Space Station 13 and Its successors communities - Lolcows and milk... In spess

[Souji Tendou]

show me the sweet hostbus gossip

I know affectedarc07 from paradise host posted some pretty good memes in there. Thats about all I know.

 

[larry king urethra slicer]

I was on #4chan and getting glined from rizon during the first chrischan era, I know how the internet works. I'm not looking for a personal army, just to remove every advantage ss13 servers have in defending against trolls like you guys that I was involved in either creating or spreading awareness among hostchat about.

I recently got sent a massive dump of how hostchat (and coderchat) has been talking about me since I left and so fuck em I don't care about them anymore.

You're not under a NDA to not dsclose whatever happens in hostchat or not give us those logs, you know...

 

[Some Spaceman]

Don't stickybans also use hidden cookies as a result of the IE8 dependency?


The biggest cheat always has been and still is href exploits. The semi-retarded way BYOND handles HTML communication that allows basically any player to ping the server with a byond://[reference to admin panel object];banplayer=[yourid] right from the console. BYOND itself, of course, does not sanitize or authenticate shit, so every Topic proc has to be sanity checked before it is run through. If it's important, at least.

In any network-based sphere there is a saying: Don't trust the client. Because of the very nature of public networking, you can never trust a client to be who they say they are. You can cheat in similar ways in other game engines, it just isn't as obvious because it'll be using some more advanced networking and not be exposing ways to communicate with the server directly to the end user via javascript. Unless you're working with proprietary software you're going to need to roll your own form of authentication.

 

[Jotch]

MSO never delivers! The time came and you didn't perform, the call of duty came and you didn't perform!
All you do is argue with people! You had access to 10 years of information that could be shameful to the administration you hate and you did nothing!
I suppose what else can you expect from the guy who waited until he signed over the deed to someone else before he set his house on fire.

 

[A Bear In The Woods]

I suppose what else can you expect from the guy who waited until he signed over the deed to someone else before he set his house on fire.

Ya i'll always regret that. I should have stayed firm and forced them to start over with a fresh discord. I felt a little regret at the idea of causing /tg/ to implode but should have realized the regret for not letting it implode would be greater.

 

[Jotch]

Ya i'll always regret that. I should have stayed firm and forced them to start over with a fresh discord. I felt a little regret at the idea of causing /tg/ to implode but should have realized the regret for not letting it implode would be greater.

Either way, thanks and congrats for being the first SS13 server host (from a non KF server) to openly make posts on this evil website.
I imagine just the fact you posted here at all has caused quite a stir over there.

 

[LOWERCASE LETTERS]

Let the man cook. The more crap he posts, the more likely it is all this ancient ass code gets fixed globally.

 

[Google.com]

Let the man cook. The more crap he posts, the more likely it is all this ancient ass code gets fixed globally.

If it took us crowd funding Lummox an office chair and a computer built this decade to get byond to start switching off of internet explorer I think anything more is going to cost at least a desk and a 2000-2008 car with 250k miles on the odometer.

I will never stop laughing about the fact Byond had to crowd fund an office chair and he then proceeded to buy said chair off of his brother. The engine has been being built by some random guy in some attic sitting on a folding chair with a cushion and a 7 year old computer for a decade. Gotta respect the mans hustle and effort though

 

[larry king urethra slicer]

Let the man cook. The more crap he posts, the more likely it is all this ancient ass code gets fixed globally.

Shit that won't ever happen for $50,000

 

[PS2 Nishiki]

I'm not looking for a personal army, just to remove every advantage ss13 servers have in defending against trolls like you guys that I was involved in either creating or spreading awareness among hostchat about.

I hope you realize that Soyjak.party and cracked out Russians have done more damage to your servers than we could ever imagine.

 

[Jotch]

On the topic of BYOND replacements, it's probably easier and a better idea to just force geckogoy to do it himself.

I hope you realize that Soyjak.party and cracked out Russians have done more damage to your servers than we could ever imagine.

Never mess with the soyteens, they are like mid 2000s 4Chan in terms of hacker power (thousands of bored teenagers).

 

[PS2 Nishiki]

I know around 2023 there was a modded byond client that could bypass most sticky ban detection methods just not password or IP and came with some basic cheats(barely functional aimbot and X-ray that only worked on older codebases) it was super fucking shady though. Wonder if it's still a thing.

Are you referring to calamari client? ( I think that was the name of it )

 

[Google.com]

Are you referring to calamari client? ( I think that was the name of it )

I have no idea. I was fucking around in-game, friend got banned early for trolling. Watched him somehow track it down in some obscure discord server full of people who didn't speak English he went through 4 throwaway accounts that round so it seemed to work. I'm personally not retarded enough to download some shady exe on a Russian discord so I never tried it.

 

[Fedscare]

That reminds me, any future modded clients should pay attention to byond's binding of mouse enter/exit/hover/client events for certain objects.

Admins detect cheated clients by round modifying their ghost to be 99% transparent, 1000% size, and give it the super matter component so any clicks by humans kills them, then they hover their suspect and look for a gibbing.

We'll also do this but make the ghost visible to the suspect to confirm they aren't using a cheated client to block clicks to ghosts

cannot believe MSO is finally dropping his ban-evasion tools

 

[Nickolas Gurr]

There's also custom .dlls that certain servers use that can do worse shit. At this point I'm surprised that someone hasn't embed a cryptominer in some random server.

Didnt some people create fake servers in the hub? Copy the name of a popular server, populate with bots, and steal your info/download malware

There's no real easy choice for "best engine" since what matters way more is how you design and write the code, but the main issue with Byond is the lack of freedom and the fact that it breaks any time you try to do anything new and runs like ass.

What happened to Unitystation btw? From what I know there wasn't any furfag tranny drama surrounding it, and they have already ported most of the TG code, but the lack of customization killed it.

 

[enaR]

What happened to Unitystation btw?

Original dev quit, everyone else kept it on track for about 6 months. After 6 months, tech debt rendered the game unplayable for a long time just as SS14 became playable. I check the Discord every few months and it's basically nothing happening while the same individuals who have been there for 5 years troon out one by one.

 

[Darkholme's Dungeon]

Oh, btw, since i no longer run a server that uses stickybans or otherwise have any reason to give a fuck:

View attachment 6885256
I saw this in the /v/ thread about my spergout, and like, no. byond is not that smart.

There are two things used here on byond, Computer ID (CID) is your system hard drive serial number as reported by smart. (or volume id of the system partition if this can't be fetched.). This gets md5'ed by the client and byondcrc'ed(crc algo but with some magic numbers changed) by the server.

And stickybans, a special ban type that can detect evaders, which just tracks and follows based on login history, ip/cid history, and most importantly, byond account password.

Yes. byond does not salt passwords and uses this fact to match stickybans based on password.

This is why stickybans tend to work so well, evaders fucking using the same password on their alt accounts.

In any network-based sphere there is a saying: Don't trust the client. Because of the very nature of public networking, you can never trust a client to be who they say they are. You can cheat in similar ways in other game engines, it just isn't as obvious because it'll be using some more advanced networking and not be exposing ways to communicate with the server directly to the end user via javascript. Unless you're working with proprietary software you're going to need to roll your own form of authentication.

I wonder if the CID is (relatively) date/time insensitive? No wonder why it was so easy for Rshoe to CIDs to spoof as people, there's no fucking authentication on the BYOND end of the authenticity of the client (or server?). Fuck, even generating server specific CIDs by the BYOND server would have been better than that lmao. I'm no tech nerd but I can't believe they just gave the CID directly.

Didnt some people create fake servers in the hub? Copy the name of a popular server, populate with bots, and steal your info/download malware

Yes, Rshoe is the most (in)famous (not gonna lie his trolling vids are funny as fuck though) @geckogoy didn't he join Rivera for a round or two?+

 

[Local Wordmason]

Bro actually thinks giving instructions on how to commit harassment against people he personally doesn't like doesn't implicate him because he didn't directly tell us to do it. Fuck off, don't fall for this retard. Not only do we not go and fuck with people directly as a principle, nobody gives as much of a shit about ruining tg than he does and he's obviously trying to spark some kind of feud between us.

Remember when he called Kiwi Farms "useful idiots" two days ago? Post some funny shit or fuck off. I'm tired of MSO trying to pretend to be some kind of mastermind, when nobody thinks he is. Tacitly posting security info that may affect servers because you think you can manipulate someone into doing your dirty work is gay and retarded. People will take advantage of it and ruin shit, but it won't be us, but it WILL be your fault. Post the shit we want to see. Post all the private chats with jannies and coders, post shit that implicate the admins of favoritism or obvious rule breaking or anything more interesting than MSO still sperging and trying to get us to personally attack tg for him when it goes back up.

 

[Darkholme's Dungeon]

Bro actually thinks giving instructions on how to commit harassment against people he personally doesn't like doesn't implicate him because he didn't directly tell us to do it. Fuck off, don't fall for this retard. Not only do we not go and fuck with people directly as a principle, nobody gives as much of a shit about ruining tg than he does and he's obviously trying to spark some kind of feud between us.

Remember when he called Kiwi Farms "useful idiots" two days ago? Post some funny shit or fuck off. I'm tired of MSO trying to pretend to be some kind of mastermind, when nobody thinks he is. Tacitly posting security info that may affect servers because you think you can manipulate someone into doing your dirty work is gay and retarded. People will take advantage of it and ruin shit, but it won't be us, but it WILL be your fault. Post the shit we want to see. Post all the private chats with jannies and coders, post shit that implicate the admins in something or anything more interesting than this shit.

Doesn't matter, we'd be blamed for it even if someone gayoped into being him and posted it on reddit.

 

[niggersneed499d0e5e]

Bro actually thinks giving instructions on how to commit harassment against people he personally doesn't like doesn't implicate him because he didn't directly tell us to do it. Fuck off, don't fall for this retard. Not only do we not go and fuck with people directly as a principle, nobody gives as much of a shit about ruining tg than he does and he's obviously trying to spark some kind of feud between us.

Remember when he called Kiwi Farms "useful idiots" two days ago? Post some funny shit or fuck off. I'm tired of MSO trying to pretend to be some kind of mastermind, when nobody thinks he is. Tacitly posting security info that may affect servers because you think you can manipulate someone into doing your dirty work is gay and retarded. People will take advantage of it and ruin shit, but it won't be us, but it WILL be your fault.

This. MSO is trying to personal army and attention-whore here, stop engaging with him