Dear NGD, me is sorry - Page 2

Snoid · 03-27-2009, 11:37 AM

Quote:

Originally Posted by antowen

I would imagine they would only compare the text you type against your own password, not everyone's.
...

Yes, my tests say that they are comparing every chat word you type, against your password. I dont really know how they do it. But it's one of two:
1. they compare plain text with plain text password.
2. they hash every word (every string between spaces) and then compare every result with your hashed password.

And yes, i guess they asume that there are no spaces in the password, and that it's not finished but a dot (.)

In any case, i dont like it.

Regards!

arlick · 03-27-2009, 12:01 PM

Quote:

Originally Posted by Snoid

1. they compare plain text with plain text password.
2. they hash every word (every string between spaces) and then compare every result with your hashed password.

1 and 2 are not important, because the comparation is made on client side, so they dont know about your password (you can't know it ever, you just have to believe it), and the server will not get worst doing comparations (so no lag consequences, etc).

Snoid · 03-27-2009, 12:22 PM

Quote:

Originally Posted by arlick

1 and 2 are not importante, because the comparation is made on client side, so they dont know about your password (you can't know it ever, you just have to believe it), and the server will not get worst doing comparations (so no lag consequences, etc).

did you make tests to confirm that? I always asumed that the server was receiving the data, and giving the response, but i never really checked this.

arlick · 03-27-2009, 12:27 PM

Quote:

Originally Posted by Snoid

did you make tests to confirm that? I always asumed that the server was receiving the data, and giving the response, but i never really checked this.

Well a friend had the problem with the red letters and i asked to kailer about it. I'm not sure but i think he said something similar

. A mix of it a suppositions.

Snoid · 03-27-2009, 12:30 PM

Quote:

Originally Posted by arlick

Well a friend had the problem with the red letters and i asked to kailer about it. I'm not sure but i think he said something similar

. A mix of it a suppositions.

so, your friend was using a common word as password, and RO was warning him all the time?

i will make my own tests (mythbusters style)
[lang=es]wireshark al ataque![/lang]

surak · 03-27-2009, 12:44 PM

Quote:

Originally Posted by Snoid

did you make tests to confirm that? I always asumed that the server was receiving the data, and giving the response, but i never really checked this.

As arlick says, the password check is client-side only.

Snoid · 03-27-2009, 12:52 PM

Quote:

Originally Posted by surak

As arlick says, the password check is client-side only.

Confirmed.
Password is stored in memory while the game is running. I didnt see any network trace of the password check.

hint: scan your memory for text "Charactername:" (upper/lower case matters)

Forget everything i said before (in this thread only)

PD: Thanks Surak! Tell Kailer to answer my PM, or i will spam your inbox!

Angel_de_Combate · 03-27-2009, 05:05 PM

Well thanxs everyone for the input, but as for my password ive given out to clan members(very well trusted ones), i periodically change my pass(even though i dont play that often), the person i was giving my pass to is a very close RL friend and i trust him completely, i just wanted him to see what a lvl 50 char was like.

So panic over !!

Look forward to see you all ingame in the future.

P.s Thanxs Kailer for your prompt reply.
P.p.s Yes, Aries point taken, you know about all this stuff better than anyone, ty hun xx.

03-27-2009, 05:05 PM	#18
Angel_de_Combate Banned Join Date: Jan 2008 Posts: 440	Well thanxs everyone for the input, but as for my password ive given out to clan members(very well trusted ones), i periodically change my pass(even though i dont play that often), the person i was giving my pass to is a very close RL friend and i trust him completely, i just wanted him to see what a lvl 50 char was like. So panic over !! Look forward to see you all ingame in the future. P.s Thanxs Kailer for your prompt reply. P.p.s Yes, Aries point taken, you know about all this stuff better than anyone, ty hun xx.