He has no choice about the mod thing and I think all the mods are greater than 1000 GR anyhow.

@orth: Couldn't you use mod powers to force yourself into CD in your games, let someone else take over, and then force them back into CD and take over yourself afterwards?

Only problem would be if a game ended during your vacation.

Of course, he could use his mod powers to force the games to pause...

He could use mod powers to force the games to end in wins!

Don't give him any ideas, Eden.

You can do that as a mod?
I want to be a mod, me me me.
Don't tell Geofram. He frowns on it when people take interest in the site...

Well, I think he'd have to put all the other players into CD to force the win, but theoretically he could do it.

Give me Munich or I'll CD your ass. I think that's a pretty convincing argument. :)

Hey, just a thought -- wouldn't the mod e-mail be the best method for this? After all, you guarantee all your applicants meet the more selective of the two requirements. ;)

LOL! A mod sending an email to [email protected]. I love it!

For the record, we do send emails to ourselves (from the mod email) all the time. It's either to discuss things amongst us, or put notes on stuff we are doing.
And I'm pretty sure this thread was started as a joke, people (for those really worried).
And, no, we can't just 'force' a game into a win or end it (without canceling it) directly... and all mod abilities done are logged and audited... so any abuse would get caught instantly, anyway :P

Sure you could, fortknox. You could force all the other players into CD giving the last one the win. :-)

And I think we all got it was a joke from dD_ShockTrooper on down.

The hacker in me s-o-o-o-o wants to crack a mod account password and do all kinds of fun stuff so the mod gets blaimed. ;-)

Could you really do it if you wanted to, D?

Hacking the password? I'd have to get to know the target mod well enough to have an idea of what *kind* of phrase he might use and might even have to change the target mod if I discovered he used a password generator that used non-sensical passwords like "Ou35H65ty3rQztb" as I wouldn't want to draw suspicion or risk crashing the server by using a brute force password cracking program. We are too small of a community with such limited server resources that brute force crackers could crash our servers.

Awhile back my eldest son and I were going through some php/sql tutorials and he had made a little webpage where you could create a user and log on and I showed him how you can do some sql injection (or whatever it is called) via the password field to get logged on without the password. Then, since I was a mod here at the time, I thought I'd try it here just to see, and it didn't work, so Kestas' code is written correctly to prevent it.

That stops the SQL injection, but has he written in a lockout mechanism after X number of unsuccessful tries? That's all that will stop a brute force or a "study your victim" attack.

Sql injection is the sign of a poorly written DAO level, which shouldn't be the case here since kestas/figle are smart and it is open source.

And I said I couldn't force a game into a win 'directly' draug... ;)

And my password is a random collection of numbers and letters. :P

it also depends on the encryption... trying to brute force a 64 bit encryption of passwords would take you years to break... especially because you have the overhead of the wire (*2... request & response) in every attempt.

my password... hmm, i forget... maybe it has a letter in it. B

yes, that will do.

I was refering to using the Web interface to randomly throw IDs and passwords. Encryption is irrelavent at that point becuas eyou are using the web service itself to pound on the site. But that is where target account research comes in. There are so many possibly passwords and the necessity to keep from crashing the site that if the system allows really long passwords, it could take decades until you found the right password for "fortknox". Now let's see... Baseball? Brewers? Bronx? Bullion (what the keep there)? I bet it's Bullion.

ok, ignoring the 'lets hack our way out'

i can of course force a pause, and then force myself into CD and then get someone to take over... So i'm still looking for a replacement! anyone?

one game gameID=62060

wta, non-anon, i'm not doing too badly.. will brief whoever takes over if i have time (that is, if you take over before tuesday morning...

are you still looking for people that fit the restrictive requirments?