[esquire_900]

Reading the timeline at the bottom makes this seem like a very frustrating process, it took multiple nudges and over a year for Valve to even start fixing. I can't imagine putting in this much work and getting such a lackluster response.

[tehwebguy]

Seriously, 15 months is kind of a slap in the face (to everyone who plays CS:GO)

[veave]

Exploiting these bugs requires you to connect to external servers which is not something you are really supposed to do in csgo.

[pityJuke]

Community servers are a built in feature to Counter-Strike: Global Offensive, accessible for regular users via the main menu. Many of the professional scene exclusively use them (via MM services like FACEIT, and training servers like BrutalCS).

Connecting to these services safely is absolutely something players should have trust in.

[veave]

Doesn't take much to assume that a Source game is full of RCEs.

[ddtaylor]

I'll gladly take research that helps protect tens of millions of players over generic defeatist hand waving that "source games are broken".

[ho_schi]

Hosting own servers is a feature of CSGO.

A feature provided by all well designed client/server software. Thus avoiding vendor lock-in and dependence. Good for LAN-Parties, bad or no networking, original developer doesn’t exist anymore or doesn’t care.

And then there as these developers which are the only ones with the server code and shutdown their servers by intention - I recommend to avoid software which such a planned obsolescence.

[mkaszkowiak]

Have you even played CS:GO? Some of the modes aren't available on official servers - kreedz, aim maps, etc.

[fulafel]

How do you know this? Is there strong cryptographic integrity protection for traffic from the official servers that prevents active attacks injecting malicious messages?

(Also, why aren't you supposed to use other servers?)