Important: Xmas problems!

[kmdk]

Originally Posted by ieti

Guys report all you find, fix - case closed.

As far as i know whole RO protocol is unencrypted. Everyone can get Wire Shark and start to sniff and see what happens. You just need time and coffee to convert all this into something.

Authentication to server is made by MD5 hash which is easy to crack using modern crackers(hashkill and others) and GPU's.

There is no ideal software and every devel makes mistakes no matter how good he is. There are many factors - deadlines, stress, IRL issues... If you like the product you can be grateful by helping devels with finding in fixing critical issues.

Agree with this ,allrady told this long time a go.

Any linux user have network security tools that alow you to capture /edit/forward packages.

Encrypting them and using a HTTPS service will slow a bit your server but at least by far secure.(not perfect but better)

I don't know in Argentina but in Europe wee are daily under siege all time.
Here wee play mouse&cat with hackers and exploit fixers.
Europe use massive Linux and love to play with exploits .

http://www.akamai.com/html/technology/dataviz1.html (click attacks dot)

Because RO it is a World Wide Game and cross platform ,i high recommend you to pass to HTTPS and encrypted network code.

Take this as a suggestion and make a priority to keep up your bussiness.