Security is #1 priority at Valve! Oh..... wait... never mind.

On Sat, Jun 12, 2010 at 10:54 AM, Allan Button <[email protected]> wrote:

> The authoriztive place to edit your steam group is in the steam group
> admin area. I don't see any reason why servers can be added outside of
> this tool.
>
> If I where to design this, you'd add servers from the steam group
> admin area. Either complex using 1 textfield per server, or just
> having a textarea with 1 server per line.
>
> I can not change somebody elses steam group name, because I am not an
> admin. Why should I be able to create fake clan servers and join them
> to that steam group.
>
> Could you imagin if you set up your windows domain policy to be nice
> and secure, then anybody could bring a laptop in an join it just
> because they know you domain name?
>
> Not only is this anoying for server ops, it seems like a pretty big
> hole in steam security.
>
> Sent from my mobile.
>
> On Jun 12, 2010, at 5:31 AM, "ics" <[email protected]> wrote:
>
> > I see bunch of servers within my game too. Someone might think that
> > it's
> > a good thing because you have lots of servers to choose from. Sadly
> > majority of them are running some mods which i do not want to see,
> > like
> > stats ingame for particular servers, some custom laser aims, more
> > healthpacks and assisted gaming of some sort or insane playercounts.
> > They also might run like crap.
> >
> > Better thing would be to allow only servers within certain IP-
> > addresses
> > to belong to the steamgroup. Those could be set on the steamgroup page
> > by the owner. This way no one could cheat and take a look at server
> > config. As far as i know, sv_steamgroup is public cvar if query is
> > made
> > on the server because it needs to be public.
> >
> > Another option would be to introduce blacklist to servers in L4D2
> > and in
> > L4D if this change goes to there too. Just like there is with TF2. You
> > could just blacklist the servers so you won't see the steamgroup ones
> > that you don't want to and accidentally go play on them.
> >
> > -ics
> >
> > 12.6.2010 10:43, D3vilfish - Simiancage.org kirjoitti:
> >> After numerous servers appearing in our steam group a while back, I
> >> thought
> >> sod them if valve won't fix it then you might as well join them
> >> hence we
> >> list a string of id's for steamgroups.
> >> Valve could fix this with a simple code/password added to the
> >> steamgroup
> >> edit page(that only the admin can see and not published to the
> >> public) and
> >> games server config, as long as the 2 match then the server will be
> >> listed
> >> in that steamgroup ingame.
> >>
> >> Sourceop do a similar validation with their steamids for tf2items.
> >>
> >> -----Original Message-----
> >> From: [email protected]
> >> [mailto:[email protected]] On Behalf Of
> >> DontWannaName!
> >> Sent: 12 June 2010 01:31
> >> To: Half-Life dedicated Linux server mailing list
> >> Subject: Re: [hlds_linux] Left 4 Dead 2 Update Released
> >>
> >> We have already been over this. Anyone can find the group ID. People
> >> have found L4D2's game group ID and added it to every player in that
> >> groups sees their servers. It almost makes the feature useless since
> >> there will be 20 servers before the ones you want to see.
> >>
> >> On Fri, Jun 11, 2010 at 5:22 PM, Rick Payton<[email protected]>
> >> wrote:
> >>
> >>> man I can see this being abused quick - wasn't there a way to find
> >>> the
> >>> Steam group ID?
> >>>
> >>> If so, is there any kind of protection against people putting the
> >>> ID of
> >>> groups that they shouldn't? If not, just ignore me as usual :P
> >>>
> >>> --mauirixxx
> >>>
> >>>
> >>> -----Original Message-----
> >>> <SNIP>
> >>> Server operators can set their server to be in multiple Steam
> >>> groups by
> >>> separating the id for each group by a comma.
> >>>
> >>> --
> >>> /// Zoid.
> >>>
> >>> _______________________________________________
> >>> To unsubscribe, edit your list preferences, or view the list
> >>> archives,
> >>>
> >> please visit:
> >>
> >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
> >>>
> >>>
> >> _______________________________________________
> >> To unsubscribe, edit your list preferences, or view the list
> >> archives,
> >> please visit:
> >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
> >>
> >>
> >> _______________________________________________
> >> To unsubscribe, edit your list preferences, or view the list
> >> archives, please visit:
> >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
> >>
> >
> >
> > _______________________________________________
> > To unsubscribe, edit your list preferences, or view the list
> > archives, please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to