[quake3] GUID & game statistics purpose

Bruce Kingsbury zcat at zcat.geek.nz
Wed Mar 19 14:49:03 EDT 2008


Speaking of GUID.. a friend of mine (at my request) is working on a secure
GUID patch for Tremulous (and he's apparently designed the patch in a way
that it can be ported to any game)

Admin GUID's can optionally be associated with a public key on the server.
At connection the server and client will launch a separate 'authentication'
thread ..The server immediately sets verifiable GUID's to XXXX and sends a
cryptographic challenge to the client, the client signs and returns it at
which time the server set the GUID back and flags it as 'verified'. This is
(IMHO) a much better solution than TJW's 'different GUID on every server' --
You can have the same GUID and public key everywhere, but a hostile server
owner or network sniffer can't use that to pretend to be you on other
servers.

I tried to design the scheme to be backward-compatible too. Older servers
don't send the challenge and the new client behaves as normal. Older clients
can continue to use an unverified GUID, server owners can decide if they
want only verifiable GUID's to have admin.

I'm not sure how we're handling the initial key generation and exchange yet,
I'll have to ask James. It probably won't be automatic unless he's found a
way of doing that too..


On 19/03/2008, G <bougard.g at gmail.com> wrote:
>
> Thank you for your response.
>
> I checked it a little and it looks pretty. I will review it in depth
> before hacking VSP.
>
> Le dimanche 16 mars 2008 à 12:46 +0000, Ben Millwood a écrit :
>
> > I believe tremstats (http://www.dasprids.de/programs/tremstats)
> > recently added GUID tracking.
> >
> > On Sun, Mar 16, 2008 at 10:39 AM, G <bougard.g at gmail.com> wrote:
> >         Hi,
> >
> >         just to be consistent with the enhancement I just propose (see
> >         https://bugzilla.icculus.org/show_bug.cgi?id=3570).
> >
> >         I know about and I hacked a little VSP to support Smokin'Guns
> >         (previously known as WesternQ3). That product can support
> >         players GUID
> >         and I need some little work to let it support GUID for Q3.
> >         Also I think
> >         VSP is not intended to be hacked as its code is obfuscated...
> >         but I did
> >         not found any legal mention about that.
> >
> >         So just few questions before I lost my time ;P : do you know
> >         about
> >         product managing game statistics with GUID support ? Did such
> >         a kind of
> >         work still have been done for any kind of Q3 mod ?
> >
> >         Thanks all
> >
> >
> >         ---
> >         To unsubscribe, send a blank email to
> >         quake3-unsubscribe at icculus.org
> >         Mailing list archives:
> >         http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?50
> >
> >
>
>
>
> ---
> To unsubscribe, send a blank email to quake3-unsubscribe at icculus.org
> Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?50
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://icculus.org/pipermail/quake3/attachments/20080320/dbcc7766/attachment.htm>


More information about the quake3 mailing list