Security on P2P model

Seeing as E: D uses matchmaking and p2p to connect local players to local players what security is there to prevent hacking of the connected IP address?
 
That which you put in place yourself. Just the same as connecting to any other service, website or download online.

- - - - - Additional Content Posted / Auto Merge - - - - -

Nearly none, it's impossible.

Hackers are already having their fun.

You're confusing players hacking the client on their own machine with outside attacks. That's not what the OP is asking about.
 
Last edited:
In all cases, it is best to have a small SSD dedicated only to the game and nothing else in the computer. And make an image of the SSD to restore very quickly in case of problems. And I forgot, after these two precautions, make arm of honor to hackers
 
In all cases, it is best to have a small SSD dedicated only to the game and nothing else in the computer. And make an image of the SSD to restore very quickly in case of problems. And I forgot, after these two precautions, make arm of honor to hackers

SSD only for ED?? Why on earth would you do that? :S
And no need to image ED either, it doesn't take that long to d/l (barring when major updates happen of course ;), but that's not what we're talking about).
 
Seeing as E: D uses matchmaking and p2p to connect local players to local players what security is there to prevent hacking of the connected IP address?

If you use the internet, your IP address is the single least private bit of information about you. The vast majority of computers connected to the internet in this day and age are moreorless immune to a "cold" external IP attack which is why hackers put so much effort in to viruses/trojans/malware/phishing - you generally have to breach security from the inside.

- - - - - Additional Content Posted / Auto Merge - - - - -

I do not know what checks / input validation FD performs to ensure malformed packets do not get processed.

Unless game sends actual executable code or script or memory addresses or I/O read/write locations between peers (which I highly doubt) there is no attack vector.
 
Last edited:
SSD only for ED?? Why on earth would you do that? :S
And no need to image ED either, it doesn't take that long to d/l (barring when major updates happen of course ;), but that's not what we're talking about).

I was talking in the extreme cases for the security of personal datas (outside of the game). I prefer to have a small SSD (32 or 64GB) with ED (and windows and others utilities) only and an image, in the extreme case, I have a problem if another person takes control of my computer. To protect my hard disks and my personnal data.
 
If you use the internet, your IP address is the single least private bit of information about you. The vast majority of computers connected to the internet in this day and age are moreorless immune to a "cold" external IP attack which is why hackers put so much effort in to viruses/trojans/malware/phishing - you generally have to breach security from the inside.

- - - - - Additional Content Posted / Auto Merge - - - - -



Unless game sends actual executable code or script or memory addresses or I/O read/write locations between peers (which I highly doubt) there is no attack vector.
I think there would be via packet overloading and crashing the OS, why I asked was if there was any packet checks to see if as has been stated malformed packets or illegal packets being dropped. When writing Elite Multiplayer having the server on for thirty minutes we had ten people connecting from non game systems these were promptly dropped and logged as that is the way the server was written.

Being p2p there is no server to check so the game would have to validate the connections.
 
This is mostly impossible. Equal to knowing the ip and nothing else really. Unless there is something very wrong with ED client:)
 
Last edited:
I think there would be via packet overloading and crashing the OS, why I asked was if there was any packet checks to see if as has been stated malformed packets or illegal packets being dropped.

If someone wants to DOS attack your IP there are much easier ways to do it that hacking ED and its a pretty pointless thing to do as it doesn't gain the attacker anything other than at best causing you to lose internet connection temporarily, its also pretty much impossible to "crash" someones OS by a DOS attack over a consumer internet connection.
 
Last edited:
there is an application called watchdog in the game folder. Perhaps this is what you guys are talking about.. As for protecting personal data these days the only safe way is something that is off grid so to speak, like a removable drive..
 
Watchdog is part of the bug collection/reporting rather than a firewall device I think.

A dedicated SSD for the game would not protect you against your computer being hacked.

I have never heard of any risk of anyone being able to hack into anyone elses machine remotely through the ED networking/client.

If someone manages to do so through knowing your external IP then your machine would be vulnerable to anyone regardless of which game you are playing and is therefore your responsibility Not FDs. If your data is important enough and your machine is connected to the internet you should encrypt the file/folders where it resides.

Any hacking/cheating that I have heard about so far has been on the client of the cheater.
 
Last edited:
Most hackers are now only in it for financial gain. Unless there is a known exploit with the ed client there wouldn't be much in it for hackers. It would be too much effort. Ed accounts have no value.
 
The black-hats would need to find a flaw in ED and combine it with a recent or zero-day Windows flaw. Unlikely to happen unless there's significant money to defraud us players out of. Keeping your machine fully patched and having good security software is sufficient protection IMO.
 
If Mr. Hacker wanted your IP, there'd be easier ways - like simply scanning full IP ranges for vulnerabilities in your 20 bucks plastic router with hardcoded admin password from your ISP.

But they can probably do interesting things to you in Elite itself like disconnecting you or using some kind of lag script like in the old FPS days. Other than that I wouldn't worry too much.
 
Back
Top Bottom