Skip to content
Snippets Groups Projects

Fix an exploit where players could steal the final hash of a login

Merged Fix an exploit where players could steal the final hash of a login
netcode-exploits into next
Merged James R. requested to merge netcode-exploits into next
  1. Aug 17, 2019
  3. Jul 15, 2019
    • James R.'s avatar
      Don't send login final hashes to everyone · 91502f14
      James R. authored 
      Someone thought it was a good fucking idea to make logins NetXCmds. NetXCmds
are sent to everyone however. Thankfully logins are two passes. And the second
pass uses a salt based on the playernum. Therefore, in order to actually make
use of the final hash, you'd have to be the same playernum as who originally
sent it. Still a stupid exploit.

P.S. The netcode is LOL XD by VincyTM -Telos
      91502f14