Forum

I know my reply is late, sorry. Time goes by, been there and everywhere. We had blast every time we gathered to play, can’t really remember how this one went, but If this game is still alive we could plan about having re-reunion!

I used to log in back in the day with username reima_kostaja, which logged me in as playername -seke^Ronski, but now only way to get in is to log in as -seke^Ronski which logs me in as playername reima_kostaja  

I can't connect to servers though
Error setting display mode: CreateDevice failed (D3DERR_OUTOFVIDEOMEMORY). Please delete your armyops.ini file if this error prevents you from starting the game.

We've used our own Discord server since those days and shared it already with 200 players - it works great

If anyone needs help with Discord just let me know.

and you are also the one who was quick to say you would ban Merlin for anything.

You said if he starts his bullshit you will ban him. That's a fact and that's the point I made.

Teddy wrote what you quoted when Merlin came up with faked proof about Possessed being behind attacks. That was the bs Teddy was referring to and if that would have continued it would have resulted a ban.

You should realise yourself how the quote differs with what you said, ban him for anything is like

Hey he used a roofbug once again, let's give him a lifetime ban!

but practically Teddy said

If he continues trying to make innocent people look guilty with faked proof he will be banned

I will try to clear this up here. The ONLY way a stress test could affect a game server is if it is running on the computer that is running the AA server. That is it. So the person running the program would have to be on that server. This is not something a user can do on his own computer and affect some server somewhere.
This is NOT a security risk.

As for the calls for a ban. There will be no ban. Who you give access to your servers is completely up to you and if you get burned by it it's not up to use to hand out punishment for it.

Servers already crashed because of the action described above. If there's no security issue how someone was able to crash them just like that at the first place? I get it that you need to have privileges, you need to pay to get access to server files, and every action executed with privileges will leave a mark, so it all will be easily sorted out, but it doesn't remove the fact that crashing is still possible.

So as long as it's possible, I find it as an issue and if it's not a security issue then what is it?

It was like KillaMan did say. There is no security whole, he did use a regular account to jump on the server where he did know the password. Then, in his own environment, he could - also normal - run this cpu stressing program. And we do not run a virtual machine on each account (would cost much more then 300 euros), therefore a 100% cpu load will block all accounts, servers and everything. It runs as designed. So he jumped on the server with a known account and password and did it.

And yes Wickid, everybody with an account on this server can do it. As you can stop and start your own server there (but only your own server, not others. But you can run a program - works as designed). This is the part of trust i did not understand... So he is banned now and can't do nothing more there.

Cpt.Blei brought up one big ass security hole imo. Similar usage leaves a mark and can easily be spotted afterwards but it's still possible - therefore anyone with privileges can cause same or even worse. I honestly don't know but I guess his actions weren't meant to be harmful, if it was just a test and a reminder that even this kind of arrangement isn't flawless? I personally never gave a thought if you could stress a datacenter like that by installing a software on it to crash it all, clearly someone else have been wondering about it and there's no other way to be sure about it than give it a try, if it works it's a serious risk and needs to be taken care of, if it doesn't work then there's no need to worry. Clearly this method kills the whole service so it's a security hole. Have I missed something very obvious or why I think we should actually thank Blei for figuring this one out than wondering should he be banned or not?

Is there a way to prevent this happening again? Could you simply block file edit permissions from users and add exceptions to .ini- etc game files that needs to be edited personally?

Well, I can just see how this is gonna turn out :
As Battletracker is working now for a few months the whole issue will be forgotten
and only be tackled once BT is completely down.
Eliz doesn't answer and noone else seems to give a shit about the tracking which I
don't quite believe.

Perhaps Battletracker works for your interest, but the biggest issue is still there, you can't register a new player nor handle player info. There's people working on their free time to get this issue solved.

I could name you quite a few players who love the stats.

We all could name bunch of people who care only about their own stats, for these people lack of possibility to register a new player is not an issue at all

What about all the brilliant webdesigners that have been bragging in here about their talents.
Can't you design a new page? I am sure the community would pay for it.

It's not about designing stuff, it's a lot more than that. Also the design doesn't matter at this point, the most important thing is to get profiles editable again, you need to have access to database which contains tons of personal information and you need to have all the knowhow for handling it. It's not that simple as you think.

Anyway I am just worried that all the Information disappears and all the history of years of playing
is gonna be lost.
Please keep us updated about any progress in this matter

Thank you
Lord-of-War 

Are you afraid that your stats will be gone? It's been said several times that it's not the first priority to get stats working with the new solution, then again it's also been said that EliZ has made everything ready for time like this, you just need to be patient and let these people work when they have time, it's not a one hour job or like they could spend 24/7 their time to get things working.

nice now it works gj