I'm very well acquainted with this area of system security, thank you, more so than you may imagine.cheeser123 wrote: »
Again, not talking about encrypting data, talking about cryptographic authentication. If you don't know the difference, I'm fairly sure you shouldn't be commenting.
I'm very well acquainted with this area of system security, thank you, more so than you may imagine.
I'm unclear where you think authentication comes into it.
Gotta agree with that, makes me extremely worried about safety when playing this game if it is this easy for individuals to literally teleport.. no other MMO is recent history has had such stuff going on.
Makes me question, what else can they do? Teleporting is usually associated with GM Powers for example.
cheeser123 wrote: »
Because I'm not sending a load of encrypted data, I'm just proving that my client is unadulterated. That's the difference between encrypting data and authentication. That's what those words mean. I don't know how much plainer it could be than that.
Its not a matter of game security. Since character movement is controlled client-side, and not authorized by the server(no MMO does this as the data overhead would choke the server), there is absolutely nothing that can be done to prevent a hack like this.
The only thing that can be done is detect and ban them as fast as possible.
Randomizing nodes could possibly stop this?
cheeser123 wrote: »Assuming this is something that people might have to report often, what is the procedure for reporting this? It's not a bug, so /bug is probably wrong. Can you give a detailed idea of how we should report this kind of activity, what information to include, how to make sure it's tagged or otherwise marked appropriately so that it gets to the right people so that these bots can get banned lickedy split?
Maybe screenshot if you can at least hover over their name but yeah it's kind of stupid how fast they phase in loot and phase out again.the ones i've seen in action were way to fast to target and hit them with f. I am not slow, but they are barely visible for a second.
I have a feeling you are just throwing around buzzwords you read somewhere without actually realizing what they mean.
cheeser123 wrote: »
Authentication = knowing somebody is who they say they are, that they have data they say they have, etc.
Encrypting data = taking data and making it obfuscated in some way.
We are talking about the first one. CS102 should have taught you this.
Because I'm not sending a load of encrypted data, I'm just proving that my client is unadulterated. That's the difference between encrypting data and authentication."