MP security problem

Phoenix-D · #1 November 28th, 2006, 07:21 PM

Well, it looks like MM goofed on the empire files front. Anyone who has an .emp file can open that file, even if its passworded.

That means the host of any game can open up his player's empires and check them out, including seeing their passwords. :/

Baron Grazic · #2 November 28th, 2006, 07:58 PM

Oops, almost means you need a third party to setup each MP game.

Phoenix-D · #3 November 28th, 2006, 08:06 PM

Well, if the players change their passwords after the first turn it should be all right..assuming they still can.

geoschmo · #4 November 28th, 2006, 09:37 PM

Oh, that's a bad one. Being able to open even the first turn means you know where they are starting from.

Did you email it to Malfador?

Phoenix-D · #5 November 28th, 2006, 10:03 PM

Not yet.

Fyron · #6 November 29th, 2006, 09:30 AM

Empire files have never had much security. All you need to do is add it as a player to a game, log in as host, reset password, load as that player... You don't get to see the password used in SE4, but you can still see everything about the empire setup if you just have the file.