Re: Regarding the Use of Third-Party Programs and Player Safety

[Kazuke_Miso]

AHAHAHAHAHAHAHAAH

https://bsky.app/profile/notnite.com/post/3lladdcxq5s2h

[TheDustyOne]

AHAHAHAHAHAHAHAAH

https://bsky.app/profile/notnite.com/post/3lladdcxq5s2h

Ah, so it sounds like they took the approach of encrypting it client-side rather than just removing the client from the equation at all. Remember folks; in cyber security, never trust the client.

Seriously, what were they expecting? They're better off removing account-wide blacklisting and removing any mention of client IDs on the client rather than just obfuscating them. Jackasses may be able to make another character to harass someone, but that's preferable than to let the harasser also know what alts you have. Do they have the job design team doing double duty on cyber security?

[GiR_Zippo]

Just for my understanding are you talking about the character id or account id?

[Daralii]

Just for my understanding are you talking about the character id or account id?

[Kazuke_Miso]

It's worse than that. There is a one-to-one mapping from the account ID received on your client to the 'real' account ID. You don't even need to build some relational database to correlate the characters together. They just literally need to figure out the algorithm that obfuscates the ID, and this has already been done. The only question is when the stalking plugin creator will do the same.

[Saraide]

Genius level solution!!!

[Kandraxx]

They can't nuke the plugin functionality or the Mare Lamentorum house party crowd (70% of all subs) will be gone. And the self-proclaimed 'top raider' YouTubers who prog content with 50 plugins and XIVcombo autorotation off-camera will also be gone for good.

Not too great for business, eh?

[MiaBlaze-Cari]

Why am I not surprised that their "fix" is dismantled within 24h. Not only did they see no reason to actually fix it asap, no we just wait for the next patch because duh and now that? Square clearly doesn't care that people get stalked and doesn't care that they're effectively enable stalking with these questionable things. So people are either left being stalked left and right or have to rely on the stalker data to defend themself from said stalkers. Nice move Square! On the other side, looking on the known issues with this patch...I have no faith at all anymore. At this point just hire someone who has actual knowledge on this topic so this can actually get fixed.
Tho actually I am surprised that you failed so spectacularly on fixing this issue. Like cool, the stalkers dont get the actual ID anymore, yet they can still map all your alts and retainers to one account with this altered ID. GGWP nothing changes, you just shifted the problem from Point A to Point B, please look forward to it!

[Hazusu]

This is incompetence. Pure and simple. CBU3 just proved that their technical know-how is simply not up to par.