Teeworlds - bridge

Can maps contain extra data that can be retrieved by the server?

14:17

arbitrary data

14:21

like some string contained in the map.

yes, maps have envelopes where you can store author and comments

14:41

technically you can store anything in a map

cookie authentication

14:47

or jwt token

14:49

not authentication, but more of authorization

@jxsl13 the client does not send anything about the map back to the server, except for whether it needs to download it

18:01

you cannot set a string or so that the client will play back to you

so, the only data that's retrievable is tue existance of a map, that can be used to encode data. https://github.com/jxsl13/zcatch/issues/61

18:11

binary encoding based on fake maps.

if you're tracking users, you need to think about the gdpr

@heinrich5991 are honeypots servers considered a bannable offense?

probably yes

19:42

what kind of honeypots?

servers with exact same config

thats what i wanted to ask

no provable malice though

do you know which one was there earlier?

so account sniffing and s tuff

it's @Trafalgar Law's server and it says Trafalgar Law's server in the name

gametype?

All the same

ah somebody is phising players

Yesterday crashed my Multimap_Less Server and all thought it was my Server but they joined the fake srv (edited)

108.191.164.78:8302 is the fake server

19:45

the ping is very bad and the IP is different

They actually use the same port as my server

maybe add a rule to the masterservers, that you can't register when a server with the same name exist already?

nah you can go around this easily

with another masterserver

19:46

yes

don't need a rule for that anyway, no malice should be obvious

the master server doesn't know about the servers' names currenty

19:47

currently*

Rip unnamed server

make it an exception, like nameless tee

that's ugly imo ^^

Add verified servers

or just ban honeypots

banned

thanks

should go away in the next hours

Add CA system :p

so i can't annoy anyone with MITM attacks :p

Thanks @heinrich5991

well, teeworlds would need a https client for this, the game itself should obv. still run on tcp and udp directly

cas work without https

I woudn't know how to implement it <.<

lol, that is not really clever to ban server for having he same name. as you have no proof if someone asks for you to ban the incorrect server while hosting their own server with the same name.

the server had the person's name in its name

19:58

[8:42 PM] heinrich5991: do you know which one was there earlier?

names are not bound to accounts and nobody's property

yes

19:59

yet if you and someone else were to host a jxsl13's server, I know which to ban

19:59

"magic, right?"

I would not care.

great

as I do not call my server's that

so the case is closed :)

what about people faking servers that do not contain anyone's nicks?

19:59

what about generic server names

what are you concerned about, @jxsl13 ?

I'm concerned about you people introducing arbitrary rules.

20:00

however you please

faking servers does have a security impact

20:01

sniffing server logins was done before, and we have already banned servers for that 5 years ago

same servers have an account system so you could phish accounts by faking servers

can you proof that the server sniffs login credentials?

no

very doubtful we'll ever have grey cases in those

it's obviously visible that that server is different when one looks at the ping

I don't understand what you are trying to achieve here, @jxsl13

not everyone is a network expert like us

I want that server unbanned, as it's been banned on asumptions

20:02

and not on any facts

if it's your server, present your case

20:03

if not, ask the server owner to do it please

Law asked for it and his name was in the server name

especially as there is not proof in any form and nobody has any right to claim any nicknames, what's the basic system of teeworlds