Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Flaw]

and how will this be kept away from the hands of dem haxxors who havent won haxxy??

https://github.com/Medo42/Gang-Garrison-2/commit/ebda451072e480c95161b32b3442979ca0b8b4e9

Also, lol:

<constant name="I_AM_A_HAXXY_WINNER" value="50"/>
<constant name="O_RLY" value="51"/>
<constant name="YES_RLY" value="52"/>
<constant name="HAXXY_PUBLIC_KEY" value="&quot;3cca03b3c2089efdea66a374081d54ed&quot;"/>

[Orpheon]

<constant name="I_AM_A_HAXXY_WINNER" value="50"/>
<constant name="O_RLY" value="51"/>
<constant name="YES_RLY" value="52"/>
<constant name="HAXXY_PUBLIC_KEY" value="&quot;3cca03b3c2089efdea66a374081d54ed&quot;"/>

Yeah, I laughed for a good 15 minutes when I saw that "O_RLY".

[Orpheon]

Heh, i dont get it.

What we're laughing about is the choice of name:

Client Sends: I_AM_HAXXY_WINNER
Server answers: O_RLY
Client sends back: YES_RLY
Server makes client a haxxy winner.

Actually, the server sends a few other things as well, which the client must decode and send back.
But the names are just incredible.

[BassMakesPaste]

Yes. Very.

[Orpheon]

but isnt that kind of easy to hack?

Yes. Very.

Uhh, no.

       case I_AM_A_HAXXY_WINNER:

+            write_ubyte(socket, O_RLY);

+            player.challenge = "";

+            repeat(16)

+                player.challenge += chr(irandom_range(1,255));

+            write_string(socket, player.challenge);

+            break;

+            

+        case YES_RLY:

+            var answer, i;

+            answer = "";

+            for(i=1;i<=16;i+=1)

+                answer += chr(read_ubyte(socket) ^ ord(string_char_at(player.challenge, i)));

+            if(HAXXY_PUBLIC_KEY==md5(answer)) {

+                player.isHaxxyWinner = true;

+            } else {

+                socket_destroy_abortive(player.socket);

+                player.socket = -1;

+            }

+            break;

I wish you good luck.

HAXXY_PUBLIC_KEY is "&quot;3cca03b3c2089efdea66a374081d54ed&quot;", if you were wondering.

[tankman]

If a winning submission was made by more than one person, will all the people who worked on it get the special client?

[Orpheon]

If a winning submission was made by more than one person, will all the people who worked on it get the special client?

No, they get a special key.

Code: [Select]

     global.caplimitBkup = global.caplimit;

     global.autobalance = ini_read_real("Server", "AutoBalance",1);

     global.Server_RespawntimeSec = ini_read_real("Server", "Respawn Time", 5);

+    global.haxxyKey = ini_read_string("Haxxy", "SecretHaxxyKey", "");

     global.currentMapArea=1;

     global.totalMapAreas=1;

     global.setupTimer=1800;

@@ -92,6 +93,7 @@

     ini_write_real("Server", "Respawn Time", global.Server_RespawntimeSec);

     ini_write_real("Server", "Time Limit", global.timeLimitMins);

     ini_write_string("Server", "Password", global.serverPassword);

+    ini_write_string("Haxxy", "SecretHaxxyKey", global.haxxyKey);

     

     //screw the 0 index we will start with 1

     //map_truefort  (That's the code that loads stuff from the gg2.ini)

Code: [Select]

global.haxxyKey = ini_read_string("Haxxy", "SecretHaxxyKey", "");

They'll probably get a PM with that special key inside.

[misty]

So, well, did you decide to add 'silver' and 'bronze' statues, too?

[Gordon Fudgeman]

i have a question. what are the prizes? i wasnt online for somedays cause i didnt had the time for it. [quote
author=Ozoh link=topic=28835.msg930172#msg930172 date=1313174942]
So, well, did you decide to add 'silver' and 'bronze' statues, too?
[/quote] oh, nevermind.

[misty]

No, that was a question.
They were throwing around this idea of those statues, so I asked if they actually did add them.

[Gordon Fudgeman]

No, that was a question.
They were throwing around this idea of those statues, so I asked if they actually did add them.

ok. it would be awesome. golden statues. or golden sentries. or golden weapons.

[Orpheon]

Saying it again for everyone:

All Haxxy winners will receive a private code which allows them to get golden statue corpses visible to everyone. It has enough security to discourage pretty much everyone who would like to try to take it, and it's going to come in an update that's coming along very soon.

[misty]

Saying it again for everyone:

All Haxxy winners will receive a private code which allows them to get golden statue corpses visible to everyone. It has enough security to discourage pretty much everyone who would like to try to take it, and it's going to come in an update that's coming along very soon.

Yes, but I asked if there are prizes for 2nd and 3rd people, too.

[Lorgan]

How can the server check if the haxxy code is legit without having it in the source

[tankman]

I didn't ask how the winners are receiving the prizes.

I asked if all the contributors who worked on a winning submission (even small contributions) will get the special client/code/whatever.