Hacked by a player with no ID

[thdman1511 4]

Today someone hacked our server and missions, and made our mission unplayable. This is a screenshot that shows what he put on the screen.

https://dl.dropboxusercontent.com/u/81875798/2013-04-24_00001.jpg (121 kB)

Can we prevent this from happening within our missions.

[pawelkpl 29]

My server with domination was attacked last night. I closed server, updated arma 3 alpha to dev mode, deleted: installscript.vdf and reload mission, so far I can play with passworded server.

[clydefrog 3]

Well from the looks of it by discussing BIS_fnc_mp on the forums.

[teacup 2]

Hi,

we're aware of the issue and working on a fix which should prevent "hijacking" a function (like BIS_fnc_MP) for hacking purposes.

Now there's the good news right there.

[Pretentious Hacker Prick] 0 -- 1 [ArmA3]

[Dwarden 1125]

we are working on multiple solutions to these issues (as it's not just one while it seems to be)

[Alo Keen 7]

It makes no sense to allow persistent variables to carry over from one mission to the other

Campaign?

[Mattar_Tharkari 10]

@Pawel That .vdf file is legit, it's part of the install. The simplest cure (and I just tested it on our server) is:

1. all players shutdown Arma3 and restart

2. restart the mission from the server lobby.

It works until another infected player joins so up to you to lock or not.

[Bozo97 1]

does anyone no when this will be fixed, how many days or hours or weeks. I just want to play

[Guest]

Hi,

we're aware of the issue and working on a fix which should prevent "hijacking" a function (like BIS_fnc_MP) for hacking purposes.

does anyone no when this will be fixed, how many days or hours or weeks. I just want to play

Easy answer, when it is ready!

Until than play on passworded servers with your friends or play singleplayer.

[raggamafia 10]

Thanks for the feedback BIS!

Im aware that there are several vectors to abuse these functions, however if this specific issue would be related to execution of BIS_fnc_MP it could help (for some time). It would certainly break missions that use BIS_fnc_MP in a regular, non-abusive way BUT if its not used overall in the mission it could work. Again however, if this remote execution is triggered by a PVEH that listens to BIS_fnc_MP_packet, and since there is no way to remove that PVEH, you could still execute code only by PVing this variable in the "right" way. So you are right, it needs low level checks - until then...

Enjoy

[killzone_kid 1330]

Haha!

[arjay 7]

This sounds familiar

[Lazylemon 10]

so annoying but great to see them working to fix the problem

[rundll.exe 12]

Campaign?

We have a seperate persistent namespace for Campaigns I think. and it would make no sense, since you'd lose your campaign progress on a game restart...

[Predator.v2 10]

Haven't ever thought about it yet, but since even passworded servers aren't safe, is there a way to "hide" an online server from the Gamebrowser and lets you exclusively connect on it via "Join with IP"?

[Hammerballz 10]

Our Solution seems to work as for now. No follower hack executed yet.

[Radioman 6]

This sounds familiar

Oh hey, it does. Lets all point fingers shall we?

[Masharra 10]

im reasonably sure you simply tell your server to not to report to gamespy. Atlereast in a2 i had that option.

[Predator.v2 10]

Our Solution seems to work as for now. No follower hack executed yet.

How about you "share" your "solution"?

[TheHermit 1]

Looks like its time for some friendly locked team coop between friends until this all blows over. Thanks for the info everyone. :)

[Twix 1]

Haven't ever thought about it yet, but since even passworded servers aren't safe, is there a way to "hide" an online server from the Gamebrowser and lets you exclusively connect on it via "Join with IP"?

I suppose you could always remove the IP reporting done to gamespy. Not sure if that would work but seems like it.

You should have a reportingIP= "arma3pc.master.gamespy.com" somewhere in your config file, just comment it and restart the server.

[Mabe 1]

Wow I thought I was the only one having this problem on their server, prtty annoyimg ive restarted etc and still when I load any mission random people join and you start free fallin and get that message

[Lazylemon 10]

Haven't ever thought about it yet, but since even passworded servers aren't safe, is there a way to "hide" an online server from the Gamebrowser and lets you exclusively connect on it via "Join with IP"?

testing now will update if it works

[DnA 5143]

Hi all, the problem of multiplayer being a target of those who wish to ruin the experience for others is certainly not something we are ignoring. It's also far from an easy thing to solve. Just like with other big topics (optimization :confused:) there are no magic bullets. I'll try to expand on the issue and our plans in the next SITREP - but I do not intend to promise specific solutions until they are fully confirmed.

[Hammerballz 10]

Update 1:

Worse Scenario, let´s see what´s going on

Edited April 24, 2013 by Hammerballz