Graal Forums

Graal Forums (https://forums.graalonline.com/forums/index.php)
-   Future Improvements (https://forums.graalonline.com/forums/forumdisplay.php?f=10)
-   -   player.ip ... sort of (https://forums.graalonline.com/forums/showthread.php?t=84453)

napo_p2p 03-01-2009 09:52 PM

player.ip ... sort of
 
I know player.ip has been requested before, and turned down because of security concerns. However, I have a little twist to it. Most scripters who want player.ip need it to do comparisons. Would it be possible to have a variable that contains a hashed version of the player's IP? This would still allow scripters to do IP comparisons, without having the "risk" of exposing IPs to the wrong people.

Chompy 03-01-2009 10:06 PM

TServerPlayer.ipaddress

Already exists, just needs to be enabled on the server.

For some reason though, you could give R rights to accounts/*/* (NPCServer) and read player's files for their ip, but yeah.

Some way to have ip comparisions would be handy.

Crow 03-01-2009 10:16 PM

Having a hashed ip would be just as awesome as having the ip itself, yup. I support this.

Inverness 03-01-2009 10:39 PM

I think having a hashed IP is just playing into the irrational fear that people have with IP addresses.

cbk1994 03-01-2009 10:45 PM

Quote:

Originally Posted by Inverness (Post 1470383)
I think having a hashed IP is just playing into the irrational fear that people have with IP addresses.

Indeed, but it's better than nothing.

I actually requested the same thing a while back.

DustyPorViva 03-01-2009 11:06 PM

Quote:

Originally Posted by Chompy (Post 1470370)
TServerPlayer.ipaddress

Already exists, just needs to be enabled on the server.

For some reason though, you could give R rights to accounts/*/* (NPCServer) and read player's files for their ip, but yeah.

Some way to have ip comparisions would be handy.

In the server rules -- servers aren't allowed to do that.

Inverness 03-01-2009 11:10 PM

Quote:

Originally Posted by DustyPorViva (Post 1470392)
In the server rules -- servers aren't allowed to do that.

*inappropriate gesture*

Chompy 03-01-2009 11:28 PM

Quote:

Originally Posted by DustyPorViva (Post 1470392)
In the server rules -- servers aren't allowed to do that.

For crying out loud, can't we just get a hashed ip address stored in a variable that we can use Stefan? >_<

This is getting weird. :asleep:

WhiteDragon 03-01-2009 11:53 PM

Well, the argument is that players should not be able to be identified by anything outside of their account (files, ip addresses, pcids).

No idea why though, it's kind of stupid.

Tigairius 03-02-2009 12:55 AM

Well, this will get turned down for the same reason that the last requests will: you can store the information to compare people who use the same account; for example: People who have a secret identity will be able to be discovered with this method.

Admins 03-02-2009 12:56 AM

Can add the hashed ip-address yes.
The main concern is that the ip-address can be used to identify people on the internet (e.g. webserver logs) and you could even do DDOS attacks against people if you know the address, that's why it shouldn't be that easily accessible. It's possible right now for staff to see it (although we might disable that sometime), but if scripts could use them then they would be saved in many different places and the privacy would basicly be dead.
It would be good if servers are only using the hashed ip-address for protection against hackers or so, not for normal identification purposes (most people don't have fixed ips anyway).

Frankie 03-02-2009 01:10 AM

Quote:

Originally Posted by Tigairius (Post 1470410)
Well, this will get turned down for the same reason that the last requests will: you can store the information to compare people who use the same account; for example: People who have a secret identity will be able to be discovered with this method.

yeah, this would be dumb.

people like to go on alternate accounts and play the game as a different identity. then you have the ***** on RC who starts trying to figure out who it is then tells everyone when he matches the IP. no fun in it if everyone knows who you are ;[

zephirot 03-02-2009 01:56 AM

Quote:

Originally Posted by Stefan (Post 1470411)
Can add the hashed ip-address yes.
The main concern is that the ip-address can be used to identify people on the internet (e.g. webserver logs) and you could even do DDOS attacks against people if you know the address, that's why it shouldn't be that easily accessible. It's possible right now for staff to see it (although we might disable that sometime), but if scripts could use them then they would be saved in many different places and the privacy would basicly be dead.
It would be good if servers are only using the hashed ip-address for protection against hackers or so, not for normal identification purposes (most people don't have fixed ips anyway).

Then it's all good, I'm pretty sure most of the Graalian community don't even know what a ddos is.

WhiteDragon 03-02-2009 03:19 AM

Quote:

Originally Posted by zephirot (Post 1470428)
Then it's all good, I'm pretty sure most of the Graalian community don't even know what a ddos is.

And even those who do wouldn't have the vast resources required to pull one off.

Admins 03-02-2009 05:59 PM

Quote:

Originally Posted by WhiteDragon (Post 1470466)
And even those who do wouldn't have the vast resources required to pull one off.

Well the DDOS thing is a problem on XBox live already where people use it to lag the opponent.

Crow 03-02-2009 06:05 PM

Quote:

Originally Posted by Stefan (Post 1470661)
Well the DDOS thing is a problem on XBox live already where people use it to lag the opponent.

Yes, it's a quite frequently used method right now. But the people "doing" it are part of a clan trying to "weaken" the opposite clan, and they can only wreck their connection by hiring botnets to DDoS them. They wouldn't be able to do that themselves.

Rufus 03-02-2009 06:33 PM

Quote:

Originally Posted by Crow (Post 1470665)
Yes, it's a quite frequently used method right now. But the people "doing" it are part of a clan trying to "weaken" the opposite clan, and they can only wreck their connection by hiring botnets to DDoS them. They wouldn't be able to do that themselves.

You're talking as though Graal isn't infested with men of lower moral fiber.

Inverness 03-02-2009 08:17 PM

I suppose the hashed IP address will do, though I'd prefer if each number is hashed separately, so a finer degree of address comparison can be implemented.

napo_p2p 03-02-2009 09:34 PM

Quote:

Originally Posted by Stefan (Post 1470411)
Can add the hashed ip-address yes.

Nice :).

Quote:

Originally Posted by Rufus (Post 1470671)
You're talking as though Graal isn't infested with men of lower moral fiber.

How appropriate. You fight like a cow.

Rufus 03-02-2009 10:39 PM

Quote:

Originally Posted by napo_p2p (Post 1470722)
How appropriate. You fight like a cow.

Haha I wondered if anyone would notice, good job.

MiniOne 03-03-2009 10:05 AM

Sweet idea :)

Will allow multiloggers on zone who free kill themselves to be detected more easily.

Loriel 03-03-2009 11:24 AM

Quote:

Originally Posted by Inverness (Post 1470698)
I suppose the hashed IP address will do, though I'd prefer if each number is hashed separately, so a finer degree of address comparison can be implemented.

That just makes it downright trivial to brute-force the hash to get the original IP address.

Twinny 03-03-2009 11:58 AM

Quote:

Originally Posted by Rufus (Post 1470671)
You're talking as though Graal isn't infested with men of lower moral fiber.

Quote:

Originally Posted by napo_p2p (Post 1470722)
How appropriate. You fight like a cow.

I may have to play that again soon.....always fun :)

cbk1994 03-03-2009 11:01 PM

Quote:

Originally Posted by MiniOne (Post 1470902)
Sweet idea :)

Will allow multiloggers on zone who free kill themselves to be detected more easily.

You can't simply have a script that doesn't allow people on if there's already someone on the same IP.

A lot of people have brothers, sisters, roommates, or even neighbors that come over and play Graal.

Inverness 03-03-2009 11:15 PM

Quote:

Originally Posted by Loriel (Post 1470925)
That just makes it downright trivial to brute-force the hash to get the original IP address.

Oh well.


All times are GMT +2. The time now is 02:30 AM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.