Another Crack at the Dev Team

[[Cookies]]

]I use Microsoft Firefox and No-Script.

I should try it, Mozilla Internet Explorer is what I've been using.

Blah, I had only just woken up!

[Titanss]

No one know how good SE's encryption is unless they worked for them. What I win? Also I wonder if you work with SE and get terminated/quit do they make you sign a clause about releasing information about said mmo/ other titles.

[Ramses]

The latency fix was 100% the fault of NA players because latency was a figment of their imagination. I live in NJ for ffs and outclaimed jps all the time. SE tested for latency and said there was none. NA players kept bitching though and so now we have the crappy claim delay.

The quotes around the word fix are there because that isn't the word I'd use for it either.

If there was any real claiming discrepancies, it was PS2 vs PC-only NA players back then. The players who had fast PCs tended to see better results, and as the NA PS2 wave started to hit 75, one couldn't help but notice that those people were lightning fast.

The update did eventually level the playing field in terms of "it's okay! we all bot now!"

Haha well that was a problem for me. I don't bot and never will, so I went from great at claiming to no reason to bother trying. But oh well

[Max™]

Yeah, gotta love the JP's who kept camping kings to "preserve the rarity of the gear" as I was told second hand once.

Wind up with dudes like Ojaru getting enough Abjurations to HQ all of them... I mean, I've seen people with whitebox fetishes, but each and every set of HQ abjurations is a sign that your shell is way past being there to get people stuff they need/want, and just trying to find something to do with stuff.

[Khrno]

Yeah, gotta love the JP's who kept camping kings to "preserve the rarity of the gear" as I was told second hand once.

Wind up with dudes like Ojaru getting enough Abjurations to HQ all of them... I mean, I've seen people with whitebox fetishes, but each and every set of HQ abjurations is a sign that your shell is way past being there to get people stuff they need/want, and just trying to find something to do with stuff.

I've read so many things about how JP LS dominate kings and do all the MPK/botting/holding, but not on all servers it is like that, some servers that scene is provided by NA LS that take care of such matters.

Hell, I got my ebody years ago after just 2 months on a HNMLS that only camps if HNMs are during a 8 hours time-frame (6pm-2am JP), some people just get lose themselves to the game, no matter where they are from.

[Not Kuno]

Yeah, gotta love the JP's who kept camping kings to "preserve the rarity of the gear" as I was told second hand once.

Wind up with dudes like Ojaru getting enough Abjurations to HQ all of them... I mean, I've seen people with whitebox fetishes, but each and every set of HQ abjurations is a sign that your shell is way past being there to get people stuff they need/want, and just trying to find something to do with stuff.

Bahamut had an endgame scene like that for a frighteningly long time. People uncursing ABJ to put on mannequins and so forth. "preserve the rarity of the gear" is a bunch of horseshit.

[Max™]

Yeah, that was what they would respond with when asked why they were still camping so aggressively, when noone in their shell needed anything anymore.

Bahamut have a high JP pop still?

Carby is really jp heavy, I have to filter shout at night in WG because the JP shout spam is absurd.

[Not Kuno]

Bahamut have a high JP pop still?

Very very high JP pop. Though alot of them don't do endgame, stuff like sky/sea/nyzul/salvage is fairly difficult to do during JP times, especially on weekends, and I'm pretty sure some of them do instanced crap like Ein too.

[Ramses]

[quote=Not Kuno]

Bahamut have a high JP pop still?

Very very high JP pop. Though alot of them don't do endgame, stuff like sky/sea/nyzul/salvage is fairly difficult to do during JP times, especially on weekends, and I'm pretty sure some of them do instanced crap like Ein too.[/quote:2jykxq2o]


I think you mean hnms when you say endgame? Sky, sea, nyzul and salvage are technically endgame

[Not Kuno]

[quote=Ramses]

Bahamut have a high JP pop still?

Very very high JP pop. Though alot of them don't do endgame, stuff like sky/sea/nyzul/salvage is fairly difficult to do during JP times, especially on weekends, and I'm pretty sure some of them do instanced crap like Ein too.

I think you mean hnms when you say endgame? Sky, sea, nyzul and salvage are technically endgame [/quote:2ag2gnos]

Yeah that's what I meant.

[Chreman]

Come to think of it, where's the monthly "Is FFXI Dying?" topic?

[Byrd]

Come to think of it, where's the monthly "Is FFXI Dying?" topic?

I would expect it after the update, once someone's individual needs and wishes aren't specifically catered to.

[evilpaul]

I'm unable to figure out how you could store your POL password locally in a format that can be sent to SE automatically at login securely. It could be there as a MD5hash(password+salt) sort of thing, but just transfer that file to the account stealer to login with and you'd be done I'd think?

You'd need something that can't be learned simply from the user's side. Possibly the POL server providing random numbers to fill up to a large number of digits with your password and then run that through the hash function and use it as the stored value?

I'm pretty puzzled as to how you can maintain secure communication when one party may be compromised and completely unaware of it.

[ismarc]

I'm unable to figure out how you could store your POL password locally in a format that can be sent to SE automatically at login securely. It could be there as a MD5hash(password+salt) sort of thing, but just transfer that file to the account stealer to login with and you'd be done I'd think?

You'd need something that can't be learned simply from the user's side. Possibly the POL server providing random numbers to fill up to a large number of digits with your password and then run that through the hash function and use it as the stored value?

I'm pretty puzzled as to how you can maintain secure communication when one party may be compromised and completely unaware of it.

The most likely scenario is that the server doesn't get the encrypted password. That's asking for loopholes. The way I would do it is to have the client act as the encoder/decoder for the password storage, of which, you can encrypt the password itself, encrypt the file, so on and so forth. In addition, on version updates if you suspect the algorithm to be compromised, you can easily push a new, updated version out with backwards compatibility.

(It's late, I should go to bed instead of posting...completely missed a portion of what I wanted to say)
[edit]So, similar to how SSL works, the client establishes a secure, encrypted connection with the server and then sends the login credentials (polid and password) over the connection to the server for authentication. They then do the md5/SHA/A* encryption/whatever and compare the result against what's stored in their database. It is the most realistically secure method that exists today, and if you somehow have another method that doesn't involve one-time use certificates that are generated on demand (as with a complex EAP/TLS/MSCHAP authentication process), start selling it or write an RFC, because it doesn't exist.[/edit]

And along those same lines...with the recent rash of hackings, I tried to think of how I would obtain login credentials. People keep saying "keyloggers", but that cuts out on a large portion of the playerbase who save their passwords. What I would do is instead load up pol.exe, get to the password prompt, and then key in a known but rare combination of letters/numbers and search active memory for that sequence. You then have the offset from PlayOnline's base memory address where the value of that text-field is stored. You then only need to hook into the process as it starts, wait for it to hit that state, then read the value of that memory register. It's theoretically similar to using artmoney or how recast for windower works, etc. Just automated, and behind the scenes.

[Blabj]

Probably mentioned 24579634 different times already but, why am I forced to choose between Nyzul and Einherjar? For people who do many Nyzul runs in a week, who aren't disc holders, tokens just accumulate, and even buying meds each time you do a boss floor doesn't eat much into this surplus amount of points, so please allow us to, for example, convert tokens into another assault area's points, at a cost (which would also be productive in that you could work towards a certain area's piece of gear whilst working at Nyzul Isle) or allow the Einherjar NPC to accept tokens as a valid form of assault points.

I mean, come on, it's probably been a good few hundred years since Nyzul Isle has been released and not considered a proper assault by NPCs, maybe they should come to terms with this and make it official!

tl;dr: Nyzul tokens for einherjar plz

[ronin sparthos]

You mean Salvage and Nyzul Isle?

[Blabj]

You mean Salvage and Nyzul Isle?

No.










































Yes.

[Surealistic]

Don't show up to the interview for 2.5 hours, then after 2.5 hours, walk in the door with a "Nidhogg" sign on your head.

gotta make nidhogg sign purple, and then sit down and call up someone else and talk to them, then leave completely ignoring SE

[Blabj]

Then throw out slips of paper with "Earthen Abjuration: Body" on them to everyone who isn't an SE dev.

[Lordender]

This is what you do for an interview:

1. Get 6 people, 4 of them are in various FFXI cosplay costumes, 1 wears a giant cardboard cut-out of an FFXIAPP interface and one wears a dragon costume who won't be present until step 3.

2. Have the 4 people in the cosplay costumes say 5minutes while the person wearing the blownup ffxiapp cut-out looks AFK.

3. When 5minutes pass have person 6 wearing dragon costume burst into the room then have the guy wearing the FFXIAPP cut-out run toward it and engage it before anyone else reacts.

4. have the 4people start screaming omg bot, omg your a botter, I CALL A GM for the rest of the interview.

If you want to take it further bring a 7th person and have them be the fail GM giving you the typical fail GM responses.