

haha, well daf was a real prick to some people, and nice to others. Haunted took it upon himself to fight evil and killed his server for pleasure. Yes 2 wrongs do not make a right, but it's a hard job being Haunted and sometimes unfortunately wrongful acts were used to worsen, but still correct the wrong.

on a serious note it's not like I was 'hacking' anyways lmao. I'm sure console knows the cmd I was using.

console · « **Reply #63 on:** March 01, 2007, 12:28:20 AM »

Quote from: haunted on February 28, 2007, 11:50:53 PM

Haunted took it upon himself to fight evil and killed his server for pleasure.

"The Righteous and The Wicked", as they say?

Quote from: haunted on February 28, 2007, 11:50:53 PM

on a serious note it's not like I was 'hacking' anyways lmao. I'm sure console knows the cmd I was using.

Apparently arbitrary discrimination can sour an environment rapidly, no doubt.
However, there are multiple commands in the archives:
http://secur1ty.net/advisories/001-Multiple_Vulnerabilities_In_Quake_II_Server.txt
So presumably the exploit you were using made use of some vulnerability listed above?
Or conceivably some exploit in a particular mod; but anyway...

Most of those who are full-on chumps and run servers without a profit motive kind of do it from their own love of the game. But q2 sux when people crash your servers...

I mean, we've had our share of rcon hax directed at tastyspleen.

We try to be cool, but we've never accomplished 100% happiness with every
act that's been perpetrated here.

Regards,,

haunted · « **Reply #64 on:** March 01, 2007, 07:04:27 AM »

Actually no not one of them.. I don't think. I skimmed over it but I'm extremely absent minded right now.

DWxchzrles · « **Reply #65 on:** March 01, 2007, 06:35:48 PM »

Quote from: console on February 28, 2007, 06:37:02 PM

Quote from: dwxchzrles on February 28, 2007, 06:30:53 PM
Quote from: haunted on February 27, 2007, 06:00:35 PM
You were a dick, I killed your server repeatedly / whenever I wanted to; for every action there is an equal and opposite reaction.
that is not the correct thing to do

Haven't you heard the old saying, "TWO WRONGS MAKE A HAUNTED"

Dafremen>FAS> · « **Reply #66 on:** March 05, 2007, 02:49:22 PM »

Well for anyone who's still reading this thread and maybe thinking that script kiddies like haunted completely "pwnt" on the server with their ability to google various q2 server exploits:

My response was to use the scripting abilities of q2admin to create a permanent ban. (it checked for the existence of a file that was only downloaded to a REALLY bad offenders PC then executed that script, which logged them off.)

They were unable to enter any of our servers on that computer once the file was written to their machines. I'm not sure if haunted got his, but we sure do thank his half-assed efforts for the inspiration.

We were rarely reckless with our authority. The command could only be sent using an extended command set I put together (which also allowed us to warn players of offensive play with a VOICE message (There is no camping, spawn killing ...etc) in case they weren't reading. It was in Spanish and English. To say we bent over backwards to try to accomodate different types of players would be an understatement.)

Daf

console · « **Reply #67 on:** March 05, 2007, 04:11:19 PM »

Quote from: Dafremen>FAS> on March 05, 2007, 02:49:22 PM
Quote from: Dafremen>FAS> on March 05, 2007, 02:49:22 PM

My response was to use the scripting abilities of q2admin to create a permanent ban. (it checked for the existence of a file that was only downloaded to a REALLY bad offenders PC then executed that script, which logged them off.)

Haha... We used to do that too, back before we added hostmask banning.

Regards,

Whirlingdervish · « **Reply #68 on:** March 05, 2007, 04:33:16 PM »

Quote from: Dafremen>FAS> on March 05, 2007, 02:49:22 PM
Quote from: Dafremen>FAS> on March 05, 2007, 02:49:22 PM

Well for anyone who's still reading this thread and maybe thinking that script kiddies like haunted completely "pwnt" on the server with their ability to google various q2 server exploits:

http://tastyspleen.net/quake/forums/index.php?topic=5371.msg57968#msg57968

reaper · « **Reply #69 on:** March 05, 2007, 07:19:07 PM »

damn, after all these years, why can't rcon commands only be sent from certain ip's (maybe tcp and/or some check).

console · « **Reply #70 on:** March 05, 2007, 07:36:54 PM »

Quote from: reaper on March 05, 2007, 07:19:07 PM

damn, after all these years, why can't rcon commands only be sent from certain ip's (maybe tcp and/or some check).

We'd have to change the way rcon worked, and make there be some two-way authentication between client and server.

Currently the server just receives a UDP packet containing an rcon request. This means the sender could forge its IP to be something the server would accept.

If we changed rcon so that the server, upon receiving an rcon request, computed some random number that it sent BACK to the client, and waited until the client echoed this number back to the server, I suppose that would allow us to prevent spoofing, and thus be able to accept rcon only from certain IPs.

Regards,

reaper · « **Reply #71 on:** March 05, 2007, 07:46:48 PM »

tcp and look at the source ip (only allow admin's ip's?).

Dafremen>FAS> · « **Reply #72 on:** March 06, 2007, 09:31:30 AM »

Well an encrypted key method might actually be plausible. You could use the ip address of the client and the rcon password they currently have set. Each person could be given a different password to use that way too.

In another thread, whirling dervish said:

Quote

first up, shut your hole dipshit. I told you I didn't give a shit what you think and that you shouldn't even bother replying, and what did you do? oh yeah, you proved me completely correct (and possibly psychic) by responding with another multipage stream of idiotic bullshit that screams of how little you know in comparison to what you think you do.

secondly, go play Gloom if you can't stand the thought of people using a higher gl_modulate than you. fucking pussy.
I play with gl_modulate 2, which if I'm not mistaken (and I'm not) is the high-end limit on gl_modulate in the only q2 mod where people even give a shit about un-even brightness settings. Anyone else who bitches about it should go find something else to play. like dominos.

third, (and this one is blatantly obvious to everyone here) You're just making excuses for your inability to beat people who are more skilled than you are. I doubt you could beat more than 25% of the regulars here if you were on a LAN with identical rigs and stock q2 settings.

forth, no one here (with the exception of you) gives a shit what the idiots at CPL think about our game and our community and our rules. If you don't like getting your ass handed to you by people playing a very old game on very old computers with config settings to make up for the inherent flaws in both, then go play some faggy-ass console FPS with all the other 15 year olds who think they know everything.

That's one of the best laughs I've had about this game in awhile.

Whirlingdervish · « **Reply #73 on:** March 06, 2007, 09:47:17 AM »

wow I forgot about that one..
Nice find.

I'm such a dick.

10zx · « **Reply #74 on:** March 06, 2007, 09:50:29 AM »

i was just looking for that quote.. where did you dig it up?

Author Topic: Ethics Based Server? (Read 28154 times)

El Box de Shoutamente