Scripted PM

[Stephen]

Will the new Scripted PM make it possible to eavesdrop on private messages? If not could the PM system be spoofed to appear like the default for the sake of eavesdropping?

How is this problem addressed - if not, how will it be addressed?

[cbk1994]

It IS possible to close windows and view messages typed/received, I believe.

I've never even though about this before.

And it could easily be faked.

[Skyld]

It is not possible for scripts to read PMs. The GUI PM control presents the message to the user but the message is not exposed to scripts by any means (variables, functions, suchlike). PMs can be sent by script, though. The Scripted Playerlist functions cannot be overwritten by other scripts, so the scripted playerlist should always function properly.

[Robin]

However it's certainly possible for someone to disable the scripted playerlist, create their own scripted playerlist, scripted pm system etc, however there would be no way to emulate the "global" pm system, and people would probably be able to tell it wasn't the real one.

[Stephen]

Originally Posted by Robin

However it's certainly possible for someone to disable the scripted playerlist, create their own scripted playerlist, scripted pm system etc, however there would be no way to emulate the "global" pm system, and people would probably be able to tell it wasn't the real one.

Could they emulate the APPEARANCE of a global buddy list by getting the buddy listen from the server and just SHOWING the buddies at random?

[Twinny]

Originally Posted by Robin

However it's certainly possible for someone to disable the scripted playerlist, create their own scripted playerlist, scripted pm system etc, however there would be no way to emulate the "global" pm system, and people would probably be able to tell it wasn't the real one.

Disable it? I don't think you can currently destroy it as such...players can always press F7 or right click tray icon and bring the real one back up.

[cbk1994]

You can probably detect when the playerlist is open, and set visible to false. That, or just destroy() it.

[Twinny]

Originally Posted by cbk1994

You can probably detect when the playerlist is open, and set visible to false. That, or just destroy() it.

I believe the object is protected and inaccessible for the most part unless that changed.

[xXziroXx]

It's possible to hide currently opened PM's. Or was a while ago at least.

[Robin]

Originally Posted by Twinny

Disable it? I don't think you can currently destroy it as such...players can always press F7 or right click tray icon and bring the real one back up.

Not in OS X they can't.

[cbk1994]

Originally Posted by Robin

Not in OS X they can't.

Obviously not the tray icon, but you can hit F7.

Also, maybe Stefan could add in the menu bar at the top something like
Window -> Scripted RC (F6)
Window -> Playerlist (F7)
Window -> Options (F3)
Window -> Serverlist (F8)

and eventually if Zero's NW editor gets finished & released and officialize-d, it'll be cool if there was File -> Open NW etc.

[Robin]

I managed to destroy the scripted RC, so hitting F6 does nothing, it's possible to do it to the scripted playerlist too.

Not that it matters I guess I heard there were some bugs where the scripted windows don't come back if you close them.

[Admins]

The PM windows are already scripted. You cannot access the text of them (it's a special control) and you cannot send PMs to other players without the user typing text into such a special control.

[Robin]

Yeah but it's possible to destroy the playerlist or even somehow trigger that bug in the scripted external windows so they don't come back, and script your own identical looking message windows etc.

I don't think it will happen because no one is that bored to do it. Plenty of people are malicious enough, but I herd u liek mudkipz.

[cbk1994]

Originally Posted by Robin

Yeah but it's possible to destroy the playerlist or even somehow trigger that bug in the scripted external windows so they don't come back, and script your own identical looking message windows etc.

I don't think it will happen because no one is that bored to do it. Plenty of people are malicious enough, but I herd u liek mudkipz.

That new avatar/signature has poisoned your mind ...

[Robin]

I Can Haz Cheezeburger

[cbk1994]

Originally Posted by Robin

I Can Haz Cheezeburger

No.

[Robin]

Did someone edit my post or did it convert my all caps?

[DustyPorViva]

It automatically uncaps an all-capped post.

[Robin]

Meh, how can one CHEEZEBURGER sufficiently unless it's all capz?