I experienced today that somebody could issue chat messages under my nick name. That is: for the other players it was not possible to see that it was not me who wrote these messages.
I wonder whether this feature is possible without modifying the clientf in some way?
If it is possible to usurp other player's nick names for chatting with the official version that should be fixed cos its very annoying after a while. And if its due to a modified client it would be nice if there would be a way to fix this on the server side.

not sure but the server can execute commands on the client, so maybe someone found the rcon password or something?

[TSA] Psychiccyberfreak wrote:not sure but the server can execute commands on the client, so maybe someone found the rcon password or something?

How could you do such a thing with rcon? I mean I would'nt know how to do it even if I had the rcon password.

Nil wrote:

[TSA] Psychiccyberfreak wrote:not sure but the server can execute commands on the client, so maybe someone found the rcon password or something?

How could you do such a thing with rcon? I mean I would'nt know how to do it even if I had the rcon password.

I'm not quite sure, maybe the server is running with modified source?

[TSA] Psychiccyberfreak wrote:I'm not quite sure, maybe the server is running with modified source?

The servers where this happend were DCC's DM server and the RBI Keyhunt server. Delight runs unmodified source AFAIK. And RBI probably runs a 2.3 snapshot.

There's no way to do that with rcon, unless you change the server (and if you do that, you can do just about anything...). You can't change the client either, since the clients just sends the message, the nickname is added by the server.
The "exploit" is much simpler and easy to spot (and works in other games, too)...

KadaverJack wrote:The "exploit" is much simpler and easy to spot (and works in other games, too)...

Could you explain how to spot it? I really couldn't tell a difference.

Nil wrote:Could you explain how to spot the exploit? I really couldn't tell a difference.

it usually looks like this:
jerk:
Nil: lalalala
Booth lines will appear at once with only a single message beep...

in nex you can have some more lines between the `two' messages, so that's why your name won't appear

Thanks! Issue closed for me then.

lol that was simple

It happend again on Delight yesterday but this time it was not possible to spot it with KadaverJack's hint. That is there was no previous message by another player IIRC. Any ideas how this could be done or rather how one could tell the difference between a hijacked chat message and a "normal" one? Or to turn it off completely since it is really annoying and many players won't be able to tell the difference anyway?

I know how to make a chat-text seem to come from another player. And my nickname will not be shown at all.
I told how to do this in #alientrap some days ago... but I guess its hard to prevent this exploit... but what the hell do I know?

morfar wrote:I know how to make a chat-text seem to come from another player. And my nickname will not be shown at all.

Thanks for the confirmation. No need to think I am hallucinating this then.

This will be 'fixed' in 2.3 by prepending ... to each wrapped line in the chat area.
So unless someone has ... at the start of his name this should stop such misuse.

esteel wrote:This will be 'fixed' in 2.3 by prepending ... to each wrapped line in the chat area.
So unless someone has ... at the start of his name this should stop such misuse.

Good. One more reason for me to look forward to the release.

I tested this with esteel, and "my" exploit is not fixed yet.

Yeah but do not count on it still working in a few days

div0 fixed this bug now

I hope there is no more weird exploits available.

Nil wrote:

[TSA] Psychiccyberfreak wrote:I'm not quite sure, maybe the server is running with modified source?

The servers where this happend were DCC's DM server and the RBI Keyhunt server. Delight runs unmodified source AFAIK. And RBI probably runs a 2.3 snapshot.

on RBI ctf happened to me too. there was a guy called "instant speak" or sth. he left n after that the damn messages starts he/she/it did it with all players ,was only 4 but..pfew too him!

well all those exploids should be fixed now, so as soon as 2.3 deputes (withing this month, we have a release date ) all those problems will be gone.