Did you solved bugs, that dproto fix? (and other bugs) [Counter-Strike|Windows/Linux]

steamclosed questionMOVED: Counter‐Strike

ValveSoftware/steam-for-linux#1672 · opened 2013-02-13 by lafyn9 · updated 2013-02-13 · 4 comments · github

Llafyn9 2013-02-13 github

http://cs.rin.ru/forum/viewtopic.php?t=52728
Can I be tamper-proof, without dproto?

Bugs which drpoto or amxx or modules fix

Exploit failds
The program fills a server fake players with the same nicknames:
Implications: These feykovye players scoring slots while in spectator + they can not kick.
Spam command "fullupdate" which makes lags
Exploit csdeath (same sh*t with fake players)
The program HLDS Fake Flood by I-T-N-I which makes lags

Please, tell me - what you already fix?

ps Sorry for my bad englsh. I hope you understand what I wrote :)

AAnAkkk 2013-02-13 github

dproto is aimed at non-steam servers. This fake player stuff should only be possible on non steam servers, I guess.

Llafyn9 2013-02-13 github

scarcely, you choose to include steam or steam+non-steam players, now steam servers without dproto - vulnerable to attack

Aalfred-valve maintainer 2013-02-13 github

I believe we have fixes to all the above exploits (and released them a while ago), if you can reproduce a problem with an individual exploit please post a bug.

Zzp 2013-02-13 github

Speaking of dproto / non-steam servers, would it be possible to add some sort of server filter to get rid of all of them from showing up in my server browser?

Nothing extracted yet.