Quote:
Originally Posted by Inverness
I was right, I knew you would be the first to state that, so just make it so the actions can only be performed under the allowed PCID, for those stupid enough to download RCs with malicious code. Basically meaning it would be mandatory for your account to be restricted by PCID for the RC thing.
|
You are in cuckoo land if you
seriously believe that anything like this would be secure. If you provide an open protocol for someone to use, you cannot enforce which RCs can be used by which PC IDs, not to mention that Cyberjoueurs would then have to reveal the algorithm used to generate PC IDs to authenticate with the game server. That wouldn't be very secure, now, would it?
The fact of the matter is that if someone puts their username and password into an RC, and logs in from a computer that is authorised (either by IP or PC ID), then the RC can perform any of the operations that that user account has rights for. Anyone could hide malicious code into any RC that they write and send it to people or offer it as a download, and unless the user can see and understand the source code, they wouldn't know any different.
I don't see any sense in giving people the oppurtunity to create such problems. Graal is fine as it is as a proprietory system.