[Feedback] Blacklist is better, but not good enough.

[voidlorn]

Spoiler: They will still be able to see you and see all your public chats like before. Your idea is circumvented within minutes and will lead to even more privacy invasion with databases containing the blacklists of people.

They are simply not willing (or capable) to filter outgoing packets on a per player basis.

Assuming they use the plugin. Which this thread is not about.

I know coding and reading aren't necessarily coexistent skills but you should probably brush up.

[voidlorn]

Just want to reiterate once and for all: This is not a "but the PLUGIN" thread. This is a, the base functionality of this safety tool needs to be improved thread. I don't care about the stupid plugin and bypassing the game systems, whatever, that's a separate issue. I'm talking about the basic protections this game should provide for users. That safety should not be discounted with the excuse of "Well, someone will work around it anyways." People ignore restraining orders, too, that doesn't mean you stop issuing them.

[PotatoePet]

Assuming they use the plugin. Which this thread is not about.

I know coding and reading aren't necessarily coexistent skills but you should probably brush up.

So privacy of users isn't important as long as you get what you want.

Its still sent to the clients, so wireshark is enough. All you are asking for, and here it becomes very ironic, is: "providing the fragile illusion of safety"

I already said this before but seems like you weren't able to understand that.

EDIT:

Just want to reiterate once and for all: This is not a "but the PLUGIN" thread. This is a, the base functionality of this safety tool needs to be improved thread. I don't care about the stupid plugin and bypassing the game systems, whatever, that's a separate issue. I'm talking about the basic protections this game should provide for users. That safety should not be discounted with the excuse of "Well, someone will work around it anyways." People ignore restraining orders, too, that doesn't mean you stop issuing them.

I am argueing against building upon that fundamentally broken system only to make it harder to revert it back. The privacy concerns haven't vanished and aren't fixed.

[voidlorn]

So privacy of users isn't important as long as you get what you want.

Its still sent to the clients, so wireshark is enough. All you are asking for, and here it becomes very ironic, is: "providing the fragile illusion of safety"

I already said this before but seems like you weren't able to understand that.

Look, if I want someone to condescend to me and put words in my mouth, I'll call my mother, not you.

I want this basic safety functionality improved. The implementation can be changed to be more secure, and the devs are probably already working on ways to do so. The specific implementation is not what this thread is about. It is about the end result of that improvement, not the myriad ways bad actors can work around it.

I've already said this before, but it seems that you were unwilling to comprehend that.

[PotatoePet]

Look, if I want someone to condescend to me and put words in my mouth, I'll call my mother, not you.

I want this basic safety functionality improved. The implementation can be changed to be more secure, and the devs are probably already working on ways to do so. The specific implementation is not what this thread is about. It is about the end result of that improvement, not the myriad ways bad actors can work around it.

I've already said this before, but it seems that you were unwilling to comprehend that.

And I am strongly opposing it as your false sense of security isn't worth the privacy invasion of all XIV players.

EDIT: IF the situation changes I may be inclined to overthink my own stance on this. But as it is right now this whole new blacklist feature is a catastrophe. The whole system is fundamentally flawed tho as the mere fact that you can see all of the alts of people on lodestone alone when you block someone is giving away way too much information.

[voidlorn]

And I am strongly opposing it as your false sense of security isn't worth the privacy invasion of all XIV players.

EDIT: IF the situation changes I may be inclined to overthink my own stance on this. But as it is right now this whole new blacklist feature is a catastrophe. The whole system is fundamentally flawed tho as the mere fact that you can see all of the alts of people on lodestone alone when you block someone is giving away way too much information.

You're not entitled to anonymous alts at the cost of other people's safety. Hope this helps!

[PotatoePet]

You're not entitled to anonymous alts at the cost of other people's safety. Hope this helps!

I dont have alts but yes, I would be entitled to anonymous alts. This might as well be a EU GDPR concern as well.

[Veladrys]

And I am strongly opposing it as your false sense of security isn't worth the privacy invasion of all XIV players.

Stop. Legal actions are being taken against the plugin, and any forks of it are reportable to Github. Furthermore, why are you assuming that Square Enix can't improve the system to prevent that information from being obtainable by plugins? Haven't they already said they've been working on a fix? Why are you so adamantly against improving the system as it exists now?

[Supersnow845]

The problem is your suggestions are exploitable. For example if you block someone you say they should not be able to see you. In order to make them not able to see you their client has to register you blocked them. Which means blacklist information is being sent to the client. Blacklist information being sent to the client of other players is exactly what the stalking plugin is built on and why people bring it up

Anything that forces person A’s blacklist information to be processed by person B’s client to achieve a result (say making it so person B can’t see person A) is open to extreme account wide exploitation

I don’t oppose the idea behind what your suggestions offer. I simply oppose anything that sends more account information to the client

[PotatoePet]

Stop. Legal actions are being taken against the plugin, and any forks of it are reportable to Github. Furthermore, why are you assuming that Square Enix can't improve the system to prevent that information from being obtainable by plugins? Haven't they already said they've been working on a fix? Why are you so adamantly against improving the system as it exists now?

They published their fix. Its not working and was cracked within 24hrs as they were not willing to do it the only right way you should approach something like this by filtering outgoing packets on a per player basis.

I can't see the future and I might change my stance on the matter when SE surprises me but it doesn't seem like they are willing to implement a filtering system for outgoing packets on a per player basis. At least so far they gave all the signals that they are not willing to invest big time into this feature.

EDIT:

Stop. Legal actions are being taken against the plugin, and any forks of it are reportable to Github. Furthermore, why are you assuming that Square Enix can't improve the system to prevent that information from being obtainable by plugins? Haven't they already said they've been working on a fix? Why are you so adamantly against improving the system as it exists now?

This isn't a legal problem but a technical one tho.