Foreword
As you may or may not be aware, when the server went down I took "initiative" and posted an article on ModDB about the problem. However, I soon discovered that the article was incredibly offensive to you guys.
I can see how it might hurt your mod, but my goal was not to do that or endorse the attacker. It was to try and get people against the attacker.
I could not find the correct place to delete the news. Finally, I found out that i could delete it from the comments page (ususally i delete it from the top-level page).
So it is taken down now. So that's transgression 1 solved.
Accusing the Mod of having a Worm
I know someone who is a WAN engineer. I was talkin to him about suggesting the use of a tarpit to try and prevent the attacks, and he said he reccognized the attack. He said that it was very possible that someone gained backdoor access to the server, put malware on the mod, and when it got released it made that computer DDoS attack the server.
I did some research and saw this was pretty plausible, so I made that post. I tried my best NOT to blame the modders/admins, but the focus still fell on them from you.
Honestly, it was a possibility and since i had seen nothing on it I wanted to explore it. I even said that i didnt know if it was true.
But since I have offended you so greatly, I am sorry. I truly did not mean you to take offense from it.
"Suggestions" (permadeath)
Some of you guys dont like the fact I've suggested programs I have written to be included with the mod. These programs include....
Death Scanner -- Causes you to lose ur ship when u die
Dynamic Jump Holes - Would generate 3-5 random jump holes at every server restart, cleaning up old ones.
I can truly see how assanine it was to suggest #1, the death scanner. It would totally mess up this mod since most char development is in ship form.
I didn't think idea 2 was bad, but Igiss said no and I respected that. I did not try to push it furthur.
I am not trying to ruin the mod by putting malware, or by wtfpwning its gameplay mechanics. Lets be honest, who here wouldnt want to see an idea of theirs included?
In conclusion
That is my formal apology. I think I've just about covered it. Please don't post here just to +1 "you suck" or "get off discovery" because I really do like tihs community. My behavior recently, though, has been totally out of line and uncalled for.
Note we are very careful about what goes into the mod and what is uploaded to the distribution sites. Very few people have the passwords and account details.
Also note that this this is our mod; our community and our server; it's your mod, server and community too.
Proud member of "the most paranoid group of people in the community"
' Wrote:I know someone who is a WAN engineer. I was talkin to him about suggesting the use of a tarpit to try and prevent the attacks, and he said he reccognized the attack. He said that it was very possible that someone gained backdoor access to the server, put malware on the mod, and when it got released it made that computer DDoS attack the server.
I did some research and saw this was pretty plausible, so I made that post. I tried my best NOT to blame the modders/admins, but the focus still fell on them from you.
Honestly, it was a possibility and since i had seen nothing on it I wanted to explore it. I even said that i didnt know if it was true.
But since I have offended you so greatly, I am sorry. I truly did not mean you to take offense from it.
Your "WAN engineer" friend needs to get his head unstuck from the place on his body that is highest when picking strawberries, since it currently resides there. Firmly.
Coming up with such a scenario without having any information about the nature of the attack, nor having examined the fileset he accuses of such a scenario, means he is blowing hot air out of all his bodily orifices. Except the one that normally is used to sit on, since that one is blocked by his head residing there.
You should possibly do the same, since it has been stated countless of times, that the server was not physically compromised in any way, but it was the data transport mechanism that was attacked.
It is admirable that you want to try and help the admins and the community, but frankly IMHO with help like what you have managed to do with regards to the situation we are in now, you are assisting the nubtard who did the attacks, in harming the community.
Just my 0.02 Sirius Cr.'s worth...
Out of bats, Out of bots, Out of torps - Down to harsh language...
Security (in general) is all about discovering where and how "lack of trust" may hurt.
There is nothing bad about being careful, all thou you may offend other 'security experts'
who assume they did their job perfectly.
' Wrote:However, I soon discovered that
the article was incredibly offensive to you guys.
Yeah, we have a lot of easily-offended people here, gotta be careful not to step on their tail.
(this doesn't just apply for what you did but for numerous other things you might do in the future, trust me)
EDIT: when i say 'security experts' i refer to people who think security can be perfect. (in general)
And since such a concept is complete fantasy they are not really experts at all.
Don't let others push you around, if they don't like your ideas it doesn't matter. If I may make on suggestion though. Could you try to propose your ideas to Igiss/the admins before taking them and posting them on the forums? This would relieve many problems and would stop people making fun of you. Have a good day.