Security Vulnerabilities fixed by Patch #2 and Character wipe

[rocket 16567]

The source of the big delay in getting DayZ out was because of the new architecture that we built. As part of this, we spent a great deal of time making very efficient and new ways of doing things. Many of the problems of ArmA for security were by design, doors used by the application to achieve its needs. In ArmA these could not be closed, in DayZ we no longer need them. We thought we had closed some of them, but we found one and we've fixed it. However because some people will have spawned items, we decided to wipe the database to provide a clean slate.

 

All existing characters have been killed, if you are currently logged in when you next join your character will be dead.

 

This is all part of the testing process, we've identified some additional areas of security and enabled some we had left off so we could really see the holes in the architecture without having to rely on the higher tier security measures. Because the vulnerability would allow a player to create items (and they had been) we have decided to wipe the whole database. We could not announce this, as we didn't want to encourage those exploiting to try and figure out a way of leaving items on the ground. We have killed all characters in the database, who existed after all our servers moved to the new version (0.29).

 

Please Note: It is more than likely that we will, much like other software, be continually identifying and patching these kinds of critical security vulnerabilities.

 

Important updates like this WILL attract database wipes during the alpha process. We apologize for the inconvenience but I am sure everyone can agree, it is not fair to keep going with the bad data and some of the unfinished items were spawned in game - which could cause crashes and other issues thus confusing our alpha testing. Many people were experiencing crashes relating to these items that had been created in the game.

 

I realize this is a little vague, but its our policy to be suitably vague about specifics regarding implemented security measures.

[Hetstaine 10852]

There goes my extra torch battery.

[Guest]

Do you feel that the security level at the moment is adequate, or will it be an ongoing improvement

[johngrenham 10]

Understandable, I can expect this from an alpha, do what you gotta do to keep the heckers out

[joe_mcentire 2074]

...and my axe.

[lazy2guns 38]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year.

Trial & error isn't how you write server software. Cheers.

[OhDan 39]

As we all know this was going to happen during the Alpha period, It doesn't really bother me, and I'm sure most people will agree.. I'd rather you fix the security issues and kill off everything I have then a hacker teleporting and exploiting the server. 

[bloodwork 10]

All hail the wipe! Sad about losing my compass though.

[rocket 16567]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year. Trial & error isn't how you write server software. Cheers.

 

If you want me to take you seriously, have the common decency not to mock me with your username.

[dakisback 39]

NOOOOOOOOOOOOOOOOOOO

 

http://steamcommunity.com/sharedfiles/filedetails/?id=205261505

[wickerrman 12]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year. Trial & error isn't how you write server software. Cheers.

 

Why are you complaining about this? They patched what they could find, people finding these exploits during an alpha...which is the stage where things are usually fixed during true development can only be a good thing, so they can be fixed everytime one pops up.

 

Fixing these security issues can only be a good thing.

[Hetstaine 10852]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year. Trial & error isn't how you write server software. Cheers.

 

:emptycan:

[stricky345 1]

No, just had a run with a friend and we got fully modded guns and everything :p.

[RedNome 443]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year. Trial & error isn't how you write server software. Cheers.

 

So, no reason for you to be posting anymore then?

 

Right?

 

RIGHT???

[joe_mcentire 2074]

NOOOOOOOOOOOOOOOOOOO

 

http://steamcommunity.com/sharedfiles/filedetails/?id=205261505

inb4 seppuku

[Vandelay 7]

there is a ban hammer associated to this? i hope those hackers got the hammer for good, so the only way for them to come back is to buy the game again, and this time play fair.

[danlegend 16]

Good job, I'll also take this moment to post videos of hacks for every other video game. It is important for you neckbeards to note that no game is free of hacks and all that was promised in DayZ standalone was no more nukes, ThunderDomes, Insta killing servers, and animal hacks.

Youtube videos of hacks of every other fps: http://youtu.be/i0r-bC2l6v0?t=41s http://www.youtube.com/watch?v=pIzq0IttNZk http://www.youtube.com/watch?v=emGj4LtKNH0 http://www.youtube.com/watch?v=8KoMMeMwT88

[lazy2guns 38]

If you want me to take you seriously, have the common decency not to mock me with your username.

 

It doesn't really matter if you take my words seriously, does it?

[Xucphra 453]

It doesn't really matter if you take my words seriously, does it?

It might. Presentation is everything.

[bloodwork 10]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year. Trial & error isn't how you write server software. Cheers.

Server software is written by predicting the future by eating a lot of rotten kiwis of course. Rocket clearly doesn`t know what he`s doing despite creating DayZ and consistenly improving upon the formula.

[Beck (DayZ) 1768]

GET OFF THE COAST! Go go go!

Edited December 19, 2013 by Beck

[onty 109]

I expected that to come. I'm cool with that, actually im kind a happy i got something to do now :)

[ahsfreitag94@yahoo.com 8]

Lost my over 10 hour old character who was pretty kitted... all good though. To be fair, hackers ruined the mod so much, so a complete wipe is really not that big of a deal. I just also wanted to thank you, Dean Hall, and your team for working so hard on making the mod everything we want it to be. I mean, the fact that we've had 2 updates in 2 days just makes me appreciate this even more. Also, may I remind everyone that when testing MMORPG alpha's, the companies wipe characters every week, so this is honestly not that bad.

[skilpad 43]

Well you did warn us about this so we cant be mad

[magicool 115]

Right, so instead of implementing a "MMO framework" your plan was to "leave it as is" and slowly plug holes under the pretense/shield of "it's Alpha!". Yeah, nah. I loved the mod, I had great hopes for this game last year but I'm glad I didn't buy nor will I likely ever, especially if this "Alpha" is expected to last up to a year. Trial & error isn't how you write server software. Cheers.

 

this guy is clearly an expert on the virtual reality engine

 

not

 

I bet he could fix this in 1 day

 

not