HLDS Amplification Attacks
 

Document explaining some findings.
http://grehack.org/files/2013/talks/...rs-grehack.pdf

Thoughts?

Re: HLDS Amplification Attacks
 

2013?

Re: HLDS Amplification Attacks
 

That was when this was written. For those who do have the time to read all that PDF it suggests there is a bug clear back from Quake that was congential and will never go away because the game is 20 years old and Source was already being worked on as a replacement. It does not have this issue. For those cracker types out there I do have a fail2ban regex just waiting as well as an e-mail to the ISP. Cider block blacklisting and blackholing.

Show me the post that Valve/Steam acknowledges and fixed this? Didn't they just fix clients from using sv_cheats although the server has it set to 0 without privileged access?

Fixed sv_cheats being settable by players in a multiplayer game (sv_cheats is now controlled by the server)

Re: HLDS Amplification Attacks
 

Report exploits on Valve's HackerOne: https://hackerone.com/valve

Re: HLDS Amplification Attacks
 

Steam did not act on this informaton.