Current battle files exchange system is no more secure (Full Version)

All Forums >> [New Releases from Matrix Games] >> Empires in Arms the Napoleonic Wars of 1805 - 1815



Message

Cunctator -> Current battle files exchange system is no more secure (5/30/2011 3:40:38 AM)

I don't know if this happens in 1.08.05 Beta or if it happened before, but this my experience:

France attacks with probe and Prussia defends with withdraw.

One battle file from France; one battle file from Prussia. Battle over. No more exchange of files.

Well, it is sure that in this case the defender knows immediately that the attacker choosed probe.

I don't know if choosing withdraw the defender knows immediately any chit chosen by the attacker or if it happens only in a probe/withdraw situation, but this is a security breach.

Your opinion?

C.

P.s.: for sure, my counterpart in the battle I described choosed his chit in absolute good faith and my observations are addressed only for general purposes and to initiate a discussion about our current battle system.



pzgndr -> RE: Current battle files exchange system is no more secure (6/8/2011 1:42:48 AM)

I just playtested this in pbem mode and didn't see how I as Prussia (client) could know France (host) selected Probe.  I got a battle screen and directed to choose my defense.  I selected Withdrawal, which becomes an Automatic Withdrawal upon clicking Done, and battle is over.  France then gets a Battle Over message after battle file exchange.  Where in this process is it "sure that the defender knows immediately that the attacker choosed probe"?  Anybody else seeing this?

1805, Jan Battle of Magdeburg, Inconclusive
1805, Jan Prussia Has Successfully Withdrawn!
1805, Jan BATTLE:Magdeburg Attacker:France Defender:Prussia



Cunctator -> RE: Current battle files exchange system is no more secure (6/8/2011 9:00:45 AM)

Well, I will try to explain better my point of view.

Step 1: France (attacker) chooses probe and sends her battle file to Prussia (defender);
Step 2: Prussia receives the french battle file and the defender chooses withdraw;
Step 3: Prussia click "done" and she knows immediately that the battle is over and that the defender has succesfully retreated;
Step 4: France completes her land combat phase.

The breach: if the prussian player is a cheater he will choose withdraw waiting for the result. If he sees that the battle is over he will have the immediate knowledge of the attacker's choice. If the program asks him simply (without any message of "Battle Over")to send the battle file back to the attacker he will know that the attacker did not choose probe. Knowing this, he can delete the battle file generated in his pc, before sending it back to the attacker, and he can change his choice, knowing that the attacker did not choose probe.

The step 2 is the main reason why Marshall changed the old version of the battle file exchange system in the patch 1.05 (nto sure about the number of the patch).

The defender, when he chooses his chit, should not know the result of his choice, because in this way he will never know the result of his choice that are revealed for the first time to tha attacker when he receives back from the defender the battle file.

In the case of a probe/withdraw situation we are back to the original system.

Am I wrong ?

C.



pzgndr -> RE: Current battle files exchange system is no more secure (6/8/2011 1:57:01 PM)

I see now.  The issue, as always, is possible reloading of the battle file and replaying until you get results you want.  Which is based on knowing what the results are prior to sending your battle file back. 

So, possible solution is for the game to not provide immediate battle results at the end of each round, forcing more file exchanges and lengthing the process.  Is it worth it, that's the question. 



Cunctator -> RE: Current battle files exchange system is no more secure (6/8/2011 3:10:04 PM)

That's exactly the point.
I'm afraid that we cannot consider anymore the battles cheat-proof.

C.




Dancing Bear -> RE: Current battle files exchange system is no more secure (6/9/2011 11:21:44 AM)

I would say that if we are jsut dealling with an extra file exchange for probe, then it is worth it.



Mardonius -> RE: Current battle files exchange system is no more secure (6/9/2011 1:04:45 PM)

Needs to be fixed. Otherwise, this breach will undermine trust and confidence in the game. Even if someone (the defender) is always honest, there is a manifest and likely potential that others, some at least, will perceive a lurking advantage for him because he can either auto-retreat or eliminate probe as an option, thereby increasing his chance for a successful outcome of the battle. When trust goes out of the game, sport follows.



Cunctator -> RE: Current battle files exchange system is no more secure (6/9/2011 2:08:02 PM)

I agree completely with Mardonius.
Trust in God, but lock your car!

I'm sure that we need the intervention of Marshall.
I'm not able to put the problem on Mantis but I think that someone should do it.
According to the current level of patch development in 1 or 2 years we will have a perfect system [:D]




Dancing Bear -> RE: Current battle files exchange system is no more secure (6/12/2011 6:07:48 PM)

That time estimate might be about right!

A question, does the log not record that the defender 'loaded the combat file twice!"?



Cunctator -> RE: Current battle files exchange system is no more secure (6/12/2011 8:25:59 PM)

No, I did not find that indication in the log.
It could be interesting to try to reload the battle file 2 times to see what is recorded in the log.
DB if you want I'm available for a PBEM test.
C.



NeverMan -> RE: Current battle files exchange system is no more secure (6/13/2011 2:56:45 PM)


quote:

ORIGINAL: Mardonius

Needs to be fixed. Otherwise, this breach will undermine trust and confidence in the game. Even if someone (the defender) is always honest, there is a manifest and likely potential that others, some at least, will perceive a lurking advantage for him because he can either auto-retreat or eliminate probe as an option, thereby increasing his chance for a successful outcome of the battle. When trust goes out of the game, sport follows.


I agree, because this game is so time consuming and such a commitment, trust is highly important, no one wants to spend two years playing a game to feel like that got cheated.



pzgndr -> RE: Current battle files exchange system is no more secure (6/13/2011 4:29:13 PM)

Would one additional file exchange for the first round of battle each day be sufficient?  This would prevent the defender from immediately knowing battle results, hence attacker chit selection.   Subsequent rounds each day would not need an additional file.

Nobody seems to be concerned about the current battle file security for die rolls each round and taking casualties.  Is this OK, or does Marshall need to reconsider anything else to make battle file exchanges skeaky clean? 



Cunctator -> RE: Current battle files exchange system is no more secure (6/13/2011 6:12:19 PM)

It would be sufficient to add one more exchange of battle files from the defender to the attacker.
The defender chooses his chit then he sends it ignoring the result that are revealed to the recipient attacker for the first time.
Now it goes in this way for every chit pick, not for the withdrawal.
In this way the system is secure.

@ pzgndr: Regarding the dice rolls I know that they are pregenerated for the entire battle since the first creation of battle file (and the attacker does not know the rolls until he receives back from the defender), so they are cheat-proof; aren't they?
Regarding taking casualties....I'm not sure to have understood the subject.

C.



pzgndr -> RE: Current battle files exchange system is no more secure (6/13/2011 8:25:13 PM)

DancingBear or I will add something to Mantis about an additional file exchange for Marshall to track, but I just wanted to make sure everything else about battle files is working to players' satisfaction.  The pregenerated results seem to be working fine.



pzgndr -> RE: Current battle files exchange system is no more secure (6/13/2011 10:40:30 PM)

Added to Mantis as issue #792.



DCWhitworth -> RE: Current battle files exchange system is no more secure (6/30/2011 10:22:11 PM)

Actually reviewing this it is even more broken than suggested.

If you pick withdraw then you get to see the die roll AND the bonus you get from the attackers option. If you get +1 he's picked echelon or outflank, if you don't he's picked assault or escalated assault.

While you may not know the exact chit he's picked you can be sure to pick a chit that should win (cordon or defend respectively most likely).



Mardonius -> RE: Current battle files exchange system is no more secure (7/1/2011 1:30:15 PM)

Good point David. Why it is essential that the defender send their chit choice to another trusted player, as in the early days...
best Mardonius



gazfun -> RE: Current battle files exchange system is no more secure (7/9/2011 9:36:08 AM)

This issue is a major concern to me, the matter of security is imperative as especially has people put a lot of time in the game, only to have someone who has IMO no respect for others, anyone who even considers this as alternative.

Any wiff of this in a game [sm=00000003.gif]and the player should be kicked out so fast his head will spin.



Dancing Bear -> RE: Current battle files exchange system is no more secure (7/9/2011 11:42:41 AM)

Any thinking of trying this, should be aware that relaoding the combat file will result in a message appearing the in log, and will have some explaining to do.



Cunctator -> RE: Current battle files exchange system is no more secure (7/9/2011 3:28:08 PM)

I'm afraid that you are wrong.
I tested it.
It is sufficient to delete the new battle file (generated after you choose withdraw, acting as the defender) and to reload the old battle file (the first file received by the attacker).
Voilą, you have another occasion and you can change your chit without leaving any trace in the log.
Believe me, the system is broken.
C.



Dancing Bear -> RE: Current battle files exchange system is no more secure (7/11/2011 2:43:49 AM)

Ok, you're right. However, I notice that Marshall has just listed this as fixed in 1.08.06.



Page: [1]

Valid CSS!




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI
0.625