I can't speak to the technical details, though I suspect it was an honest 
oversight with a trivial fix.  The supposed hotfix was "shipped" quite quickly. 
 What shipped means or how one would use such a fix is unclear.

In any case, this might have been manageable for communities like ours which 
have an ubiquitous administrative presence, but we have been stymied by the 
absence of mp_warmup_  in the logs, unless perhaps there is a yet to be 
discovered method to force it to be recorded.  Consequently, we can't identify 
the culprit or even the number of culprits at any time!  Mob mentality probably 
plays a part, but who knows at this point.  We are exasperated and at your 
mercy!

Thanks for listening,
kdl_512

-----Original Message-----
From: "David Neilsen [via CSGO_Servers]" 
<[email protected]>
Date: Sun, 13 Jan 2013 03:08:09 
To: kdl_512<[email protected]>
Subject: Re: [Csgo_servers] mp_warmup_start/end exploit is now a big problem



I like to know why such a command even allows the usage by non-admins as it
has global implications? That is a very poor oversight that needs to be
addressed quickly. Using a source mod plugin SHOULD NOT be the solution.

Hope this gets fixed soon, as we have had similar problems at a LAN event we
run every 3 months with players using it on our pub servers to troll.



-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of kdl_512
Sent: Sunday, 13 January 2013 6:53 PM
To: [email protected]
Subject: [Csgo_servers] mp_warmup_start/end exploit is now a big problem

Hello, Thanks for your hard work on cs:go, we all appreciate it.

Unfortunately, the public knowledge of mp_warmup_start/end's unrestricted
availability to all connected users to a server is now mainstream, and the
result is a widespread problem.  We run one server that has been brought to
its knees by troublemakers who seemingly do nothing but join various
community servers and put them into warmup mode.

Is there anything that can be done to fix this problem?  I have read about
an "optional" hotfix, mentioned in this email list on I believe the 9th or
the 10th, but it has not been implemented by most of the hosts such as
Gameservers.  It does not appear that they are aware of it, or that this
exploit requires prompt attention.

We have seen a massive influx of new users from other clans' servers as well
as unassociated people as a result of this presumably being a showstopper at
other servers.  Of course, then someone joins and repeatedly executes the
command, effectively making everyone leave.  My point is to highlight that
it is happening at most if not all of the more popular community servers.  

I have heard of a Sourcemod plugin called Command Blocker which may provide
a solution, but I am surprised that any sort of fix would not be mandatory
and of high priority -- this was discovered 3+ days ago.  I presume you have
a good reason, but what is the logic behind making it optional?  Is it a
matter of minimizing the number of major bugfix releases, or something
related to quality control (ie, more testing needed before implementing)? 
Not knowing anything low-level about your source, my first thought is that
surely this is just a permissions flag for the command... but what do I
know..  

Anyway, hope that you can prod someone into action soon.  The game is
unplayable at preferred times.

Regards,
kdl_512



--
View this message in context:
http://csgo-servers.1073505.n5.nabble.com/mp-warmup-start-end-exploit-is-now
-a-big-problem-tp2922.html
Sent from the CSGO_Servers mailing list archive at Nabble.com.

_______________________________________________
Csgo_servers mailing list
[email protected]
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers


_______________________________________________
Csgo_servers mailing list
[email protected]
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers




_______________________________________________
If you reply to this email, your message will be added to the discussion below:
http://csgo-servers.1073505.n5.nabble.com/mp-warmup-start-end-exploit-is-now-a-big-problem-tp2922p2923.html

To unsubscribe from mp_warmup_start/end exploit is now a big problem, visit 
http://csgo-servers.1073505.n5.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=2922&code=a2VubGF3cmVuY2UwQHlhaG9vLmNvbXwyOTIyfC0xNDg0NzU1MDY0




--
View this message in context: 
http://csgo-servers.1073505.n5.nabble.com/mp-warmup-start-end-exploit-is-now-a-big-problem-tp2922p2924.html
Sent from the CSGO_Servers mailing list archive at Nabble.com.
_______________________________________________
Csgo_servers mailing list
[email protected]
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers

Reply via email to