Check if client has file

[Advanced Bot]

In order for it to be 'secure' it has to be closed source or very difficult to trace.

The latter is more easily obtained.

Hmm, I guess I will call that it has a required password.

[Ad Bot]

[Blocki]

Hmm, I guess I will call that it has a required password.

Which is completely pointless.

[MrPolygon]

I feel 'secure' in terms of passwords is when the result is not decided by the person who enters the password.

[Ipquarx]

I feel 'secure' in terms of passwords is when the result is not decided by the person who enters the password.

At the absolute most, all the client needs to copy is whatever's required to send the correct message back to the server. Nothing else is 'required' for it to be completely validated.

[Chrono]

Why are you securing a mod handshake?

[elm]

Why are you securing a mod handshake?

^ Lol.

[Blocki]

Why are you securing a mod handshake?

Probably because the client side handles important stuff in their mod and they haven't applied rule 1: never trust the client.

[Port]

Probably because the client side handles important stuff in their mod and they haven't applied rule 1: never trust the client.

So what if they want to break their client and make the game impossible to play for them? What exactly is the point in securing anything there?

[Blocki]

So what if they want to break their client and make the game impossible to play for them? What exactly is the point in securing anything there?

Probably because the client side handles important stuff in their mod

I've seen a mod with a client-sided shop.

[Port]

I've seen a mod with a client-sided shop.

Uh, yes, so what? If they can't use the shop that's their fault.

[Blocki]

Uh, yes, so what? If they can't use the shop that's their fault.

No- I mean, where the purchasing and cash substracting was done on the client side.

[Port]

No- I mean, where the purchasing and cash substracting was done on the client side.

That is the developer's fault.

[Ipquarx]

No- I mean, where the purchasing and cash substracting was done on the client side.

Oh good lord.

rule 1: never trust the client.

[-Jetz-]

In order for it to be 'secure' it has to be closed source or very difficult to trace.

Still not really secure. Never trust the cl-

rule 1: never trust the client.

rule 1: never trust the client.

Well then.

[Ipquarx]

Still not really secure. Never trust the cl-*quotes*

Honestly the first point is really just a heavily exaggerated version of the second.

The cases that it doesn't work is where the person has the correct knowledge on reverse engineering, which, while uncommon, very much exists even in this small community.