log encryption

[Mark Sir Link]

Since logs are still saved locally rather than on GraalOnline's servers (lol wat) can they be encrypted to make sure there's actually some validity if a player attempts to report a player using a log?

[xXziroXx]

Uh... what?

[Tigairius]

I'm assuming he's talking about PM logs.

[cbk1994]

Originally Posted by Mark Sir Link

Since logs are still saved locally rather than on GraalOnline's servers (lol wat) can they be encrypted to make sure there's actually some validity if a player attempts to report a player using a log?

They could still send in screenshots. It's very easy to fake a PM history window using a program like Photoshop.

Plus, why would you want PMs stored on the Graal servers? I wouldn't want my private messages to be readable by any random staff member. It's enough already that they log chat.

[TSAdmin]

Originally Posted by cbk1994

They could still send in screenshots. It's very easy to fake a PM history window using a program like Photoshop.

Plus, why would you want PMs stored on the Graal servers? I wouldn't want my private messages to be readable by any random staff member. It's enough already that they log chat.

I agree. Especially when you have staff reading other staff's chat when they're already not exactly friends, and reading their chat log only escalates the situation. Don't you have something logging chat on Era? I think yours is for specific levels, though, where chat would be important to know.

[Inverness]

How about rather than encryption, an MD5 hash be included for either the whole file or each message.

[cbk1994]

Originally Posted by TSAdmin

I agree. Especially when you have staff reading other staff's chat when they're already not exactly friends, and reading their chat log only escalates the situation. Don't you have something logging chat on Era? I think yours is for specific levels, though, where chat would be important to know.

Era logs the chat of every staff member. Not something I added, though.

Originally Posted by Inverness

How about rather than encryption, an MD5 hash be included for either the whole file or each message.

That would be really easy to fake.

[fragman85]

How about putting a keylogger into Graal.exe?!!!111

[Inverness]

Originally Posted by cbk1994

That would be really easy to fake.

Really? Feel free to explain why.

Originally Posted by fragman85

How about putting a keylogger into Graal.exe?!!!111

How about not wasting our time with fake suggestions.

[cbk1994]

Originally Posted by Inverness

Really? Feel free to explain why.

I think I get what you mean, you didn't make that clear in your post. Do you mean storing the MD5 hash on the server, or on the client?

[Inverness]

Originally Posted by cbk1994

I think I get what you mean, you didn't make that clear in your post. Do you mean storing the MD5 hash on the server, or on the client?

In the text file on the client. You would have an MD5 hash for each message. There would be a tool on the server that would require both the hash and the message text, date, and time and it would tell you if the message is valid.

[cbk1994]

Originally Posted by Inverness

In the text file on the client. You would have an MD5 hash for each message. There would be a tool on the server that would require both the hash and the message text, date, and time and it would tell you if the message is valid.

Couldn't they just change the history file then put it through one of various MD5 hash-ers?

[Inverness]

Originally Posted by cbk1994

Couldn't they just change the history file then put it through one of various MD5 hash-ers?

*Looking down her nose at you*
Naturally the server would insert random characters into the message before hashing it. The message hash would be produced while the PM is at the server and be sent to the PM receiver, so you can't hack the client to discover how the hash is made.

[Mark Sir Link]

Nearly every other MMO records player chat on their servers. People don't just start reading to see "what did this guy I don't like say so I could get him banned."

The best solution would obviously be allow only Global Staff to see such logs and only investigate them if reports of abuse/harassment were reported.

Then, if the player initiating the complaint lied to waste time, they are punished.

If the player initiating the complaint had a legitimate complaint, then the person complained about is punished.

Also, screenshots are useless since you could just open up the PM log, write whatever you want in it, launch Graal, open history, take screenshots.

[Inverness]

Originally Posted by Mark Sir Link

Nearly every other MMO records player chat on their servers. People don't just start reading to see "what did this guy I don't like say so I could get him banned."

The best solution would obviously be allow only Global Staff to see such logs and only investigate them if reports of abuse/harassment were reported.

Global staff are not on the same level as paid GMs on other MMOs, I do not trust global staff not to perform without bias. There are also far to few global staff to be handling issues that should be handled by local staff.

My solution allows people to keep their PM logs on client only and allows anyone with an RC to verify the log only if they're given the log by someone.