Reminds me the great urban-rural meaning video

(Attached file)

Hey Bo, something like that ?

YeeHaa!

Quote from muhaa :

2 days the poc code was released 1 week later if not longer.

Now the facts:

30th July 2007, 10:50 UTC

Quote from muhaa :

I wasn't sure if it was exploitable i needed to do more testing on this which i confirmed my suspicions that it is [...]
but ill send them [the devs] an email i wasn't going to bother them [the devs] till i new that it was exploitable which i know now.

The MPR exploit was posted on the 1st of August:

Quote :

I found a local buffer over flow where im able to execute shell code on the user's computer,[...]We are then able to do a jmp or call esp into our shellcode.If you want to See the debug information look at the first poc released.!!
Compile with dev c++ 4.9.9.2
[...]
printf("\n *************************************************");
printf("\n * Special thanks to Str0ke *");
printf("\n *************************************************");
printf("\n * Shout's ~ str0ke ~ c0ntex ~ marsu ~v9@fakehalo*");
printf("\n * Date : August 1 2007 *");
printf("\n *************************************************");
printf("\n * Creating .Mpr replay File please wait !! *");
printf("\n *************************************************");
[...]
printf( "[1].Bind to port shell code port 4444\n");
printf( "[2].Execute calc.exe shell code\n");
printf( "[3].Add user shell code PASS=w00t USER=w00t\n");
printf( "[4].Shut down user's computer\n");
printf( "[5].To exit and cancel\n" );
printf( "Pick your shell code: " );
[...]
// m.....m.com [2007-08-01]

That's two days.

Quote from muhaa :

We done the right thing just because we released the poc codes and told the developer's they better try and be quick about it because we wanted to release them.

Funny how you change your mind so quickly...
Well, finally it's not funny.
You just don't remember your own words:

Quote from muhaa :

this is safe with me untill it's patched i wont release it till then after patch then i will becouse i can still release the poc after the exploit has been patched.

Quote from muhaa :

Like i've said im not going into detail's about this un-till there is a patch released for it.

LFS usernames with the german umlaut ü are truncated in the progress window although they are displayed fine in the host window.

See attachements.

I've noticed that for the ü only but maybe it doesn't work either for other accentuated characters and/or for other special characters like the scandinavian ǿ or the latin ç ?

Quote from Becky Rose :

Firslty, he's watching this thread

No, the screenshot was made at about 18:05 CET = 5:05pm BST = 16:05 UTC/GMT, about 40 minutes before this thread has been started.

In fact I believe it was the very first attempt the hacker did before creating the other server, a kind of test as a POC...

So it started like that (see attached pic) at about 18:05 CET.

I thought it was Becky testing some stuff for the devs so I didn't pay much attention, but I was surprised enough by the version letter to make a screenshot.

Quote from Aquilifer :

I've had my thoughts who is behind this, but just saw something in black and white...

Notice the server name, player count and version number

Maybe that's the reason why LFSW is going nuts at the moment, showing only few servers online while there are many up and running and populated

I couldn't join it anyway, maybe because I don't allow connection on unusual ports.

Edit:
Bah, I've read these threads too late:
http://www.lfsforum.net/showthread.php?t=30262
http://www.lfsforum.net/showthread.php?t=30263

Last edited by Lotesdelere, Mon, 27 Aug 2007 17:10.

Quote from ajp71 :

If you go into the sound editor (shift+A) you can adjust the engine volume.

No you can't adjust the whole sound volume.
And if you lower all sliders it doesn't sound the same anymore.

Quote from The General Lee :

Maybe we should have some sort of engine volume leveler

Yep, I agree

A master volume for each engine sound would be nice.

Because we may find a sound we like when we fiddle with the settings but sometimes it's too much on the clipping limit or too low.
And moving all of the sliders up or down destroys the balance, thus the sound, so I think we need a master volume for each sound.

Happened at least three times yesterday afternoon.

Quote from baSh0r :

i install klite codec pack then i'll try again. what version of VLC do you have?

edit: codec pack installed. and again just crappy sound ! what the hell...

VLC uses its own codecs so installing a codec pack is useless.

Assuming you are running Windows XP, close VLC and delete the VLC preferences folder:
C:\Documents and Settings\<your username here>\Application Data\VLC

Delete this whole VLC folder and try again.

Works fine here with VLC v0.9.0 nightly build
You may want to try this direct URL with both VLC and Winamp:
http://main.pecstv.hu:6666/;stream.nsv

I've seen an advert about Colin McRae DiRT but I couldn't understand a single word, I believe the language used is Hungarian/Magyar ?

Quote from Dillyracer :

I reported Tulio trough the Mail Us system. And I got a mail back with " thanks for letting us know ! "

Don't worry, I'm sure the devs are pretty well aware of what is going on about server crashers and other cheaters. It's now just a matter of time before we'll get a fix.

Quote from N I K I :

Victor or some other admin, why don't you delete it already?

Yes, these WR must be removed ASAP.

Quote from wsinda :

Well... According to LFSW the cheater in question is only 12 years old. Let's say he needs to grow up some more.

I can see every day on our servers very young drivers learning and trying to do their best.
I believe it's not about age but about state of mind.


No mercy for cheaters.
At all. Never.

I believe since patch X there are some messages missing in the replays such as:
- some system messages (eg kick/ban votes)
- messages sent by admins (/msg)
- custom RCM messages (sent by admins or insim apps)

I have replays from patch U+ where I can see all of the above messages.
We can now hear the sounds of some of the messages but they are not shown at all.

These messages are quite usefull in some cases (for admins and for league races) and I'd wish to be able to see them all.

Quote from r4ptor :

Found the colored markers on LFS Database:
http://www.lfs-database.com/in ... onid=93&p13_fileid=16

Thanks a lot for the info

Suggestion: your WMV videos are using M$ VC-1 codec so they can't be played on older PC's or on PC's not having WMP10-11 installed (you need at least WMP 9 + the VC-1 codec if you know where to find it).
So maybe you should stick to WMV9 codec for best compatibility

Speed hack cheater caught this morning on ConeDodgers 1:
345 km/h on the main straight with the FZR.

You can clearly hear when he activates the cheat.
Screen name Tulio, LFS username Funnybone2.
Reported to Barricade, of course.

Replay attached.

I believe since patch X there are some messages missing in the replays such as:
- some system messages (eg kick/ban votes)
- messages sent by admins (/msg)
- custom RCM messages (sent by admins or insim apps)

I have replays from patch U+ where I can see all of the above messages.
So is it now done on purpose ?
Or am I missing any setting ?

These messages are quite usefull in some cases and I'd wish to be able to see them all.

Good job R4ptor, nice video

BTW where did you get the coloured distance banners (I mean the 50m, 100, 150m coloured panels) ?

Suggestion for the Oval round:

Because of the length of the track, the speed involved and the LFS queue slowness maybe you should allow the incoming driver to join the server one lap before the team car is on its in-lap ?

Quote from srdsprinter :

How pray-tell can your teamates "try to avoid" internet/pc related disconnects?

You can put as many chances as possible on your side
Of course an ISP / power / whatever failure can always happen but at least you know it's not your fault.

It worked, some of our drivers who are used to have a 'fragile' connection didn't have any trouble all evening/night long

Quote from DeadWolfBones :

reckless driving that doesn't result in damage

There was no damage because Subon braked and steered to avoid contact. Not because Scipy was carefull enough, see the difference ?
(Crappy screenshots (with no AA/AF and low res textures because it's faster to forward the replays at 8-16X) are attached)

Quote from DeadWolfBones :

This, however, is just down to the nature of LFS disconnects/rejoins--not a lot to be done about it. I'm not sure off the top of my head how long it took for Scipy to reconnect once Mogster lagged out, but it was surely close to the amount of time it would have taken him to complete his pitstop and get rolling (as evidenced by the fact that the CD car ended up exiting the pits at about the same time as the Cyber car, despite coming in in 2nd place).

FYI it took about 34 seconds to Cyber from the moment Mogster stopped to the pits to the moment Scipy exited the garage. It took about 29 seconds to CD and Core from the moment they stopped to the pits to the moment they restarted.
So we can assume Cyber lost about 5 seconds there but gained 4 seconds by non rolling through the pitlane thus should clearly have exited behind Subon and very close to Forbin.

To me rule #15 does make sense as it is. The driver who lost connection must be the one who reconnects and keep on driving for the team. Losing connection can be assimilated as a mechanical failure (eg suspension damage or tyres popped) so it's slowing down the car and you have to drive to the pits. If you can't do that, in our case reconnect, you're out of the race. This is the spirit of endurance as far as I understand it.
Because of rule #15 I have given instructions to my team to be sure to avoid any PC/connection troubles because I was sure that the driver losing his connection had to be the one who must reconnect and rejoin the track, which is logical to me.

Don't misunderstand me, I'm not denying your ruling but the rules about disconnections have to be rewritten for the future and especially for the oval where the track is short and the pitlane quite long.
The MoE rules about disconnections should be taken as an example IMO. If you loose connection and reconnect in the same lap you have lost one lap.

I have to admit that I'm quite disappointed to see that the people not having PC troubles nor doing mistakes are paying the price of other teams troubles and mistakes. This can't stand like that. The rulings don't match with the written rules.
However I do know what organizing a league is, what dealing with the objections is, be sure that we appreciate your work and we enjoyed this race despite of all the troubles of all kind which occured

We're still waiting for a ruling about one of the points of our objection #1:
The dangerous exit from the garage, ignoring the drivers rolling on the pitlane who have the right of way.
Subon had to brake and to steer to the right to avoid contact.

Not to mention that when Mogster pitted he stopped at the beginning of the pitlane, I believe in the 5th box. But when Scipy joined the track he spawned in the 2nd garage closest to the pit exit line.
Because of this behaviour Cyber saved the time rolling on the pitlane, about 8-9 seconds thus should have exited the pits behind Subon and Forbin.

Plus I see nothing in the rules allowing a driver change while the previous driver is not on track anymore. So it's not a driver change at all but a new car entering the track.

Quote :

15) If a driver is disconnected, that driver may rejoin the race. After the race, the marshals will calculate the team's total laps and place them accordingly in the standings.

Last edited by Lotesdelere, Tue, 21 Aug 2007 16:13.