Liberty Unleashed
Liberty Unleashed => Liberty Unleashed Chat => Topic started by: neocortex on March 27, 2014, 07:39:54 pm
-
is whole lu hacked?
every server is locked and there read
RELEASE THE UPTADE
gamemode: before lu will selfdestruck
erh... seriosly?
-
is whole lu hacked?
every server is locked and there read
RELEASE THE UPTADE
gamemode: before lu will selfdestruck
erh... seriosly?
s19... ( sasha19323 ) ...
-
Where's VRocker when u need him? Somebody save LU...
I tried to connect to the [HUN] server but the admin there keeps kicking me for no reason.
-
I noticed that all the servers that this had on it, were unlocked to begin with.
LU itself wasn't hacked. s19 has the ability to inject custom client scripts which means he can also use CallServerFunc.
With CallServerFunc, he can pretty much do anything on the server side as well.r
-
Wow thats a great way to get someone to release an update, lock every servers and rename all servers to "RELEASE THE UPDATE". Beautiful...
I really want this update too but really, this is an extremely bad way to rush it. Ironically the person who did this will most likely be permabanned from seeing any server at all after the update is released.
-
Could please someone from beta testers or developers confirm that the patch for this security breach is being prepared? I think it is too bad to leave LU as it is, when every single hacker can ruin all the servers.
-
I'm not sure if he completely replaces the server's client scripts or just injects his own alongside them.
If you DO have client scripts on your server, I don't know a complete script-side fix, but the only thing I can recommend until a patch is released, is to replace the CallServerFunc() function with something else. Make it a secret word, and compile your client scripts so its not obvious. You will need to replace every CallServerFunc() with the new function.
Here's how you do it. Replace SecretFunction with your OWN word:
SecretFunction <- CallServerFunc;
CallServerFunc <- null;
Then, to call a server function, just use the new function.
This is not a completely secure fix. If the hacker figures it out, he could still obtain your secret function name.
For those who do NOT have client scripts, he can still inject his own. There is a scriptside fix for these people that I know will work since I got to test it with s19 a while back. The fix is simple, but you cannot use any clientside function or access anything clientside via any script (or vice versa) once this is applied.
Here is the fix:
function onPlayerConnect( player )
{
CallClientFunc( player , null , "setroottable" , null );
}
-
Most servers are release the update & locked again :(
I really hope this isnt going to finish LU and make everyone leave..
-
*sigh* The logic of some people. Sure LU has a bug but we're far too busy to fix anything with it. So instead of waiting until one of us developers have any time to fix it properly people would rather just drive the very small amount of players LU has away. Well done, you win the slow clap award of the week.
Anyway, too busy to update and seeing how immature people are i don't see why i should release it for somebody being a dick. If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
-
*sigh* The logic of some people. Sure LU has a bug but we're far too busy to fix anything with it. So instead of waiting until one of us developers have any time to fix it properly people would rather just drive the very small amount of players LU has away. Well done, you win the slow clap award of the week.
Anyway, too busy to update and seeing how immature people are i don't see why i should release it for somebody being a dick. If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
Thats a shame :( I really like LU and made a few game modes for it, but oh well. Hopefully this person will stop or a dev will fix the bug.
-
If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
Thats a shame :( I really like LU and made a few game modes for it, but oh well. Hopefully this person will stop or a dev will fix the bug.
I stop so. Now is no reason to continue it. LU is dead, if main developer don't care about it :\
-
If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
Thats a shame :( I really like LU and made a few game modes for it, but oh well. Hopefully this person will stop or a dev will fix the bug.
I stop so. Now is no reason to continue it. LU is dead, if main developer don't care about it :\
Its very sad honestly, its a great mod. But hey, I wouldnt call it dead at all. Devs are still working on updates just not frequently. I would assume its due to school/jobs/personal stuff or life in general.
Oh and not only that, there are like 20 people online LU right now. Not that bad consider its a mod for a game released in 2001...
Also dude, I forgive u but plz dont attack server again :( Some of my favorite server was locked.
-
If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
Thats a shame :( I really like LU and made a few game modes for it, but oh well. Hopefully this person will stop or a dev will fix the bug.
I stop so. Now is no reason to continue it. LU is dead, if main developer don't care about it :\
Its very sad honestly, its a great mod. But hey, I wouldnt call it dead at all. Devs are still working on updates just not frequently. I would assume its due to school/jobs/personal stuff or life in general.
Oh and not only that, there are like 20 people online LU right now. Not that bad consider its a mod for a game released in 2001...
Also dude, I forgive u but plz dont attack server again :( Some of my favorite server was locked.
The mod was released in 2011 ( not beta ), and about the players, after s19 was started hacking, the spanish players ( 10-15 in total... ) has left of LU. And, I have a question:
Why hack? If you hack ( or with trainers ) the servers, the players leave LU, and less players. It's stupid only hack for fuck all players and kill LU.
-
If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
Thats a shame :( I really like LU and made a few game modes for it, but oh well. Hopefully this person will stop or a dev will fix the bug.
I stop so. Now is no reason to continue it. LU is dead, if main developer don't care about it :\
Its very sad honestly, its a great mod. But hey, I wouldnt call it dead at all. Devs are still working on updates just not frequently. I would assume its due to school/jobs/personal stuff or life in general.
Oh and not only that, there are like 20 people online LU right now. Not that bad consider its a mod for a game released in 2001...
Also dude, I forgive u but plz dont attack server again :( Some of my favorite server was locked.
The mod was released in 2011 ( not beta ), and about the players, after s19 was started hacking, the spanish players ( 10-15 in total... ) has left of LU. And, I have a question:
Why hack? If you hack ( or with trainers ) the servers, the players leave LU, and less players. It's stupid only hack for fuck all players and kill LU.
And YOU are telling me it? Player, which use any chance to hack? Huh
-
This project mod is dead very long time.
-
LU WAS NOT HACKED
The attitude of the community, is what will kill the mod. Not some two bit "hacker" who found a client script exploit.
I don't know how far off the update (or a patch) really is, and quite frankly, I don't care. It will come when it does ... but until it does, why not just do with what we have?
I have posted a (temporary) fix in this very topic. I understand that it sacrifices the ability to use client scripts for the time being, but I would rather be able to play on a server that doesn't have client scripts, then to not be able to play on any at all.
LU is an epic mod that breathes new life into an old (yet classic) game. Those who are quitting at the first sign of trouble, obviously have no faith.
Interesting question. Only some of you are going to understand its reference to this situation:
If you were about to be hit by a car next to a cliff, would you rather just be hit by the car and both of you fall off the edge, or duck out of the way and let the car fall while you live?
-
*sigh* The logic of some people. Sure LU has a bug but we're far too busy to fix anything with it. So instead of waiting until one of us developers have any time to fix it properly people would rather just drive the very small amount of players LU has away. Well done, you win the slow clap award of the week.
Anyway, too busy to update and seeing how immature people are i don't see why i should release it for somebody being a dick. If this kills LU then so be it, i really don't care. If one of the other developers wants to fix it and update then they can but I won't be.
Make it open source if you and all devs don't care about this mod, so community could continue your hard work and could get a chance to grow up. You're all busy, so I'm wondering why the hell LU devs has joined the VCMP devs team? Well, probably to do nothing and code 0.4 for the next 5 years, am I right? It looks really hypocritical...as all long waited "uber stable" updates which doesn't exist.
And sorry VR, but the update you should aim for the rest of players who still want to play this rather than "for somebody being a dick". "*sigh* The logic of some people..." Meh, fuk it, I forgot that you don't care about it more than I.
-
Make it open source if you and all devs don't care about this mod, so community could continue your hard work and could get a chance to grow up. You're all busy, so I'm wondering why the hell LU devs has joined the VCMP devs team? Well, probably to do nothing and code 0.4 for the next 5 years, am I right? It looks really hypocritical...as all long waited "uber stable" updates which doesn't exist.
And sorry VR, but the update you should aim for the rest of players who still want to play this rather than "for somebody being a dick". "*sigh* The logic of some people..." Meh, fuk it, I forgot that you don't care about it more than I.
Open sourcing the mod wouldn't help anything. For starters the code is not in a very maintainable state plus how many people who are interested in LU are able to code or reverse engineer? That and if it was open sourced you'd just have a load of different, custom versions of LU knocking around or badly made clones.
As for joining up with VCMP, at the time some of us had time to work on either LU or VCMP but lately none of us do. We have got lives away from the internet you know, we don't earn anything from LU or VCMP so they remain as a hobby so other things take priority.
And yes the update should be for the good of everyone and it would be if anybody had the time to finish it. It probably doesn't help that the code in the current state has lots of unfinished things in which doesn't make much sense to anybody other than me at the moment. My point was that exploiting a bug to try and 'force our hand' is the wrong way about things and if anything has given us less incentive to look into finishing it.
-
Make it open source if you and all devs don't care about this mod, so community could continue your hard work and could get a chance to grow up. You're all busy, so I'm wondering why the hell LU devs has joined the VCMP devs team? Well, probably to do nothing and code 0.4 for the next 5 years, am I right? It looks really hypocritical...as all long waited "uber stable" updates which doesn't exist.
And sorry VR, but the update you should aim for the rest of players who still want to play this rather than "for somebody being a dick". "*sigh* The logic of some people..." Meh, fuk it, I forgot that you don't care about it more than I.
Open sourcing the mod wouldn't help anything. For starters the code is not in a very maintainable state plus how many people who are interested in LU are able to code or reverse engineer? That and if it was open sourced you'd just have a load of different, custom versions of LU knocking around or badly made clones.
As for joining up with VCMP, at the time some of us had time to work on either LU or VCMP but lately none of us do. We have got lives away from the internet you know, we don't earn anything from LU or VCMP so they remain as a hobby so other things take priority.
And yes the update should be for the good of everyone and it would be if anybody had the time to finish it. It probably doesn't help that the code in the current state has lots of unfinished things in which doesn't make much sense to anybody other than me at the moment. My point was that exploiting a bug to try and 'force our hand' is the wrong way about things and if anything has given us less incentive to look into finishing it.
You don't care if exploit will kill LU, but you care about clones and custom versions, I don't get it. *sigh* The logic of some people...
Well managed open sourcing is still better way than waiting for your updates.
(http://www.flixya.com/files-photo/M/u/s/Muskaanz-1900753.jpg)
-
The exploit isn't gonna kill LU ... Your reaction to it is what will.
Now, venting time ... Sorry if I break any forum rules but this topic is getting ridiculous.
I have posted a scriptable fix in this topic (twice). If server owners want to continue to operate with the exploit available, thats their fault and it shows how obviously retarded they are. We don't need the update to keep going, so stop pushing it because it's getting annoying. The update will be released when its ready.
Stoku ... If you don't like how LU operates, then get lost. If VRocker decides to open source the project, then it will happen. If he doesn't, don't fucking cry. Stop explaining the pros and cons because I'm pretty damn sure he already knows what they are.
-
Problem isn't just this exploit. From 0.1.0.12 to 0.1.0.14 updates have been accumulated many bugs, crashes etc. Bugs count just grows up. I guess here is some people, who can help LU and know C++ and reverse engineering.
-
Stoku ... If you don't like how LU operates, then get lost. If VRocker decides to open source the project, then it will happen. If he doesn't, don't fucking cry. Stop explaining the pros and cons because I'm pretty damn sure he already knows what they are.
It was only my opinion, it's allowed in XXI. So...who cries? :)
What about CRCing loaded scripts or do kind of hashing?
-
What about CRCing loaded scripts or do kind of hashing?
It already have been added in .14 update, but it's easy to come over.
-
It seems this thread has turned into a gigantic flame war.... The ironic thing is, this exploit isnt going to kill LU. Only few people at the moment knows how to perform the bug. Not only that this bug is easy to fix, unless you use client scripts, really... So no. LU isnt screwed/dead because of this exploit because of how ridiculously easy it is to fix... A fix has been posted on the thread. Until the update comes out just dont use client scripts on ur servers :) Easy simple and good! ;D
-
(http://i.imgur.com/axyrOZH.jpg)
-
You fail, the lammer can exploit without client scripts.
You fail too ... The fix disables any clientside script ability, rendering his exploit useless.
-
SecretFunction <- CallServerFunc;
CallServerFunc <- null;
function onPlayerConnect( player )
{
CallClientFunc( player , null , "setroottable" , null );
}
I also can change setroottable and setconsttable functions, what I already did.
-
Yes, the setroottable functions (can) be changed. I have taught you well.
However, unless you have found a different method for your exploit, then you won't have the ability to change it, since it doesn't technically exist once nulled out.
-
You fail, the lammer can exploit without client scripts.
You fail too ... The fix disables any clientside script ability, rendering his exploit useless.
Nope. Your fix sets table on connect, but server sets it on join, so client scripts will work as well.
-
Sasha isnt the bad one. The only one thing he wanted - is simple to have a LU update. But yes, the method he used is a bit awful, and i don't support such methods.
But, after all, he want to cooperate with LU devs and to help to fix this before any other guy figure out how to use this "hack".
As for the players that gone: Thijn have web stats for LU activity. Last time i watched this stats, LU had about 16 players at the same time.
Still need more players? The answer is here:
http://forum.liberty-unleashed.co.uk/index.php/topic,1832.0.html (http://forum.liberty-unleashed.co.uk/index.php/topic,1832.0.html)
-
The attitude of those here is just sickening. Instead of trying to legitimately help out the mod and work towards bringing more players here so the Developers give it the attention it needs, I see nothing but people *****ing and complaining about how one idiot did something incredibly basic and known to the modding world for years. Remember people...injecting things is not uncommon. That is how most of the GTA multiplayer mods hook into the games...
If you people want the issue fixed, I challenge you. Double the player count of the overall mod. Release more servers despite the attacks. Ban any idiots who wish to cause harm to your servers, and that of any others. End server wars and work together. Show the world how strong this community is, and I guarantee you that it will motivate the Developers to release your updates faster than ever before.
If you do not wish to take part in this challenge, then I suggest you give up now...for someone who does nothing but leech off of others, without even so much as wanting to give hope, does not belong in a place where fun memories and friendship rules all.
-
LU is Hacked ? You lie ! The Servers works ! Just C.R.C $TREET$ is out by Kewun ; idk why. !
-
LU is Hacked ? You lie ! The Servers works ! Just C.R.C $TREET$ is out by Kewun ; idk why. !
Yes you do.
-
I'll never understand why you would deface servers en masse to convince developers to release an update. If anything, it shows hilarious impatience and actually gives us even less of a motivation.
When the VC:MP forum was defaced and wiped and the beta was leaked, it became a huge waste of our time to investigate and resolve. Large amounts of resources, like scripts and tutorials and archives of great community works, were erased, and because the forum hadn't been set up to backup the database regularly, all of this information is gone forever. Because someone wanted to get us to release 0.4 earlier.
So I kindly ask, don't freaking vandalize the community to get us to help the community. VRocker's responses provide a grand amount of insight as to why; I figured I'd share my own two cents.
As for this exploit in particular, I'd say there's a pretty easy solution, which might also add some extra functionality: disable CallServerFunc entirely. Replace it with a function like SendServerMessage which sends the server a certain message, determined by the scripter, which triggers a server-side callback onClientServerMessage. Allow the server to determine what functions to call based on the message.
This would disable arbitrary server-side code execution on the client.
-
Open sourcing the mod wouldn't help anything. For starters the code is not in a very maintainable state plus how many people who are interested in LU are able to code or reverse engineer? That and if it was open sourced you'd just have a load of different, custom versions of LU knocking around or badly made clones.
As for joining up with VCMP, at the time some of us had time to work on either LU or VCMP but lately none of us do. We have got lives away from the internet you know, we don't earn anything from LU or VCMP so they remain as a hobby so other things take priority.
And yes the update should be for the good of everyone and it would be if anybody had the time to finish it. It probably doesn't help that the code in the current state has lots of unfinished things in which doesn't make much sense to anybody other than me at the moment. My point was that exploiting a bug to try and 'force our hand' is the wrong way about things and if anything has given us less incentive to look into finishing it.
So... i don't get it... ???
Will you continue enjoying your hobby or you completly tired of it... or you have any other reasons to gave up all your progress?
Because "no time" is never a reason, such as things like "DiKhe@d players" (and it's a... kinda shame to show them any serios attention - because, you know, it's pointless... all people have theyr own opinion based on theyr IQ, so... i think you get what i am about) or some other people showing no respect.
"And remember... respect is everything"
1st of it all you doing this or that for yourself, and only 2nd you do it for someone... because it's your hobby - not someones (but if you really want, you can do it for someone in 1st line, so this will be one more reason to do it :D). From that you and other people, what like this mod - can just ban other disrespectfull people, if they disturb or interrupt developing process or fun of a game on any of servers. Cause "lu hack" not the reason either - you can develop anti hack system (don't say you can't, cause nothing are impossible).
Too small amount of people are playing in LU? (Yes, not that mutch like in SAMP, or World Of Warcraft either...) but this is not the reason too, don't this? I don't think, what you expect much from LU in a begining...
I develop a GTAIII club from 01.08.2008 in social site (like facebook, with wiki), i never expect much from it, i'm enjoying the process and result, cause this is just a hobby, not a step before something bigger... i got lazy sometimes, much times i'm give up, or choosing other interesting things in life... but i'm never stop doing this, cuz 1st - i like this, 2nd i need hobby and this one is best for me, and 3rd i'm really want to finish this cuz i know, no one do it better, than me - thats why i'm trying do it even better than i can do it myself)
I don't know why you started develop this mod, but broke up such a progress... nuh, you doesn't stop this, don't you? Cuz if you do - you've already been writed the post about you choose something better for youreself in life, and choosing something else better is good for any life :-)
So... for yourself you can do anything you want, what you think is better. But for all other people, what like gta3 or lu and wait for any news about it... please, write what you going to do with it on the 1st page. Because, maybe you don't know, but when you release LU - for some people, for what gta3 is not just a game, or even not just a significant memories - for this people you gave great gift and hope for something, what fans of this game dream about many years before from 2001... and... yeah, this is just a game after all. But... this is just a life. You choose, how you will live it, and for someone of us this game can be somethig such strong... as a part of a soul. Like a refuge (is it right word?) from a hard past times... place, where we can calm down, rest and hide for a while... this place is never changes... unlike us :-)
Too many words? I can continue... but it anough i think. Anything you do - take effect on a people around you, like it or not, but's this is true.
And after all, this is just one of my views of this theme. Thank you and goodluck in anything :)
-
(http://s28.postimg.org/66bm6lgx9/Dibujo.png)
A kid of 13 years old found a method... (me)
Edit: More, more and more...
(http://s21.postimg.org/6w6hhjz2v/Dibujo.png)
-
What is the point in doing this?
You should be banned from the LU community permanently.
-
([url]http://s28.postimg.org/66bm6lgx9/Dibujo.png[/url])
A kid of 13 years old found a method... (me)
Edit: More, more and more...
([url]http://s21.postimg.org/6w6hhjz2v/Dibujo.png[/url])
Congratz, you achieved nothing.
In the next version, your exploit will not work anymore. Happy?
-
([url]http://s28.postimg.org/66bm6lgx9/Dibujo.png[/url])
A kid of 13 years old found a method... (me)
Edit: More, more and more...
([url]http://s21.postimg.org/6w6hhjz2v/Dibujo.png[/url])
Congratz, you achieved nothing.
In the next version, your exploit will not work anymore. Happy?
k. I can find anothers methods.
-
You just don't get it. You can try to find exploits all you want, but in the end you gotta realize that you are making LU stronger with each one.
You find a bug, the LU team fixes it, then you find another, and it gets fixed too. Can you guess where this is headed? Eventually your're gonna be out of options and then what will you do?
Also, I am seriously laughing at the fact that you "found" the client exploit several months after it was already discovered AND certain details were already provided to you about it.
You wouldn't know how to hack even if you had an children's version instruction manual with pictures and a kindergarten teacher reading it to you ... Does the Billy Madison story of "The little puppy who lost his way" ring a bell?
-
([url]http://s28.postimg.org/66bm6lgx9/Dibujo.png[/url])
A kid of 13 years old found a method... (me)
Edit: More, more and more...
([url]http://s21.postimg.org/6w6hhjz2v/Dibujo.png[/url])
Congratz, you achieved nothing.
In the next version, your exploit will not work anymore. Happy?
k. I can find anothers methods.
Try acting your age.