Re: Regarding the Use of Third-Party Programs and Player Safety

[TheDustyOne]

AHAHAHAHAHAHAHAAH

https://bsky.app/profile/notnite.com/post/3lladdcxq5s2h

Ah, so it sounds like they took the approach of encrypting it client-side rather than just removing the client from the equation at all. Remember folks; in cyber security, never trust the client.

Seriously, what were they expecting? They're better off removing account-wide blacklisting and removing any mention of client IDs on the client rather than just obfuscating them. Jackasses may be able to make another character to harass someone, but that's preferable than to let the harasser also know what alts you have. Do they have the job design team doing double duty on cyber security?

[GiR_Zippo]

Just for my understanding are you talking about the character id or account id?

[Daralii]

Just for my understanding are you talking about the character id or account id?

[Kazuke_Miso]

It's worse than that. There is a one-to-one mapping from the account ID received on your client to the 'real' account ID. You don't even need to build some relational database to correlate the characters together. They just literally need to figure out the algorithm that obfuscates the ID, and this has already been done. The only question is when the stalking plugin creator will do the same.