View Single Post
Old 12-21-2008, 08:29 AM   #16
Treches
Hall Of Famer
 
Treches's Avatar
 
Join Date: Dec 2001
Location: Damned Hell
Posts: 2,150
And read:

Quote:
Originally Posted by Treches View Post
"That said, I continue to see that the hacker is also placing iframes directly into the league reports as well. So I'm afraid that even a restricted FTP account for the game will not stop this cycle."
--
Correct. Restricted FTP accounts (say the one you place on the downloadable league file) is just to avoid the casual cracker from fooling around, but restrictions don't block Mpack, as it will gain access to the root nevertheless, bypassing the permissions. The only way to block it is erasing the trojan on the user side and then, and only then, changing the pw.
Thus, the patch does nothing if you have the trojan on board.
__________________
The Computer Baseball League
Treches is offline   Reply With Quote