37
38

Valve doesn't want to fix exploitsBug (self.tf2)

gir489 が 投稿

My name's Robert "gir489" Blody. You may know me as the curator of the DarkStorm project. Over the years I have amassed several exploits against the Source engine, through nefarious deeds of cheating. Recently (I say recently, considering the time length I've been cheating on TF2) Tony "Drunken F00l" Paloma reached out to me to help him patch certain exploits against the TF2's shitty Source engine. I've sent to him over 35 exploits. And only 5 have been patched. Of those 5, 3 are ressurectable through various methods.

The following was an ultimatium e-mail I sent to Tony April 4th, 2015.

Look man, I started sending exploits to valve in hopes of seeing them patched. So far, about half of the exploits I sent to you actually got patched. The half that did, some of them can be resurrected through various means, like removing the heavy slow state, infinite uber charge and name steal.

If you want me to continue to keep sending you guys exploits, I'm going to need one of the following:

1: You actually start patching the exploits I send you.

2: I get my original account unVAC'd

3: I get my scorching drill back

4: You fix getting kicked not refunding a duel.

And I don't want to hear how you can't unban my account, you got your old account unVAC'd because you got a job at Valve, and you actually fucking cheated on that account. So don't give me that crap.

That's my ultimatum. If neither of those options are OK with Valve, then consider this my last communication with you.

I figured the "community" would like to know about this, considering I've sent, along with others, ways to fix the pCommand->sequence_number exploit by using time as your random data set, which they used.... in CSGO. Not TF2. So Valve literally doesn't give a shit about TF2 anymore.

The 5 exploits I've submitted that have been fixed but not credited to me are the following:

1: QAngle speedhack. 2: Removing the TFCOND_SLOW flag on Heavys. 3: Name change spam after they "patched it." 4: Infinite Ubercharge. 5: Infinite Noisemaker.

As you may or may not know, from encountering other cheaters, 2, 3 and 5 are still in the game. I don't know how well other cheaters are the game, but I've managed to resurrect those exploits in my reDarkStorm platform.

Tony Paloma was the only one of the Valve employees that seemed to actually care about TF2, and it seemed his attention span was short.

全 177 件のコメント
並べ替え:
ベスト
トップ新着論争中古い順Q&A

[–]VGPowerlord 95ポイント96ポイント  (4子コメント)

I'm wondering why you'd send mail to Tony Paloma, considering that Eric Smith and John Schoenick are the ones responding to TF2 bug reports at present.

Also, sending an ultimatum is not a good way to get people to listen to you.

[–]RJacksonm1 2ポイント3ポイント  (0子コメント)

In addition, the best way of getting bugs to Valve is emailing security@valvesoftware.com - as instructed https://valvesoftware.com/security/

Then you avoid the chances of individuals missing your e-mail (which is really easy to do) because they're being drowned in emails, are on holiday, are focusing on another project, or because they're ignoring your e-mails because you're very annoying, etc...

[–]icantshoot 30ポイント31ポイント  (1子コメント)

2: I get my original account unVAC'd

3: I get my scorching drill back

These two are not going to happen.

[–]OnMark 59ポイント60ポイント  (48子コメント)

Wait, do you release your hacks publicly? It looks like there are forums for them, this sounds like attempted blackmail if these aren't exploits you submitted privately.

[–]KodaTF2 35ポイント36ポイント  (14子コメント)

What exploits are these exactly? In honesty, valve seems to give a damn about exploits if they're used and abused (The Entity/weapon falling into the pit comes to mind, same with buffalo Heavy Miniguns). If they're released to the public and shown exactly how to perform them, They could be used widely, which would force the TF2 Team to actually fix these bugs.

I'm not trying to be the dickhead that says "LETS USE THESE GLITCHES TO BE A DICK TO OTHER PLAYERS HAHAHA" But rather, releasing them to the public would mean the glitches would get out of hand, and forcibly run amok. Valve and the TF2 Team would be forced to actually do some work. NISLT and OpenGriefing would love this content, and broadcasting it to the thousands would definitely be the way to get shit done. Most of the stuff shown on those channels is patched VERY quickly

[–]Ceezyr 17ポイント18ポイント  (8子コメント)

Yeah NISLT is probably the best way to get something fixed in tf2, just look at the payload glitch last point. Of course there was the gunslinger crit glitch for years but that one wasn't nearly as game breaking.

[–]Sloth_Senpai 2ポイント3ポイント  (2子コメント)

NILST is also the reason the payload glitch became a problem at all. It's not really fixing it if you cause it to get popular and used.

[–]Ceezyr 3ポイント4ポイント  (1子コメント)

Yeah it was a few weeks of basically no payload but the glitch did get fixed a lot faster than other glitches that stuck around forever.

[–]Sloth_Senpai 1ポイント2ポイント  (0子コメント)

The problem is that the glitch didn't matter until NILST posted it. No one used it since no one knew about it. Dealing with 1 in 500 pubs being glitched is always better than 100% glitching, simply because it gets less annoying.

[–]Sloth_Senpai 2ポイント3ポイント  (0子コメント)

Every time these things get posted online, the poster is doing more damage than the glitch would have had it gone unknown. Every pub being unplayable for 3 weeks is still worse that 1 in 50 pubs ruined for 3 months. THe Payload exploit wasn't really a problem until NILST posted how to do it, since it was done much more rarely until then.

Posting hacks and exploits publicly is always ineffective and always worse than just reporting the exploits.

[–]rajikaru 45ポイント46ポイント  (9子コメント)

You're a single person. Out of the millions of people that play TF2. Dozes, if not hundreds of people send the TF team various exploits every day, and even though you've been cheating in the game yourself, you think your exploit messages deserve any more attention than anybody else? Your posts just reeks of self-entitlement, and I'm not sure if anybody here should actually believe what you say. For all we know, the TF team is just being sent hatemail by you and bragging about your exploits, and you want to play the victim here on the subreddit.

[–]MrJustaDude 14ポイント15ポイント  (8子コメント)

Through his exploit he full crit, unlimited uber, aim bots, I think his exploits are a bit more important than "I made 2 hats out of 1"

[–]Maxillaws 14ポイント15ポイント  (25子コメント)

Drunken Fool got a manual VAC ban for exploiting the drop timings of the Golden Wrenches I thought

[–]pixelrbv 3ポイント4ポイント  (0子コメント)

True

[–]vMcJohn 22ポイント23ポイント  (13子コメント)

Hi. I'd like to fix these. Please send them to remove the v in front of my username at valvesoftware dot com. For what it's worth, Tony is currently working on other projects. Thanks!

[–]Arrythmia 13ポイント14ポイント  (0子コメント)

Holy shit.... a real response?

[–]ComputerFreak99 7ポイント8ポイント  (0子コメント)

I reported an economy-breaking exploit 3 months before someone else did, yet they got rewarded and I didn't. Could you please look into that? Post with more info

[–]DamienAlexander 0ポイント1ポイント  (0子コメント)

Mad props to you dude

[–]MrPeachie 20ポイント21ポイント  (4子コメント)

Interesting stuff, but I honestly doubt Valve would do anything.

It's taken them months, if not years to patch and balance the game. And they likely wouldn't bother 'unvac-ing' your acc and giving your unusual back.

imo after the mm update for tf2, valve is gonna completely drop support for exploits and stuff like that. Its also already been confirmed that tf2 isn't going to be ported to source 2.

Good luck to ya

[–]GoldenOnyx 14ポイント15ポイント  (11子コメント)

So as I take it, you hack and are requesting your account be unbanned?

[–]nonameowns 4ポイント5ポイント  (0子コメント)

just release them

then see if valve do something and determine if they take it seriously before matchmaking is out

[–]GetAggroTF2 8ポイント9ポイント  (0子コメント)

pathetic, at best.

[–]sbooyah 5ポイント6ポイント  (0子コメント)

'I'm not going to help you if you don't unban my account and gimme my hat back'

'Valve doesn't want to fix exploits!'

[–]Lilshadow48 1ポイント2ポイント  (0子コメント)

I gotta ask, how do you even go about finding such exploits? It's incredibly interesting to see how much a game can be broken.

[–]Dominus_Vorg 1ポイント2ポイント  (0子コメント)

75% of this thread and comments are pure gibberish to me :/, I should had studied programing...

[–]bacontf2 1ポイント2ポイント  (4子コメント)

Though it may make the experience terrible for a few days, making exploits public seems to be the best way to get Valve to focus on patching them.

[–]gir489[S] -4ポイント-3ポイント  (3子コメント)

Considering how long the 1st gen forced crits exploit lasted, I don't feel comfortable trusting the public. It seemed to accomplish nothing when I released the original ubercharge exploit.

[–]58time 4ポイント5ポイント  (3子コメント)

Here's hoping it pans out. Disappointed at the laziness present at Valve, even more disappointed to hear they just don't care about their massive 8 year old money maker anymore.

[–]DrDan21 4ポイント5ポイント  (3子コメント)

You should do a witeup or an ama about finding the exploits - would be an interesting story to here

[–]silver_nuke13 0ポイント1ポイント  (0子コメント)

YET THEY HAD TO FIX VACCINATOR'S CRIT NEGATION AND GUNSLINGER'S CRIT PUNCH

[–]Beginners963 0ポイント1ポイント  (0子コメント)

You are genius for finding cheats/exploits they won't fix. But your points are actually too big.
Anyway their ultimatum is over ... why don't do the same stuff like others did and tell your friends how to do this exploits and tell them they may be allowed to tell others. It will spread like a fire in the summer.

[–]pillowsfree 0ポイント1ポイント  (0子コメント)

A little pushy don't you think?

[–]Mr_Biffo 0ポイント1ポイント  (0子コメント)

The infinite noisemaker exploit is still in the game? I must know how - you know... so I can help fix it... or something.

[–]RaFpanda 0ポイント1ポイント  (0子コメント)

joke of the year

[–]rawrzee 0ポイント1ポイント  (1子コメント)

Some people just don't understand. So many people spamming you with downvotes.

[–]silver_nuke13 0ポイント1ポイント  (0子コメント)

Hate mobs aren't exactly the most rational thing on earth, you know? Once they decided "this user is bad" they'll track their comments and snowball into the minus.

[–]lolgm213 -2ポイント-1ポイント  (0子コメント)

Good luck to you! Thank you for trying but sadly Valve seems do be complete assholes right now

[–]Hawkeyesniper45 -5ポイント-4ポイント  (3子コメント)

Seeing a cheater try to fix these things is awesome. I'm serious. If some random dude told valve about a exploit they would maybe look at it for a few seconds and forget about it. If somebody who has been pretty much breaking the source engine for years points something out you think they would listen. At least some thing got patched...

[–]XMPPwocky 2ポイント3ポイント  (1子コメント)

Hi i'm some random dude who told Valve about 2 remote-code-execution bugs in Source and >10 XSSes in Steam and one DoS in VTF parsing. They listen now. security@valvesoftware.com- gets responses fast. Maybe not the best responses, but they'll read it.

For game-breaking issues, I'd recommend Eric Smith or John Schoenick; I contacted the latter over IRC to report a noclip exploit and one that can bypass sv_cheats. Both were fixed.

[–]gir489[S] -3ポイント-2ポイント  (0子コメント)

Well that's good to hear.

[–]ZordonFreemanI 0ポイント1ポイント  (0子コメント)

ITT: people think it's acceptable to ignore game breaking client exploits because op got vac banned once.

[–]Hreidmar1423 -5ポイント-4ポイント  (5子コメント)

Even after ignoring you for a year and trying your best to get these exploits fixed I think it would be best if you start leaking these exploits to publicx but slowly so other popular cheating softwares like LMAO pick these things up make the game unbearable to play and when they notice less people playing servers and less buying in Mann Co store maybe then they will start panicking and devote more time toward fixing these!

Good thing you made this post public and warn everyone beforehand if you do something like that so people will know WHY you did it and how lazy Valve is. But damn...to exploits like Crits and infinite ubercharge still exists is very frightening...who knows who uses that in pubs or even in comp scene to gain an upper advantage.