Graal Forums  

Go Back   Graal Forums > Development Forums > Future Improvements
FAQ Members List Calendar Today's Posts

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 03-01-2009, 09:52 PM
napo_p2p napo_p2p is offline
oh snaps
napo_p2p's Avatar
Join Date: Sep 2003
Location: Pismo Beach, California
Posts: 2,118
napo_p2p has a spectacular aura aboutnapo_p2p has a spectacular aura about
Send a message via AIM to napo_p2p Send a message via MSN to napo_p2p
player.ip ... sort of

I know player.ip has been requested before, and turned down because of security concerns. However, I have a little twist to it. Most scripters who want player.ip need it to do comparisons. Would it be possible to have a variable that contains a hashed version of the player's IP? This would still allow scripters to do IP comparisons, without having the "risk" of exposing IPs to the wrong people.
__________________
Scito hoc super omnia.
Haec vita est tua una sola.
Dum vita superest, utere maxime quoque puncto, momento, et hora quae habes.
Tempus neminem non manet.
Noli manere tempus.
Carpe Diem

Seize the Day.
Reply With Quote
  #2  
Old 03-01-2009, 10:06 PM
Chompy Chompy is offline
¯\(º_o)/¯
Chompy's Avatar
Join Date: Sep 2006
Location: Norway
Posts: 2,815
Chompy is just really niceChompy is just really niceChompy is just really nice
Send a message via MSN to Chompy
TServerPlayer.ipaddress

Already exists, just needs to be enabled on the server.

For some reason though, you could give R rights to accounts/*/* (NPCServer) and read player's files for their ip, but yeah.

Some way to have ip comparisions would be handy.
__________________
Reply With Quote
  #3  
Old 03-01-2009, 10:16 PM
Crow Crow is offline
ǝɔɐɹq ʎןɹnɔ
Crow's Avatar
Join Date: Dec 2006
Location: Germany
Posts: 5,153
Crow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond reputeCrow has a reputation beyond repute
Having a hashed ip would be just as awesome as having the ip itself, yup. I support this.
__________________
Reply With Quote
  #4  
Old 03-01-2009, 10:39 PM
Inverness Inverness is offline
Incubator
Inverness's Avatar
Join Date: Aug 2004
Location: Houston, Texas
Posts: 3,613
Inverness is a jewel in the roughInverness is a jewel in the rough
I think having a hashed IP is just playing into the irrational fear that people have with IP addresses.
__________________
Reply With Quote
  #5  
Old 03-01-2009, 10:45 PM
cbk1994 cbk1994 is offline
the fake one
cbk1994's Avatar
Join Date: Mar 2003
Location: San Francisco
Posts: 10,718
cbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond reputecbk1994 has a reputation beyond repute
Send a message via AIM to cbk1994
Quote:
Originally Posted by Inverness View Post
I think having a hashed IP is just playing into the irrational fear that people have with IP addresses.
Indeed, but it's better than nothing.

I actually requested the same thing a while back.
__________________
Reply With Quote
  #6  
Old 03-01-2009, 11:06 PM
DustyPorViva DustyPorViva is offline
Will work for food. Maybe
DustyPorViva's Avatar
Join Date: Sep 2003
Location: Maryland, USA
Posts: 9,589
DustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond reputeDustyPorViva has a reputation beyond repute
Send a message via AIM to DustyPorViva Send a message via MSN to DustyPorViva
Quote:
Originally Posted by Chompy View Post
TServerPlayer.ipaddress

Already exists, just needs to be enabled on the server.

For some reason though, you could give R rights to accounts/*/* (NPCServer) and read player's files for their ip, but yeah.

Some way to have ip comparisions would be handy.
In the server rules -- servers aren't allowed to do that.
Reply With Quote
  #7  
Old 03-01-2009, 11:10 PM
Inverness Inverness is offline
Incubator
Inverness's Avatar
Join Date: Aug 2004
Location: Houston, Texas
Posts: 3,613
Inverness is a jewel in the roughInverness is a jewel in the rough
Quote:
Originally Posted by DustyPorViva View Post
In the server rules -- servers aren't allowed to do that.
*inappropriate gesture*
__________________
Reply With Quote
  #8  
Old 03-01-2009, 11:28 PM
Chompy Chompy is offline
¯\(º_o)/¯
Chompy's Avatar
Join Date: Sep 2006
Location: Norway
Posts: 2,815
Chompy is just really niceChompy is just really niceChompy is just really nice
Send a message via MSN to Chompy
Quote:
Originally Posted by DustyPorViva View Post
In the server rules -- servers aren't allowed to do that.
For crying out loud, can't we just get a hashed ip address stored in a variable that we can use Stefan?

This is getting weird.
__________________
Reply With Quote
  #9  
Old 03-01-2009, 11:53 PM
WhiteDragon WhiteDragon is offline
Banned
Join Date: Feb 2007
Posts: 1,002
WhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to behold
Well, the argument is that players should not be able to be identified by anything outside of their account (files, ip addresses, pcids).

No idea why though, it's kind of stupid.
Reply With Quote
  #10  
Old 03-02-2009, 12:55 AM
Tigairius Tigairius is offline
The Cat
Tigairius's Avatar
Join Date: Jan 2007
Location: Missouri, USA
Posts: 4,240
Tigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant futureTigairius has a brilliant future
Well, this will get turned down for the same reason that the last requests will: you can store the information to compare people who use the same account; for example: People who have a secret identity will be able to be discovered with this method.
__________________


“Shoot for the moon. Even if you miss, you'll land among the stars.”
Reply With Quote
  #11  
Old 03-02-2009, 12:56 AM
Admins Admins is offline
Graal Administration
Join Date: Jan 2000
Location: Admins
Posts: 11,693
Admins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud of
Can add the hashed ip-address yes.
The main concern is that the ip-address can be used to identify people on the internet (e.g. webserver logs) and you could even do DDOS attacks against people if you know the address, that's why it shouldn't be that easily accessible. It's possible right now for staff to see it (although we might disable that sometime), but if scripts could use them then they would be saved in many different places and the privacy would basicly be dead.
It would be good if servers are only using the hashed ip-address for protection against hackers or so, not for normal identification purposes (most people don't have fixed ips anyway).
Reply With Quote
  #12  
Old 03-02-2009, 01:10 AM
Frankie Frankie is offline
xChugxLifex
Frankie's Avatar
Join Date: Feb 2008
Location: New York
Posts: 1,610
Frankie is a jewel in the roughFrankie is a jewel in the rough
Send a message via AIM to Frankie Send a message via MSN to Frankie
Quote:
Originally Posted by Tigairius View Post
Well, this will get turned down for the same reason that the last requests will: you can store the information to compare people who use the same account; for example: People who have a secret identity will be able to be discovered with this method.
yeah, this would be dumb.

people like to go on alternate accounts and play the game as a different identity. then you have the ***** on RC who starts trying to figure out who it is then tells everyone when he matches the IP. no fun in it if everyone knows who you are ;[
__________________
*Sum41Freeeeek
*Frankie
Reply With Quote
  #13  
Old 03-02-2009, 01:56 AM
zephirot zephirot is offline
Banned?
Join Date: Sep 2004
Location: Paris
Posts: 1,311
zephirot is a name known to allzephirot is a name known to allzephirot is a name known to all
Send a message via AIM to zephirot Send a message via MSN to zephirot
Quote:
Originally Posted by Stefan View Post
Can add the hashed ip-address yes.
The main concern is that the ip-address can be used to identify people on the internet (e.g. webserver logs) and you could even do DDOS attacks against people if you know the address, that's why it shouldn't be that easily accessible. It's possible right now for staff to see it (although we might disable that sometime), but if scripts could use them then they would be saved in many different places and the privacy would basicly be dead.
It would be good if servers are only using the hashed ip-address for protection against hackers or so, not for normal identification purposes (most people don't have fixed ips anyway).
Then it's all good, I'm pretty sure most of the Graalian community don't even know what a ddos is.
__________________

Quote:
Originally Posted by unixmad
Can you just shut up ?
MAGA
MFGA
MEGA
Reply With Quote
  #14  
Old 03-02-2009, 03:19 AM
WhiteDragon WhiteDragon is offline
Banned
Join Date: Feb 2007
Posts: 1,002
WhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to beholdWhiteDragon is a splendid one to behold
Quote:
Originally Posted by zephirot View Post
Then it's all good, I'm pretty sure most of the Graalian community don't even know what a ddos is.
And even those who do wouldn't have the vast resources required to pull one off.
Reply With Quote
  #15  
Old 03-02-2009, 05:59 PM
Admins Admins is offline
Graal Administration
Join Date: Jan 2000
Location: Admins
Posts: 11,693
Admins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud ofAdmins has much to be proud of
Quote:
Originally Posted by WhiteDragon View Post
And even those who do wouldn't have the vast resources required to pull one off.
Well the DDOS thing is a problem on XBox live already where people use it to lag the opponent.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 06:57 AM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.