[DiscordArchive] Can I vote:don't because players should know what their server is?
[DiscordArchive] Can I vote:don't because players should know what their server is?
Archived author: Browller • Posted: 2021-06-27T04:07:56.278000+00:00
Original source
woah thank you so much buddy
Archived author: p620 • Posted: 2021-06-27T04:15:00.533000+00:00
Original source
To my knowledge TrinityCore doesn't store user secrets raw. Acquiring salted hashes won't bring an attacker any closer to the desired "bank accounts". The assumption about the groups of devs I would deem flawed. Iterative approach of merging once per N milestones (aka cherry picking) is quite popular (and that is understandable - resolving conflicts isn't exactly fun, not to mention the need may arise from the desire to adopt a major feature release for example).
Archived author: tester • Posted: 2021-06-27T04:16:56.623000+00:00
Original source
From my time on a few of the larger wow servers out there as well as some smaller ones, they were in both catagories. And said password problems mostly fall in the pre-security rewrite as before it was stored with it's verifier and the salt was a constant
Archived author: tester • Posted: 2021-06-27T04:17:42.768000+00:00
Original source
I'm sure there are some of there that do cherry pick I don't disagree with that fact, but a upstream merge with a overwrite for custom changes isn't too hard to implement with git nowadays
Archived author: tester • Posted: 2021-06-27T04:18:41.810000+00:00
Original source
I know within the last 2?3? Or so TC moved to SRP6 with a lot of stuff which was much better