Join us on our TWC Discord channel
14-12-2012, 02:11 AM
The current events have convinced me that we are indeed in need of better protection against GUID spoofing. I therefor will continue working on my authenticator plugin for the servers.
Each time a user connects to one of the servers, his info will be checked against a database that will be able to tell if that person is a GUID stealer. To do that, all members are required to 'claim' their GUIDs in that database (go here and upload your GUID to do that: http://board.twcclan.org/misc.php?twc=ident ). The database can then check if the person using your GUID on the server is really you (it will do so by comparing the IP used on the server to the last known forum IP). If not, it will simply disallow usage of !commands.
I think that's a fair trade, since it will stop any script kiddy GUID stealer, but won't stop you from playing, in case the system should fail for some reason.
This will probably go live sometime next week, so please report any problems you might encounter.
Thanks in advance.
-- Ligustah
Each time a user connects to one of the servers, his info will be checked against a database that will be able to tell if that person is a GUID stealer. To do that, all members are required to 'claim' their GUIDs in that database (go here and upload your GUID to do that: http://board.twcclan.org/misc.php?twc=ident ). The database can then check if the person using your GUID on the server is really you (it will do so by comparing the IP used on the server to the last known forum IP). If not, it will simply disallow usage of !commands.
I think that's a fair trade, since it will stop any script kiddy GUID stealer, but won't stop you from playing, in case the system should fail for some reason.
This will probably go live sometime next week, so please report any problems you might encounter.
Thanks in advance.
-- Ligustah
I'm quite busy, so unless it's a quick thing or really urgent I am unlikely to be able to answer PMs throughout the week, but I try to reach out to everyone who contacted me during the weekends. If it's urgent, you can also contact any of the supremes, they can do a lot of things or relay directly to me if necessary.
