Jump to content
Sign in to follow this  
sheaf

How to prevent connection/disconnection exploits?

Recommended Posts

Disconnecting to avoid death, and other exploits such as server hopping are negatively affecting the overall atmosphere, undeniably.

How should this behaviour be prevented? Let's assume we have at our disposal complete logs of logins/logouts (and possibly other relevant information).

I never said it could be fixed easily. I know how to fix it, but is a major architectural update that has the potential for serious risk. It will need significantly more testing, I mean weeks if not months, rather than just being rolled out in a standard update.

The fix itself is very easy (simply logging server logins into the database). But the "how" to punish/prevent is proving difficult. Probably worth a serious discussion on the forums in a separate topic. I can detect when someone server hops, or disconnects, but how and when to issue punishment is proving very troublesome.

My personal view is as follows:

I don't think punishment should come after the fact, from looking at logs. I think the system needs to be changed to accommodate for player logins and logouts to prevent any kind of disruption.

I would suggest:

  • Logout timer: need to e.g. sit down for 30 seconds before logging out.
  • Login and logout notifications (both in chat, and to nearby players with visual and sound).
  • Possibly a short login timer (not necessarily needed if sufficient notification for login is provided prior to instantiation).

This solves the problem more naturally, by giving players a real incentive to not disconnect in the middle of a fight, or to login/logout in crowded areas where the notifications reveal their position and put them in a tough situation.

It seems to me looking at the logs can only achieve so much — it'll no doubt catch blatant cases of server hopping, but I have a hard time believing it could actually address disconnecting to avoid death, for instance; that behaviour is not obvious just from the logs alone, and needs to be prevented in some other way. Providing logout timers as well as notifications forces people to go and hide (preferably in forest) to avoid making their presence obvious.

Share this post


Link to post
Share on other sites

I guess I don't see where you've got a new idea which needs a new thread but that may be because I haven't had my morning coffee. Or my morning dump. Can you make it more clear?

Share this post


Link to post
Share on other sites

I guess I don't see where you've got a new idea which needs a new thread but that may be because I haven't had my morning coffee. Or my morning dump. Can you make it more clear?

This.

Also

Try Suggestions

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×