[DiscordArchive] Warmane has had it for ages but there's no public write up yet?
[DiscordArchive] Warmane has had it for ages but there's no public write up yet?
Original source
It will help the right people abuse it, but it won't help them with finding a different RCE
rektbyfaith
07-28-2024, 05:26 PM #41Archived author: Foe • Posted: 2024-07-28T17:26:11.017000+00:00
Original source
It will help the right people abuse it, but it won't help them with finding a different RCE
Original source
big servers will be patched but smaller ones are screwed
rektbyfaith
07-28-2024, 05:26 PM #42Archived author: gee • Posted: 2024-07-28T17:26:29.521000+00:00
Original source
big servers will be patched but smaller ones are screwed
Original source
It's on a per-player individual client basis
rektbyfaith
07-28-2024, 05:26 PM #43Archived author: Foe • Posted: 2024-07-28T17:26:41.297000+00:00
Original source
It's on a per-player individual client basis
Original source
And not to mention the average user will never end up having that client
rektbyfaith
07-28-2024, 05:27 PM #44Archived author: [GLFY] Mitche • Posted: 2024-07-28T17:27:00.035000+00:00
Original source
And not to mention the average user will never end up having that client
Original source
Is there a way for a server to stub it on the client on connecting? ie a server side fix for those who won't update?
rektbyfaith
07-28-2024, 05:27 PM #45Archived author: gee • Posted: 2024-07-28T17:27:04.657000+00:00
Original source
Is there a way for a server to stub it on the client on connecting? ie a server side fix for those who won't update?
Original source
No
rektbyfaith
07-28-2024, 05:27 PM #46Archived author: Foe • Posted: 2024-07-28T17:27:09.360000+00:00
Original source
No
Original source
Well, yes, they can exploit it and patch the binary.
rektbyfaith
07-28-2024, 05:27 PM #47Archived author: schlumpf • Posted: 2024-07-28T17:27:28.025000+00:00
Original source
Well, yes, they can exploit it and patch the binary.
Original source
It was just a bad idea to announce anything
rektbyfaith
07-28-2024, 05:27 PM #48Archived author: Nix • Posted: 2024-07-28T17:27:28.190000+00:00
Original source
It was just a bad idea to announce anything
Original source
I mean. Initially, the wow client as in provided by blizzard was "proof of concept" that no malicious code is going to be executed on player's PC.
In later expansion, you had to use patcher or launcher to even allow client to connect to server. Which already defeats the purpose.
Now you have the RCE in 1.12 client. And you want simply to close the eyes at it? Doesn't seem to be a wise decision
rektbyfaith
07-28-2024, 05:27 PM #49Archived author: Deamon • Posted: 2024-07-28T17:27:28.413000+00:00
Original source
I mean. Initially, the wow client as in provided by blizzard was "proof of concept" that no malicious code is going to be executed on player's PC.
In later expansion, you had to use patcher or launcher to even allow client to connect to server. Which already defeats the purpose.
Now you have the RCE in 1.12 client. And you want simply to close the eyes at it? Doesn't seem to be a wise decision
Original source
It's a good bandaid but unless server's start actually providing that client to their user's it will never really help
rektbyfaith
07-28-2024, 05:27 PM #50Archived author: [GLFY] Mitche • Posted: 2024-07-28T17:27:36.292000+00:00
Original source
It's a good bandaid but unless server's start actually providing that client to their user's it will never really help
1 Guest(s)
1 Guest(s)