[quake3] GUID & game statistics purpose

[EscapedTurkey]

What will prevent the client from simply resetting or clearing his/her 
key and starting over? Is the GUID based on the client's hardware somehow?

Bruce Kingsbury wrote:
> Speaking of GUID.. a friend of mine (at my request) is working on a 
> secure GUID patch for Tremulous (and he's apparently designed the patch 
> in a way that it can be ported to any game)
> 
> Admin GUID's can optionally be associated with a public key on the 
> server. At connection the server and client will launch a separate 
> 'authentication' thread ..The server immediately sets verifiable GUID's 
> to XXXX and sends a cryptographic challenge to the client, the client 
> signs and returns it at which time the server set the GUID back and 
> flags it as 'verified'. This is (IMHO) a much better solution than TJW's 
> 'different GUID on every server' -- You can have the same GUID and 
> public key everywhere, but a hostile server owner or network sniffer 
> can't use that to pretend to be you on other servers.
> 
> I tried to design the scheme to be backward-compatible too. Older 
> servers don't send the challenge and the new client behaves as normal. 
> Older clients can continue to use an unverified GUID, server owners can 
> decide if they want only verifiable GUID's to have admin.
> 
> I'm not sure how we're handling the initial key generation and exchange 
> yet, I'll have to ask James. It probably won't be automatic unless he's 
> found a way of doing that too..
> 
> 
> On 19/03/2008, *G* <bougard.g at gmail.com <mailto:bougard.g at gmail.com>> wrote:
> 
>     Thank you for your response.
> 
>     I checked it a little and it looks pretty. I will review it in depth
>     before hacking VSP.
> 
>     Le dimanche 16 mars 2008 à 12:46 +0000, Ben Millwood a écrit :
> 
>      > I believe tremstats (http://www.dasprids.de/programs/tremstats)
>      > recently added GUID tracking.
>      >
>      > On Sun, Mar 16, 2008 at 10:39 AM, G <bougard.g at gmail.com
>     <mailto:bougard.g at gmail.com>> wrote:
>      >         Hi,
>      >
>      >         just to be consistent with the enhancement I just propose
>     (see
>      >         https://bugzilla.icculus.org/show_bug.cgi?id=3570).
>      >
>      >         I know about and I hacked a little VSP to support Smokin'Guns
>      >         (previously known as WesternQ3). That product can support
>      >         players GUID
>      >         and I need some little work to let it support GUID for Q3.
>      >         Also I think
>      >         VSP is not intended to be hacked as its code is obfuscated...
>      >         but I did
>      >         not found any legal mention about that.
>      >
>      >         So just few questions before I lost my time ;P : do you know
>      >         about
>      >         product managing game statistics with GUID support ? Did such
>      >         a kind of
>      >         work still have been done for any kind of Q3 mod ?
>      >
>      >         Thanks all
>      >
>      >
>      >         ---
>      >         To unsubscribe, send a blank email to
>      >         quake3-unsubscribe at icculus.org
>     <mailto:quake3-unsubscribe at icculus.org>
>      >         Mailing list archives:
>      >         http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?50
>      >
>      >
> 
> 
> 
>     ---
>     To unsubscribe, send a blank email to quake3-unsubscribe at icculus.org
>     <mailto:quake3-unsubscribe at icculus.org>
>     Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?50
> 
> 
>