LEGO® Universe Nuevamente Imaginado
Menu
  • Inicio
  • Descargar
    • Música
  • Foros
  • Info
    • World
    • FAQ
    • Objects
  • Tutorial
    • Compile in Visual Studio
    • Servidor 0.3
    • Servidor 0.4 (Pre-2)
    • Servidor 0.5.1
  • Inicio
  • Descargar
    • Música
  • Foros
  • Info
    • World
    • FAQ
    • Objects
  • Tutorial
    • Compile in Visual Studio
    • Servidor 0.3
    • Servidor 0.4 (Pre-2)
    • Servidor 0.5.1

Lego Universe ION removed? ( We had Xipho\'s permission )


Inicio › Foros › Help and Support › Resolved › Lego Universe ION removed? ( We had Xipho\'s permission )

  • Este debate tiene 14 respuestas, 8 mensajes y ha sido actualizado por última vez el hace 9 años, 2 meses por CDFalcon.
Viendo 15 entradas - de la 1 a la 15 (de un total de 15)
  • Autor
    Entradas
  • marzo 26, 2016 a las 1:07 pm #4690
    CookieMonst3r123
    Participante

    So about 15 minutes ago our server thread was remove by HappyAngryCatfish.
    We had permission from Xipho. However we didn’t make it clear
    It also said in the google forms not to use a password used for anything else. Its up to the person if they follow that rule or not.

    Skype conversation:

    Dev permission

    If the thread being closed does not get lifted I would like to speak To
    HappyAngryCatfish. In a skype group with Glass/ Jason.

    marzo 26, 2016 a las 1:13 pm #4691
    HappyAngryCatfish
    Community Helper

    I will talk to Xipho about it. Quite honestly I see it as insecure and shouldn’t be allowed. If you can’t configure the UniverseLauncher I debate if you are capable of running a server. I don’t mean to be offensive but I don’t want kids getting information scammed off of them.

    marzo 26, 2016 a las 1:18 pm #4692
    Glass
    Participante

    @HappyAngryCatfish its easier to have a fill out form and do it manually then to buy a domain and stuff. Everyone’s having fun and half of the given passwords are like ‘Luniserver’,’lunipassword’. Heck theirs even one with random letters and stuff. This game is just about fun, people wanted public servers, we gave them it. Over the past 2 hours we have received multiple signups etc.

    Bye.

    marzo 26, 2016 a las 1:19 pm #4693
    CookieMonst3r123
    Participante

    Feel free to join and see that its working as of 30 minutes ago there were 8 people on and having fun compared to any other of the servers that were unstable. And There’s still no way it could totally be safe no matter how they register I will still be able to see peoples registered passwords and the only reason I have not setup a «safer» way of joining is so that people can join straight away.

    What would you class as safe?

    AND tell tim to fix his crap spam detection its always me I swear

    marzo 26, 2016 a las 1:35 pm #4694
    Live
    Moderador

    The fact that you see the passwords of other people makes me cringe so hard. Please do not host a server if that’s your security point of view, please do not even consider anything IT related even.

    marzo 26, 2016 a las 1:40 pm #4695
    Live
    Moderador

    That probably sounded harsher than I wanted it to be. However, if you have an IP where people can play you could also setup a webserver on the same machine, providing the UniverseLauncher website, allowing people to more or less securely register and handle their account on their own.

    marzo 26, 2016 a las 1:47 pm #4696
    CookieMonst3r123
    Participante

    However that also gets rid of my control who I allow on the server.

    And once again bot protection it needs fixing

    marzo 26, 2016 a las 3:04 pm #4706
    Wincent
    Participante

    Hi, Way is the server down? Sorry for asking but I like to know way I can not connect to the server.

    marzo 26, 2016 a las 3:13 pm #4709
    Glass
    Participante

    @Wincent Me and Arron are fixing the server and its security. It’ll be up soon with a new way to register.

    marzo 26, 2016 a las 3:18 pm #4712
    Wincent
    Participante

    Thanks! I just needed to know that the server was not down for good!

    marzo 26, 2016 a las 3:24 pm #4713
    CookieMonst3r123
    Participante

    @HappyAngryCatfish remember that conversation about hoW it is going to be a boring server?

    Well see that post above /\/\/\/\/\

    Because I do and it seems to me as if people are/were enjoying it.

    • Esta respuesta fue modificada hace 9 años, 2 meses por CookieMonst3r123.
    marzo 26, 2016 a las 3:31 pm #4716
    Knightoffaith
    Moderador

    However that also gets rid of my control who I allow on the server.

    Not true. It’s as simple as setting up an auto-ban once a user joins, which many early servers did. You could also have signup disabled, registering manually with some auto-generated password, email it to the user, and have them log in to change it.

    But if you can see passwords, I would not support allowing you to advertise here. In fact, the Launcher is still vulnerable using an MD5 hash with no salt (there was a server whose database was compromised, and at that point we realized that whoever had access to the usernames and passwords could potentially find the passwords even with the hash). I would highly suggest fixing the hashing (adding a salt at the very least). Even if you are trustworthy, which we have no way of verifying (no offense to you, but this is how the internet works), but we certainly can’t trust whoever sees your server as a soft target to hack.

    marzo 26, 2016 a las 3:33 pm #4717
    CookieMonst3r123
    Participante

    Yeah I understand.

    marzo 26, 2016 a las 4:34 pm #4722
    Xiphoseer
    Moderador

    Ok, there is a strong need for some explanation here:

    That conversation posted is real but incomplete. Glass and Arron were asking me about what requirements there were for setting up a server, my answer was that I’ll need to think about it. I started asking some questions about what was planned, focussing on what was relevant for me to know first.

    To move the security issue out of the way first: I helped Glass set up a private server. When they asked about making that public I wanted to know about the target audience and advertisement first before making any judgement at all. I asked Arron some of this in private chat before, but recieved no response. I realize saying «but that’s your choice» was a mistake, but it was meant as an acknowledgement of a plan, not a «sure do whatever you want».

    There is some of the conversation missing in that screenshot, in which it became apparent that they wanted to develop the server further and some info on which contry they come from which I can understand why that part wasn’t posted. Then at 14:40 (Timzone of the screenshot) I wrote that I had to go, which I did, with the conclusion that Glass wanted to ask more questions, to which I said he could write them in chat and I would read them later.

    I’ve not been on my PC until just now, and am quite sad to register these events.

    To make it absolutely clear: From my point of view, I DID NOT give any kind of permission to open a public server. They asked for requirements but did not await a definite answer and decision. Me being friendly does not me I agree to anything.

    Furthermore, I specifically discourage anybody to set up or join any such public server before a set of requirements has been written down and agreed upon by developers (@Jon002, myself, …), moderators (@HappyAngryCatfish, @Knightoffaith) and experts (@Live) as of now.

    This means that Glass & Arron have neither permission nor blessing by any of us to make their server public at this point.

    Finally, they have told me that @Prodigy_XD offered and confirmed to be able to hack Egmo’s database. This is just disgusting, no need to say anything else.

    • Esta respuesta fue modificada hace 9 años, 2 meses por Xiphoseer.
    marzo 26, 2016 a las 7:34 pm #4737
    CDFalcon
    Participante

    Hilarious Xiphoseer. Who the heck would waste their time in Egmo???

    Prodigy, your anything but XD

    • Esta respuesta fue modificada hace 9 años, 2 meses por CDFalcon.
  • Autor
    Entradas
Viendo 15 entradas - de la 1 a la 15 (de un total de 15)
  • El debate ‘Lego Universe ION removed? ( We had Xipho\'s permission )’ está cerrado y no admite más respuestas.

Comments are currently closed.

Idioma Preferido


  • English (en) English (en)
  • Deutsch (de) Deutsch (de)
  • Español (es) Español (es)

Busca en los Foros


Los Últimos Temas


  • Happy New Year
  • FORUMS CLOSED

Foros

  • General Discussion

Otros Sitios

  • LU Server Projects Github online
  • Community Discord online
  • buscar el LUNIverso

    Tenga en cuenta

    El Grupo LEGO no ha aceptado o autorizado el funcionamiento de este juego y no es responsable de los problemas de seguridad en relación con la operación de este juego.

    © 2015-2021 Proyecto LUNI™ Servidor

    Organizada por TimTech Software