You guys really need to secure your servers or something Options
Small Girl W/ Big Gun
#1 Posted: : Tuesday, April 29, 2008 5:20:12 PM
Rank: Frozen Penguin


Groups: Registered User

Joined: 4/28/2008
Posts: 6
Points: 0
Location: California, USA
Twice today The Tempest servers were flooded with Bot players. Everyone would be recalled to their battlement resupply while these Bots (of the opposing team) would kill them and a wav of "niggers" looped repeatedly. Eventually the continuous stream of Bots hammering the server would cause it to freeze/crash. Pretty annoying and it doesn't look good for the server either. I'd think that a group using Tux the penguin (or some variation of him) as their logo would be a little more concerned with server security. I know you guys run this as a free service to other gamers etc., but I'm just saying it how it is... it looks really bad on your part and discourages the average player from using your servers or even considering donating.
Splinter
#2 Posted: : Tuesday, April 29, 2008 5:24:43 PM
Rank: Administration



Groups: Registered User, Server Admin

Joined: 9/7/2006
Posts: 3,054
Points: 1,377
Location: Abbotsford British Columbia, Canada
We apperciate your concern and your imput. We are fully aware of the recent wave of script kiddies flooding our servers attempting to crash them, I can fully guarantee you we are already managing a way to secure our servers from any further issues.

ahhhh_crap wrote:
no, splinter has ethics and whut has emotions
Small Girl W/ Big Gun
#3 Posted: : Tuesday, April 29, 2008 5:30:57 PM
Rank: Frozen Penguin


Groups: Registered User

Joined: 4/28/2008
Posts: 6
Points: 0
Location: California, USA
Wow I wasn't expecting a reply to this for awhile. It is reassuring to hear that you are already aware of the problem and working on a fix for it as we speak.

I'm sorry that your servers are being targeted like this and I hope you can figure out how to resolve the security issue. I've never seen this happen on any other TF2/Steam servers so it really surprised me to encounter it several times both yesterday night and today.

Do you know why your servers in particular are being targeted/singled out or who exactly is behind these attacks?

Anyways good luck and thanks for putting up with my bitching about it. LOL
Splinter
#4 Posted: : Tuesday, April 29, 2008 5:55:34 PM
Rank: Administration



Groups: Registered User, Server Admin

Joined: 9/7/2006
Posts: 3,054
Points: 1,377
Location: Abbotsford British Columbia, Canada
I can assure you our servers arn't the only ones, at the moment nearly half of my steam favorites arn't working. Ive seen plenty of hackers attempt to hijack servers in the past and in other Valve/Steam games. Eventually patches get released not too long after a major exploit is found where people manage to take advantage over it.

ahhhh_crap wrote:
no, splinter has ethics and whut has emotions
Giller [GwDR]
#5 Posted: : Tuesday, April 29, 2008 6:20:39 PM
Rank: Fecal Impaction For the Win!



Groups: Registered User, Server Admin

Joined: 1/13/2008
Posts: 1,509
Points: 2,004
I have posted a hotfix in the admin forums....we should install that and should set us straight until the official valve update patch is released...which will also correct the exploit.

Quote:

"Who the fuck is Leon Switch and why does he know we have a dog?" - Mrs. Giller
WDF?
#6 Posted: : Tuesday, April 29, 2008 6:47:54 PM
Rank: The Illuminist



Groups: Administration

Joined: 5/8/2006
Posts: 8,410
Points: 2,875
Location: Seattle
Thanks for handling crowd control, Splinter.


I was out at work so I couldn't get home and address this issue. Basically there is an exploit with srcds (the source engine server) that allows people to enable a benchmark cvar that is used to stress test servers. I assume they used it for development needs.

There is also another exploit that allows you to flood console commands to a source based server and bring it to its knees. Both issues cropped up this week and both issues are being feverishly discussed on the hlds mailing list. In terms of the bot spam I can assure you that I've installed a plugin to prevent that from happening. I will be addressing the other exploit later today.

In terms of the sound loop, I need more to go on here. That disturbs me greatly as the only way that would be able to happen is if someone hacked into our colo machine and our webhost, uploaded the file, and then executed in-game.

I don't see any new sound files... Can anyone else confirm that they heard this wav? What was the wav called?

In any event, please know that we take these issues very seriously here at WDFNews. We strive to provide the best possible experience. However, sometimes issues come up that we don't know about. It is crucial that you bring them to our attention here, just as you've done today.

I hope you can enjoy the servers still. I am working on it.

Splinter
#7 Posted: : Tuesday, April 29, 2008 6:51:48 PM
Rank: Administration



Groups: Registered User, Server Admin

Joined: 9/7/2006
Posts: 3,054
Points: 1,377
Location: Abbotsford British Columbia, Canada
It could have been simple mic spam.

ahhhh_crap wrote:
no, splinter has ethics and whut has emotions
WDF?
#8 Posted: : Tuesday, April 29, 2008 6:58:30 PM
Rank: The Illuminist



Groups: Administration

Joined: 5/8/2006
Posts: 8,410
Points: 2,875
Location: Seattle
Yeah, it's sounding like mic spam now to me. Mailing list people agree.

The exploit has been patched (hopefully).

Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.