Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NetHack 3.6.6

nethack.org

Post reply on HN
Print view View original

11–20 of 90 posts

Re: NetHack 3.6.6

#11

Post by alxlaz »

bhaak wrote: post #4

Most of those security bugs have been found by using http://lcamtuf.coredump.cx/afl/ for fuzzing the config parser of NetHack. Also read the hilarious account how neglecting the integer range of parsing a number lead to a config that gives you an almost invincible character from the start: https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how...

One of the things I love about nethack is that these things effectively amount to magic. Arcane knowledge of how the (virtual) works underneath beneath that which is (virtually) physical allows you to manipulate the world in strange ways that seem logically impossible. Nethack developers are among the few who can claim that a bug is a feature and be half-serious about it :-).

Re: NetHack 3.6.6

#12

Post by bhaak »

Tepix wrote: post #6

Nethack is great, is there a server where people can watch someone play the game and have a (audio) chat while watching? There's so much stuff to learn, I'd love to chat with an experienced players while they are venturing deeper into the dungeons.

Yes, either via ssh or telnet or even in your browser. The wiki lists several available public servers: https://nethackwiki.com/wiki/Public_server#List_of_public_se...

The public server with most forks hardfought.org. Info on how to connect is on https://www.hardfought.org/nethack/

You can watch in your browser: https://www.hardfought.org/nethack/hterm/

There are 3 servers in Europe, the US, and Australia.

Most people are in various channels (e.g. #nethack, #hardfought) on Freenode but the #hardfought channel is also bridged to a channel on the Roguelike discord server (https://discord.gg/xUPxRe).

Re: NetHack 3.6.6

#13

Post by saagarjha »

bhaak wrote: post #4

Most of those security bugs have been found by using http://lcamtuf.coredump.cx/afl/ for fuzzing the config parser of NetHack. Also read the hilarious account how neglecting the integer range of parsing a number lead to a config that gives you an almost invincible character from the start: https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how...

> First, I made the PIC global offset table (GOT) writable by disabling PIE on the link line (-no-pie).

Wait, what?

Re: NetHack 3.6.6

#14

Post by classified »

I am still a hardcore fan of Angband:

https://rephial.org/

Different types of information (inventory, map, monster info, etc) can all be put in separate windows, so my screen is plastered with Angband windows when I play. Makes for great immersion, and the windows all retain their position and size between program starts.

It may even be older than Nethack.

Re: NetHack 3.6.6

#15

Post by stevekemp »

kalium_xyz wrote: post #2

https://www.nethack.org/security/CVE-2020-5254.html Never considered nethack as part of my security model

Years ago I reported a security bug (CVE-2004-0103) in the nethack-like game "crawl". In that case it involved copying the contents of an environmental variable into a fixed size buffer.

I've just checked my bug report, where I wrote:

Demonstrating this bug is quite challenging as it involves:

* Finding pizza.

* Eating the pizza and having a two in three chance of your message (getenv( "CRAWL_PIZZA")) being used.

Fun memories; I should audit some more code soon.

Re: NetHack 3.6.6

#16

Post by sethish »

classified wrote: post #14

I am still a hardcore fan of Angband: https://rephial.org/ Different types of information (inventory, map, monster info, etc) can all be put in separate windows, so my screen is plastered with Angband windows when I play. Makes for great immersion, and the windows all retain their position and size between program starts. It may even be older than Nethack.

Angband is 1990, Nethack is 1987

Re: NetHack 3.6.6

#17

Post by grandchild »

sethish wrote: post #16
classified wrote: post #14

I am still a hardcore fan of Angband: https://rephial.org/ Different types of information (inventory, map, monster info, etc) can all be put in separate windows, so my screen is plastered with Angband windows when I play. Makes for great immersion, and the windows all retain their position and size between program starts. It may even be older than Nethack.

Angband is 1990, Nethack is 1987

If you dig into the version history of Angband[0] you will find that it was derived from the Moria[1] code, which was released in 1983. So depending on what your concept of "origin" is it might or might not be older.

[0] http://www.thangorodrim.net/history/version.txt

[1] https://en.wikipedia.org/wiki/Moria_(video_game)

Re: NetHack 3.6.6

#18

Post by naniwaduni »

grandchild wrote: post #17
sethish wrote: post #16

Earlier quoted context omitted.

Angband is 1990, Nethack is 1987

If you dig into the version history of Angband[0] you will find that it was derived from the Moria[1] code, which was released in 1983. So depending on what your concept of "origin" is it might or might not be older. [0] http://www.thangorodrim.net/history/version.txt [1] https://en.wikipedia.org/wiki/Moria_(video_game)

Nethack, in turn, descends from Hack, released in 1982, but first published to Usenet in 1984. Hack and Moria are likely simultaneous.

Re: NetHack 3.6.6

#19

Post by jakamau »

Tepix wrote: post #6

Nethack is great, is there a server where people can watch someone play the game and have a (audio) chat while watching? There's so much stuff to learn, I'd love to chat with an experienced players while they are venturing deeper into the dungeons.

Matt Colville did a number of twitch streams of NetHack. I don't think he does them regularly but his archived streams were a great introduction for myself.

He goes by MCDM on twitch and youtube.

Post reply on HN