26 (edited by Kompl.exe 2015-08-11 22:19:18)

Re: IP Spoofing Exploit

Port bruteforcing takes less then 10 seconds worst-case.

But ddnet is a good idea of you play ddrace a lot, you will be protected against any kind of spoofing on ddmet servers.

How to database by FFanta: http://puu.sh/jdPVk/fa37a95ac2.png

27

Re: IP Spoofing Exploit

Thats not true.
They kicked me on DDnet servers.

Atm i dont play teeworlds.
Thats the only way they cant get me, since they know my skype they can easy get my ip.

28

Re: IP Spoofing Exploit

Wrong. The guy kicked you on some XXLDDrace server.

Your IP was obviously in his list because he kicked serveral other players at the same time, he didnt even know who you are in Skype.

DDNet users on DDNet servers are safe.

How to database by FFanta: http://puu.sh/jdPVk/fa37a95ac2.png

29

Re: IP Spoofing Exploit

DDNet has a tokenized protocol which doesn't drop compatibility with non-ddnet clients.  Unfortunatly Oy is against adding it in 0.6.4.

If someone wants to implement this protocol patch into his mod or client, visit us on quakenet / #ddnet

30

Re: IP Spoofing Exploit

east wrote:

DDNet has a tokenized protocol which doesn't drop compatibility with non-ddnet clients.  Unfortunatly Oy is against adding it in 0.6.4.

If someone wants to implement this protocol patch into his mod or client, visit us on quakenet / #ddnet

Haven't looked into DDNet for a while. Does that protocol involve the map download ?

31 (edited by east 2015-08-12 12:16:18)

Re: IP Spoofing Exploit

It only prevents packet injection using a token which is exchanged on handshake:

https://github.com/east/teeworlds/commi … 0ec2fec1ab