Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Put this in:check my post above
http://battletracker.com/aaoserver/75.143.120.77:1716
Got this back:
The link you are trying to reach is no longer available or is invalid.
btw you missed a "/" at the end of the link
Actually the "edit" button is removed?Normal users cannot edit posts on "News".
It's not just for Spanky, it's for all devs, I was just seeing him as some kind of coordinatorsure, I just dont enter into contacting ppl etc
Math is almost perfectwe have Unreleased work wich has improved somethings, you guys won't see changes to the Auth system cuz theres no need for us to mention, but sure there were a few changes regarding security in all that time.
Yes, using secure channels would be a must, with proper pubkey authentication (to mitigate easy MITM threats). Security is all about making an attack more expensive than the possible gain.
There are two aspects here: 1) protecting the game environment (aa+assist) from hackers and 2) protecting the host system from compromises through assist. As I see, only 1) is being addressed, and the measures for doing that can hurt 2) in terrible ways.
(Please also see my post from yesterday.)
This screenshot "feature" is a no go.hmm, no one tried but, Screenshots aren't stored or sent to our server
@SpankyIf it become public that there is a private data stored at the AAO-project you can bet your ass this will allure the bad guys sooner or later.
What is better than breaking into hundreds of PC's?
Right: Breaking into one insecure system which keeps their privacy's.
Anyone else having problems with brightness settings..? I cannot change them at all, the sliders move but nothing happens and changing them from assist makes no difference either.if you are using Windows 8, we will fix it in the next hours
(probably missing file on our end sry)
ATM the most important is to have assist running, so it's OK for a temporary solution. But please, let's have a talk about security... Why are you sure that only assist devs can initiate/view screenshots? Think about MITM attacks, wifi sniffing, etc. If assist has that much power over your computer, an adversary may have a very cheap way to compromise a system (not game related). My recommendation:I think we can't stop MITM attacks and wifi sniffing, Assist is vulnerable just as your web browser or instant messanger is.
- design the security, without ad-hoc modifications (analyze threat models, etc)
- make it public (preferably open source) - gaining trust is easier that way
(I trust you and the other contributors and I'm sure that all features are made with good intentions, but ad-hoc solutions are prone to serious errors.)
Anyone else having problems with brightness settings..? I cannot change them at all, the sliders move but nothing happens and changing them from assist makes no difference either.25Assist > Settings > Select Full Screen.
You might want to re-think this. Either keep it from taking screenies of the desktop, or warn users in the TOS about visiting their banking institution or watching porn or whatever. Heck, maybe a video conference is going on and you can see inside somebody's house...you get the picture of how bad this can getright, I was just saying how the ACTUAL mech works, sure it can be worked
Weird switched from Assist running the server to the linux dedicated and the server in the deploy listing says it is authorized but when you join it says it is not.Screen shot plz
Help keep Assist going. Donate to cover our server costs.
