What changed
1 fix0 additions4 changes0 removals
- Security
- Fixes
- Server
- Compatibility
fixedv0.60.4: Stat-roll fix and bot detection dashboardSmall hotfix release on top of v0.60.3, covering one stat-roll exploit reported by a beta playtester and a long-overdue admin-dashboard surface for the bot detection system.
changedStat-roll free reroll on invalid input (fixed)Player report: "Found a silly bug: when you go to roll your stats, any input besides what is prompted of you re-rolls your stats again. You can do it forever. I dunno if this is actually a big deal since you can just not accept your character after 5 stat rerolls anyway, but I did it on accident then went 'wait a second...' and wound up with like two whole more CON than I had rolled previously after a few tries."
changedStat-roll free reroll on invalid input (fixed)Confirmed. The stat-roll prompt re-rolled fresh stats on every invalid keypress without decrementing the 5-reroll cap, so anyone could effectively roll forever by mashing wrong keys. The displayed stats now stay locked until the player picks Accept or Reroll.
changedBot detection visible to sysopsThe full snapshot now lives on the admin dashboard. Sysops running their own server (or admins of the official server) can see every active session's input cadence in real time and watch for suspicious patterns before any thresholds get tripped. Strictly read-only review for now, no automated kicks or throttling.
changedBot detection visible to sysopsBeta is currently live. Connect direct via play.usurper-reborn.net:4000 (SSH or raw TCP for MUD clients) or play through the web terminal at usurper-reborn.net .
Usurper Reborn changes
fixedSmall hotfix release on top of v0.60.3, covering one stat-roll exploit reported by a beta playtester and a long-overdue admin-dashboard surface for the bot detection system.
changedPlayer report: "Found a silly bug: when you go to roll your stats, any input besides what is prompted of you re-rolls your stats again. You can do it forever. I dunno if this is actually a big deal since you can just not accept your character after 5 stat rerolls anyway, but I did it on accident then went 'wait a second...' and wound up with like two whole more CON than I had rolled previously after a few tries."
changedConfirmed. The stat-roll prompt re-rolled fresh stats on every invalid keypress without decrementing the 5-reroll cap, so anyone could effectively roll forever by mashing wrong keys. The displayed stats now stay locked until the player picks Accept or Reroll.
changedThe full snapshot now lives on the admin dashboard. Sysops running their own server (or admins of the official server) can see every active session's input cadence in real time and watch for suspicious patterns before any thresholds get tripped. Strictly read-only review for now, no automated kicks or throttling.
changedBeta is currently live. Connect direct via play.usurper-reborn.net:4000 (SSH or raw TCP for MUD clients) or play through the web terminal at usurper-reborn.net .
v0.60.4: Stat-roll fix and bot detection dashboard
Small hotfix release on top of v0.60.3, covering one stat-roll exploit reported by a beta playtester and a long-overdue admin-dashboard surface for the bot detection system.
Player report:"Found a silly bug: when you go to roll your stats, any input besides what is prompted of you re-rolls your stats again. You can do it forever. I dunno if this is actually a big deal since you can just not accept your character after 5 stat rerolls anyway, but I did it on accident then went 'wait a second...' and wound up with like two whole more CON than I had rolled previously after a few tries."
Confirmed. The stat-roll prompt re-rolled fresh stats on every invalid keypress without decrementing the 5-reroll cap, so anyone could effectively roll forever by mashing wrong keys. The displayed stats now stay locked until the player picks Accept or Reroll.
Bot detection visible to sysops
The bot detection system has been instrumenting per-player combat-input cadence since v0.60.0 (rolling 30-sample window, mean and standard deviation tracking) but the data was sealed inside the game process and only visible to admins via flagged-session log entries.
The full snapshot now lives on the admin dashboard. Sysops running their own server (or admins of the official server) can see every active session's input cadence in real time and watch for suspicious patterns before any thresholds get tripped. Strictly read-only review for now, no automated kicks or throttling.
This affects sysops directly. Player experience is unchanged.
Beta is currently live. Connect direct via play.usurper-reborn.net:4000 (SSH or raw TCP for MUD clients) or play through the web terminal at usurper-reborn.net.
