Arkensor

Postmortem: Arbitrary code execution and credential theft vulnerability in the AR Workbench

The Arma Reforger Workbench has suffered from two major security problems up until the 0.9.6 patch (released on 20.10.2022) that allowed malicious actors to distribute mods to exploit two separate vulnerabilities to 1. steal BI account login credentials in plain text and 2. execute an arbitrary .exe without the user being able to notice in advance. Both are now fixed! Unfortunately Bohemia Interactive has decided to not inform the general public about this in an appropriate way, so this post aims to let modders know about any potential harm they might have been exposed to.

The game itself and thus "normal players" were not affected. Only modders/content creators that launched the Arma Reforger Tools (Workbench) AND used third party mods/dependencies should double check if they were exposed to them.

---

Cred

nnsdev

How to fix resource performance

Showing by example of "disc-base" exempts

This is an example of a resource called "disc-base", I have only taken parts of it and removed the mentions of ESX, because I am running this on an empty server. The part we are looking at here especially is the marker drawing. This is also an outdated version of this resource before they applied performance improvements, but we are also going to go deeper than their changes.

Base of this tutorial: https://github.com/DiscworldZA/gta-resources/blob/54a2aaf7080286c8d49bbd7b1978b6cc430ec755/disc-base/client/markers.lua (client.lua here)

Assessment

andremelo90

<!--FidoVPack 4
    <type name="FP4_Detectiv_hat">
        <nominal>30</nominal>
        <lifetime>1800</lifetime>
        <restock>0</restock>
        <min>15</min>
        <quantmin>-1</quantmin>
        <quantmax>-1</quantmax>
        <cost>100</cost>
        <flags count_in_cargo="0" count_in_hoarder="0" count_in_map="1" count_in_player="0" crafted="0" deloot="0"/>

Bevinsky

The list is formatted as "id|location type|name|vector2", where location type is one of the following:

* 0: Settlement
* 1: Military base
* 2: City
* 3: Comm outpost
* 4: Harbor
* 5: Airport
* 6: Oil rig
* 7: Faction stronghold