Quake Security Hole! You may already be infected...

[dayfive]

lol

is this for real?

http://insecure.org/sploits/quake.backdoor.html

[dayfive]

These games by ID software are absolutely riddled with glaring security holes and no one should even CONSIDER running them (or any other game for that matter) on a machine that is supposed to be secure.

lol

http://insecure.org/sploits/quake2.various.html

[dayfive]

Not sure if its ok to talk about DOOM here but

http://insecure.org/sploits/linux.doom.sndserver.html

[FrikaC]

Well for one, QuakeWorld added rcon, Net Quake itself does not even have that feature - so assertions that it happens on Net Quake are total lies.

I seem to recall seeing that backdoor in either the QuakeWorld or the Quake 2 code, but iirc it was ifdef'd out and not compiled, I've been looking through q1source.zip and can't find it anywhere in there, so it's either in Q2 or id seripticiously removed the code for it when no one was looking.

It's also possible that the source does not have it and it's only in the binaries they released, but I do recall seeing it at one point.