Better security
 

Is there anyway to improve Graal's security? This is mainly to stop the hacking. Player's have found yet another way to edit there strings/flags.

Sorry :{

Ideas would help.


I've also noticed this on N-Pulse, mainly in the Spar Center. Players have been enabling their weapons somehow, and when his/her attributes are viewed, their weapons are displayed as disabled.

:confused:

Allowing cheatwindows to detect programs listed without having to detect frame rate acceleration. Right now it will only detect the specified programs if the program is running with a faster frame rate.

At least that's what we've noticed on Era.

Ha I always do that glitch. :p

x_x

I sure wish they would fix this 'glitch' then. Personally i reported it numerous times, but nothing is being down, not yet atleast. It's quite annoying waiting to spar, and you have a bunch of fools trying to act funny by hitting you in a nopkzone/weaponsdisabled area.

Except for you of course, since you live in NYC, and i love NYC. ^^

There's always the Original Classic method. Have everyone else in the level watch if anyone else in the level is doing something...

Kinda hard when you have over 150 players to watch. :frown:

That applies for UN only i guess then.

I guess you goto bed early.

Umm.. At peak times, 4pm-10pm EST, Era passes UN's playercount routinely.

I guess so. :frown:

I remember when we had over 300 to watch. I'd say having more people actually makes it easier, as players tend to report things more.

Sadly, that was back before the players we have now. UN and Era doesn't exactly have the best eggs in the dozen, if you get what I'm saying.

Err... so what if they can edit flags? you shouldn't be using client editable flags for things you need to be secure. So unless you're doing stupid things scripting wise, it shouldn't be an issue.

Weird enough, it's not the client.flags that they're editing.
Into more details, it's CLIENTR.

Ever tried it? Like, with some program to help find a method to solve the problem?

I know on Unholy Nation, with their Event Points, they have a database that matches the current amount of Event Points then it changes when events are won and if it's changed, it detects it with RemoteControl.

Then again, I guess with the new scripting engine, it would be less of a hassle to have each account have its own folder to compare stuff within?

Snandy, try hack Graal yourself. It sounds pretty weird, but that way you find the flaws and can prevent it yourself or get someone to do this for you.

We shouldn't need to worry about this though, the graal client should some-what prevent it.

So? You shouldn't be checking clientr flags clientside.

Why? There's no way to falsify a clientr. flag clientside o.O

Yes, the Graal client has clientr/client flags for this.

I don't think we are... o_o

He has the right, for the benefit of his world, as long as he reports it.

I mean, Damix helped me with Kingdoms and the graphics replacement.

If someone knows hacking working methods then report them via forum pm.
The script variables are usually quite secure on clientside, but you should never rely on them. It can never be prevented that something is sent/received incorrectly or some bugged script is setting a variable to a wrong value, so do only things on the server which cannot go wrong even if there is bad input from the clientside.
(Bad input means: client. vars being edited, invalid triggers being sent)