Graal Forums

Graal Forums (https://forums.graalonline.com/forums/index.php)
-   Future Improvements (https://forums.graalonline.com/forums/forumdisplay.php?f=10)
-   -   log encryption (https://forums.graalonline.com/forums/showthread.php?t=84958)

Mark Sir Link 04-02-2009 01:06 AM

log encryption
 
Since logs are still saved locally rather than on GraalOnline's servers (lol wat) can they be encrypted to make sure there's actually some validity if a player attempts to report a player using a log?

xXziroXx 04-02-2009 08:46 AM

Uh... what? :oo:

Tigairius 04-02-2009 09:00 AM

I'm assuming he's talking about PM logs.

cbk1994 04-02-2009 09:51 AM

Quote:

Originally Posted by Mark Sir Link (Post 1480303)
Since logs are still saved locally rather than on GraalOnline's servers (lol wat) can they be encrypted to make sure there's actually some validity if a player attempts to report a player using a log?

They could still send in screenshots. It's very easy to fake a PM history window using a program like Photoshop.

Plus, why would you want PMs stored on the Graal servers? I wouldn't want my private messages to be readable by any random staff member. It's enough already that they log chat.

TSAdmin 04-02-2009 01:41 PM

Quote:

Originally Posted by cbk1994 (Post 1480405)
They could still send in screenshots. It's very easy to fake a PM history window using a program like Photoshop.

Plus, why would you want PMs stored on the Graal servers? I wouldn't want my private messages to be readable by any random staff member. It's enough already that they log chat.

I agree. Especially when you have staff reading other staff's chat when they're already not exactly friends, and reading their chat log only escalates the situation. Don't you have something logging chat on Era? I think yours is for specific levels, though, where chat would be important to know.

Inverness 04-02-2009 03:08 PM

How about rather than encryption, an MD5 hash be included for either the whole file or each message.

cbk1994 04-02-2009 03:32 PM

Quote:

Originally Posted by TSAdmin (Post 1480430)
I agree. Especially when you have staff reading other staff's chat when they're already not exactly friends, and reading their chat log only escalates the situation. Don't you have something logging chat on Era? I think yours is for specific levels, though, where chat would be important to know.

Era logs the chat of every staff member. Not something I added, though.
Quote:

Originally Posted by Inverness (Post 1480437)
How about rather than encryption, an MD5 hash be included for either the whole file or each message.

That would be really easy to fake.

fragman85 04-02-2009 04:34 PM

How about putting a keylogger into Graal.exe?!!!111

Inverness 04-02-2009 04:57 PM

Quote:

Originally Posted by cbk1994 (Post 1480438)
That would be really easy to fake.

Really? Feel free to explain why.
Quote:

Originally Posted by fragman85 (Post 1480443)
How about putting a keylogger into Graal.exe?!!!111

How about not wasting our time with fake suggestions.

cbk1994 04-02-2009 06:02 PM

Quote:

Originally Posted by Inverness (Post 1480454)
Really? Feel free to explain why.

I think I get what you mean, you didn't make that clear in your post. Do you mean storing the MD5 hash on the server, or on the client?

Inverness 04-02-2009 07:52 PM

Quote:

Originally Posted by cbk1994 (Post 1480463)
I think I get what you mean, you didn't make that clear in your post. Do you mean storing the MD5 hash on the server, or on the client?

In the text file on the client. You would have an MD5 hash for each message. There would be a tool on the server that would require both the hash and the message text, date, and time and it would tell you if the message is valid.

cbk1994 04-02-2009 07:59 PM

Quote:

Originally Posted by Inverness (Post 1480497)
In the text file on the client. You would have an MD5 hash for each message. There would be a tool on the server that would require both the hash and the message text, date, and time and it would tell you if the message is valid.

Couldn't they just change the history file then put it through one of various MD5 hash-ers?

Inverness 04-02-2009 08:03 PM

Quote:

Originally Posted by cbk1994 (Post 1480500)
Couldn't they just change the history file then put it through one of various MD5 hash-ers?

*Looking down her nose at you*
Naturally the server would insert random characters into the message before hashing it. The message hash would be produced while the PM is at the server and be sent to the PM receiver, so you can't hack the client to discover how the hash is made.

Mark Sir Link 04-02-2009 08:29 PM

Nearly every other MMO records player chat on their servers. People don't just start reading to see "what did this guy I don't like say so I could get him banned."

The best solution would obviously be allow only Global Staff to see such logs and only investigate them if reports of abuse/harassment were reported.

Then, if the player initiating the complaint lied to waste time, they are punished.

If the player initiating the complaint had a legitimate complaint, then the person complained about is punished.

Also, screenshots are useless since you could just open up the PM log, write whatever you want in it, launch Graal, open history, take screenshots.

Inverness 04-02-2009 08:35 PM

Quote:

Originally Posted by Mark Sir Link (Post 1480513)
Nearly every other MMO records player chat on their servers. People don't just start reading to see "what did this guy I don't like say so I could get him banned."

The best solution would obviously be allow only Global Staff to see such logs and only investigate them if reports of abuse/harassment were reported.

Global staff are not on the same level as paid GMs on other MMOs, I do not trust global staff not to perform without bias. There are also far to few global staff to be handling issues that should be handled by local staff.

My solution allows people to keep their PM logs on client only and allows anyone with an RC to verify the log only if they're given the log by someone.


All times are GMT +2. The time now is 08:10 PM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.