Unique Client ID

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

Unique Client ID

by mike » Sat Oct 25, 2014 15:59

As Griefers are getting better and better it should be considered about adding a unique ID to a client.

The ID should be unique per computer and not per client, so that deleting a file is not enough.
Lamers have to change the source or manipulate during runtime to circumvent this.

The Unique ID could be drived from the ethernet mac address for example.
just a long CHECKSUM or SHA512 over the mac to make it not easy to go back to the real address.
The real burned in MAC should be used, not the user setable.

Anyway this is a privacy problem, so there should be a one time notice on first startup, where the player has to accept, that a unique id of his system is transmitted to the server.

The Server should be able to ban this unique id instead of ip only.

Also there could be a ID of the client os, so that tablet and smartphone users can be banned too.
 

Sol
Member
 
Posts: 73
Joined: Thu Jul 31, 2014 05:21
In-game: sol

Re: Unique Client ID

by Sol » Sat Oct 25, 2014 16:51

Made my day.
There is no such thing as duty. If you know that a thing is right, you want to do it. If you don't want to do it—it isn't right. If it's right and you don't want to do it—you don't know what right is and you're not a man. -- Ayn Rand
 

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

Re: Unique Client ID

by mike » Sat Oct 25, 2014 17:33

dont consider this solution as secure, but better than just ip bans.
 

User avatar
addi
Member
 
Posts: 659
Joined: Thu Sep 20, 2012 03:16
Location: Black-Forest, Germany
GitHub: adrido

Re: Unique Client ID

by addi » Sat Oct 25, 2014 17:35

you know, that minetest is an open source game, and possible griefers can just disable it?
 

User avatar
Calinou
Moderator
 
Posts: 3157
Joined: Mon Aug 01, 2011 14:26
Location: Troyes, France
GitHub: Calinou
IRC: Calinou
In-game: Calinou

Re: Unique Client ID

by Calinou » Sat Oct 25, 2014 18:00

addi wrote:you know, that minetest is an open source game, and possible griefers can just disable it?


Not all of them will do that. It takes some work to do it.
 

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

Re: Unique Client ID

by mike » Sat Oct 25, 2014 18:18

if its designed to be not easily deactivated, than its not that easy for most griefers!
 

User avatar
sfan5
Moderator
 
Posts: 3817
Joined: Wed Aug 24, 2011 09:44
Location: Germany
GitHub: sfan5
IRC: sfan5

Re: Unique Client ID

by sfan5 » Sat Oct 25, 2014 21:26

I don't know of any OS that does expose the real MAC of an adapter.
The MAC is set to the original one by defualt, but it can be changed.
Mods: Mesecons | WorldEdit | Nuke & Minetest builds for Windows (32-bit & 64-bit)
 

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

Re: Unique Client ID

by mike » Sat Oct 25, 2014 22:07

its possible to retrieve the physical mac address over the windows api. i think there is sth. in *nix too.
anyway there are many UUIDs or drive serial numbers around just in case...

another way would be the usage of the hostname and the username. this cant be changed very fast. and if its not much documented griefers wont notice much about this feature in code.

http://stackoverflow.com/questions/1685 ... atform-way
 

User avatar
sfan5
Moderator
 
Posts: 3817
Joined: Wed Aug 24, 2011 09:44
Location: Germany
GitHub: sfan5
IRC: sfan5

Re: Unique Client ID

by sfan5 » Sat Oct 25, 2014 22:30

"and if its not much documented griefers wont notice much about this feature in code."
Security-by-obscurity is not the way to go.
Mods: Mesecons | WorldEdit | Nuke & Minetest builds for Windows (32-bit & 64-bit)
 

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

Re: Unique Client ID

by mike » Sun Oct 26, 2014 08:37

if you have to decide between no security at all or s-b-o you will have to choose s-b-o instead of nothing.
this is always better than doing nothing.
 


Return to Feature Discussion



Who is online

Users browsing this forum: Google [Bot] and 1 guest