[quido]

I would assume that most of the stuff you can exploit already exists publicly from EQEmu. I'm not even advocating sharing the majority of stuff - most things probably don't even merit review, though completeness is important in trying to isolate problems. The nature in which a number of these systems needing work manifest themselves makes the releasing of the source relatively harmless in my opinion. Take for instance pathing. I seriously doubt someone looking to exploit pathing will be better equipped to do so having read the source code. In fact, they would be better equipped to perform such an exploit by doing what anyone could do - simply sitting there and taking the time to see how things path, and bearing in mind an effective grid that mobs adhere to in a particular area. This code is likely independent of anything that can be realistically exploited by a player. Also consider the code relating to the disparity between broadcast mob animations (position deltas) and the reality of these mobs' positions on the server (which are then corrected upon a tick, causing the mob to teleport). I seriously doubt that anything relating to this issue is exploitable. I can, however, appreciate not wanting to share code relating to trading, tradeskills, vendors, and other systems that appear to be the likely targets of exploitation.

I fully acknowledge my own ignorance on a sysadmin level and am seriously impressed you guys manage to hold this whole thing together. I couldn't imagine trying to host near 100 static zones on a box or two, but I can imagine some of what you'd have to do to get the source to run efficiently. Nonetheless, I think the benefits of selectively releasing source to the community far outweigh the risks which can be eliminated with a little diligence.