Yes, it's true.
Blizzard really provided a hole to let some extra code be executed on the client side if the server requests that.
They protected that code by digital signature... that became weak and could be used to attack clients if the server owners/developers are not trusted.
That's why I never joined RealTuPaC's server and I'd not recommend others to do that.
I stopped deal with him after he (or his friends in contact with him as he said) hacked russian site.
TuPaC attacked sites and servers belongs to war2.ru project from time to time, he confirmed that himself. He said he "helped to find vulnerabilities" in war2.ru, but in fact he hacked it, and then I had to analyze the situation and repair things, restoring the files, fixing the holes, changing all the passwords. That is definitely not something looked like "help to find vulnerabilities".
Some newer attacks keeps happening, TuPaC disclaims his part, but they looks 99% similar to ones he confirmed.
I didn't want to tell about my relation to TuPaC, but he began that himself, talking about "3rd party server". We all know the most popular "3rd party server" is war2.ru, so I regard this thread as an attack against us.
After I stopped deal with TuPaC, he completely moved to the server he provides and began posting messages of hate about war2.ru.
About war2.ru project:
War2.ru works as the only worldwide War2-server since 2008, the whole war2-community uses it as the main place to play war2 all these years till now.
All the time we take care of our reputation. We have hundreds of active players who enjoy war2 all these 25 years from the very beginning, they moved to war2.ru since Blizzard abandoned their official USAs, Europe and Asia servers.
I can't be too active all the time to improve all the features on the server, but I do everything to make it be the safe place to play.
Yes, we really had some problems with security: players' database leaked with all the passwords, after one guy hacked it. That happened about 8-10 years ago, I don't remember the moment. Several years later TuPaC began to act together with that guy...
Yes, our admin team have to make delicate desicions about some unpleasant members sometimes, so war2.ru have haters, same as in every other community I think, some people disagree with such desicions, but we always try to make the community enjoy playing war2.
Toxic environment - yes, some long time played members are toxic, others dislike them, but it's became a subculture or war2 since the very beginning. Our admin team is not glad about such behavior, but here's how the community is. We try to make place for everyone who want to play war2. Most players are friendly to newcomers and other players.
War2.ru server allows all the existing versions of war2 to get maximum coverage, especially newcomers with some other versions. Every version will work, but we strongly recommend to use War2Combat to play as the most compatible with all new windows and containing the most number of useful improvements.
Yes, some virus scanners sometimes causes false-positives, I don't see how to fix that: some heuristic algorythms dislike binaries with injections into war2 executable code (the only way to fix the code keeping it compatible with the original one - one of the main concept of Combat). What I can guarantee: there's no malicious code in War2Combat: I carefully check every single piece of source code before include someting into the project. I also never use code from untrusted developers.
Post edited July 04, 2020 by ilwar2