Steam custom clients - security

[Lurux]

It wouldn't be bad to have 2 parallel worlds in the long run with different clients available to be used within those worlds (not only differing on reset timing)

The 2 worlds could be divided between :

1 with custom clients made available on steam and
1 with custom clients combined with private clients.

Thus at that moment the steam version (and world) would not allow for any custom clients except for the ones made available on steam itself.

[Dawidio123]

It wouldn't be bad to have 2 parallel worlds in the long run with different clients available to be used within those worlds (not only differing on reset timing)

The 2 worlds could be divided between :

1 with custom clients made available on steam and
1 with custom clients combined with private clients.

Thus at that moment the steam version (and world) would not allow for any custom clients except for the ones made available on steam itself.

You can publish things on steam workshop only visible for your friends.

[Nightdawg]

It's impossible to check what kind of custom client you use to connect to the server.

[Ardennesss]

It's impossible to check what kind of custom client you use to connect to the server.

Technically, yes, practically speaking, I'm almost positive Loftar could figure out a sneaky way to tell if you're on default or not that your average dev wouldn't be able to figure out. Very few of us would dive down to the packet level to try and figure out what hidden message is being sent when you log in. If it became a cat and mouse game of banning people who logged in on unapproved clients, I think ultimately loftar would win the war - but I also don't think that should happen given the current state of default.

[EnderWiggin]

It's impossible to check what kind of custom client you use to connect to the server.

Just by analyzing some click messages and their frequency it would be possible to find custom clients. Though those rough metrics can be adapted to by client makers in time. But you are right - telling what kind of custom client it is would be a much more difficult prospect.

[RestlessDragon]

this sounds like a shitty response but it's the only practical response if somebody makes a malicious client you can only really do something about it after the fact

if somebody makes a malicious a client attacks the server they will catch it pretty quick but if it attacks the user it's up to the user to use some malware scanning software to find it and even then that's not necessarily reliable there's a lot of false flags with antivirus software too

you have to be a special form of retarded though to put malicious malware on Steam getting sued by valve as much worse it's more likely to happen on the Forum than Steam cuz doing it on Steam is a death sentence you will eventually get caught and ruin your life

a lot harder for loftar to do something about it he can ban the person from The Forum and remove it from The Forum but the people who got screwed by the client would be hard for him to solve that problem cuz he's just a developer of a small indie game

but if somebody used his game on Steam to do it he would have help from valve to basically Hammer that person's ass into the floor