Re: Regarding the Use of Third-Party Programs and Player Safety

[Collin_Sky]

I'm increasingly convinced that SE's statement was actually genius. Everyone's arguing with each other about plugins, which are an almost entirely separate issue, instead of dogpiling SE for their astounding incompetence.

You're giving Yoshi too much credit.

[EunJuAnna]

I'm increasingly convinced that SE's statement was actually genius. Everyone's arguing with each other about plugins, which are an almost entirely separate issue, instead of dogpiling SE for their astounding incompetence.

they fr just shirked any and all responsibility onto plugins and mod community, when it was their terrible lack of privacy protections that blew all this up. AND IT WORKED. this game is cooked lol.

[TaleraRistain]

This is definitely getting the side eye from me. Take the account ID back server side, encrypt it before sending to the client side so client side can utilize it. If that is difficult to do quickly, roll back the feature for now until that vulnerability can be plugged. Yes, stalkers are always going to exist in the game but they put out a buffet to them with this change and I always try to empathize with them as a fellow coder, but this is one to me that should be setting off alarms and causing action on their side.

[technole]

Seems very short-sighted to say oh if you ban mod, goodbye MMO. The majority will fall in-line because you agreed to the ToS by playing the game, so you can't act like you were not doing something wrong in the first place.

They are just very quiet when it comes to bannings. The last time it was visibly clear was during the mod twitch hunt around the DSR days when YoshiP wrote that long-winded post and YouTube clears got taken down, and anyone that had modded huds and streaming were put in GM jail. This changed the streaming community as a whole, but that's not say you can't hide that stuff from OBS, or have other things on another monitor kind of ordeal. It was more of don't be reckless with mods.

[ZXN]

I am genuinely curious if there are actually a ton of players that are really surprised by how Yoshi-P and the devs/Square Enix are "handling" this situation because it really shouldn't be that surprising given their track record when it comes to anything 3rd party related.

Yes, this time around they flat out said they were discussing the request to remove/delete the tool and/or pursue legal action, which sounds good on paper, until you realize this is a whole pile of nothing for the time being.

Big Cheez said it earlier-

...It isn't displaying "a segment of an FFXIV character's internal account ID", they send the whole ass account id to the client, raw and unencrypted and it isn't "used in an attempt to further correlate information on other characters on the same FFXIV service account", they just use the whole account id that they're being given to look up other characters with the same account id.

This is the devs refusing to acknowledge that this is even their own fault.

Obviously nobody should be expecting a thesis about this situation from the Producer/Devs, or have them go "Yeah we fucked up badly with how we implemented the new blacklist system and how it does it's thing, our bad" on a forum post, but it does seem like currently, with what they have told us, that they have kinda settled upon the mindset of "This entire issue is entirely because of 3rd party programs" without even understanding why this is an issue to begin with. This ultimately is a result of how their blacklist system currently works, and if they are going to get this 3rd party plugin deleted/removed, but not fix the core issue with the blacklist system that allowed this plugin to do this stuff in the first place, then this is just a complete waste of everyone's time. Like great, they get the plugin removed but keep how the blacklist currently works exactly the same. Enjoy someone else making the exact same plugin, again, that will do all the exact same stuff this current one is doing, again, and we repeat this cycle.

Right now, to me, this "Regarding the Use of Third-Party Programs and Player Safety" is fucking worthless, and is just a bunch of standard, generic PR fluff that is just to appease players because they HAD to say something at this point given the traction is has gained both here and on the JP forums.

No amount of 3rd party plugin bans are going to fix your system's shit Yoshi-P, only you can your team can do that, so do it.

[Kajoken]

How can you not understand that mods or plugins are created out of necessity not because someone is bored, if someone has worked to satisfy players and their needs it means that the company and the game is doing something wrong, there would be no need to use other programs or mods as much if the game systems were satisfactory enough, there would still be mods, but not on such a scale, and the company instead of taking what people are modding and making it better and putting it in the game, it is always just saying that it is against it, without thinking why such programs are created at all
Amazing how one can be so little aware of this
How is it even possible talking about this game and reading all this every time you can feel as if the game was 2 months old and made by 5 people who can do little, but so many years pass and it is still the same, the same topics were discussed many years ago

[Lilapop]

If they yeet one plugin they should yeet them all.

[tank2fish]

If they yeet one plugin they should yeet them all.

Yeeting plugins does nothing because, again, this is an exploit in how they send data to the client and back. Yeeting all plugins does nothing to address the issue. You are missing the point, like a substantial number of people in the thread.

[Lilapop]

Yeeting plugins does nothing because, again, this is an exploit in how they send data to the client and back. Yeeting all plugins does nothing to address the issue. You are missing the point, like a substantial number of people in the thread.

Do tell, how is reading data sent normally an "exploit"? Also, you're missing my point, not vice versa. If they purposefully target one plugin, it'd set a precedence that would then have to be followed.

[tank2fish]

Do tell, how is reading data sent normally an "exploit"? Also, you're missing my point, not vice versa. If they purposefully target one plugin, it'd set a precedence that would then have to be followed.

If you had read anything in this thread that discusses the nuanaces, you would understand. As it stands, I'll go ahead and assume you and everyone else suggesting banning plugins can't read.