Indeed. But do they run code that has special debugging embedded in it? And
there is always the problem that your debugging code "fixes" the problems
temporarily. While the chance for the debug code fixing these exploits is
very very slim, I've seen it before, especially in the HLStatsX:CE Daemons.
The Daemon would run fine with logging levels set to finer, or a ludicrous
output, but would vary in errors when logging was disabled.

Also, some of the problems are well documented. For instance, the ability of
a client to overwrite files/directories by calling them the same name as the
file/dir that is to be overwritten. There's a simple solution to the problem
that can be done server side to fix it, however Valve has not touched that
one other then a minor change that really doesn't solve the problem.

As far as what is visible to the public eye, Valve isn't doing anything. Not
such a big surprise seeing as various games are getting older like CS:S.
Those dev's have probably been pulled and put on other projects so that
valve can continue to make money. The economy isn't so great right now.
Having programmers work on a game that is only trickling in revenue is not
such a great business model. Sure, it sucks for us customers who have payed
for the game, and there is a chance that we won't purchase future titles
because of this. But that chance is slim, and we're probably going to
purchase their new title anyways.

It's also distinctly possible that they are working on a solution to quite a
few of the problems, but valve is one of them companies that is notorious
for keeping quiet about release dates, until the product is actually done.
That is what is great about valve is that they like to polish a product and
ensure most of the bugs are out of it before release. It just sucks that
they haven't kept up with the bug's as they've cropped up. If they had
patched everything as it popped up, we might not have this problem of a
million exploits ruining the fun. Or, it's distinctly possible that the
client needs to be fixed instead of the servers, and valve hasn't gotten
around to that.

W/e. Just my 2 cents.

tl;dr

Valve is busy trying to make money. They have other titles they need to work
on, and anyone that gets vac'd buys a new steam account with CS:S being so
cheap.

On Mon, Mar 29, 2010 at 10:03 PM, Matt Hoffman
<[email protected]>wrote:

> They do run TF2 and L4D servers as far as I know.
>
> On Mon, Mar 29, 2010 at 8:57 PM, Carl <[email protected]> wrote:
>
> > I have noticed that a lot of server admins here are somewhat displeased
> > with Valve's lax approach to some of the more recent server exploits.
> > While this may be hogwash, I think it might be due to Valve not being
> > able to replicate the the bugs.  I also have noticed that debugging
> > srcds is not very fruitful for us since we don't have a special debug
> > version of srcds.
> >
> > Thus, I propose that Valve starts a few honeypot servers, that get
> > regular traffic.  These honeypot servers would allow Valve to run the
> > special debug version of srcds so that when crashes and other exploits
> > occur, they have all the information they need to properly investigate
> > the bug.  I realize this is easier said than done, but it would allow
> > for Valve to see that said bugs DO in fact exist.
> >
> > Just an Idea
> >
> > _______________________________________________
> > To unsubscribe, edit your list preferences, or view the list archives,
> > please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlds
> >
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
>



-- 
"All programmers are playwrights and all computers are lousy actors."
 - Unknown

"When I do good, I feel good; when I do bad, I feel bad, and that is my
religion."
 - Abraham Lincoln

Mark J. Gunnett
[EoE]SniperFodder{AL}
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to