[DJEarthQuake]

Document explaining some findings.
http://grehack.org/files/2013/talks/...rs-grehack.pdf

Thoughts?

[^SmileY]

2013?

[DJEarthQuake]

That was when this was written. For those who do have the time to read all that PDF it suggests there is a bug clear back from Quake that was congential and will never go away because the game is 20 years old and Source was already being worked on as a replacement. It does not have this issue. For those cracker types out there I do have a fail2ban regex just waiting as well as an e-mail to the ISP. Cider block blacklisting and blackholing.

Show me the post that Valve/Steam acknowledges and fixed this? Didn't they just fix clients from using sv_cheats although the server has it set to 0 without privileged access?

Fixed sv_cheats being settable by players in a multiplayer game (sv_cheats is now controlled by the server)

[Solokiller]

Report exploits on Valve's HackerOne: https://hackerone.com/valve

[DJEarthQuake]

Steam did not act on this informaton.

"Valve didn’t worry too much (hey Valve, giving feedback doesn’t hurt...)"

Spanish cert INTECO handled almost everything (thanks guys, you rock!)