|
||||
|
|
Earlier versions of OOTP: Commissioner's Corner Want to run an online league? Want to learn about the 'ins' and 'outs' of being a commish? This is the place! |
|
Thread Tools |
12-03-2008, 07:34 PM | #81 |
All Star Reserve
Join Date: Feb 2007
Posts: 925
|
The link to the patch is a few posts above yours in one of KQ76's posts. I'd say the cat is out of the bag now....
|
12-03-2008, 07:50 PM | #82 |
Hall Of Famer
Join Date: Dec 2001
Location: Union City, TN
Posts: 6,383
|
Understood, but are we to just happen across the link?
|
12-03-2008, 07:55 PM | #83 |
All Star Reserve
Join Date: Feb 2007
Posts: 925
|
If you're asking if it's going to be "officially published as a patch file", I can't answer that, and I've mentioned before that I also don't understand why it's not been. Only the OOTP Dev Team can answer that.
And btw, we need a Mac version. I have GMs in my league who are Mac users. |
12-03-2008, 08:23 PM | #84 |
Major Leagues
Join Date: Dec 2007
Location: Chicago
Posts: 357
|
Has anyone successfully exported a file using the new version? I'm getting errors and can't tell if the problem is me or the patch.
|
12-03-2008, 08:56 PM | #85 |
Hall Of Famer
Join Date: Aug 2007
Posts: 2,360
|
For the record, Boof's trouble exporting isn't related to the patch. We just changed our FTP password. Didn't want anyone upgrading to be afraid that the new version caused export issues.
__________________
Founder of the Planetary Extreme Baseball Alliance (PEBA) Premiere OOTP fictional league where creativity counts and imagination is your only limitation Check for openings - contact us today! |
12-03-2008, 10:18 PM | #86 |
Hall Of Famer
Join Date: Aug 2007
Posts: 2,360
|
One thing I'm uncertain of: Are we still concerned about a potential security hole in Getch's online utilities? This news of a security hole in OOTP would seem to vindicate the utilities, but f.montoya indicated to me in an email tonight that there may still be a separate vulnerability there.
Might we get an official word on this from Getch himself? We've removed the utilities from our server until we're sure they're safe, but we're itching to restore them.
__________________
Founder of the Planetary Extreme Baseball Alliance (PEBA) Premiere OOTP fictional league where creativity counts and imagination is your only limitation Check for openings - contact us today! |
12-03-2008, 10:29 PM | #87 |
All Star Reserve
Join Date: Feb 2007
Posts: 925
|
As I posted earlier, I cannot say with 100% certainty how the hacker gained access. Sure, it's possible he got in through Getch's utilities. All that could be gleaned from the logs was the files that he altered and when he altered them.
Now, my personal opinion, given the facts that have come to light today, is that Getch's utilities are most likely safe, but that's just my opinion. I've never taken them offline in my league and unless it can be proven that they were a direct portal for an attack, I won't remove them. All that said, Getch did post that he found a problem and was going to fix it. |
12-04-2008, 12:20 AM | #88 |
All Star Reserve
Join Date: Mar 2007
Location: Somewhere in South Carolina
Posts: 636
|
|
12-04-2008, 12:49 AM | #89 |
Hall Of Famer
|
Markus said if you contact him, he will give it to you. So I assume it's for everyone. It's posted on the previous page if you want a link to it.
__________________
From the wise mind of Davey Eckstein "Now all you need is a signature. A quote or initial, perhaps." [ |
12-04-2008, 01:10 AM | #90 |
Hall Of Famer
Join Date: Apr 2002
Location: Ft Smith AR
Posts: 2,681
|
My impulse is to start using the v9.2.7 patch, but I fear the effects on compatibility. If it's similar to the v9.2.3 patch, then all should be smooth. Still, I'm reluctant to go ahead before seeing others' results.
|
12-04-2008, 01:23 AM | #91 |
Hall Of Famer
|
I can tell that I've received exports using 9.2.7 while my owners used 9.2.3. Although Markus still suggests everyone patch up because the hacker can still get the info he needs for people's exports I believe.
__________________
From the wise mind of Davey Eckstein "Now all you need is a signature. A quote or initial, perhaps." [ |
12-04-2008, 01:44 AM | #92 |
Hall Of Famer
Join Date: Aug 2007
Posts: 2,360
|
It might be good if Markus popped in here and explained things to us personally. I'd still like to know what to tell my owners who are using Macs. They can't use this patch. Like satchel, I'm worried about compatibility issues during the period where I'm using 9.2.7 and they're stuck using 9.2.3.
__________________
Founder of the Planetary Extreme Baseball Alliance (PEBA) Premiere OOTP fictional league where creativity counts and imagination is your only limitation Check for openings - contact us today! |
12-04-2008, 02:08 AM | #93 | |
Minors (Double A)
Join Date: Mar 2006
Posts: 163
|
Quote:
This is truly a mess. So if I want to patch my game to protect my site from this hacker, I have to potentially lock out a number of owners from being able to export since they can't get the .exe file to work correctly? We need some kind of word from up on high. The people in the middle have done an admirable job doing their best to see this gets fixed, but they can only do so much. I'd say that some direct communication is long overdue for the people who have suffered through a lot of trouble dealing with this issue. |
|
12-04-2008, 02:29 AM | #94 | |
Minors (Rookie Ball)
Join Date: Sep 2004
Posts: 23
|
Quote:
|
|
12-04-2008, 02:31 AM | #95 | |
Hall Of Famer
Join Date: Dec 2004
Location: Bay Area, CA
Posts: 4,014
|
Quote:
But, as usual, online leagues get the short end of the stick even when it comes to potentially compromising entire leagues because of a security exploit... Gotta hurry up and add more sounds!
__________________
Global Unified Baseball Association - Vice Commish and Oakland Oaks GM |
|
12-04-2008, 02:35 AM | #96 | |
Hall Of Famer
|
Quote:
__________________
From the wise mind of Davey Eckstein "Now all you need is a signature. A quote or initial, perhaps." [ |
|
12-04-2008, 03:18 AM | #97 |
Global Moderator
|
It is fixed in 9.2.7, but if a Mac or Linux user downloads a 9.2.7 league they won't be able to connect because what it believes is the connection settings will not work.
Until a Mac or Linux 9.2.7 patch comes out, I don't believe that they will be able to access 9.2.7 leagues, but we'd need word from up high as to whether this is true. |
12-04-2008, 04:36 AM | #98 | |
Global Moderator
|
Quote:
The Online leagues work on a two-way FTP system and both the commish and the GMs have 'access' to the FTP settings (access defined as the means of getting hold of them) The only need a GM has for FTP is really to upload their team export. There isn't necessarily a need to have an FTP download - it should be possible to do it via HTTP. The game should have two FTPs - one for the commish and one for the GMs - and when the commish runs a sim and creates the .tar.gz file for the league it just strips out all the information pertaining to the commish FTP so the only FTP information that gets passed to the GM is the details he needs to export his team. Then this export FTP can be given access to just one directory and there's nothing in there that can be exploited as it is just basically team_nnn.ootp files. |
|
12-04-2008, 05:43 AM | #99 | |
Hall Of Famer
Join Date: Mar 2002
Location: In The Moment
Posts: 13,680
|
Quote:
Anyway, the issue has bee addressed and fixed - http://www.ootpdevelopments.com/boar...ming-soon.html |
|
12-04-2008, 05:50 AM | #100 | |
Global Moderator
|
Quote:
|
|
Bookmarks |
Thread Tools | |
|
|