10-10-2003 01:02									#1
	Security problem in server? Support Apolyton, buy Civilization III: Complete

I'm not sure but it seems like the Freeciv server (or an players account) can be compromised very easily. After I found no authentication method for a player than its username (which is displayed often in the chat/log) somebody can use an other players account simply by loggin in with his username after he got offline (e.g. when the player had connection problems).

Is it really so easy to take over somebody others account or are there any security mechanisms like password protection I did not found until now?

Thanks for the help!

	10-10-2003 01:36									#2
	Help yourself to an AD-FREE life

I believe authentication is still in the works. When it is set up, it will be cool, but until then, don't play against people you can't trust.

	10-10-2003 03:17									#3
	Increase the size of your Attachments

This sounds really bad. Is there at least an option to suppress displaying of the login-username? If nobody knows it and if it is complicated enough, it would be a (poor) replacement for real authentication. Or do I have to modify the server so that these names aren't displayed any longer?

	11-10-2003 02:14									#4
	Help yourself to an AD-FREE life

The current pubserver has lots of flaws in this regard. It basically relies upon an honour system. As geeslaka said, real and secure authentication is in the works.