ForceProphecies Backdoor

The oops and Erms of bad coding present you with: Chang your alignment day.
I in no way came up with this, its been around forever just never saw it posted.

https://wiki.secondlife.com/wiki/User:Jana_Kamachi/FP_ALIGN

the coded it to listen for a key in the name field? DOH!

yeaps, change to to whoever and let it rip.

Force Prophecies has had a number of issues since its inception. One of our staff has been helping the author clean them up for some time now, but it is clear there is more to do.

Anyway, is this really on-topic for this forum? I mean, sure, security tips and avoiding gotchas is important, but discussing specific products' weaknesses is a bit outside the purview, I would think.

Thats a lie, nobody has been "helping" me clean it up.

As for security... it has none, primary because it was a secondary thing added by request and meant to be a fun "side thing." If people really want to spend the time hacking the value of silly integer inside FP, be my guest, as it really doesn't effect the function or ideology of the tool.

To those that are familiar with the product history, the current FP "version" is the only one with an actual RP element, all the past revisions have had no such thing, and I can guarantee that future product plans will not have it either.

^^ I think the idea behind FP is great, but even doing something like including a hash based off of a known variable + a known offset would stop anyone from hacking it. Thats...32 lines of code. I release this just because there are so many commercial versions charging to do the same thing these 5 lines can do.

There are millions of things that could be done to implement security into that aspect of the system, my personal preference is to ditch all "chat" communication elements period, isolate the scripts that manage such changes from requiring any sort of in-game communications, and make any sort of "authentication" get relay'd through my personal web server with the usual server security stuffers.

But Im not going to, because ultimately all it does is add more code and waste memory on an aspect of the system that isn't supported by myself.

lol....I can make your code nearly impossible to break in under 15 lines of code....why exactly are you trying to take the long way...

Edit:

I'll post an example that would fit right into FP in a little bit, with very little coding & work, but that generates a totaly unique hash based off of time that you can only break knowing the key. Now, on STARTUP it might be good, if your paranoid, to stick that key on a webserver somewhere. But its unlikely someone could break the key in any case.

Because if I'm going to do it, im going for the gold lol

But honestly, I know what I'm doing, I really don't want to add security to it lol.

*shoulder shrug* Okai lol, its your product. In any case I wish you good luck with it.

Actually, it isn't a "lie" at all. I'm not going to drop any names, but one of your customers HAS given you some assistance in the past with regards to security issues.

If you want to discuss this further, IM/PM me, and I will be glad to. Nothing else needs or needed to be said.

keep the peace....

That is absolutely false, I don't know what your friends have told you, but FP was made as a thing for myself. It wasn't a collaborative effort.

I never said it was a collaborative effort.

I said someone helped you find (and ostensibly, patch) some security issues with it.

That doesn't mean it was a collaborative effort.

Please, not in this thread. Use PM's.

Listen I do not know what is going on in this forum. It is not the same forum as last week.
Talarus you are being a bully again to someone else now. She has told you twice that she has not had any help. Leave her alone, leave everyone alone.

I am going to turn myself into Strife and wait on the sidelines to see what the verdict is. In effect, I am ARing myself. I dearly love this forum and would rather have myself banned then this abuse to continue another moment.

Love you guys

I'm not bullying anyone. I stated a fact. I KNOW it is a fact. I have tried to take it to PMs (Kokiri's are off). I have sent IMs. I have been trying to put an end to it, but instead keep being called a liar. I'm not.



Good. Please take your personal vendettas somewhere else; they don't belong in the forums.

off topic, next thread