Possible Security Risk in Battlefield 3 Beta

[Scinto]

A Clan mate of mine got given a link to the Final Server files, which these are all running. Its a shame that people would do such a thing.

[CptainCrunch]

Re: Possible Security Risk in Battlefield 3 Beta

Ok what are the actual RISKS of going into these servers then?

Being banned by EA.
Server files being manipulated so that your score resets or goes reverse.
Your account GUID is recorded and then spoofed getting you banned by punkbuster (Which actually isnt likely right now since PB is off on servers and hopefully they fixed this issue back in the day.)

All for real though, probably nothing. I wouldnt risk it though. Stick with servers you know and/or are named correctly and you will probably be OK.

Crunch

[The_Eliminator]

Yea i only plan on using the servers in my favorites anyway so no problem here.

[jimykx]

Re: Possible Security Risk in Battlefield 3 Beta

would you people mind sharing the servers that you think that are safe? thank you

[Anarchy1]

Re: Possible Security Risk in Battlefield 3 Beta

I read on the site that leaked the servers that your Battlelog/Origin password is sent to the server in plaintext form, and some people are working on a way to capture them. Not sure if this is true or not, but it could make sense as to why they are saying your account could be compromised.

[Vreki]

Re: Possible Security Risk in Battlefield 3 Beta

I read on the site that leaked the servers that your Battlelog/Origin password is sent to the server in plaintext form, and some people are working on a way to capture them. Not sure if this is true or not, but it could make sense as to why they are saying your account could be compromised.

I was going to say "Thats sounds ridiculous, nobody would be that stupid", but then I remembered the recent leak of BF:H accounts.

WTH are they storing /sending our passwords at all? Surely someone at EA must be familiar with one-way-crypt and other decades-old security measures?

[signa]

Re: Possible Security Risk in Battlefield 3 Beta

Being banned by EA.

Banned from a game that you paid for and hasn't come out yet ?!?

[Vreki]

Re: Possible Security Risk in Battlefield 3 Beta

Banned from a game that you paid for and hasn't come out yet ?!?

Potentially being banned from all games using the EA master servers.

[Cantina_Fly]

Re: Possible Security Risk in Battlefield 3 Beta

So since the folks in that video were making now attempt to hide player names I went ahead an looked up the one guy "StormCh4zer." He's rank 54 right now. In only 15hrs of game play. Too funny. I am also very curious how they are handling account security since BattleLog appears to be using a basic HTTP connection instead of HTTPS. I have to assume (hope) the actual game client is sending a one-way encrypted hash when you connect to an actual game server.

Since we have to use battlelog to connect though, it shouldn't be too hard for EA to implement filtering on their end so only servers from licenesed providers show up. They probably won't be able to completely stop 3rd party hacked servers, but you'll likely need a 3rd party client to connect to them. I also don't think they'll ban anyone (even in retail,) they'll just treat them as unranked. Given the deep deep stat tracking they're doing, I don't think it would be any problem to delete a given games stat changes from your profile.

[Vreki]

Re: Possible Security Risk in Battlefield 3 Beta

If you are curious enough, you could just run Wireshark and see if anything relevant is sent unencrypted.

http://www.wireshark.org/

[Cantina_Fly]

Re: Possible Security Risk in Battlefield 3 Beta

That's too much like my job. I kind of refuse to do it on the weekend on general principle.

[CptainCrunch]

Re: Possible Security Risk in Battlefield 3 Beta

If you are curious enough, you could just run Wireshark and see if anything relevant is sent unencrypted.
http://www.wireshark.org/

Actually, thats what I did and its encrypted. Which makes sense since its tied to Origin and the EA store.

So no worries on getting packet captured.

Crunch

[*FMJ*Power]

Re: Possible Security Risk in Battlefield 3 Beta

Actually, thats what I did and its encrypted. Which makes sense since its tied to Origin and the EA store.

So no worries on getting packet captured.

Crunch

so DICE was simply caught lying to us again? shock!!!

I'm just sayin, I see their point but lying to the community isn't how to handle the situation.......it makes people feel that there's just no value or substance to other things they might say and ultimately makes the customer feel like a real sucker.

[CptainCrunch]

Re: Possible Security Risk in Battlefield 3 Beta

I dont think they are lying. The files could be manipulated and cause other issues with an account. That is still a security risk, just not the loss of a password.

An account can be damaged in other ways than password theft.

Crunch

[CptainCrunch]

Re: Possible Security Risk in Battlefield 3 Beta




So thats good to know and is a plus.

Crunch