Just to re-iterate how pathetically simple this was for Phlos. He already has a database of 28,000 S2 licence names - a long story and he was banned for it - and today we find 28,000 licences online. All he's done is gone through his database and sent LFSW the URL that LFS sends when joining a server to report the driver as being online.
There are a few protocols in place to protect LFSW from this kind of thing, I wont detail them although I have myself figured this out - I just never used it for anything nasty (apart from downloading 1024 skins for free before everyone else could
), I suspect this will delay patch Y whilst Scawen and Victor add a kind of pubstat key to the LFSW system.
In all, a really simple exploit from a small minded individual and the net loosers are us lot who now have to wait longer both for patch Y, and the fixes to protect against the server crasher.
Add to this my own PC dying today and i'm really not having a good day... lol
So he's not a hacker, he's an idiot. He's not even the equal of my the long hair that grows in my right nostril.