[DiscordArchive] sending some packet to client at auth session open?
[DiscordArchive] sending some packet to client at auth session open?
Archived author: robinsch • Posted: 2024-07-21T20:58:57.268000+00:00
Original source
signature validation should be done server side
Archived author: Radeghost • Posted: 2024-07-21T20:59:47.334000+00:00
Original source
yeah that SMSG_ADDON_INFO sends addon CRC
Archived author: Radeghost • Posted: 2024-07-21T21:00:26.254000+00:00
Original source
but from what I understand it takes it from the pub file? which wouldn't be safe considering you can edit lua as I said
![[Image: image.png?ex=690c63d9&is=690b1259&hm=228...cc48a1ca5&]](https://cdn.discordapp.com/attachments/415944535718494208/1264688660192825474/image.png?ex=690c63d9&is=690b1259&hm=2281e62dfc1301decb31158cf9cec21281877919e2827aafbdd861ccc48a1ca5&)
Archived author: Radeghost • Posted: 2024-07-21T21:01:13.414000+00:00
Original source
![[Image: image.png?ex=690c63d9&is=690b1259&hm=228...cc48a1ca5&]](https://cdn.discordapp.com/attachments/415944535718494208/1264688660192825474/image.png?ex=690c63d9&is=690b1259&hm=2281e62dfc1301decb31158cf9cec21281877919e2827aafbdd861ccc48a1ca5&)
Archived author: robinsch • Posted: 2024-07-21T21:01:43.824000+00:00
Original source
Well you can warden scan memory regions to ensure the client isn’t modified to patch out signature checks
Archived author: Radeghost • Posted: 2024-07-21T21:02:13.431000+00:00
Original source
it needs to be patched if we're adding custom stuff inside mpqs tho otherwise it wont load the mpqs, and framexml is edited
Archived author: robinsch • Posted: 2024-07-21T21:02:25.930000+00:00
Original source
no it doesn’t
Archived author: robinsch • Posted: 2024-07-21T21:02:34.902000+00:00
Original source
it’s just easier for you
Archived author: robinsch • Posted: 2024-07-21T21:03:53.407000+00:00
Original source
but anyway it doesn’t matter and you should not really care about the details since you cannot prevent people from running secure code
Archived author: robinsch • Posted: 2024-07-21T21:04:16.851000+00:00
Original source
so if you want to auto enabled and hide it just send the correct flags from the server