Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws

Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by kevincox on Saturday June 29, 2024 @04:08PM (#40833039)

Due to the need for perfect synchronization all users need to be using the exact same version. Mods can also break between versions. It is therefore very common for public servers to stick on one version for extended periods of time. It is common for people to use the Steam "betas" functionality to pick an exact version or download an exact version from the Factorio website.

I would say that servers only tend to update when large features are released. So announcing a security vulnerability would likely push some servers to update.

[ Parent | on HN ]

Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by bigstrat2003 on Saturday June 29, 2024 @11:45PM (#40835004)

Without metrics of some kind from Wube I guess we aren't likely to know for sure, but I doubt very much it is common to run old versions of the game on Steam. I bet you that most people are simply running on the latest version at all times. That solves the MP issue, and plenty of mods don't need to be updated for each game version.

[ Parent | on HN ]