Teeworlds - general

[quakenet] <ChillerDragon> slaps fstd around a bit with a large fishbot

16:45

[quakenet] <fstd> ChillerDragon: yes?

[quakenet] <fstd> ChillerDragon: how can i help you?

[quakenet] <ChillerDragon> all fine thnks m8

17:14

[teeworlds] <ChillerDragon> fstd: it was u ingame ?

17:18

[quakenet] <fstd> ChillerDragon: in what game?

17:19

[quakenet] <dupek> is it just me or all the servers are full>

17:19

[quakenet] <dupek> the client shows me that there are 4700 players

17:19

[quakenet] <fstd> it's a DoS

17:19

[quakenet] <dupek> oh

17:19

[quakenet] <dupek> ok

17:20

[quakenet] <heinrich5991> https://github.com/teeworlds/teeworlds/issues/235

Teeworlds Slot user · Issue #235 · teeworlds/teeworlds

There is a new program by xagels, He can take up slots in servers... He does it through "Stalling" Inbetween jooining and getting the message "max ip used" also it doesnt use ip...

[quakenet] <rand> you may drop clients that do not get state ONLINE

17:53

[quakenet] <rand> (and stay as pending)

17:55

[quakenet] <rand> something like this https://ptpb.pw/KEd7

[quakenet] <heinrich5991> rand: doesn't really help, now they need to send two packets

19:16

[quakenet] <heinrich5991> eeeee ported the fix from ddnet to vanilla

19:20

[quakenet] <rand> naaah

19:23

[quakenet] <heinrich5991> mh?

19:23

[quakenet] <rand> though, i can join my server while beeing spamming

19:24

[quakenet] <heinrich5991> because the attacker doesn't send two packets currently

19:24

[quakenet] <heinrich5991> but it's trivial to attack your server as well

19:25

[quakenet] <rand> ofc

19:25

[quakenet] <heinrich5991> what we need is some kind of challenge-response, that the attacker cannot predict

19:25

[quakenet] <heinrich5991> server sends some kind of magic number and the client needs to repeat it back

19:25

[quakenet] <rand> but, we can't with actual clients do we ?

19:26

[quakenet] <heinrich5991> as said, eeeee produced a hacky patch that does that

19:27

[quakenet] <heinrich5991> it uses the snapshot acknowledging of the client

19:27

[quakenet] <heinrich5991> (ddnet has done that for ages)

19:32

[quakenet] <rand> and where is this patch ?

19:33

[quakenet] <heinrich5991> https://github.com/eeeee/ddnet/commit/47e4d2e860f6659fa084c42e216cbee61c7d56e6

wip · eeeee/ddnet@47e4d2e

19:34

[quakenet] <heinrich5991> it still has this problem though (the same as in ddnet): https://github.com/ddnet/ddnet/issues/500

Token handshake a bit brittle · Issue #500 · ddnet/ddnet

Token handshake shouldn't rely on NET_CTRLMSG_ACCEPT, that's not guaranteed to arrive. Probably better to check the first normal message you receive. Vanilla handshake assumes that the clie...

19:36

[quakenet] <rand> thx