MP security problem

[Phoenix-D]

Well, it looks like MM goofed on the empire files front. Anyone who has an .emp file can open that file, even if its passworded.

That means the host of any game can open up his player's empires and check them out, including seeing their passwords. :/

[Baron Grazic]

Oops, almost means you need a third party to setup each MP game.

[Phoenix-D]

Well, if the players change their passwords after the first turn it should be all right..assuming they still can.

[geoschmo]

Oh, that's a bad one. Being able to open even the first turn means you know where they are starting from.

Did you email it to Malfador?

[Phoenix-D]

Not yet.

[Fyron]

Empire files have never had much security. All you need to do is add it as a player to a game, log in as host, reset password, load as that player... You don't get to see the password used in SE4, but you can still see everything about the empire setup if you just have the file.