9 replies to this topic

[robhol]

It's a fact of life that people will try to bend you over at the slightest opportunity, so how can I prevent malicious exploits? I'm considering starting a server and don't want people to be able to crash or overload it.

A list of common exploits or known crashes would be very nice.

[remiX]

Have the mod that doesn't allow others destory stuff that isn't theirs. So if they try and break the computer, it will respawn.

[Doyle3694]

remiX, you might have forgotten to read OP

[robhol]

remiX, on 31 December 2012 - 12:03 AM, said:

Have the mod that doesn't allow others destory stuff that isn't theirs. So if they try and break the computer, it will respawn.

I was planning to, but that isn't the point. The point is that there are (apparently) exploits that will let someone mess with the server within CC itself, and that's not really something I want to have to deal with.

[remiX]

Oh, lol, woops. I've never heard of these exploits before. I'm now scared of them :s (but are there actually any?)

[Doyle3694]

haha, making a program that writes random characters to a file, with a 1/200 chance of CR, and then a 1/10000 chance for sleep(0). then pcall that from a program, so that when an error is gotten because of file size reached, you increment the name of the file to edit with 1, and then redo the same thing.... Don't know though if that would cause any lag but seems quite malcious...

[Cloudy]

Doyle3694, on 31 December 2012 - 08:18 AM, said:

haha, making a program that writes random characters to a file, with a 1/200 chance of CR, and then a 1/10000 chance for sleep(0). then pcall that from a program, so that when an error is gotten because of file size reached, you increment the name of the file to edit with 1, and then redo the same thing.... Don't know though if that would cause any lag but seems quite malcious...

The file size limit is global, not per file...

[Doyle3694]

oh... thats good. Cloudy and dan being smart coders as always

[ChunLing]

Let's all volunteer tips on writing malicious code! Or post working samples!

Really, if you let people on your server, then they can find a way to crash it. So don't let malicious users on your server. Ban any that somehow get on.

[PixelToast]

the only one that i can think of is rednet spam wich can slow down programs constantly process rednet messages