Prevent Hacking

[Trigga Happy14]

A way to prevent hacking through the games file is to have it so all player info is stored in cookies on their own com that r loaded into the game file temporerily only so that all changes can be done then its back on their com and cant be hacked unless through their computer and most ppl have firewalls. Do you think this could be done (sry if i'm confusing anyone here)

[Aro23r]

That would create even more temptation to hack, and allow for it. Also, one could "clear cookies" and that would ruin their game. Or, they could enter the cookie and, say, change a number from 1000 to 1400 thereby raising their rank accordingly.

[drakonfire]

the best way to prevent hacking is to have a good password, and tell NO ONE, under any circumstances, use a randomly generated password, include numbers, dont use words that r easily associated with u, or that u commonly use, best not to use words period


barring that, changing ur pass every couple months is a good idea, but we dont have a password changing function, unless ur a grey, lol, so, yeah, if ur gold make sure ur password is good

[BoBo The Fool]

That being said, are they ever going to put in a password changing function?

[Trigga Happy14]

Originally posted by Aro23r
That would create even more temptation to hack, and allow for it. Also, one could "clear cookies" and that would ruin their game. Or, they could enter the cookie and, say, change a number from 1000 to 1400 thereby raising their rank accordingly.

Couldnt u make a confusing way of showing rank in the cookie? Or units? c'mon could u not format the cookie files to only be edited by wiining losing or drawing a fight. I've been hacked a few times and i'm trying to find a solution anyone else who understands please tell a way you think would improve on this idea. I'm not trying to offend anyone i just wanna find an anti-hacker plan. oh an exapmle of confusing way to show rank with no patern is: for lets say 750= No35Lobd and for like 100=Kigg67gh. U think u could do that.

[BoBo The Fool]

I think they are already using the best system. In general, any online multiplayer game that keeps data on the user's computer will get hacked. Even if the data is encrypted, it will eventually be broken and hacked. Keeping all the data on the servers is way better.

At this point, i think the best way to solve the hacking problem is to implement a password changing function.

[h()()t]

Originally posted by drakonfire
the best way to prevent hacking is to have a good password, and tell NO ONE, under any circumstances, use a randomly generated password, include numbers, dont use words that r easily associated with u, or that u commonly use, best not to use words period


barring that, changing ur pass every couple months is a good idea, but we dont have a password changing function, unless ur a grey, lol, so, yeah, if ur gold make sure ur password is good

wrong.

email dr and he will change your password.

[SlipknotiCX]

Now, I've seen ALOT of threads about hacking or being hacked. Getting your password is NOT! hacking. Trying different passwords on an account anywhere, either on TAO or anywhere else...is called cracking. If someone were to hack you, I highly doubt they would waste their time lowering your stats,deleting units and spamming on your name. They would go right for your sys32 folder and go on a deleting rampage after taking any files they deemed worthy of taking. When I first started playing there were a few hackerz on GL and Banff giving themselves admin status and doing w/e they wanted at will. I'm sure it won't be the last time we'll see a hacker, but guessing or trying at passwords is not hacking. But as all replies suggested....make a decent password. It's not that hard to think of something that no one else will. Never relate it to your name, use alt-char. if possible, make em as long as possible, and if you know what you're doing....base 64 encrypt it and make sure you have it saved somewhere.

Personally, if i was a hacker...I wouldn't waste MY time lowering stats if I was to do it on TAO. I'd just make people attack nothing but air and watch em go wtf :mad: :p

[Jeffery]

Originally posted by BoBo The Fool
That being said, are they ever going to put in a password changing function?


They do have a way to change passwords. It is in the thread by DR about all the "hacking".

You have to email him with:
Your Server
Your Game Name
Your Paypal Name
Your Paypal Receipt (mail orders don;t need this)
And what your new password should be.

[Megabyte]

I think storing any game files client side like this is a bad idea. Guarenteed no matter what precautions you take to stop ppl from "hacking" they would get through it. They would have as much time as they needed since the files are stored right there for them to mess with.

Besides, has there been a REAL case of hacking yet? Confirmed like...not one of u whining that someone "hacked" your oversimplistic password.

[SlipknotiCX]

I think it's a bad idea too. Like Aro said, storing your game progress or information on your computer would give malicious users the opportunity to decrypt the cookie and change their settings at will. Eventually someone would learn to steal cookies while playing against an opponent and change their settings. I go on Yahoo! Messenger alot, and there's "illegals". Basically names with illegal characters such as ~!@#$%^&*() more than 1 underscore or any names that start with a number. A while back, people started to steal cookies from some names and having access to the name itself. They could grab a cookie, change the password, and bam...it's their name now. Who's to say they won't do it on here? If this was implemented, seed would have to make an uncrackable encryption and then implement that into the game and have the encryption translate through TAO so that the system will understand it. Too much work, too much hassle and it'd be way too much corruption.

[drakonfire]

Originally posted by Megabyte
Besides, has there been a REAL case of hacking yet? Confirmed like...not one of u whining that someone "hacked" your oversimplistic password.


yes, there was that guy who went around announcing dragon drops in red font in the lobby... anyway, as far as i kno no one has been truly "hacked" their passwords were just to easy


and yes i kno u can email DR about changing ur password... but this probably is a bother for him to have to manuelly change everyones password, so my advice still remains make sure ur first pass is a good pass, and if not, change it once, to something that is good

[*The Nothing*]

Yeah, make your password something like, yellow, that's mine,and it's just an example.

[thrdflrmshr]

That is the worst password ever.

[Bottle]

Second worst. You forgot *password*.

Right, I'm off to delete all of Nothing's units...:D