Author Topic: Possibility of adding admin by HWID instead of IP  (Read 1267 times)

0 Members and 2 Guests are viewing this topic.

Offline Szaman

  • Soldier
  • **
  • Posts: 145
Possibility of adding admin by HWID instead of IP
« on: April 20, 2014, 02:55:18 am »
Hi,

As HomerOfGods asked me to create suggestion thread here:

Many people has non-static IP, so if I want to give someone permanent admin on my server who does not have static IP it's very difficult (when I don't want to compromise an admin password).

The solution is very simple - just one another file remote_hwids.txt with HWIDs of people who are admins on the server. It could eliminate also remote.txt (admin by IP).

Please, add that functionality.

Best regards,
Szaman.

Offline Mittsu

  • Soldat Beta Team
  • Flagrunner
  • ******
  • Posts: 617
Re: Possibility of adding admin by HWID instead of IP
« Reply #1 on: April 20, 2014, 04:02:55 am »
this topic has been brought up before, and it won't happen as long as HWID can be abused
Realistic-Soldat.net
<+elerok> soldat is dead
<+AThousandD> shit happens

Offline Szaman

  • Soldier
  • **
  • Posts: 145
Re: Possibility of adding admin by HWID instead of IP
« Reply #2 on: April 20, 2014, 04:05:11 am »
And why?

Do the possible "hacker" knows:
a) who is an admin?
b) what is his/her HWID?

Btw, it will be the main admin decision - use IP or HWID.

IP address could be also faked (ip-spoofing if I remember correctly), so - for me - it's not a good argument.

Best regards,
Szaman.

Offline Akinaro

  • Flagrunner
  • ****
  • Posts: 749
Re: Possibility of adding admin by HWID instead of IP
« Reply #3 on: April 20, 2014, 04:09:32 am »
As long as it would be written manually in file I dont think it would be problem...
IP can be abused... what's the difference if it would be set to HWID? Only Admin could add HWID to file, it wouldn't be set via console as a command

Offline darDar

  • Soldat Beta Team
  • Flagrunner
  • ******
  • Posts: 794
    • #Soldat Gather - Community on Discord
Re: Possibility of adding admin by HWID instead of IP
« Reply #4 on: April 20, 2014, 07:28:10 am »
I guess it is two lines of code to make it as a script either for ARSSE or as a soldat-server script.

Like:

on hwid = ****
/adm $nick
Soldat Gather 'Matchmaking Community on Discord'

gather.soldat.pl

| My Maps: ctf_Pyramid, ctf_Replay, ctf_Blako, ctf_R6, ctf_Ntex, ctf_Caro, ctf_Bizar & vs_mode mappack |

Offline Akinaro

  • Flagrunner
  • ****
  • Posts: 749
Re: Possibility of adding admin by HWID instead of IP
« Reply #5 on: April 20, 2014, 08:49:30 am »
Depending on Arsse is bad. And script... It would be better if only by editing file via ftp you could add new hwid. So only Owner could add new admin by hwid.

Offline Shoozza

  • Retired Soldat Developer
  • Veteran
  • ******
  • Posts: 1632
  • Soldat's Babysitter
    • Website
Re: Possibility of adding admin by HWID instead of IP
« Reply #6 on: April 20, 2014, 10:16:12 am »
Yeah it could be abused.
If you know the HWID of an admin and make him join your server for "testing" you know his HWID and if you know how to fake it you can take over his server.
The only way to work around that would be if the HWIDs were different for each server.

I think you need to restart the server to load the ip and hwid txt files. So ftp would be annoying.

Another idea would be to join via fav servers list (with server admin password) which should work
Rules
Tools: ARSSE - SARS - SRB - chatMod