Server operators, please be advised. There is an exploit in the wild compromising SourceBans++ web installs affecting the last pre-PHP 8.1 version 1.6.4 and the new PHP 8.1 branch up until the version 1.7.0 released with the security patch yesterday.

The attacker is able to compromise the installation by spoofing a successful OpenID login with a different admin account. Depending on the account compromised, this privilege escalation may allow for rcon access via the rcon console, therefore you should assume your rcon password has been compromised. Users may also be added/edited/removed if the compromised account has web panel admin access. Existing user email addresses may also be viewed.

Please note PHP 8.1 must be installed on your web server to run the SourceBans version 1.7.0 that includes the security patch. This also requires updating Composer dependencies, one of which requires PHP to have the Sodium extension.

Update to the latest release here: https://github.com/sbpp/sourcebans-pp/releases/tag/1.7.0

Introducing Beam Hop! You can create your own force-field beams by hitting alt-fire after firing a rocket. A beam will appear between the rocket and where you aim.

You can briefly bunny hop on top of the beam or even rocket jump on one. Touching a beam shortens its lifespan but you can recharge it by firing an extra rocket on it up close. Can you chain a beam pogo?

Challenge yourself this weekend and creatively cheese through all the jump maps!

A recently discovered exploit on Google Pixel phones' default screenshot editor allows unprocessed images (e.g. images uploaded onto Discord from 5 years ago until January 17) that were edited (e.g. crop or marker) to be partially reversed to recover contents from the original image. This may have security implications for users who may have inadvertently shared sensitive information assuming the edits were sufficient.

For more information, see:

https://www.theverge.com/2023/3/19/23647120/google-pixel-acropalypse-exploit-cropped-screenshots

https://twitter.com/ItsSimonTime/status/1636857478263750656

Added a Credit Board to thank everyone who contributed to JA2 in some way.
A magical gold hoard has appeared in spawn. (It appears that some gold has been stolen and hidden around spawn, maybe finding and returning all the stolen gold will earn you a reward.)
Added a capture name to the 691 ctap capture area (was previously fixed with stripper).
Disabled decals on the Zero to Hero TV in spawn.
Disabled projectiles and decals on the ctap guide board.
Fixed the lighting in the hottub.
Fixed one of the songs on the jukebox being corrupted.
Fixed the birbs not working as intended (was previously fixed with stripper).
- Something might happen if you scare all the birbs once.
Fixed the red fog from hell persisting after leaving.
Fixed the waterfall noise and the bird sounds following players outside of spawn.
Made the jukebox room a little more dank.
Made the jukebox music louder.
Made the jukebox automatically play new songs when the previous song finished.
Made TicTacToe melee only.
Revamped Hell with a bigger and better(worse?) version.

Added a decal to inform players what to do on basic last.
Adjusted the catapult trigger on easy strafe 10.
Changed Easy Pogo 8 and 12 to be anti-bounce.
Added a memorial to the end of Easy Pogo for RNC.
Added a decal to the top of easy sync 2 to let people know it’s not a bug.
Reverted the easy sync 4 glass skip for the first glass wall.
Modified the lighting on Medium Walls.
Made the middle of Medium Pogo 4 ceiling bounce-able.
Removed the glow/bloom sprite from Medium Sync 8.
Added a memorial to the end of Medium Bounce for RNC.
Removed collisions from the roof beams at the start of Medium Speedshot.
Fixed numbers on Medium Speedshot being too far apart.
Fixed Out-of-Bounds hole on Hard Walls ¾.
Fixed Out-of-Bounds hole on Hard Pogo 10.
Increased the size of the regen trigger on Hard Mixed 1 without making it a wall pogo simulator.
Made the edgebug on Hard Mixed 4 automatic.

Re-added the previously removed point_spotlights (godrays)
Added pirate translations to the map briefing.
Added more voice lines to “Sentry Ahead!” and “Activate Charge!”.
Removed the sound of Engie buildings exploding.
Optimised a bunch of prop_dynamic to use less resources.

Post-Event Notes:
Thank you for stopping by to watch our segment and once again show that the community can come together to raise money for a great cause!
Special thanks to ridge tev firestabber Gentle Puppet JoinedSenses Xbmann & Nolem for joining us behind the scenes and providing their expertise to make the segment even better. And of course thanks to TFConnect for having us again this year. Appreciate you all!
If you missed it watch the vod here: https://www.twitch.tv/videos/1675326249?t=3h27m1s

PvP Servers:
If you weren't around for the event, you may have missed that we're remaking the Hightower servers into rotational PvP Servers, running maps that have been edited so jumping feel less restrictive. For those that have grown accustomed to the Hightower map, the servers will default to Hightower on server start-up, and can be rtv'd.
We hope you'll come on and try how the maps play, and report any feedback you may have in the new PvP Discord: https://discord.gg/CTvBmDdUD3
Here’s a Teaser video: https://youtu.be/WcL0qBTztLI
Credit to Gentle Puppet for the map work!

Mapping Discord:
We’ve created a dedicated discord for Jump Mapping, if you would like to learn how to map or be around to answer questions aspiring mappers may have we’d love to have you, there’s already a lot of resources there for you to delve into- or you can contribute your own!
Note that we're still working on it, more will come later. Feel free to give us suggestions and ideas.
https://discord.gg/TKxeCcV258

PayPal Donations:
After PayPal updating their policies we lost access to our old PayPal, luckily no funds were lost. We've now made a new one, and PayPal donations are an option again!