[Freeciv-Dev] Re: freeciv2 kernel,modules and rulesets

[Raimar Falke <hawk@xxxxxxxxxxxxxxxxxxxxxxx>]

On Mon, Dec 03, 2001 at 11:06:22AM -0500, Andrew Sutton wrote:
> On Monday 03 December 2001 10:52 am, Tony Stuckey wrote:
> > > thoughts?
> >
> >     How easy is this architecture to subvert?
> >     Everything from rewriting high score files or save files to system
> > compromise.
> 
> sorry tony, this is going back to the list. it's a good question ;)
> 
> beats me. this is something we'll have to incorporate into the requirements. 
> the general basis is that anybody with control over their own home directory 
> or access to the game configuration, etc. can overwrite core files anyway, so 
> that's probably going to be out of scope.
> 
> as for system comprimise, any network protocol runs that risk. we'll just 
> have to be careful how implement things.
> 
> good thoughts :) would anybody like to elaborate on security considerations? 
> what mechanisms are in fc1? should the carry over to fc2 or do we need to 
> re-examine these. what about private network concerns. 

There are no elements of the code which I would name security
related. And authentication is still on the todo list.

> how much thougth to we want to put into cheating prevention (

> thru sniffers

These aren't a problem since the clients are dumb.

> , etc.). alot of these issues will be solved implicitly thru good
> design, but others will require some real thought.

        Raimar

-- 
 email: rf13@xxxxxxxxxxxxxxxxx
 "- Amiga Y2K fixes (a bit late, wouldn't you say?)"
    -- Linus Torvalds about linux 2.4.0 at 4 Jan 2001