|
Re: Please read / AW HACKED (General Discussion)
Re: Please read / AW HACKED // General Discussion
Jul 14, 2003, 3:10am
Sleepy Es Priv was via the AWProxy, Logging in with a privilege password is
client based, ie: only the Browser dissables it as a tourist, with direct
access to the protocal you can use it regardless.
- Mark
[View Quote]"xelag" <xelag at digitalspace.com> wrote in message
news:imj3hvsv9j7n8lbs8jqrshushhh34ffnim at 4ax.com...
> Imagine,
>
> The golden rule is to be able to trust the maker of the bot. If you
> have more technical knowledge, you can handle unknown bots, if you
> don't, go by bots that are made by proved trusted botmakers. A bot
> maker can include backdoors and all sorts of code in their bots. I
> could with xelagots but I don't... it's a matter of ethics. There is
> NOTHING AW can do to prevent malicious programmers to mess up things:
> to log in a bot, you have to provide cit# and priv. password... if the
> bot is a password stealer, you're done.
>
> What AW can do, and I'm sure they try, is to avoid code in their own
> universe and world server software that could permit this sort of
> incident from happening. But if someone has the privs of someone
> else, by whatever means, there is nothing AW can do to stop them doing
> their dammage.
>
> One example of what AW could do: some time ago, I had a tourist in my
> world, "SleepyE" or something like that. My bot discovered this
> tourist was wearing citizen privs: a tourist can not have privs, that
> is normally impossible. I posted a bug report in the beta group... no
> response from AW officials.
>
> This kind of loophole should be closed, and we should be informed
> about it.
>
> Alex
>
> On 13 Jul 2003 17:21:28 -0400, "imagine" <imagines at joimail.com> wrote:
>
knows
wrong
but
"make
to
to
user
>
|
|
