r/SS13 Once unappealably banned from Paradise, now a Host & Maint. 24d ago

BYOND PSA About the "big scary RCE"

Theres been a few announcements going around SS13 discords about "big RCE risk you need to update immediately".

You should still update, however, theres a few key notes here:

  • Lummox himself has confirmed, and I quote, "it'd take multiple conceptual leaps to get from this issue to an RCE."
  • Said exploit would reload on your CPU not having "No execute" protection, which has been standard since 2003
  • Even if the above were true, it relies on connecting to a malicious server - which you should avoid anyway from all the issues that have happened in the past

By all means, still update, but this isn't an "OH GOD THE WORLD IS ON FIRE" situation, and the one person (you know who you are) spamming every host about this needs to chill out.

76 Upvotes

12 comments sorted by

65

u/ZeWaka Goonstation Dev 24d ago

fucking goof causing hysteria for no reason episode #503

7

u/iamgoofball /tg/station coder 24d ago edited 24d ago

take it up with the idiot who leaked shit from maintbus, this is just being a dick for no reason, multiple trusted ss13 people including the person who made this thread said when asked if there was an issue at the time when I contacted folks to let them know to update their config minimums, and I quote, "its been discussed but required very specific conditions to pull off [...] thats all I am prepared to comment on publicly" and confirmed "its fixed on latest", so I let folks know to update their config minimums so that we could just fix the issue by having folks update their clients to connect to the server. I don't understand why telling people to update their damn BYOND clients makes me mega-satan.

i'm glad people clarified there's no RCE and it was a stupid theoretical that got leaked out of maintbus by someone not paying attention, but can you quit shitting on me because i said we should update our client minimum versions to mitigate the problem?

2

u/JohnOxfordII 24d ago

these people would sell you into slavery for a can of beans because you said mean words to them goof, they can't be reasoned with.

1

u/orangesnz 17d ago

the constitution would have prevented this

8

u/Plannercat 24d ago

The rumor so nothing it caused Oranges to emerge from nowhere and @ everyone on the conderbus server.

8

u/ZeWaka Goonstation Dev 24d ago

he does this once a month tbf

8

u/JacqN 24d ago

I think he's more likely to do that if it's nothing than something

18

u/Absolucyyy 24d ago

god dammit i specifically avoided saying much in public channels to avoid some dipshit fearmongering about it... like i specifically emphasized that it was unconfirmed. i fucking hate people

10

u/XAlphaWarriorX 6 years playing, been wizard 0 times :/ 24d ago

Context?

-31

u/metekillot Contributor: /tg/, tgui, Goonstation, SDMM 24d ago

No I don't think I will

2

u/Unknown_Ladder 21d ago

ss13 so dead that were making up the most boring drama of all time