There is now another exploit, once again... There is a way to have a fake nickname (not shown on the connection list as that, nor the nickname change is put through the insim protocol)

It just ends up as hundreds of "updated controls" (with what appears to be random nicknames)

So what nickname must you have to be fake?

if I was to say "hello" in the server, it would not show the same nickname, as is in the connections list.

Some logs.... as it just happened again.

Quote :

Dec 04 09:21:18 NSB Dunsay^L made a pit stop
Dec 04 09:21:20 Got master packet
Dec 04 09:21:22 [CR]Pieter^L left the pits (XFG)
Dec 04 09:21:24 NSB SpraysataN^L took over from NSB Dunsay
Dec 04 09:21:24 /msg | NSB SpraysataN safely rented from NSB Dunsay
Dec 04 09:21:24 | NSB SpraysataN safely rented from NSB Dunsay
Dec 04 09:21:27 B^L updated controls
Dec 04 09:21:28 C^L updated controls
Dec 04 09:21:28 D^L updated controls
Dec 04 09:21:28 F^L updated controls
Dec 04 09:21:28 G^L updated controls
Dec 04 09:21:29 I^L updated controls
Dec 04 09:21:29 K^L updated controls
Dec 04 09:21:29 E^L left the pits (RB4)
Dec 04 09:21:29 L^L updated controls
Dec 04 09:21:29 M^L updated controls
Dec 04 09:21:29 H^L left the pits (UF1)
Dec 04 09:21:30 J^L left the pits (UFR)
Dec 04 09:21:32 [LTC] Subject : ^LNOOO
Dec 04 09:21:39 ^JšššššReBeL : ^Lnoooo
Dec 04 09:21:39 MOO : ^Lits not me this time
Dec 04 09:21:42 [LTC] Subject : ^LNOT THE INSIM THING AGAIN
Dec 04 09:21:43 [LTC] Krammeh : ^L!bootall

Also, when it happened, I was in spectator mode... and for some reason it stuck me in the car that I last used (UFR), although accroding to the logs, someone caled L joined the track in a UFR.... which was not my nickname at the time.

This is caused by sending the "join" packet with a spoofed index.

The server does not check to make sure the index of the connection is the same as the connection index in the packet and uses the connection index in the packet.

Quote from Krammeh :

if I was to say "hello" in the server, it would not show the same nickname, as is in the connections list.

happened to me in Normal Z... change of names, incar i have other and in the connection list another too

I will add a fix to my Z3 patch later.