Tribe chat security issue |
Tangra « Citoyen » 1588504140000
| 3 | ||
When you send a tribe chat message with the /t command (and not having a tribe chat tab open), you can actually type in your password and it won't warn you not to send it, but will send it directly! P.S. I wasn't sure if this is a community platform bug but I think it's an important issue so I put it here Dernière modification le 1588504200000 |
1 | ||
You can always type /tc for to make a tribe chat. Not a bug! |
Caboodle « Consul » 1588542180000
| 0 | ||
yes, but it's possible it's still a security bug since it could be that it happens for any method of tribechatting, not just /t |
Namekuji « Censeur » 1588550940000
| 0 | ||
you're right it does not censor passwords |
Tangra « Citoyen » 1588582080000
| 0 | ||
To explain further, when you open the tribe chat tab, it does censor it, but it doesn't when you don't do that and not everyone is obliged to open a tribe chat tab; I've noticed that when using /w or /c to whisper someone, the moment you press spacebar after the /w <player name> it translates the command to a directed message (or I don't know the technical details) like [<player name>] : instead of [Room] :; when you type /t and press spacebar however it doesn't make it [Tribe] : like it is when you go to the tribe chat channel or any chat tab [Chat] :; Maybe this info will help Why I even made this topic: We were discussing the password censorship for some reason and my friend tried to and did send her password in our tribe chat so she had to immediately change it afterwards. Dernière modification le 1588582260000 |
Perfecteca « Sénateur » 1589208780000
| 3 | ||
Teela a dit : Players are not supposed to be able to post their passwords in chats and not get the warning message Being unable to post password in tribe chat must be literally being unable to post it in tribe chat in any way Hope this will get fixed soon |
Tangra « Citoyen » 1605348720000
| 0 | ||
Bumping, still not fixed. |
0 | ||
why would you type your password in the tribe chat in the first place like ??? |
Caboodle « Consul » 1605393900000
| 2 | ||
i'm surprised they wouldn't fix this by now this seems like something that would be high priority Clear a dit : people can get tricked in the tribe chat into sharing their password for free fraises/cheese |
Miss_valentina « Censeur » 1605404580000
| 0 | ||
Clear a dit : i wonder the same |
0 | ||
It doesn't even warn you when you type it in regular rooms or chats, so why would it warn you in tribe rooms? This is not a bug anyway. For the game to warn you about something like that it would require that all passwords be stored as plain text, which would be an incredibly stupid thing to do, and for the server to be constantly checking everything you type against your password. Both of those things are actual security issues. People being dumb enough to type their password in a public chat is not. Dernière modification le 1605450480000 |
Syrius « Consul » 1605481620000
| 3 | ||
@Xlll, the room chat does show you a pink warning message in case you attempt to share your password. The bug report is about this behaviour not being consistent across channels. |
0 | ||
That's odd, because when I tested it on a random account in public rooms there was never any warning message. https://streamable.com/cir1g2 Note: I did change the password and email for this random account after this Dernière modification le 1605543240000 |
Syrius « Consul » 1605545400000
| 3 | ||
Very strange. Last time I tried it on an alt in a private room it showed me the message. Dernière modification le 1605640140000 |
0 | ||
did you say just your password, or did you say something like "my password is ____"? |
Syrius « Consul » 1605570780000
| 3 | ||
Simply said the password and this appeared. |
Tangra « Citoyen » 1611785940000
| 0 | ||
Bumping, still not fixed. |
0 | ||
when ive looked at xll's video about the password showing up on public rooms etc. it seems like that new accounts can say the passoword and not the accounts that have been longer ive tried to see if my password will show up on my main and it said "NEVER GIVE OUT YOUR PASSWORD. MODERATORS WILL NEVER ASK YOU FOR YOUR PASSWORD. If someone asks you, they are trying to STEAL your account." ive first tried on a test chat and it showed up that warning i tried on a private room it still showed up that but for tribe chat im not really sure but i will test it when everyone is gone ill edit my message for new stuff that is happening about this issue |
Tangra « Citoyen » 1616863980000
| 0 | ||
Irunalone a dit : x3 Dernière modification le 1616864040000 |