Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Emil Larsson
Indeed, as far I heard the forums are on a wholly separate server, the
forums and the TF2 wiki share servers but is otherwise separated from rest
of Steam.

Would like a word about the reach of damage and vaguely how the breach was
done though.

On Tue, Nov 8, 2011 at 7:14 AM, Richard GrosJean richard.grosj...@gmail.com
 wrote:

 Steam store is loading just fine here. AFAIK only the forums are affected.

 On Tue, Nov 8, 2011 at 8:10 AM, Necavi nec...@0xf.org wrote:
  Is valve under some sort of major attack? I've noticed that the forums
 were
  hacked, the VAC servers are down, and several parts of the site (such as
 the
  steam store) won't load and are throwing out errors...this seems rather
  serious. and maybe it's just where I've been looking, but I haven't seen
 any
  official comment from Valve regarding any of these things.
 
  -Original Message-
  From: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of m33crob
  Sent: Monday, November 07, 2011 22:08
  To: Half-Life dedicated Linux server mailing list; Half-Life dedicated
 Win32
  server mailing list
  Subject: [hlds_linux] Valve Security Breach
 
  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if Valve
  makes a statement about todays security breach and subsequent downtime.
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-at
  tack/
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread dmex
You'll probably find the breach was the result of Valve using an out-dated
version of vBulletin (3.8.7) for their forums when the latest version is
4.1.7.

A search for vBullitin 3.8.7 exploit returns quite a few things. 

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Emil Larsson
Sent: Tuesday, 8 November 2011 4:07 PM
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] Valve Security Breach

Indeed, as far I heard the forums are on a wholly separate server, the
forums and the TF2 wiki share servers but is otherwise separated from rest
of Steam.

Would like a word about the reach of damage and vaguely how the breach was
done though.

On Tue, Nov 8, 2011 at 7:14 AM, Richard GrosJean richard.grosj...@gmail.com
 wrote:

 Steam store is loading just fine here. AFAIK only the forums are affected.

 On Tue, Nov 8, 2011 at 8:10 AM, Necavi nec...@0xf.org wrote:
  Is valve under some sort of major attack? I've noticed that the 
  forums
 were
  hacked, the VAC servers are down, and several parts of the site 
  (such as
 the
  steam store) won't load and are throwing out errors...this seems 
  rather serious. and maybe it's just where I've been looking, but I 
  haven't seen
 any
  official comment from Valve regarding any of these things.
 
  -Original Message-
  From: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of 
  m33crob
  Sent: Monday, November 07, 2011 22:08
  To: Half-Life dedicated Linux server mailing list; Half-Life 
  dedicated
 Win32
  server mailing list
  Subject: [hlds_linux] Valve Security Breach
 
  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if 
  Valve makes a statement about todays security breach and subsequent
downtime.
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hac
 ker-at
  tack/
  ___
  To unsubscribe, edit your list preferences, or view the list 
  archives, please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list 
  archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread James Botting
Well, vBulletin keep their 3.x series up to date with critical bug
fixes as far as I am aware. Since 4.x is both expensive to upgrade to
and still in its early years. Though I do believe 3.8.7 is out of date
for the 3.x series.


On Tue, Nov 8, 2011 at 8:33 AM, dmex dme...@gmail.com wrote:
 You'll probably find the breach was the result of Valve using an out-dated
 version of vBulletin (3.8.7) for their forums when the latest version is
 4.1.7.

 A search for vBullitin 3.8.7 exploit returns quite a few things.

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Emil Larsson
 Sent: Tuesday, 8 November 2011 4:07 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] Valve Security Breach

 Indeed, as far I heard the forums are on a wholly separate server, the
 forums and the TF2 wiki share servers but is otherwise separated from rest
 of Steam.

 Would like a word about the reach of damage and vaguely how the breach was
 done though.

 On Tue, Nov 8, 2011 at 7:14 AM, Richard GrosJean richard.grosj...@gmail.com
 wrote:

 Steam store is loading just fine here. AFAIK only the forums are affected.

 On Tue, Nov 8, 2011 at 8:10 AM, Necavi nec...@0xf.org wrote:
  Is valve under some sort of major attack? I've noticed that the
  forums
 were
  hacked, the VAC servers are down, and several parts of the site
  (such as
 the
  steam store) won't load and are throwing out errors...this seems
  rather serious. and maybe it's just where I've been looking, but I
  haven't seen
 any
  official comment from Valve regarding any of these things.
 
  -Original Message-
  From: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of
  m33crob
  Sent: Monday, November 07, 2011 22:08
  To: Half-Life dedicated Linux server mailing list; Half-Life
  dedicated
 Win32
  server mailing list
  Subject: [hlds_linux] Valve Security Breach
 
  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if
  Valve makes a statement about todays security breach and subsequent
 downtime.
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hac
 ker-at
  tack/
  ___
  To unsubscribe, edit your list preferences, or view the list
  archives, please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Russell Smith
Haven't been able to add any funds to my Steam Wallet all night for the 
TF2 store.  Get a CC declined message almost instantly when going 
through Firefox.  If I try in game the page just errors out after trying 
to load for 20 seconds or so.  Might be related.


On 11/7/2011 10:14 PM, Richard GrosJean wrote:

Steam store is loading just fine here. AFAIK only the forums are affected.

On Tue, Nov 8, 2011 at 8:10 AM, Necavinec...@0xf.org  wrote:

Is valve under some sort of major attack? I've noticed that the forums were
hacked, the VAC servers are down, and several parts of the site (such as the
steam store) won't load and are throwing out errors...this seems rather
serious. and maybe it's just where I've been looking, but I haven't seen any
official comment from Valve regarding any of these things.

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of m33crob
Sent: Monday, November 07, 2011 22:08
To: Half-Life dedicated Linux server mailing list; Half-Life dedicated Win32
server mailing list
Subject: [hlds_linux] Valve Security Breach

Hello Valve,

  I'd like to request notification via these mailing lists once/if Valve
makes a statement about todays security breach and subsequent downtime.

http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-at
tack/
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Any news on SFTP support.

2011-11-08 Thread Michael
Is there any news on the ftp offload features for replays supporting SFTP
connections? I ask because many of the host I work with and where most of
my servers offload too are making a push to make all their servers PCI
compliant in the next month. This means they will be shutting off access to
normal FTP protocols and only allow SFTP.

~ Michael
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Any news on SFTP support.

2011-11-08 Thread Jack Dunn
Assuming your using linux you could mount the sftp server as a folder and
then just point srcds to that locally.

On 8 November 2011 13:30, Michael mich...@polishedgeek.com wrote:

 Is there any news on the ftp offload features for replays supporting SFTP
 connections? I ask because many of the host I work with and where most of
 my servers offload too are making a push to make all their servers PCI
 compliant in the next month. This means they will be shutting off access to
 normal FTP protocols and only allow SFTP.

 ~ Michael
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread DontWannaName!
Lol please stop making terrible excuses to connect any Steam issue with the 
forum issue. They are completely unrelated. You need to contact support. 
Everyone else just needs to be patient with the forums. They probably don't 
want it to happen again so it's going to take time.

Sent from my iPhone 4

On Nov 8, 2011, at 1:31 AM, Russell Smith ve...@tinylittlerobots.us wrote:

 Haven't been able to add any funds to my Steam Wallet all night for the TF2 
 store.  Get a CC declined message almost instantly when going through 
 Firefox.  If I try in game the page just errors out after trying to load for 
 20 seconds or so.  Might be related.
 
 On 11/7/2011 10:14 PM, Richard GrosJean wrote:
 Steam store is loading just fine here. AFAIK only the forums are affected.
 
 On Tue, Nov 8, 2011 at 8:10 AM, Necavinec...@0xf.org  wrote:
 Is valve under some sort of major attack? I've noticed that the forums were
 hacked, the VAC servers are down, and several parts of the site (such as the
 steam store) won't load and are throwing out errors...this seems rather
 serious. and maybe it's just where I've been looking, but I haven't seen any
 official comment from Valve regarding any of these things.
 
 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of m33crob
 Sent: Monday, November 07, 2011 22:08
 To: Half-Life dedicated Linux server mailing list; Half-Life dedicated Win32
 server mailing list
 Subject: [hlds_linux] Valve Security Breach
 
 Hello Valve,
 
  I'd like to request notification via these mailing lists once/if Valve
 makes a statement about todays security breach and subsequent downtime.
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-at
 tack/
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Any news on SFTP support.

2011-11-08 Thread Björn Rohlén
... Or use sshfs

-TheG

On Tue, Nov 8, 2011 at 3:14 PM, Jack Dunn j...@jacknet.co.uk wrote:

 Assuming your using linux you could mount the sftp server as a folder and
 then just point srcds to that locally.

 On 8 November 2011 13:30, Michael mich...@polishedgeek.com wrote:

  Is there any news on the ftp offload features for replays supporting SFTP
  connections? I ask because many of the host I work with and where most of
  my servers offload too are making a push to make all their servers PCI
  compliant in the next month. This means they will be shutting off access
 to
  normal FTP protocols and only allow SFTP.
 
  ~ Michael
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] STEAMAUTH Client NAME received failure code 6 ??

2011-11-08 Thread 정정훈
I think still no update from vavle. even after 11.08 update
Tab crashing bug is still affecting players fyi. Hit me 3 times in a row
last night before I said screw it yet again, server console did not show
anything, even a client disconnected message.
On Wed, Nov 2, 2011 at 9:42 AM, Kyle Sanderson lt;kyle.l...@gmail.comgt; 
wrote:
 I've only seen this when the client forcibly kills the game process.
 Crashing (thanks to the now fixed Tab bug) didn't seem to cause it for me.

 Kyle.

 2011/11/2 Russell Smith lt;ve...@tinylittlerobots.usgt;

  This is the error that occurs when the players game crashes, is it not?
  This is the message I was seeing for all the players crashing during the
  Manniversary update madness.
 
  On 11/1/2011 11:27 PM, daniel jokiaho wrote:
   I have also seen this on my server.
   On 2 Nov 2011 07:09, 정정훈 lt;jungjung...@naver.comgt; wrote:
  
   Anyone know about this??
   Now that this guy mentions it, ive had this happen to my server also.
   On Monday, October 31, 2011, 정정훈 lt;jungjung...@naver.comgt;
 wrote:
  
   My server player had error sometimes:
   STEAMAUTH Client received failure code 6
   Dropped from the server (No Steam logon)
   after 10.13 update
   My server is VAC and he (or she) is not no steam. just because of
   STEAMAUTH error.
   What's this? Is this exist solution?
   Most player dropped the server when that time.
   I'm waiting 2 weaks for this but valve still didn't update. So I
 asked
   here.
   Thank you
   ___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Mart-Jan Reeuwijk
I do notice a load more spam since S: normally only 1-3 spam a day, now in just 
8 hours already 20 on the email account related to my spuf account.



From: DontWannaName! ad...@topnotchclan.com
To: Half-Life dedicated Linux server mailing list 
hlds_linux@list.valvesoftware.com
Sent: Tuesday, 8 November 2011, 16:18
Subject: Re: [hlds_linux] Valve Security Breach

Lol please stop making terrible excuses to connect any Steam issue with the 
forum issue. They are completely unrelated. You need to contact support. 
Everyone else just needs to be patient with the forums. They probably don't 
want it to happen again so it's going to take time.

Sent from my iPhone 4

On Nov 8, 2011, at 1:31 AM, Russell Smith ve...@tinylittlerobots.us wrote:

 Haven't been able to add any funds to my Steam Wallet all night for the TF2 
 store.  Get a CC declined message almost instantly when going through 
 Firefox.  If I try in game the page just errors out after trying to load for 
 20 seconds or so.  Might be related.
 
 On 11/7/2011 10:14 PM, Richard GrosJean wrote:
 Steam store is loading just fine here. AFAIK only the forums are affected.
 
 On Tue, Nov 8, 2011 at 8:10 AM, Necavinec...@0xf.org  wrote:
 Is valve under some sort of major attack? I've noticed that the forums were
 hacked, the VAC servers are down, and several parts of the site (such as 
 the
 steam store) won't load and are throwing out errors...this seems rather
 serious. and maybe it's just where I've been looking, but I haven't seen 
 any
 official comment from Valve regarding any of these things.
 
 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of m33crob
 Sent: Monday, November 07, 2011 22:08
 To: Half-Life dedicated Linux server mailing list; Half-Life dedicated 
 Win32
 server mailing list
 Subject: [hlds_linux] Valve Security Breach
 
 Hello Valve,
 
  I'd like to request notification via these mailing lists once/if Valve
 makes a statement about todays security breach and subsequent downtime.
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-at
 tack/
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] New exploit for the orangebox engine?

2011-11-08 Thread Drogen Viech
http://www.youtube.com/watch?v=i9E7QipxFIA
^
Just seen this on youtube - it was uploaded today. Does anyone already
know how to prevent this?

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] New exploit for the orangebox engine?

2011-11-08 Thread ics

My understanding is that this was fixed in the latest CS Source update.

-ics

8.11.2011 20:14, Drogen Viech kirjoitti:

http://www.youtube.com/watch?v=i9E7QipxFIA
^
Just seen this on youtube - it was uploaded today. Does anyone already
know how to prevent this?

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] New exploit for the orangebox engine?

2011-11-08 Thread Saul Rennison
It's not fake guys, it would be perfectly possible to fake UDP packets
coming from other clients (if you knew their IP address), and then just
flood the server with requests that require reliable responses. Simple.


Kind regards,
*Saul Rennison*


On 8 November 2011 19:19, ics i...@ics-base.net wrote:

 My understanding is that this was fixed in the latest CS Source update.

 -ics

 8.11.2011 20:14, Drogen Viech kirjoitti:

  
 http://www.youtube.com/watch?**v=i9E7QipxFIAhttp://www.youtube.com/watch?v=i9E7QipxFIA
 ^
 Just seen this on youtube - it was uploaded today. Does anyone already
 know how to prevent this?

 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/**mailman/listinfo/hlds_linuxhttp://list.valvesoftware.com/mailman/listinfo/hlds_linux



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/**mailman/listinfo/hlds_linuxhttp://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] New exploit for the orangebox engine?

2011-11-08 Thread Ominous Gaming

On 11/8/2011 1:28 PM, Saul Rennison wrote:

It's not fake guys, it would be perfectly possible to fake UDP packets
coming from other clients (if you knew their IP address), and then just
flood the server with requests that require reliable responses. Simple.


Kind regards,
*Saul Rennison*


On 8 November 2011 19:19, icsi...@ics-base.net  wrote:


My understanding is that this was fixed in the latest CS Source update.

-ics

8.11.2011 20:14, Drogen Viech kirjoitti:

  
http://www.youtube.com/watch?**v=i9E7QipxFIAhttp://www.youtube.com/watch?v=i9E7QipxFIA

^
Just seen this on youtube - it was uploaded today. Does anyone already
know how to prevent this?

__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/**mailman/listinfo/hlds_linuxhttp://list.valvesoftware.com/mailman/listinfo/hlds_linux



__**_
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/**mailman/listinfo/hlds_linuxhttp://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
It's very probably that it is actually the real deal. The individual 
that is selling the script (HaloShadoW) has popped up several times in 
the past offering similar scripts, though usually LUA based, that can 
drop/crash the entire server. However, since he picks a server on his 
favorite, rather than one at random, it may already be patched as 
another has suggested.


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
This is not relevant to server administration.

On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
 Hello Valve,

  I'd like to request notification via these mailing lists once/if Valve
 makes a statement about todays security breach and subsequent downtime.

 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Flubber
Server being linked to Steam Account, i'd say it's linked somehow.

2011/11/8 msleeper mslee...@ismsleeperwrong.com

 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if Valve
  makes a statement about todays security breach and subsequent downtime.
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
Assuming that your SPUF login and password is the same as your Steam
login and password, 1.) that's not Valve's fault that you are
literally the worst at the password game, but 2.) it's only a problem
if you are in the 0.001% of people who don't use Steam Guard.

On Tue, Nov 8, 2011 at 3:41 PM, Flubber flub...@gmail.com wrote:
 Server being linked to Steam Account, i'd say it's linked somehow.

 2011/11/8 msleeper mslee...@ismsleeperwrong.com

 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if Valve
  makes a statement about todays security breach and subsequent downtime.
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Modern Warfare 3 HLDSUpdateTool

2011-11-08 Thread William Balkcom
It seems they have begun to load modern warfare 3 on the hldsupdate tool,
but it doesn't seem to be complete:

 

No installation record found at modernwarfare3

Checking/Installing 'Call of Duty Modern Warfare 3 DS Binaries' version 1

 

2.17%   downloading modernwarfare3\players2\ctf_default.dsr

2.19%   downloading modernwarfare3\players2\default.dspl

4.36%   downloading modernwarfare3\players2\dom_default.dsr

6.53%   downloading modernwarfare3\players2\dz_default.dsr

8.70%   downloading modernwarfare3\players2\ffa_default.dsr

10.87%  downloading modernwarfare3\players2\gg_default.dsr

13.04%  downloading modernwarfare3\players2\hq_default.dsr

15.21%  downloading modernwarfare3\players2\inf_default.dsr

17.38%  downloading modernwarfare3\players2\jug_default.dsr

19.54%  downloading modernwarfare3\players2\kc_default.dsr

21.72%  downloading modernwarfare3\players2\oic_default.dsr

23.88%  downloading modernwarfare3\players2\sab_default.dsr

26.05%  downloading modernwarfare3\players2\sd_default.dsr

26.09%  downloading modernwarfare3\players2\server.cfg

28.26%  downloading modernwarfare3\players2\tdef_default.dsr

30.43%  downloading modernwarfare3\players2\tdm_default.dsr

32.60%  downloading modernwarfare3\players2\tj_default.dsr

100.00% downloading modernwarfare3\iw5mp_server.exe

 

HLDS installation up to date

 

 

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Modern Warfare 3 HLDSUpdateTool

2011-11-08 Thread Steven Hartland

As this is the linux list, is this under Linux? If so then
that may be the issue, try windows as I believe its a windows
only server.

   Regards
   Steve

- Original Message - 
From: William Balkcom w.balk...@griffinrun.net

To: hlds_linux@list.valvesoftware.com
Sent: Tuesday, November 08, 2011 8:55 PM
Subject: [hlds_linux] Modern Warfare 3 HLDSUpdateTool



It seems they have begun to load modern warfare 3 on the hldsupdate tool,
but it doesn't seem to be complete:



No installation record found at modernwarfare3

Checking/Installing 'Call of Duty Modern Warfare 3 DS Binaries' version 1



2.17%   downloading modernwarfare3\players2\ctf_default.dsr

2.19%   downloading modernwarfare3\players2\default.dspl

4.36%   downloading modernwarfare3\players2\dom_default.dsr

6.53%   downloading modernwarfare3\players2\dz_default.dsr

8.70%   downloading modernwarfare3\players2\ffa_default.dsr

10.87%  downloading modernwarfare3\players2\gg_default.dsr

13.04%  downloading modernwarfare3\players2\hq_default.dsr

15.21%  downloading modernwarfare3\players2\inf_default.dsr

17.38%  downloading modernwarfare3\players2\jug_default.dsr

19.54%  downloading modernwarfare3\players2\kc_default.dsr

21.72%  downloading modernwarfare3\players2\oic_default.dsr

23.88%  downloading modernwarfare3\players2\sab_default.dsr

26.05%  downloading modernwarfare3\players2\sd_default.dsr

26.09%  downloading modernwarfare3\players2\server.cfg

28.26%  downloading modernwarfare3\players2\tdef_default.dsr

30.43%  downloading modernwarfare3\players2\tdm_default.dsr

32.60%  downloading modernwarfare3\players2\tj_default.dsr

100.00% downloading modernwarfare3\iw5mp_server.exe



HLDS installation up to date





___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux




This e.mail is private and confidential between Multiplay (UK) Ltd. and the person or entity to whom it is addressed. In the event of misdirection, the recipient is prohibited from using, copying, printing or otherwise disseminating it or any information contained in it. 


In the event of misdirection, illegible or incomplete transmission please 
telephone +44 845 868 1337
or return the E.mail to postmas...@multiplay.co.uk.


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Modern Warfare 3 HLDSUpdateTool

2011-11-08 Thread Nomaan Ahmad
Try running the update again.

On 8 November 2011 20:55, William Balkcom w.balk...@griffinrun.net wrote:

 It seems they have begun to load modern warfare 3 on the hldsupdate tool,
 but it doesn't seem to be complete:



 No installation record found at modernwarfare3

 Checking/Installing 'Call of Duty Modern Warfare 3 DS Binaries' version 1



 2.17%   downloading modernwarfare3\players2\ctf_default.dsr

 2.19%   downloading modernwarfare3\players2\default.dspl

 4.36%   downloading modernwarfare3\players2\dom_default.dsr

 6.53%   downloading modernwarfare3\players2\dz_default.dsr

 8.70%   downloading modernwarfare3\players2\ffa_default.dsr

 10.87%  downloading modernwarfare3\players2\gg_default.dsr

 13.04%  downloading modernwarfare3\players2\hq_default.dsr

 15.21%  downloading modernwarfare3\players2\inf_default.dsr

 17.38%  downloading modernwarfare3\players2\jug_default.dsr

 19.54%  downloading modernwarfare3\players2\kc_default.dsr

 21.72%  downloading modernwarfare3\players2\oic_default.dsr

 23.88%  downloading modernwarfare3\players2\sab_default.dsr

 26.05%  downloading modernwarfare3\players2\sd_default.dsr

 26.09%  downloading modernwarfare3\players2\server.cfg

 28.26%  downloading modernwarfare3\players2\tdef_default.dsr

 30.43%  downloading modernwarfare3\players2\tdm_default.dsr

 32.60%  downloading modernwarfare3\players2\tj_default.dsr

 100.00% downloading modernwarfare3\iw5mp_server.exe



 HLDS installation up to date





 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Modern Warfare 3

2011-11-08 Thread buster_cool
hello,

i wanna start the server and got this error...

Invalid server configuration - insufficient upstream bandwith 0 kbps for 18 
clients. Minimum 56 kps required.

what can i do? its no possible to host servers atm?

-peter
-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Modern Warfare 3

2011-11-08 Thread Steven Hartland

restart the server, its a random error which usually just goes away.
- Original Message - 
From: buster_c...@gmx.net

To: hlds_linux@list.valvesoftware.com
Sent: Tuesday, November 08, 2011 9:18 PM
Subject: [hlds_linux] Modern Warfare 3



hello,

i wanna start the server and got this error...

Invalid server configuration - insufficient upstream bandwith 0 kbps for 18 
clients. Minimum 56 kps required.

what can i do? its no possible to host servers atm?

-peter
--
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux




This e.mail is private and confidential between Multiplay (UK) Ltd. and the person or entity to whom it is addressed. In the event of misdirection, the recipient is prohibited from using, copying, printing or otherwise disseminating it or any information contained in it. 


In the event of misdirection, illegible or incomplete transmission please 
telephone +44 845 868 1337
or return the E.mail to postmas...@multiplay.co.uk.


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Modern Warfare 3

2011-11-08 Thread Taner Özsoy
Are Linux dedicated server files avaliable? I thought it was only available
for Windows.


2011/11/8 Steven Hartland kill...@multiplay.co.uk

 restart the server, its a random error which usually just goes away.
 - Original Message - From: buster_c...@gmx.net
 To: hlds_linux@list.**valvesoftware.comhlds_linux@list.valvesoftware.com
 
 Sent: Tuesday, November 08, 2011 9:18 PM
 Subject: [hlds_linux] Modern Warfare 3



  hello,

 i wanna start the server and got this error...

 Invalid server configuration - insufficient upstream bandwith 0 kbps for
 18 clients. Minimum 56 kps required.

 what can i do? its no possible to host servers atm?

 -peter
 --
 Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
 belohnen Sie mit bis zu 50,- Euro! 
 https://freundschaftswerbung.**gmx.dehttps://freundschaftswerbung.gmx.de

 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/**mailman/listinfo/hlds_linuxhttp://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ==**==
 This e.mail is private and confidential between Multiplay (UK) Ltd. and
 the person or entity to whom it is addressed. In the event of misdirection,
 the recipient is prohibited from using, copying, printing or otherwise
 disseminating it or any information contained in it.
 In the event of misdirection, illegible or incomplete transmission please
 telephone +44 845 868 1337
 or return the E.mail to postmas...@multiplay.co.uk.



 __**_
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/**mailman/listinfo/hlds_linuxhttp://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread coffee problem
Unfortunately, they are probably going to just let it stay hacked. Since
they have said they aren't going to chase the fake clients issue due to
more bugs being introduced by patching against it, why bother with the
forums? Fix one hole, someone finds another.

Oh well, it was a good community while it lasted!

CP

On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:

 Hello Valve,

  I'd like to request notification via these mailing lists once/if Valve
 makes a statement about todays security breach and subsequent downtime.


 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread DontWannaName!
Looks like its disabled now...

http://sourceop.com/modules.php?name=Forumsfile=viewtopict=90261postdays=0postorder=ascstart=75

On Tue, Nov 8, 2011 at 3:58 PM, coffee problem spoofedpac...@gmail.comwrote:

 Unfortunately, they are probably going to just let it stay hacked. Since
 they have said they aren't going to chase the fake clients issue due to
 more bugs being introduced by patching against it, why bother with the
 forums? Fix one hole, someone finds another.

 Oh well, it was a good community while it lasted!

 CP

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:

  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if Valve
  makes a statement about todays security breach and subsequent downtime.
 
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Nathan Radcliffe
Correct, but where else should it be posted?  On the forums maybe?  It's
been nearly two days, and still no official press release.  A few people
have reported receiving spam emails and I've seen unconfirmed reports of
password databases being leaked.
I don't have much doubt that most people on this list have good password
management, but I'm sure there's still millions of forums users unaware
that any hack happened, or if they are aware, how it may have effected them.

On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com wrote:

 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
  Hello Valve,
 
   I'd like to request notification via these mailing lists once/if Valve
  makes a statement about todays security breach and subsequent downtime.
 
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread DontWannaName!
I think you are thinking the worst. All someone needs to post what they did
is access to the VB admin CP which just requires an admin. My guess is it
isnt as bad as people are making it out to be and right now everyone is
speculating the worst. Just chill

On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com wrote:

 Correct, but where else should it be posted?  On the forums maybe?  It's
 been nearly two days, and still no official press release.  A few people
 have reported receiving spam emails and I've seen unconfirmed reports of
 password databases being leaked.
 I don't have much doubt that most people on this list have good password
 management, but I'm sure there's still millions of forums users unaware
 that any hack happened, or if they are aware, how it may have effected
 them.

 On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com wrote:

  This is not relevant to server administration.
 
  On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
   Hello Valve,
  
I'd like to request notification via these mailing lists once/if Valve
   makes a statement about todays security breach and subsequent downtime.
  
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread bottige...@gmail.com
This is related to server administration. Some people use Steam groups
to make administrators.

Many people are also running TF2 websites that use Steam openid, and
if that is compromised, then impersonation can occur which results in
scams.

On Tue, Nov 8, 2011 at 12:05 PM, msleeper mslee...@ismsleeperwrong.com wrote:
 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
 Hello Valve,

  I'd like to request notification via these mailing lists once/if Valve
 makes a statement about todays security breach and subsequent downtime.

 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Nathan Radcliffe
Thinking the worst is the best thing to do in this situation.  Until Valve
release some indication of what account details (if any) have
been compromised it's easiest to assume all details have been, and advise
all users to look over their account security.  Steamguard works great if
you have different passwords for your steam account and steam forums and
email, but I still know a lot of users both in gaming areas and real life
areas that use the same password for everything (despite how much I
discourage it).

Everyone is speculating because Valve have not released any details as to
what has been comprised.  After nearly 48 hours that's pretty unacceptable
from a multi-million user company.

On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com wrote:

 I think you are thinking the worst. All someone needs to post what they did
 is access to the VB admin CP which just requires an admin. My guess is it
 isnt as bad as people are making it out to be and right now everyone is
 speculating the worst. Just chill

 On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:

  Correct, but where else should it be posted?  On the forums maybe?  It's
  been nearly two days, and still no official press release.  A few people
  have reported receiving spam emails and I've seen unconfirmed reports of
  password databases being leaked.
  I don't have much doubt that most people on this list have good password
  management, but I'm sure there's still millions of forums users unaware
  that any hack happened, or if they are aware, how it may have effected
  them.
 
  On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com wrote:
 
   This is not relevant to server administration.
  
   On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
Hello Valve,
   
 I'd like to request notification via these mailing lists once/if
 Valve
makes a statement about todays security breach and subsequent
 downtime.
   
   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
___
To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
  
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
Yes, panicking and being reactionary is always the best course of action.

On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com wrote:
 Thinking the worst is the best thing to do in this situation.  Until Valve
 release some indication of what account details (if any) have
 been compromised it's easiest to assume all details have been, and advise
 all users to look over their account security.  Steamguard works great if
 you have different passwords for your steam account and steam forums and
 email, but I still know a lot of users both in gaming areas and real life
 areas that use the same password for everything (despite how much I
 discourage it).

 Everyone is speculating because Valve have not released any details as to
 what has been comprised.  After nearly 48 hours that's pretty unacceptable
 from a multi-million user company.

 On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com wrote:

 I think you are thinking the worst. All someone needs to post what they did
 is access to the VB admin CP which just requires an admin. My guess is it
 isnt as bad as people are making it out to be and right now everyone is
 speculating the worst. Just chill

 On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:

  Correct, but where else should it be posted?  On the forums maybe?  It's
  been nearly two days, and still no official press release.  A few people
  have reported receiving spam emails and I've seen unconfirmed reports of
  password databases being leaked.
  I don't have much doubt that most people on this list have good password
  management, but I'm sure there's still millions of forums users unaware
  that any hack happened, or if they are aware, how it may have effected
  them.
 
  On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com wrote:
 
   This is not relevant to server administration.
  
   On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
Hello Valve,
   
 I'd like to request notification via these mailing lists once/if
 Valve
makes a statement about todays security breach and subsequent
 downtime.
   
   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
___
To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
  
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Necavi
There would be no,  or at least much less cause to panic if we had any sort
of idea at all of what is going on, their reluctance to comment could very
well mean anything, but in some ways I'm more inclined to think the worst of
such a delay, not the best.

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of msleeper
Sent: Tuesday, November 08, 2011 17:45
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] Valve Security Breach

Yes, panicking and being reactionary is always the best course of action.

On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com wrote:
 Thinking the worst is the best thing to do in this situation.  Until Valve
 release some indication of what account details (if any) have
 been compromised it's easiest to assume all details have been, and advise
 all users to look over their account security.  Steamguard works great if
 you have different passwords for your steam account and steam forums and
 email, but I still know a lot of users both in gaming areas and real life
 areas that use the same password for everything (despite how much I
 discourage it).

 Everyone is speculating because Valve have not released any details as to
 what has been comprised.  After nearly 48 hours that's pretty unacceptable
 from a multi-million user company.

 On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com wrote:

 I think you are thinking the worst. All someone needs to post what they
did
 is access to the VB admin CP which just requires an admin. My guess is it
 isnt as bad as people are making it out to be and right now everyone is
 speculating the worst. Just chill

 On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:

  Correct, but where else should it be posted?  On the forums maybe?
 It's
  been nearly two days, and still no official press release.  A few
people
  have reported receiving spam emails and I've seen unconfirmed reports
of
  password databases being leaked.
  I don't have much doubt that most people on this list have good
password
  management, but I'm sure there's still millions of forums users unaware
  that any hack happened, or if they are aware, how it may have effected
  them.
 
  On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
wrote:
 
   This is not relevant to server administration.
  
   On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
Hello Valve,
   
 I'd like to request notification via these mailing lists once/if
 Valve
makes a statement about todays security breach and subsequent
 downtime.
   
   
  
 

http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-at
tack/
___
To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
  
   ___
   To unsubscribe, edit your list preferences, or view the list
archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Jesse Porter
Don't sell yourself short.  I'm pretty sure you'd find something to panic
about anyway -- probably they answered too fast, they're lying!

On Tue, Nov 8, 2011 at 7:03 PM, Necavi nec...@0xf.org wrote:

 There would be no,  or at least much less cause to panic if we had any sort
 of idea at all of what is going on, their reluctance to comment could very
 well mean anything, but in some ways I'm more inclined to think the worst
 of
 such a delay, not the best.

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of msleeper
 Sent: Tuesday, November 08, 2011 17:45
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] Valve Security Breach

 Yes, panicking and being reactionary is always the best course of action.

 On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  Thinking the worst is the best thing to do in this situation.  Until
 Valve
  release some indication of what account details (if any) have
  been compromised it's easiest to assume all details have been, and advise
  all users to look over their account security.  Steamguard works great if
  you have different passwords for your steam account and steam forums and
  email, but I still know a lot of users both in gaming areas and real life
  areas that use the same password for everything (despite how much I
  discourage it).
 
  Everyone is speculating because Valve have not released any details as to
  what has been comprised.  After nearly 48 hours that's pretty
 unacceptable
  from a multi-million user company.
 
  On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com wrote:
 
  I think you are thinking the worst. All someone needs to post what they
 did
  is access to the VB admin CP which just requires an admin. My guess is
 it
  isnt as bad as people are making it out to be and right now everyone is
  speculating the worst. Just chill
 
  On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
 
   Correct, but where else should it be posted?  On the forums maybe?
  It's
   been nearly two days, and still no official press release.  A few
 people
   have reported receiving spam emails and I've seen unconfirmed reports
 of
   password databases being leaked.
   I don't have much doubt that most people on this list have good
 password
   management, but I'm sure there's still millions of forums users
 unaware
   that any hack happened, or if they are aware, how it may have effected
   them.
  
   On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
This is not relevant to server administration.
   
On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
 Hello Valve,

  I'd like to request notification via these mailing lists once/if
  Valve
 makes a statement about todays security breach and subsequent
  downtime.


   
  
 

 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-at
 tack/
 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

   
___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Nathan Radcliffe
Feel free to suggest a better option.  Should I ignore the still as yet
unknown (and unconfirmed by the company) security breach that has rendered
a major section of it's website offline for near on two days, or warn the
several hundred of my users that they should look over their account and
security details?

On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com wrote:

 Yes, panicking and being reactionary is always the best course of action.

 On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  Thinking the worst is the best thing to do in this situation.  Until
 Valve
  release some indication of what account details (if any) have
  been compromised it's easiest to assume all details have been, and advise
  all users to look over their account security.  Steamguard works great if
  you have different passwords for your steam account and steam forums and
  email, but I still know a lot of users both in gaming areas and real life
  areas that use the same password for everything (despite how much I
  discourage it).
 
  Everyone is speculating because Valve have not released any details as to
  what has been comprised.  After nearly 48 hours that's pretty
 unacceptable
  from a multi-million user company.
 
  On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com wrote:
 
  I think you are thinking the worst. All someone needs to post what they
 did
  is access to the VB admin CP which just requires an admin. My guess is
 it
  isnt as bad as people are making it out to be and right now everyone is
  speculating the worst. Just chill
 
  On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
 
   Correct, but where else should it be posted?  On the forums maybe?
  It's
   been nearly two days, and still no official press release.  A few
 people
   have reported receiving spam emails and I've seen unconfirmed reports
 of
   password databases being leaked.
   I don't have much doubt that most people on this list have good
 password
   management, but I'm sure there's still millions of forums users
 unaware
   that any hack happened, or if they are aware, how it may have effected
   them.
  
   On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
This is not relevant to server administration.
   
On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
 Hello Valve,

  I'd like to request notification via these mailing lists once/if
  Valve
 makes a statement about todays security breach and subsequent
  downtime.


   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

   
___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
As I said:

 Assuming that your SPUF login and password is the same as your Steam
 login and password, 1.) that's not Valve's fault that you are
 literally the worst at the password game, but 2.) it's only a problem
 if you are in the 0.001% of people who don't use Steam Guard.

So unless your several hundred users all some how fit both of those
profiles, then I don't see what there is to be freaking out about.

How many of you are aware that the forum is a completely separate and
unconnected entity to every other Steam service?

On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com wrote:
 Feel free to suggest a better option.  Should I ignore the still as yet
 unknown (and unconfirmed by the company) security breach that has rendered
 a major section of it's website offline for near on two days, or warn the
 several hundred of my users that they should look over their account and
 security details?

 On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com wrote:

 Yes, panicking and being reactionary is always the best course of action.

 On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  Thinking the worst is the best thing to do in this situation.  Until
 Valve
  release some indication of what account details (if any) have
  been compromised it's easiest to assume all details have been, and advise
  all users to look over their account security.  Steamguard works great if
  you have different passwords for your steam account and steam forums and
  email, but I still know a lot of users both in gaming areas and real life
  areas that use the same password for everything (despite how much I
  discourage it).
 
  Everyone is speculating because Valve have not released any details as to
  what has been comprised.  After nearly 48 hours that's pretty
 unacceptable
  from a multi-million user company.
 
  On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com wrote:
 
  I think you are thinking the worst. All someone needs to post what they
 did
  is access to the VB admin CP which just requires an admin. My guess is
 it
  isnt as bad as people are making it out to be and right now everyone is
  speculating the worst. Just chill
 
  On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
 
   Correct, but where else should it be posted?  On the forums maybe?
  It's
   been nearly two days, and still no official press release.  A few
 people
   have reported receiving spam emails and I've seen unconfirmed reports
 of
   password databases being leaked.
   I don't have much doubt that most people on this list have good
 password
   management, but I'm sure there's still millions of forums users
 unaware
   that any hack happened, or if they are aware, how it may have effected
   them.
  
   On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
This is not relevant to server administration.
   
On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com wrote:
 Hello Valve,

  I'd like to request notification via these mailing lists once/if
  Valve
 makes a statement about todays security breach and subsequent
  downtime.


   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

   
___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread coffee problem
I wonder why the Valve TF2 servers themselves have been offline since
yesterday.

On Tue, Nov 8, 2011 at 9:09 PM, msleeper mslee...@ismsleeperwrong.comwrote:

 As I said:

  Assuming that your SPUF login and password is the same as your Steam
  login and password, 1.) that's not Valve's fault that you are
  literally the worst at the password game, but 2.) it's only a problem
  if you are in the 0.001% of people who don't use Steam Guard.

 So unless your several hundred users all some how fit both of those
 profiles, then I don't see what there is to be freaking out about.

 How many of you are aware that the forum is a completely separate and
 unconnected entity to every other Steam service?

 On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  Feel free to suggest a better option.  Should I ignore the still as yet
  unknown (and unconfirmed by the company) security breach that has
 rendered
  a major section of it's website offline for near on two days, or warn the
  several hundred of my users that they should look over their account and
  security details?
 
  On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com wrote:
 
  Yes, panicking and being reactionary is always the best course of
 action.
 
  On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Thinking the worst is the best thing to do in this situation.  Until
  Valve
   release some indication of what account details (if any) have
   been compromised it's easiest to assume all details have been, and
 advise
   all users to look over their account security.  Steamguard works
 great if
   you have different passwords for your steam account and steam forums
 and
   email, but I still know a lot of users both in gaming areas and real
 life
   areas that use the same password for everything (despite how much I
   discourage it).
  
   Everyone is speculating because Valve have not released any details
 as to
   what has been comprised.  After nearly 48 hours that's pretty
  unacceptable
   from a multi-million user company.
  
   On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com
 wrote:
  
   I think you are thinking the worst. All someone needs to post what
 they
  did
   is access to the VB admin CP which just requires an admin. My guess
 is
  it
   isnt as bad as people are making it out to be and right now everyone
 is
   speculating the worst. Just chill
  
   On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
   wrote:
  
Correct, but where else should it be posted?  On the forums maybe?
   It's
been nearly two days, and still no official press release.  A few
  people
have reported receiving spam emails and I've seen unconfirmed
 reports
  of
password databases being leaked.
I don't have much doubt that most people on this list have good
  password
management, but I'm sure there's still millions of forums users
  unaware
that any hack happened, or if they are aware, how it may have
 effected
them.
   
On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
  wrote:
   
 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com
 wrote:
  Hello Valve,
 
   I'd like to request notification via these mailing lists
 once/if
   Valve
  makes a statement about todays security breach and subsequent
   downtime.
 
 

   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread 1nsane
Wow, clearly it's a conspiracy. Valve must be completely compromised.

Except I see hundreds (thousands?) of Valve TF2 servers in my server
browser.

They are not down.

On Tue, Nov 8, 2011 at 9:12 PM, coffee problem spoofedpac...@gmail.comwrote:

 I wonder why the Valve TF2 servers themselves have been offline since
 yesterday.

 On Tue, Nov 8, 2011 at 9:09 PM, msleeper mslee...@ismsleeperwrong.com
 wrote:

  As I said:
 
   Assuming that your SPUF login and password is the same as your Steam
   login and password, 1.) that's not Valve's fault that you are
   literally the worst at the password game, but 2.) it's only a problem
   if you are in the 0.001% of people who don't use Steam Guard.
 
  So unless your several hundred users all some how fit both of those
  profiles, then I don't see what there is to be freaking out about.
 
  How many of you are aware that the forum is a completely separate and
  unconnected entity to every other Steam service?
 
  On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Feel free to suggest a better option.  Should I ignore the still as yet
   unknown (and unconfirmed by the company) security breach that has
  rendered
   a major section of it's website offline for near on two days, or warn
 the
   several hundred of my users that they should look over their account
 and
   security details?
  
   On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
   Yes, panicking and being reactionary is always the best course of
  action.
  
   On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
   wrote:
Thinking the worst is the best thing to do in this situation.  Until
   Valve
release some indication of what account details (if any) have
been compromised it's easiest to assume all details have been, and
  advise
all users to look over their account security.  Steamguard works
  great if
you have different passwords for your steam account and steam forums
  and
email, but I still know a lot of users both in gaming areas and real
  life
areas that use the same password for everything (despite how much I
discourage it).
   
Everyone is speculating because Valve have not released any details
  as to
what has been comprised.  After nearly 48 hours that's pretty
   unacceptable
from a multi-million user company.
   
On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com
  wrote:
   
I think you are thinking the worst. All someone needs to post what
  they
   did
is access to the VB admin CP which just requires an admin. My guess
  is
   it
isnt as bad as people are making it out to be and right now
 everyone
  is
speculating the worst. Just chill
   
On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe 
 kugr...@gmail.com
wrote:
   
 Correct, but where else should it be posted?  On the forums
 maybe?
It's
 been nearly two days, and still no official press release.  A few
   people
 have reported receiving spam emails and I've seen unconfirmed
  reports
   of
 password databases being leaked.
 I don't have much doubt that most people on this list have good
   password
 management, but I'm sure there's still millions of forums users
   unaware
 that any hack happened, or if they are aware, how it may have
  effected
 them.

 On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
 
   wrote:

  This is not relevant to server administration.
 
  On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com
  wrote:
   Hello Valve,
  
I'd like to request notification via these mailing lists
  once/if
Valve
   makes a statement about todays security breach and subsequent
downtime.
  
  
 

   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
   ___
   To unsubscribe, edit your list preferences, or view the list
archives,
  please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
 
  ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
___
To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
Oh no, 1nsane, you left your Jump To Conclusions mat at home!

On Tue, Nov 8, 2011 at 9:39 PM, 1nsane 1nsane...@gmail.com wrote:
 Wow, clearly it's a conspiracy. Valve must be completely compromised.

 Except I see hundreds (thousands?) of Valve TF2 servers in my server
 browser.

 They are not down.

 On Tue, Nov 8, 2011 at 9:12 PM, coffee problem spoofedpac...@gmail.comwrote:

 I wonder why the Valve TF2 servers themselves have been offline since
 yesterday.

 On Tue, Nov 8, 2011 at 9:09 PM, msleeper mslee...@ismsleeperwrong.com
 wrote:

  As I said:
 
   Assuming that your SPUF login and password is the same as your Steam
   login and password, 1.) that's not Valve's fault that you are
   literally the worst at the password game, but 2.) it's only a problem
   if you are in the 0.001% of people who don't use Steam Guard.
 
  So unless your several hundred users all some how fit both of those
  profiles, then I don't see what there is to be freaking out about.
 
  How many of you are aware that the forum is a completely separate and
  unconnected entity to every other Steam service?
 
  On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Feel free to suggest a better option.  Should I ignore the still as yet
   unknown (and unconfirmed by the company) security breach that has
  rendered
   a major section of it's website offline for near on two days, or warn
 the
   several hundred of my users that they should look over their account
 and
   security details?
  
   On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
   Yes, panicking and being reactionary is always the best course of
  action.
  
   On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
   wrote:
Thinking the worst is the best thing to do in this situation.  Until
   Valve
release some indication of what account details (if any) have
been compromised it's easiest to assume all details have been, and
  advise
all users to look over their account security.  Steamguard works
  great if
you have different passwords for your steam account and steam forums
  and
email, but I still know a lot of users both in gaming areas and real
  life
areas that use the same password for everything (despite how much I
discourage it).
   
Everyone is speculating because Valve have not released any details
  as to
what has been comprised.  After nearly 48 hours that's pretty
   unacceptable
from a multi-million user company.
   
On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com
  wrote:
   
I think you are thinking the worst. All someone needs to post what
  they
   did
is access to the VB admin CP which just requires an admin. My guess
  is
   it
isnt as bad as people are making it out to be and right now
 everyone
  is
speculating the worst. Just chill
   
On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe 
 kugr...@gmail.com
wrote:
   
 Correct, but where else should it be posted?  On the forums
 maybe?
    It's
 been nearly two days, and still no official press release.  A few
   people
 have reported receiving spam emails and I've seen unconfirmed
  reports
   of
 password databases being leaked.
 I don't have much doubt that most people on this list have good
   password
 management, but I'm sure there's still millions of forums users
   unaware
 that any hack happened, or if they are aware, how it may have
  effected
 them.

 On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
 
   wrote:

  This is not relevant to server administration.
 
  On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com
  wrote:
   Hello Valve,
  
    I'd like to request notification via these mailing lists
  once/if
Valve
   makes a statement about todays security breach and subsequent
downtime.
  
  
 

   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
   ___
   To unsubscribe, edit your list preferences, or view the list
archives,
  please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
 
  ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
___
  

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Nathan Radcliffe
And as I said:

  Steamguard works great if
  you have different passwords for your steam account and steam forums
and
  email, but I still know a lot of users both in gaming areas and real
life
  areas that use the same password for everything (despite how much I
  discourage it).

If email address have been exposed and passwords have been exposed, then
all account details for anyone with no password management system have been
exposed.  I don't run a service for computer security professionals - I run
a service for gamers.  Until Valve release details as to the exposure of
this attack, neither you nor I fully know what credentials are out in the
wild, so is better to err on the side of caution.

On 9 November 2011 02:09, msleeper mslee...@ismsleeperwrong.com wrote:

 As I said:

  Assuming that your SPUF login and password is the same as your Steam
  login and password, 1.) that's not Valve's fault that you are
  literally the worst at the password game, but 2.) it's only a problem
  if you are in the 0.001% of people who don't use Steam Guard.

 So unless your several hundred users all some how fit both of those
 profiles, then I don't see what there is to be freaking out about.

 How many of you are aware that the forum is a completely separate and
 unconnected entity to every other Steam service?

 On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  Feel free to suggest a better option.  Should I ignore the still as yet
  unknown (and unconfirmed by the company) security breach that has
 rendered
  a major section of it's website offline for near on two days, or warn the
  several hundred of my users that they should look over their account and
  security details?
 
  On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com wrote:
 
  Yes, panicking and being reactionary is always the best course of
 action.
 
  On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Thinking the worst is the best thing to do in this situation.  Until
  Valve
   release some indication of what account details (if any) have
   been compromised it's easiest to assume all details have been, and
 advise
   all users to look over their account security.  Steamguard works
 great if
   you have different passwords for your steam account and steam forums
 and
   email, but I still know a lot of users both in gaming areas and real
 life
   areas that use the same password for everything (despite how much I
   discourage it).
  
   Everyone is speculating because Valve have not released any details
 as to
   what has been comprised.  After nearly 48 hours that's pretty
  unacceptable
   from a multi-million user company.
  
   On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com
 wrote:
  
   I think you are thinking the worst. All someone needs to post what
 they
  did
   is access to the VB admin CP which just requires an admin. My guess
 is
  it
   isnt as bad as people are making it out to be and right now everyone
 is
   speculating the worst. Just chill
  
   On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
   wrote:
  
Correct, but where else should it be posted?  On the forums maybe?
   It's
been nearly two days, and still no official press release.  A few
  people
have reported receiving spam emails and I've seen unconfirmed
 reports
  of
password databases being leaked.
I don't have much doubt that most people on this list have good
  password
management, but I'm sure there's still millions of forums users
  unaware
that any hack happened, or if they are aware, how it may have
 effected
them.
   
On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
  wrote:
   
 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com
 wrote:
  Hello Valve,
 
   I'd like to request notification via these mailing lists
 once/if
   Valve
  makes a statement about todays security breach and subsequent
   downtime.
 
 

   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
If you have the same password for your Steam forum account, for your
Steam login, and for the email address that Steam is tied to (and by
proxy, the same email address on file on SPUF) then - and I'm just
gonna say it - you probably deserve to have something bad like this
happen so you wisen up to better security practices.

On Tue, Nov 8, 2011 at 9:42 PM, Nathan Radcliffe kugr...@gmail.com wrote:
 And as I said:

  Steamguard works great if
  you have different passwords for your steam account and steam forums
 and
  email, but I still know a lot of users both in gaming areas and real
 life
  areas that use the same password for everything (despite how much I
  discourage it).

 If email address have been exposed and passwords have been exposed, then
 all account details for anyone with no password management system have been
 exposed.  I don't run a service for computer security professionals - I run
 a service for gamers.  Until Valve release details as to the exposure of
 this attack, neither you nor I fully know what credentials are out in the
 wild, so is better to err on the side of caution.

 On 9 November 2011 02:09, msleeper mslee...@ismsleeperwrong.com wrote:

 As I said:

  Assuming that your SPUF login and password is the same as your Steam
  login and password, 1.) that's not Valve's fault that you are
  literally the worst at the password game, but 2.) it's only a problem
  if you are in the 0.001% of people who don't use Steam Guard.

 So unless your several hundred users all some how fit both of those
 profiles, then I don't see what there is to be freaking out about.

 How many of you are aware that the forum is a completely separate and
 unconnected entity to every other Steam service?

 On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  Feel free to suggest a better option.  Should I ignore the still as yet
  unknown (and unconfirmed by the company) security breach that has
 rendered
  a major section of it's website offline for near on two days, or warn the
  several hundred of my users that they should look over their account and
  security details?
 
  On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com wrote:
 
  Yes, panicking and being reactionary is always the best course of
 action.
 
  On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Thinking the worst is the best thing to do in this situation.  Until
  Valve
   release some indication of what account details (if any) have
   been compromised it's easiest to assume all details have been, and
 advise
   all users to look over their account security.  Steamguard works
 great if
   you have different passwords for your steam account and steam forums
 and
   email, but I still know a lot of users both in gaming areas and real
 life
   areas that use the same password for everything (despite how much I
   discourage it).
  
   Everyone is speculating because Valve have not released any details
 as to
   what has been comprised.  After nearly 48 hours that's pretty
  unacceptable
   from a multi-million user company.
  
   On 9 November 2011 01:19, DontWannaName! ad...@topnotchclan.com
 wrote:
  
   I think you are thinking the worst. All someone needs to post what
 they
  did
   is access to the VB admin CP which just requires an admin. My guess
 is
  it
   isnt as bad as people are making it out to be and right now everyone
 is
   speculating the worst. Just chill
  
   On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe kugr...@gmail.com
   wrote:
  
Correct, but where else should it be posted?  On the forums maybe?
   It's
been nearly two days, and still no official press release.  A few
  people
have reported receiving spam emails and I've seen unconfirmed
 reports
  of
password databases being leaked.
I don't have much doubt that most people on this list have good
  password
management, but I'm sure there's still millions of forums users
  unaware
that any hack happened, or if they are aware, how it may have
 effected
them.
   
On 8 November 2011 20:05, msleeper mslee...@ismsleeperwrong.com
  wrote:
   
 This is not relevant to server administration.

 On Tue, Nov 8, 2011 at 1:07 AM, m33crob ad...@m33crob.com
 wrote:
  Hello Valve,
 
   I'd like to request notification via these mailing lists
 once/if
   Valve
  makes a statement about todays security breach and subsequent
   downtime.
 
 

   
  
 
 http://www.pcgamer.com/2011/11/07/steam-forums-down-after-possible-hacker-attack/
  ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 

 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread gameadmin
Probably, but I have to assume some people in my community match that
criteria.  I also have to hold as a possibility that the attackers were able
to leverage their exploitation of the forum system into some kind of
possibly-successful intrusion into other parts of the steam system.

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-
 boun...@list.valvesoftware.com] On Behalf Of msleeper
 Sent: 09 November 2011 03:40
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] Valve Security Breach
 
 If you have the same password for your Steam forum account, for your
 Steam login, and for the email address that Steam is tied to (and by
 proxy, the same email address on file on SPUF) then - and I'm just
 gonna say it - you probably deserve to have something bad like this
 happen so you wisen up to better security practices.
 
 On Tue, Nov 8, 2011 at 9:42 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  And as I said:
 
   Steamguard works great if
   you have different passwords for your steam account and steam
 forums
  and
   email, but I still know a lot of users both in gaming areas and
 real
  life
   areas that use the same password for everything (despite how much
 I
   discourage it).
 
  If email address have been exposed and passwords have been exposed,
 then
  all account details for anyone with no password management system
 have been
  exposed.  I don't run a service for computer security professionals -
 I run
  a service for gamers.  Until Valve release details as to the exposure
 of
  this attack, neither you nor I fully know what credentials are out in
 the
  wild, so is better to err on the side of caution.
 
  On 9 November 2011 02:09, msleeper mslee...@ismsleeperwrong.com
 wrote:
 
  As I said:
 
   Assuming that your SPUF login and password is the same as your
 Steam
   login and password, 1.) that's not Valve's fault that you are
   literally the worst at the password game, but 2.) it's only a
 problem
   if you are in the 0.001% of people who don't use Steam Guard.
 
  So unless your several hundred users all some how fit both of
 those
  profiles, then I don't see what there is to be freaking out about.
 
  How many of you are aware that the forum is a completely separate
 and
  unconnected entity to every other Steam service?
 
  On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Feel free to suggest a better option.  Should I ignore the still
 as yet
   unknown (and unconfirmed by the company) security breach that has
  rendered
   a major section of it's website offline for near on two days, or
 warn the
   several hundred of my users that they should look over their
 account and
   security details?
  
   On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
   Yes, panicking and being reactionary is always the best course of
  action.
  
   On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe
 kugr...@gmail.com
   wrote:
Thinking the worst is the best thing to do in this situation.
  Until
   Valve
release some indication of what account details (if any) have
been compromised it's easiest to assume all details have been,
 and
  advise
all users to look over their account security.  Steamguard
 works
  great if
you have different passwords for your steam account and steam
 forums
  and
email, but I still know a lot of users both in gaming areas and
 real
  life
areas that use the same password for everything (despite how
 much I
discourage it).
   
Everyone is speculating because Valve have not released any
 details
  as to
what has been comprised.  After nearly 48 hours that's pretty
   unacceptable
from a multi-million user company.
   
On 9 November 2011 01:19, DontWannaName!
 ad...@topnotchclan.com
  wrote:
   
I think you are thinking the worst. All someone needs to post
 what
  they
   did
is access to the VB admin CP which just requires an admin. My
 guess
  is
   it
isnt as bad as people are making it out to be and right now
 everyone
  is
speculating the worst. Just chill
   
On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe
 kugr...@gmail.com
wrote:
   
 Correct, but where else should it be posted?  On the forums
 maybe?
    It's
 been nearly two days, and still no official press release.
  A few
   people
 have reported receiving spam emails and I've seen
 unconfirmed
  reports
   of
 password databases being leaked.
 I don't have much doubt that most people on this list have
 good
   password
 management, but I'm sure there's still millions of forums
 users
   unaware
 that any hack happened, or if they are aware, how it may
 have
  effected
 them.

 On 8 November 2011 20:05, msleeper
 mslee...@ismsleeperwrong.com
   wrote:

  This is not relevant to server administration.
 
  On Tue, Nov 8, 2011 at 1:07 AM, m33crob
 

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread Nomaan Ahmad
Since when is vBulletin part of Steam systems?

On 9 November 2011 04:07, gamead...@127001.org wrote:

 Probably, but I have to assume some people in my community match that
 criteria.  I also have to hold as a possibility that the attackers were
 able
 to leverage their exploitation of the forum system into some kind of
 possibly-successful intrusion into other parts of the steam system.

  -Original Message-
  From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-
  boun...@list.valvesoftware.com] On Behalf Of msleeper
  Sent: 09 November 2011 03:40
  To: Half-Life dedicated Linux server mailing list
  Subject: Re: [hlds_linux] Valve Security Breach
 
  If you have the same password for your Steam forum account, for your
  Steam login, and for the email address that Steam is tied to (and by
  proxy, the same email address on file on SPUF) then - and I'm just
  gonna say it - you probably deserve to have something bad like this
  happen so you wisen up to better security practices.
 
  On Tue, Nov 8, 2011 at 9:42 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   And as I said:
  
Steamguard works great if
you have different passwords for your steam account and steam
  forums
   and
email, but I still know a lot of users both in gaming areas and
  real
   life
areas that use the same password for everything (despite how much
  I
discourage it).
  
   If email address have been exposed and passwords have been exposed,
  then
   all account details for anyone with no password management system
  have been
   exposed.  I don't run a service for computer security professionals -
  I run
   a service for gamers.  Until Valve release details as to the exposure
  of
   this attack, neither you nor I fully know what credentials are out in
  the
   wild, so is better to err on the side of caution.
  
   On 9 November 2011 02:09, msleeper mslee...@ismsleeperwrong.com
  wrote:
  
   As I said:
  
Assuming that your SPUF login and password is the same as your
  Steam
login and password, 1.) that's not Valve's fault that you are
literally the worst at the password game, but 2.) it's only a
  problem
if you are in the 0.001% of people who don't use Steam Guard.
  
   So unless your several hundred users all some how fit both of
  those
   profiles, then I don't see what there is to be freaking out about.
  
   How many of you are aware that the forum is a completely separate
  and
   unconnected entity to every other Steam service?
  
   On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
   wrote:
Feel free to suggest a better option.  Should I ignore the still
  as yet
unknown (and unconfirmed by the company) security breach that has
   rendered
a major section of it's website offline for near on two days, or
  warn the
several hundred of my users that they should look over their
  account and
security details?
   
On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com
  wrote:
   
Yes, panicking and being reactionary is always the best course of
   action.
   
On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe
  kugr...@gmail.com
wrote:
 Thinking the worst is the best thing to do in this situation.
   Until
Valve
 release some indication of what account details (if any) have
 been compromised it's easiest to assume all details have been,
  and
   advise
 all users to look over their account security.  Steamguard
  works
   great if
 you have different passwords for your steam account and steam
  forums
   and
 email, but I still know a lot of users both in gaming areas and
  real
   life
 areas that use the same password for everything (despite how
  much I
 discourage it).

 Everyone is speculating because Valve have not released any
  details
   as to
 what has been comprised.  After nearly 48 hours that's pretty
unacceptable
 from a multi-million user company.

 On 9 November 2011 01:19, DontWannaName!
  ad...@topnotchclan.com
   wrote:

 I think you are thinking the worst. All someone needs to post
  what
   they
did
 is access to the VB admin CP which just requires an admin. My
  guess
   is
it
 isnt as bad as people are making it out to be and right now
  everyone
   is
 speculating the worst. Just chill

 On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe
  kugr...@gmail.com
 wrote:

  Correct, but where else should it be posted?  On the forums
  maybe?
 It's
  been nearly two days, and still no official press release.
   A few
people
  have reported receiving spam emails and I've seen
  unconfirmed
   reports
of
  password databases being leaked.
  I don't have much doubt that most people on this list have
  good
password
  management, but I'm sure there's still millions of forums
  users
unaware
  that any hack happened, or if they are 

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread msleeper
I think it's way, way more likely that they gained access to an admin
level account on the forum and setup the notice and such. But then
again I'm also not on the panicky, jump-to-baseless speculation
bandwagon and tend to stick with the more reasonable, rational
answers.

Either way, SPUF being down still has shit-all to do with being
relevant to server administration.

On Tue, Nov 8, 2011 at 11:07 PM,  gamead...@127001.org wrote:
 Probably, but I have to assume some people in my community match that
 criteria.  I also have to hold as a possibility that the attackers were able
 to leverage their exploitation of the forum system into some kind of
 possibly-successful intrusion into other parts of the steam system.

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-
 boun...@list.valvesoftware.com] On Behalf Of msleeper
 Sent: 09 November 2011 03:40
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] Valve Security Breach

 If you have the same password for your Steam forum account, for your
 Steam login, and for the email address that Steam is tied to (and by
 proxy, the same email address on file on SPUF) then - and I'm just
 gonna say it - you probably deserve to have something bad like this
 happen so you wisen up to better security practices.

 On Tue, Nov 8, 2011 at 9:42 PM, Nathan Radcliffe kugr...@gmail.com
 wrote:
  And as I said:
 
   Steamguard works great if
   you have different passwords for your steam account and steam
 forums
  and
   email, but I still know a lot of users both in gaming areas and
 real
  life
   areas that use the same password for everything (despite how much
 I
   discourage it).
 
  If email address have been exposed and passwords have been exposed,
 then
  all account details for anyone with no password management system
 have been
  exposed.  I don't run a service for computer security professionals -
 I run
  a service for gamers.  Until Valve release details as to the exposure
 of
  this attack, neither you nor I fully know what credentials are out in
 the
  wild, so is better to err on the side of caution.
 
  On 9 November 2011 02:09, msleeper mslee...@ismsleeperwrong.com
 wrote:
 
  As I said:
 
   Assuming that your SPUF login and password is the same as your
 Steam
   login and password, 1.) that's not Valve's fault that you are
   literally the worst at the password game, but 2.) it's only a
 problem
   if you are in the 0.001% of people who don't use Steam Guard.
 
  So unless your several hundred users all some how fit both of
 those
  profiles, then I don't see what there is to be freaking out about.
 
  How many of you are aware that the forum is a completely separate
 and
  unconnected entity to every other Steam service?
 
  On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe kugr...@gmail.com
  wrote:
   Feel free to suggest a better option.  Should I ignore the still
 as yet
   unknown (and unconfirmed by the company) security breach that has
  rendered
   a major section of it's website offline for near on two days, or
 warn the
   several hundred of my users that they should look over their
 account and
   security details?
  
   On 9 November 2011 01:45, msleeper mslee...@ismsleeperwrong.com
 wrote:
  
   Yes, panicking and being reactionary is always the best course of
  action.
  
   On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe
 kugr...@gmail.com
   wrote:
Thinking the worst is the best thing to do in this situation.
  Until
   Valve
release some indication of what account details (if any) have
been compromised it's easiest to assume all details have been,
 and
  advise
all users to look over their account security.  Steamguard
 works
  great if
you have different passwords for your steam account and steam
 forums
  and
email, but I still know a lot of users both in gaming areas and
 real
  life
areas that use the same password for everything (despite how
 much I
discourage it).
   
Everyone is speculating because Valve have not released any
 details
  as to
what has been comprised.  After nearly 48 hours that's pretty
   unacceptable
from a multi-million user company.
   
On 9 November 2011 01:19, DontWannaName!
 ad...@topnotchclan.com
  wrote:
   
I think you are thinking the worst. All someone needs to post
 what
  they
   did
is access to the VB admin CP which just requires an admin. My
 guess
  is
   it
isnt as bad as people are making it out to be and right now
 everyone
  is
speculating the worst. Just chill
   
On Tue, Nov 8, 2011 at 4:51 PM, Nathan Radcliffe
 kugr...@gmail.com
wrote:
   
 Correct, but where else should it be posted?  On the forums
 maybe?
    It's
 been nearly two days, and still no official press release.
  A few
   people
 have reported receiving spam emails and I've seen
 unconfirmed
  reports
   of
 password databases being leaked.
 I don't have much 

Re: [hlds_linux] Valve Security Breach

2011-11-08 Thread gameadmin
It isn't - but if they had sufficient access to e.g. install vbulletin
plugins/mods, they'd have user-level access to at least one physical server
inside Valve.  I have literally no idea how separated that box is from the
rest of the steam systems.

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-
 boun...@list.valvesoftware.com] On Behalf Of Nomaan Ahmad
 Sent: 09 November 2011 04:11
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] Valve Security Breach
 
 Since when is vBulletin part of Steam systems?
 
 On 9 November 2011 04:07, gamead...@127001.org wrote:
 
  Probably, but I have to assume some people in my community match that
  criteria.  I also have to hold as a possibility that the attackers
 were
  able
  to leverage their exploitation of the forum system into some kind of
  possibly-successful intrusion into other parts of the steam system.
 
   -Original Message-
   From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-
   boun...@list.valvesoftware.com] On Behalf Of msleeper
   Sent: 09 November 2011 03:40
   To: Half-Life dedicated Linux server mailing list
   Subject: Re: [hlds_linux] Valve Security Breach
  
   If you have the same password for your Steam forum account, for
 your
   Steam login, and for the email address that Steam is tied to (and
 by
   proxy, the same email address on file on SPUF) then - and I'm just
   gonna say it - you probably deserve to have something bad like this
   happen so you wisen up to better security practices.
  
   On Tue, Nov 8, 2011 at 9:42 PM, Nathan Radcliffe
 kugr...@gmail.com
   wrote:
And as I said:
   
 Steamguard works great if
 you have different passwords for your steam account and steam
   forums
and
 email, but I still know a lot of users both in gaming areas
 and
   real
life
 areas that use the same password for everything (despite how
 much
   I
 discourage it).
   
If email address have been exposed and passwords have been
 exposed,
   then
all account details for anyone with no password management system
   have been
exposed.  I don't run a service for computer security
 professionals -
   I run
a service for gamers.  Until Valve release details as to the
 exposure
   of
this attack, neither you nor I fully know what credentials are
 out in
   the
wild, so is better to err on the side of caution.
   
On 9 November 2011 02:09, msleeper mslee...@ismsleeperwrong.com
   wrote:
   
As I said:
   
 Assuming that your SPUF login and password is the same as your
   Steam
 login and password, 1.) that's not Valve's fault that you are
 literally the worst at the password game, but 2.) it's only a
   problem
 if you are in the 0.001% of people who don't use Steam Guard.
   
So unless your several hundred users all some how fit both of
   those
profiles, then I don't see what there is to be freaking out
 about.
   
How many of you are aware that the forum is a completely
 separate
   and
unconnected entity to every other Steam service?
   
On Tue, Nov 8, 2011 at 9:06 PM, Nathan Radcliffe
 kugr...@gmail.com
wrote:
 Feel free to suggest a better option.  Should I ignore the
 still
   as yet
 unknown (and unconfirmed by the company) security breach that
 has
rendered
 a major section of it's website offline for near on two days,
 or
   warn the
 several hundred of my users that they should look over their
   account and
 security details?

 On 9 November 2011 01:45, msleeper
 mslee...@ismsleeperwrong.com
   wrote:

 Yes, panicking and being reactionary is always the best
 course of
action.

 On Tue, Nov 8, 2011 at 8:38 PM, Nathan Radcliffe
   kugr...@gmail.com
 wrote:
  Thinking the worst is the best thing to do in this
 situation.
Until
 Valve
  release some indication of what account details (if any)
 have
  been compromised it's easiest to assume all details have
 been,
   and
advise
  all users to look over their account security.  Steamguard
   works
great if
  you have different passwords for your steam account and
 steam
   forums
and
  email, but I still know a lot of users both in gaming areas
 and
   real
life
  areas that use the same password for everything (despite
 how
   much I
  discourage it).
 
  Everyone is speculating because Valve have not released any
   details
as to
  what has been comprised.  After nearly 48 hours that's
 pretty
 unacceptable
  from a multi-million user company.
 
  On 9 November 2011 01:19, DontWannaName!
   ad...@topnotchclan.com
wrote:
 
  I think you are thinking the worst. All someone needs to
 post
   what
they
 did
  is access to the VB admin CP which just requires an admin.
 My
   guess
is
 it
  isnt as bad as people are making 

Re: [hlds_linux] STEAMAUTH Client NAME received failure code 6 ??

2011-11-08 Thread Russell Smith
This has happened on my server the past couple of nights now. Nearly
everyone gets dropped simultaneously with:
L 11/08/2011 - 21:24:24: STEAMAUTH: Client gutless66 received failure code 6
L 11/08/2011 - 21:24:24: gutless4STEAM_0:1:Red
disconnected (reason No Steam logon
)

Occasionally one or two people will survive the mass exodus and be left
totally confused as to what just happened.


On 11/8/2011 7:24 AM, 정정훈 wrote:
 I think still no update from vavle. even after 11.08 update
 Tab crashing bug is still affecting players fyi. Hit me 3 times in a row
 last night before I said screw it yet again, server console did not show
 anything, even a client disconnected message.
 On Wed, Nov 2, 2011 at 9:42 AM, Kyle Sanderson lt;kyle.l...@gmail.comgt; 
 wrote:
 I've only seen this when the client forcibly kills the game process.
 Crashing (thanks to the now fixed Tab bug) didn't seem to cause it for me.

 Kyle.

 2011/11/2 Russell Smith lt;ve...@tinylittlerobots.usgt;

 This is the error that occurs when the players game crashes, is it not?
 This is the message I was seeing for all the players crashing during the
 Manniversary update madness.

 On 11/1/2011 11:27 PM, daniel jokiaho wrote:
 I have also seen this on my server.
 On 2 Nov 2011 07:09, 정정훈 lt;jungjung...@naver.comgt; wrote:

 Anyone know about this??
 Now that this guy mentions it, ive had this happen to my server also.
 On Monday, October 31, 2011, 정정훈 lt;jungjung...@naver.comgt;
 wrote:
 My server player had error sometimes:
 STEAMAUTH Client received failure code 6
 Dropped from the server (No Steam logon)
 after 10.13 update
 My server is VAC and he (or she) is not no steam. just because of
 STEAMAUTH error.
 What's this? Is this exist solution?
 Most player dropped the server when that time.
 I'm waiting 2 weaks for this but valve still didn't update. So I
 asked
 here.
 Thank you
 ___
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Something interesting about quickplay

2011-11-08 Thread E3pO
So i've noticed a few things and I have questions about them.


   - The server can be full from 8AM to around 10PM and then players start
   to just disconnect and then it's empty all night.
   - When I'm playing on the server it seems like more people join and stay
   online\connect via quickplay, when i leave the server drops.
   - If i fill up the serer at night (I just did) and play for awhile
   (about 2 hours) the server stays full. Just minutes after I left it dropped
   to 8 players. or so.

Any ideas what might be causing this?
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] STEAMAUTH Client NAME received failure code 6 ??

2011-11-08 Thread Andrew
Russell,

Saw the same thing happen on my server this evening. Lost every person
with a failure code 6 and no steam logon. A few rejoined right away.
Twice before I have seen it happen; the last time was a couple of
months ago.

I do not have any more information to share. My logs have no
additional detail. But you are not alone.

-Andrew


2011/11/8 Russell Smith ve...@tinylittlerobots.us:
 This has happened on my server the past couple of nights now. Nearly
 everyone gets dropped simultaneously with:
 L 11/08/2011 - 21:24:24: STEAMAUTH: Client gutless66 received failure code 6
 L 11/08/2011 - 21:24:24: gutless4STEAM_0:1:Red
 disconnected (reason No Steam logon
 )

 Occasionally one or two people will survive the mass exodus and be left
 totally confused as to what just happened.


 On 11/8/2011 7:24 AM, 정정훈 wrote:
 I think still no update from vavle. even after 11.08 update
 Tab crashing bug is still affecting players fyi. Hit me 3 times in a row
 last night before I said screw it yet again, server console did not show
 anything, even a client disconnected message.
 On Wed, Nov 2, 2011 at 9:42 AM, Kyle Sanderson lt;kyle.l...@gmail.comgt; 
 wrote:
 I've only seen this when the client forcibly kills the game process.
 Crashing (thanks to the now fixed Tab bug) didn't seem to cause it for me.

 Kyle.

 2011/11/2 Russell Smith lt;ve...@tinylittlerobots.usgt;

 This is the error that occurs when the players game crashes, is it not?
 This is the message I was seeing for all the players crashing during the
 Manniversary update madness.

 On 11/1/2011 11:27 PM, daniel jokiaho wrote:
 I have also seen this on my server.
 On 2 Nov 2011 07:09, 정정훈 lt;jungjung...@naver.comgt; wrote:

 Anyone know about this??
 Now that this guy mentions it, ive had this happen to my server also.
 On Monday, October 31, 2011, 정정훈 lt;jungjung...@naver.comgt;
 wrote:
 My server player had error sometimes:
 STEAMAUTH Client received failure code 6
 Dropped from the server (No Steam logon)
 after 10.13 update
 My server is VAC and he (or she) is not no steam. just because of
 STEAMAUTH error.
 What's this? Is this exist solution?
 Most player dropped the server when that time.
 I'm waiting 2 weaks for this but valve still didn't update. So I
 asked
 here.
 Thank you
 ___
 To unsubscribe, edit your list preferences, or view the list
 archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


-- 
Andrew (Wave Admin)
The Wave!
24/7 CTF
1/2 respawn times
http://thewaveserver.com

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Modern Warfare 3

2011-11-08 Thread buster_cool
hello,

but ... what about the no steam logon error? i cant join my hosted server? i 
ask again, its possible atm to host servers? or not yet?

i would be pleased if valve would give a comment? or someone else. iam not sure 
but yesterday evening there were no german mw3 server online? its a bug?

-peter
-- 
NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie!   
Jetzt informieren: http://www.gmx.net/de/go/freephone

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Modern Warfare 3

2011-11-08 Thread Nomaan Ahmad
I have been playing around with MW3 server, it seems like its a Windows
Only release. There is limit of 18 slots on the dedicated server.

I have installed it using hldsupdatetool like this:

hldsupdatetool.exe -command update -game modernwarfare3 -dir .

I had to use Steam.dll from my steam folder and uploaded to the mw3's
server root.

It seems like its online on HLSW. Unfortunately I cant afford the game to
test it yet :(

Here is what it looks like on console:

version 1.2.358
Connecting to online services
Connected to online services.
Executing server config server.cfg
]map mp_interchange
---
Spawning map: mp_interchange, gametype war
Initializing Steam Game Server: game port 27015, auth port 8766, query port
27017, gamedir modernwarfare3, version 1.0.0.0
Steam Game Server initialized as Internet Server.
No Steam Master Servers found. Server will LAN visible only.
Steam Game Server connected. Local IP 94.23.25.185, Public IP 94.23.25.185,
Game Port 27015
Steam Game Server is VAC Secure
Spawn map (mp_interchange, war) complete.
---
Steam Master Servers found (2). Server will be Internet Server listed.
map rotation is disabled - forcing map_restart.
---
Spawning map: mp_interchange, gametype war
Spawn map (mp_interchange, war) complete.
---

On 9 November 2011 05:59, buster_c...@gmx.net wrote:

 hello,

 but ... what about the no steam logon error? i cant join my hosted
 server? i ask again, its possible atm to host servers? or not yet?

 i would be pleased if valve would give a comment? or someone else. iam not
 sure but yesterday evening there were no german mw3 server online? its a
 bug?

 -peter
 --
 NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie!
 Jetzt informieren: http://www.gmx.net/de/go/freephone

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux