I'd imagine that maybe the best approach for this kind of thing would be the follow the usual exploit notification - send it to Valve directly first and give them a week or so to make a fix, and let them know that you'll be making other admins (and whoever else is on this list) aware after x date.
That at least gives Valve a chance to fix it before it becomes (more) public.
But at the same time, the exploit that we're talking about here was already posted on a public forum, so it's not like it wasn't already (at least kinda) public.
G
Kingsley Foreman wrote:
do u mean before someone decides to post it to a public mail list???
Could u imagine if I did that with the code that we wrote as a proof of exploit for the rcon bug??
Kingsley ----- Original Message ----- From: "Graeme Miller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 14, 2004 11:10 AM Subject: Re: [hlds_linux] Re: Cheatlike consolecommands
Tested these tonight and they do indeed work on a internet server with sv_cheats 0, its not nessesssary to change the client value att all for some of the command.
This needs to be address quickly before it spreads around.
<old stuff snipped>
_______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
