View Single Post
Old 10-30-2009, 10:12 AM   #19 (permalink)
BaseballMan
Hall Of Famer
 
BaseballMan's Avatar
 
Join Date: Jan 2002
Posts: 3,535
Thanks: 8
Thanked 90x in 60 posts
Quote:
Originally Posted by kq76 View Post
He has to check and fill in both sections, though, downloads and uploads. There's not just one section like before. (There's also a 3rd section, download import, and while that may be handy for some, it's not as commonly used as the first two.)

I realize I may be threadjacking here and if the OP wants me to separate the topics I will, but...

I'm uncomfortable with it because it shows everything but the password and depending on the password creator, they're not always difficult to break. If you read this, commish, my apologies, but our commish had been (note the past tense) using a ridiculously easy to guess password. How many others do that? Yeah, maybe a league is open, at least within the league, about the exact location of where they store their latest sim update file (even Andreas himself has advocated people not publicize the location of the file and yeah, the person needs access to a file to see all this, but they could be being given a different temporary file from another location), but why the heck should the ftp account username be shown?

What's maybe worse however is that now that that menu choice is there online league members are asking for the info and I imagine there's at least some commishes out there who won't think about it and will hand it out without later changing it. I imagine someone must have thought there must be some benefit to flaunting the info like this, but I really don't see it. What was wrong with it only being open to the commish? What purpose does it serve members, really? And if there is one, does the benefit really outweigh the looser security?

I'm really quite surprised to see this especially since Andreas preaches about security so much and seems to have actually taken a sincere interest in making OOTP online leagues more secure.

I see your point. It does make sense since theres really no need for anyone to see it but the commish. I havent been in very many leagues so its not something i paid much attention too. I never even looked at until after the patch so yeah your right it doesnt really serve no purpose if its not any info i need to input there.
I dont see the point in joining a league and then cheating. It would not be fun to me. If a person was able to crack the password wouldnt any changes be noticeable? I dont feel like we have any owners that would but i would be concerned about a non owner getting the file and doing something to the league just to be mean. Though im not sure how they would get the league file without being an owner.
BaseballMan is offline   Reply With Quote