Messages

[;]

Also, I believe you are supposed to include a ; at the end of your SQL statements. Although I'm not sure if that's the issue here.

I wonder how else we somehow managed to detect a very dangerous exploit.

When you find a bug in your own software that isn't used by more than 1 guy (meaning there's no other guy to do any harm) you don't go out and brag about it. Because that's equivalent to saying "Don't use our services if you value your safety.".

I know that you're trying to look professional and what not. But you ended up being the opposite of professional. Serious service providers try their best to not let other people know their stuff is vulnerable.

Because where there's a vulnerability there's bound be more. And you just made an open invitation for others to look for them.

SECURITY WARNING
Our security analysts have discovered a vulnerability in our game hosting panel service which allows a user to access other users' scripts. As we take security as our number one priority, we have immediately issued a warning. Since we currently only have one member at the moment, this would not make a difference. We have devised a solution which we'll try to implement as soon as possible. This should not take much time. TS3, web hosting and IRC bouncer services should still be fine. However, we strongly discourage you from uploading sensitive server files until further notice.

Regards,
Flake
Cloudwards founder

That makes your entire post irrelevant.

...at first I thought you were SLC but with a different name :x

Now that I look at it. I do understand why you reached that conclusion.

the text in the image you have specified is irony, a play on the people asking stormeus to fix everything (kind of like Ramirez, do everything in MW2)
clearly you've never excelled past making posts on a vcmp forum, if you had actually played in any community for longer than one day you wouldn't think i'm serious and would know that the personal text is a joke
things that could give it out more is my spelling of 'stormeus' and 'vcmp' in the OP

First. I'm pretty sure you misunderstood the definition of 'excel'. Playing with some of you people is degrading not excelling. And second. I certainly don't have to play with you so that I recognize stupid when I see stupid. Not as long as you're here.

Let's take the hints, shall we? Your topic is about complaining that VC:MP is bugged. Your IQ level is about the average of a monkey. Your spelling of stormeus's name is always wrong. In the first that's "strommeus" and in your personal text that's "STORMUS". Irony or not. Just how many brain cells does it take for one to reach the same conclusion?

listen here jgeyb

first of al stormus good but bad dev. as i said in vcmp 5.0 new feature : no /wep cmds bcz VCMP GUN FREE ZONE .

(http://i.imgur.com/0jvs1QH.jpg)
(this ur face jweb hahahhahhaha)
this picture / image tacked in 18 month 8 days and bug stil BUGGED

BARREL STILL ROLLING TOMMY MANSION and what StilL BUGGEd. Understnd?

U would KnoW IF U played THIS GAME BUt. u are forum whore posting 24/7 script resolution insulting ppl who not know how to script say they stupid arogant monkey !!!!!! fuel script how ? googel translator plz no used plz put go back to liberty unleasched we not need persons like u in vmcp. SLC = GOODER 10000x. He HELPFUL + Good (sorry for insult)

first do c glitch with Stuby then talk to me thx .

You were supposed to prove me wrong not prove me right, dude And FYI, whoever SLC is. I'm pretty sure he's just a noob. Open challenge m*f*er. I can take him all day long. To show you he's just a noob like you.

Your IQ level is about the average of a monkey....

the text in the image you have specified is irony, a play on the people asking stormeus to fix everything (kind of like Ramirez, do everything in MW2)
clearly you've never excelled past making posts on a vcmp forum, if you had actually played in any community for longer than one day you wouldn't think i'm serious and would know that the personal text is a joke
things that could give it out more is my spelling of 'stormeus' and 'vcmp' in the OP

First. I'm pretty sure you misunderstood the definition of 'excel'. Playing with some of you people is degrading not excelling. And second. I certainly don't have to play with you so that I recognize stupid when I see stupid. Not as long as you're here.

Let's take the hints, shall we? Your topic is about complaining that VC:MP is bugged. Your IQ level is about the average of a monkey. Your spelling of stormeus's name is always wrong. In the first that's "strommeus" and in your personal text that's "STORMUS". Irony or not. Just how many brain cells does it take for one to reach the same conclusion?

That's not your content. https://www.youtube.com/user/itsokaytobesmart

Why can't people sometimes just take my word for it. VC:MP development and VC:MP Team are two different things. One can be used to group certain things related to VC:MP but not necessarily VC:MP itself. While the other is the actual project itself.

https://bitbucket.org/vcmpteam/profile/members

making it open-source is going to make things worse.

MTA is living fine.

MTA is not open fully source. They network and important code is kept private. They provide a DLL which you can use to make your own mod. That core DLL deals with networking and basics. The rest is up to your game-mode to handle.

It is a nice concept but it should be clear that MTA is not entirely opensource. And adopting that concept into VC:MP at this point means branching to a 0.5 version.

[NOTE]

No. The server sends far more data at smaller intervals.

Um, well, he's sending strings every 1sec, to every player. Imagine 50 players playing at once for 5 or more hours. I'm pretty sure their home-hosted server's ISP will block them.

Nope. Let's say that you have a string of about 32 characters. Since VCMP is ASCII, that means 32 bytes. Let's do some math:

32 (bytes) * 100 (players) = 3200 bytes sent each second

60 (seconds) * 60 (minutes) = 3600 seconds in a hour

3200 * 3600 = 11,520,000 bytes / hour. Which translates to about 10.986328125 megabytes. meh. let's just round that to 11 megs. And that's how much the server sends to all players together not individually. Individually? That's about 112.5 kilobytes / hour. I'm pretty sure you used more to load this page in a second.

Should we count for bigger strings?

64 = 21.97265625 megabytes / hour.
128 = 43.9453125 megabytes / hour.
256 = 87.890625 megabytes / hour.
512 = 175.78125 megabytes / hour.
1024 = 351.5625 megabytes / hour.
2048 = 703.125 megabytes / hour.
4096 = 1406.25 megabytes / hour. This is the maximum buffer limit which you can send to a client at once.


NOTE: With each string comes a 2 byte overhead for the string size. I've omitted that for simplicity and because it's insignificant. Also, each packet hash it's own overhead. But that applies to internal packets as well. So it's not some special case.


Like I said. The game servers are sending data at smaller intervals. Large chunks of data are not an issue for a server. The small and very frequent packets are going to start making a difference in lag.

If you were to send these every 20-30 milliseconds (or each frame). Yeah, then you'd have an issue.

That's not the VC:MP development team

No. The server sends far more data at smaller intervals.

Open-sourcing is definitely not the best decision for this community. But I'm curious how would you react if the game actually becomes open source and a playground for cheaters and trouble-makers. Because when you open source you also open to a whole new world of cheating.

How can I take you seriously with that sh!t man? As if that's something which can be fixed by a developer. Clearly you've never excelled past the pressing the power button on your computer and clicking on a desktop icon.

Code Select Expand

function SearchAndReplace(str, search, replace) {
    local li = 0, ci = str.find(search, li), res = "";
    while (ci != null) {
        if (ci > 0) {
            res += str.slice(li, ci);
            res += replace;
        } else res += replace;
        li = ci + search.len(), ci = str.find(search, li);
    }
    if (str.len() > 0) res += str.slice(li);
    return res;
}

Code Select Expand

local r = SearchAndReplace("and he said \"what?\" before leaving", "\"", "_");
print(r);

Reinstall window bro.

Nice bump.