Jump to content


Photo

Pandora Review


  • Please log in to reply
124 replies to this topic

#21 Feuermond

Feuermond

    Advanced Member

  • Members
  • PipPipPip
  • 268 posts
  • Location❤...in Missy's arms...❤

Posted 03 July 2017 - 10:25 AM

The Pandora service is reviewed to follow gifts, nothing is said about disclosure of friend lists. So I assume Pandora has own user accounts to get the data. They can get nothing you cannot get manually too.

DEVs: Maybe the amount and speed of profile requests from an account can rate it a data abuse account like that Pandora thing.

If you ignore X you can still see if X gifts Y, also X can see if you gift Y, it is simply in the Y gift list. Maybe following the link to profiles here in the gift list can disclosure an profile that should be blocked due to an ignore. But if so that is a bug that effects manually link following as well as automatic.

I stay with my conclusion the spy service is just a new dimension of getting data. It cannot get any data a player cannot get manually too and it has no access to the database. Maybe they look a bit deeper, seeing the user ID but as said before, other clients need a ID of me to make my ava visible. Don't mix the user ID with the email address or an ava's name, think of it more as a random but unique number every account gets. Just because you cannot see data it does not mean there are not there. Further more and important: It does not mean it is a data leak. It is functionality needed to play the game.
  • Sage Stoner and chloe like this

#22 Guest_Mulan_*

Guest_Mulan_*
  • Guests

Posted 04 July 2017 - 05:24 AM

The point is that why is this data publicly available in the first place? On a social network like Facebook you have the option if you so wish to make yourself available on search engines on Google and choose how much you choose to make public. I doubt anyone in 3DX wants their information to be made public.

The simple thing to do would be to encrypt the information and take security more seriously. Whatever reason people have for creating alts then they expect to do so with privacy. Some people for whatever reason choose to use real pictures and share real information on their profiles. I think 3DX has an obligation to protect its users. 3DX is a paid service, which is fine, businesses need to make money, but in return we expect quality, privacy and security.

The DLL hacks are another example of how easily the game can be tampered with. Rather than saying everything is fine and there is nothing to worry about, accept that the game is vulnerable and make the fixes.
  • chloe, Cordelia, Feuermond and 3 others like this

#23 Sage Stoner

Sage Stoner

    Scallywag and Rapscallion Extraordinaire

  • Members
  • PipPipPip
  • 1,119 posts
  • LocationTokyo Japan

Posted 04 July 2017 - 08:22 AM

The point is that why is this data publicly available in the first place?

 

 

I think in this particular case, "available publicly" specifically means "available to any member of the public one who pays for a 3dx subscription," and definitely not "freely available to anyone on the Internet." 


  • Feuermond likes this

#24 Feuermond

Feuermond

    Advanced Member

  • Members
  • PipPipPip
  • 268 posts
  • Location❤...in Missy's arms...❤

Posted 04 July 2017 - 03:57 PM

Well Mulan, I have access to the data of other players. I can read their profiles, see there gifts and so on. In the end nobody can prevent me or others to make these data public and to do a history of them. Oh, well yes, that's immoral but the Pandora service is in the Tor network and they want money. So I don't think you can argue with them to stop what they do. As long as people pay them, they simply can create accounts to collect the data. So again: The data need not to be public in the sense that even Google could find them; there only need to be bad guys like Pandora who abuse accounts.


  • chloe likes this

#25 gizmo

gizmo

    Administrator

  • Administrators
  • 1,017 posts
  • Location3DXChat

Posted 04 July 2017 - 07:28 PM

If someone thinks that we will do nothing with this situation, then they are very wrong ;)


  • Sage Stoner, Abbey, Ashbash and 7 others like this

#26 Dcati

Dcati

    Member

  • Members
  • PipPip
  • 16 posts
  • LocationAmerica/East Coast

Posted 06 July 2017 - 09:22 PM

If someone thinks that we will do nothing with this situation, then they are very wrong ;)

 

That is helpful to know. The answer given as the solution came across to me as suggesting that nothing is going to be done, an "oh well" type of attitude. If you will, it would be nice to have an update when possible. 



#27 Toolan

Toolan

    Advanced Member

  • Members
  • PipPipPip
  • 83 posts
  • LocationCanada

Posted 06 July 2017 - 10:43 PM

Well it appears this was a great time for me to not renew my subscription. :) 


  • Cordelia likes this

#28 Twiggy

Twiggy

    Advanced Member

  • Members
  • PipPipPip
  • 730 posts
  • LocationAustralia

Posted 27 July 2017 - 09:20 PM

I have noticed that since the availability of Pandora was made public some good things have come from it.

Straight off 2 characters that were fairly constant in World Chat causing problems vanished.

I have not heard so much of people invading parties with alts just to create problems for the organisers.

There is a post in here where someone opened a room stating it was for lesbians and bis only and had no trouble, likely would have if the knowledge wasn't there that alts can be found out.

 

I think the proof is there, people create alts and cause problems for others when they know they can't be held accountable for it.

If there is some way they can be held accountable with their main avi then many of them don't do it.

I know some will still pay for a second account and still do the same crap, but being able to find the owner of an alt seems to stop quite a lot of it.

 

Gizmo has said he plans to do something about Pandora.

An easy way to stop Pandora is to offer what most people would want to use Pandora for, to find out who is behind an alt.

If the devs were to add a feature where we can get that info through the game, then I can't see anyone going to Pandora.

My suggestion, add a feature where for say 10k gold, we can get the names of the other avis on an account.

 

I am worried that the devs answer to the problem will be to take away things that have been good for the game.

The total ignore for instance, or to just stop dll changes all together and we loose our added room options.

 

I know some will not like the idea, finding out who is who so easily will take from some peoples games.

But what are they really loosing and what do we really gain.


  • DarkSnake, Rockster and ffan like this

#29 Briana

Briana

    Advanced Member

  • Members
  • PipPipPip
  • 4,136 posts

Posted 28 July 2017 - 03:12 AM

do you really think those playing on multiple account don't have a vpn to hide behind a fake ip address? Come on, what do you think it will gonna happen if adms starting to show that kind of info through the game. I'm sure those doing this crap as you said ,they already settled up they're account mainly for this reason ,just in case of complaints or what other fucking issues reason with other player in game...just my opinion and thought after what i heard about how 3dx manage to keep confidentiality and safety here.



#30 Briana

Briana

    Advanced Member

  • Members
  • PipPipPip
  • 4,136 posts

Posted 28 July 2017 - 03:41 AM

yes, it's another possibility too



#31 DarkSnake

DarkSnake

    Member

  • Banned
  • PipPip
  • 27 posts
  • LocationFrance

Posted 04 August 2017 - 08:04 AM

Thank you Gizmo to inform about Pandora but how we know where is the limit of data they can scan?

 

I know some members have a hack which can show them friend list of others, ID member, etc..

Ok Pandora can get only online info, but when we write a private message, we do it online, no? When we request someone to Partner, we do it online, no? this is not privacy you think?

So please, how you can be sure they can't get these private info?

 

Thank you


  • Chilles likes this

#32 Sage Stoner

Sage Stoner

    Scallywag and Rapscallion Extraordinaire

  • Members
  • PipPipPip
  • 1,119 posts
  • LocationTokyo Japan

Posted 04 August 2017 - 10:08 AM

I know some members have a hack which can show them friend list of others, ID member, etc..

 

Really? I would love to see a screen shot of that, so I know it is true.  You can do any one of my three avis if you want.

 

But without a screen shot, I have a hard time believing that one.



#33 DarkSnake

DarkSnake

    Member

  • Banned
  • PipPip
  • 27 posts
  • LocationFrance

Posted 04 August 2017 - 10:56 AM

Really? I would love to see a screen shot of that, so I know it is true.  You can do any one of my three avis if you want.

 

But without a screen shot, I have a hard time believing that one.

 

And you? Can you give us proof that it is impossible?

 

Maybe it is more easy for you to not beleive what I am saying but knows it is the true. I am a member concerned by this and I pay for playing here. I play enough here to note the reality of the game. I am not the first who complaint about what I say but 3DXchat team don't care and just say it is not possible with any investigation...

 

So I asked to 3DXchat Team to prove to us that our privacy is protected. Not to me to give proof... For example I already give proof to 3DXchat team that a psychopath player harrass me and insult me in the game but they never banned him, and also never answered to my e-mail when I ask them why he is not banned. So why give proof to 3DXTeam if they do what suit them?

 

Best regards^^



#34 Sage Stoner

Sage Stoner

    Scallywag and Rapscallion Extraordinaire

  • Members
  • PipPipPip
  • 1,119 posts
  • LocationTokyo Japan

Posted 04 August 2017 - 11:48 AM

And you? Can you give us proof that it is impossible?

 

This is horse bollocks. 

 

I did not claim it was impossible, I said that I would not believe it without seeing proof.

 

And, since you can't or won't produce proof, it would seem that you are just spreading rumors. Which is fine. No one has to believe you. Least of all me.



#35 DarkSnake

DarkSnake

    Member

  • Banned
  • PipPip
  • 27 posts
  • LocationFrance

Posted 04 August 2017 - 11:52 AM

This is horse bollocks. 

 

I did not claim it was impossible, I said that I would not believe it without seeing proof.

 

And, since you can't or won't produce proof, it would seem that you are just spreading rumors. Which is fine. No one has to believe you. Least of all me.

 

LOL

Are you from 3DXchat team? Do you accuse me to spreading rumors?? Is it forbiden to ask proof that our privacy is protected? Why you try to change the way of my post? ^^



#36 DarkSnake

DarkSnake

    Member

  • Banned
  • PipPip
  • 27 posts
  • LocationFrance

Posted 04 August 2017 - 12:09 PM

This is horse bollocks. 

 

I did not claim it was impossible, I said that I would not believe it without seeing proof.

 

And, since you can't or won't produce proof, it would seem that you are just spreading rumors. Which is fine. No one has to believe you. Least of all me.

 

http://3dxforum.com/...-my-friendlist/

 

Well, explain how people can get proof? No proof, so it is just rumors?



#37 AlexRyder

AlexRyder

    Advanced Member

  • Members
  • PipPipPip
  • 250 posts

Posted 04 August 2017 - 09:58 PM

It's not possible to read other people's PMs, the server only sends those to their intended receivers, so in order to do that one would have to hack the game server and intercept messages there.

 

It's very unlikely there is a way to read a person's friend/ignore list without knowing their login password either. Probably authentication wasn't needed in earlier versions, but it is certainly required now.

 

Keep in mind though that when you share a game log (in case of a bug report or something), the list of your chars, your friend and ignore lists are also there, so if you just post the logs on the forum, anyone can read those.


  • Sage Stoner and DerrickNow like this

#38 Sage Stoner

Sage Stoner

    Scallywag and Rapscallion Extraordinaire

  • Members
  • PipPipPip
  • 1,119 posts
  • LocationTokyo Japan

Posted 05 August 2017 - 12:40 AM

Well, explain how people can get proof? No proof, so it is just rumors?

 

I told you how already. Pick any one of my three characters and tell me what the FL is. You can post it here on the forum if you want.

 

And please don't misunderstand me. I am not saying that there is no need to be aware of security issues.

 

I am simply saying that much of the information that is presented in this forum is mistaken. Sometimes it is an honest mistake and sometimes a not-so-honest mistake.  So if you are going to speculate that there is a way to read other people's FL, then you should be prepared to back up that claim with evidence. 



#39 DarkSnake

DarkSnake

    Member

  • Banned
  • PipPip
  • 27 posts
  • LocationFrance

Posted 05 August 2017 - 07:52 AM

It's not possible to read other people's PMs, the server only sends those to their intended receivers, so in order to do that one would have to hack the game server and intercept messages there.

 

It's very unlikely there is a way to read a person's friend/ignore list without knowing their login password either. Probably authentication wasn't needed in earlier versions, but it is certainly required now.

 

Keep in mind though that when you share a game log (in case of a bug report or something), the list of your chars, your friend and ignore lists are also there, so if you just post the logs on the forum, anyone can read those.

 

Hi Alex,

 

Thank you for your constructive answer.

 

About FL, It was in older version I got that some people can access to it, so nice if they can't in new version (at this time, in current version, I never catch that some player can read FL of others). But what about actions? (slowdance, partner, Home invitation, etc.). Also how Pandora can get deleted characters?

 

About hack of the server game, is it impossibe that happen? Do some players of the game can see IP adress of this server and have to send files to it also? (I think about all DJ who play music in public maps for example).



#40 DarkSnake

DarkSnake

    Member

  • Banned
  • PipPip
  • 27 posts
  • LocationFrance

Posted 05 August 2017 - 08:03 AM

I told you how already. Pick any one of my three characters and tell me what the FL is. You can post it here on the forum if you want.

 

And please don't misunderstand me. I am not saying that there is no need to be aware of security issues.

 

I am simply saying that much of the information that is presented in this forum is mistaken. Sometimes it is an honest mistake and sometimes a not-so-honest mistake.  So if you are going to speculate that there is a way to read other people's FL, then you should be prepared to back up that claim with evidence. 

 

For your information, knows that I have no interest to write something in forum that I am not sure. If I am not sure, I ask or shut up, If I am sure, I say.

Knows that I have a brain^^

 

Only you speculate that what I say is wrong.

 

Best regards




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users