Originally posted by snawdog:
Originally posted by Banibal Dibs:
... just one more reason to get rid of 3rd party site access and bring the functionality directly into the game.
I agree Dibs, BC and EE combo is as close as we may get for awhile,and it aint bad.
i don't agree with dibs. mixing clans sites with that goes on in EE would not be a bad thing. clan's forum rules would have to be tightened to match those of EE's ingame rules in order to keep a good image for the game, and then game mods/admins(such as those that run/participate in other alliances) would have to be the ones that were ultimately held responsible for bad content on the forum posts, so you'd have to see a lot more EE Admins intervene in internal clan affairs.
hope that made sense.
i think that the current mods have a lot more control over how secure third party sites are these days, because if they feel that a third party site isn't up to par with security, they can simply pull their access to the API's(wasn't possible before) and the sites would become null and void.. this method is probably the best method to use. if DM's site for LaE turns out to not be very secure(and I can see this happening, simply with it being so new) then the admins for EE can easilly enforce DM to improve the security or risk losing the stats access he has.
not picking on LaE, just using as an example. would even apply if my site,
http://www.letskillstuff.org was found to be insecure or involved in cheating of some form(which i seriously doubt it would ever be).
Originally posted by Banibal Dibs:
how many ways to get username/password combos, let me count the ways.
trojans that load keyloggers.
game database that isn't secured.
3rd party database that isn't secured.
admin access to non-hashed password storage.
3rd party access to cookies stored on the computer?
people cheat to disrupt the game, or gain an unfair advantage in it.
was just going to post about this as well, but Qzjul beat me to it.
will mention that third party sites couldn't really do much in regards to keyloggers except to block the use of JS/etc on their site.
also, at least on the part of LKS, we go to great lengths to ensure the security of our database and login details. even gaining access to the hashed data on our cookies would lead you nowhere, as we use various other methods as well as the cookie to match the user to the information stored in our database.
basically, the idea that all 3rd party sites fail in comparison to the game's security is just ludicrous. it hasn't even been proven that LaE's site is to blame.. it's probably just propaganda for NA/LaE to save face and cause confusion over the fact that they've been caught with their pants down.