[Feedback] Blacklist is better, but not good enough.

[voidlorn]

The problem is your suggestions are exploitable. For example if you block someone you say they should not be able to see you. In order to make them not able to see you their client has to register you blocked them. Which means blacklist information is being sent to the client. Blacklist information being sent to the client of other players is exactly what the stalking plugin is built on and why people bring it up

Anything that forces person A’s blacklist information to be processed by person B’s client to achieve a result (say making it so person B can’t see person A) is open to extreme account wide exploitation

I don’t oppose the idea behind what your suggestions offer. I simply oppose anything that sends more account information to the client

Everything is exploitable. That doesn't mean no attempt should be made to implement changes that make it more difficult for users to harass other users.

[Supersnow845]

Everything is exploitable. That doesn't mean no attempt should be made to implement changes that make it more difficult for users to harass other users.

That’s the thing, the old blacklist wasn’t exploitable (mostly because it was so limited in its functionality that it wasn’t worth exploiting). The new blacklist is simply far too exploitable because your account information SHOULDNT be on someone else’s client, this is MMO design 101. No change to the blacklist will do anything meaningful if you continue to allow account information to be sent to the client because with that happening everything else is just an security theatre

Like I said I don’t necessarily disagree with your proposals but they will only work if square man’s up and actually invests in moving blacklist functionality to the server, everything else is about as effective as taking your shoes off before a flight

Just so I'm clear, what you guys are arguing for is to allow someone that you have blocked to continue following you around in game and seeing all your chat? You're cool with people you don't want to be around being able to follow you all over the place without your knowledge? I know you think you're advocating for privacy, but it's really sounding like you're advocating for in-game stalkers to be allowed to continue stalking their victims.

Literally nobody is arguing that, people are arguing that “security theatre” of the suggestions offered is useless when your account data is on your stalkers client