What is it that makes Runescape so secure?

[madman340]

Sure, they have all of this botting etc, but they have no actual (or atleast known) hacking.

What makes the game so secure? Is it the fact that it's programmed in Java? Is it something completely seperate from the fact that it's Java?

Before you start thinking "lul another nub who wants to hax jagex" Let me point out I am interested in pursuing game development as a career, and this is something that I've wondered for a looong time.

 

[Pain Killer]

Hey, nice to meet a another fellow who wants to have a game career
Well from what I heard, Jagex has ALL their files encrypted so much. Which means that they are very protected because they are hidden under tons of other, probably useless to us, information.

 

[madman340]

Well naturally anything encrypted can be decrypted, right?

Although I guess RSA would be pretty tricky... NVM lol, thanks.


I'm taking a QBasic class online, it's so lame lol, my teacher is like a 70 y/o lady who expects perfect imitation of what the lesson says. I can't wait to finish this class so I can focus on other things like Java and C++.

 

[SuF]

What do you mean by secure?

 

[Draucia]

What do you mean by secure?

I think he means that you can't hack into it, get passwords, spawn items, use exploits and stuff along that line .

 

[SuF]

Its not programmed to allow you to do that. >_>.

 

[super_]

secure... such a vague word. it truly depends on what you mean by hackable... client-side edits are temporary because of the design of the game; the server controls everything, client simply displays it and caters to user. if you're talking about packet spoofing and etc, it is because the server does a load of sanity checks. it also encrypts in the individual opcodes of each packet before sending them off by adding or subtracting a value retrieved from an ISAAC random number algorithm implementation. this means that to inject or remove packets from the stream would be breaking the synchronized state between the server and client opcode ISAAC generators, thus fucking up any further communication. on top of that, the algorithm is seeded with random values, coined session keys, which are exchanged between client/server in an RSA encrypted block, sent during login (also contains login credentials and the 192-bit UID). since we do not know the 128-bit RSA private key, we cannot decode such a block, and therefore cannot synchronize our own ISAAC generator. if by secure you mean code-wise, like not easily decompiled etc., then that is because of the extensive transformations applied to the bytecode by their homebrew obfuscators which most people honestly just can't be fucked to fix.

 

[Draucia]

Wow. You really know what your talking (I don't ).

I hope super answered your question .

 

[super_]

not quite; i said 128-bit i think i'm on drugs; it's at the least 512-bit

 

[Pwnography]

Regardless, all Runescape's files are stored server side. Meaning you'd have to hack into the Runescape DB (Data base) in order to get to anything.

If your talking about packet editing, Well there is a long explanation on why that's not possible.

One way or another, runescape is EXTREMELY secure. Not unhackable, no such thing as unhackable except a server with all ports closed or a BIOS on a computer (There are other examples aswell) but for the most part, almost everything that uses firmware is hackable.

 

[Pwnography]

not quite; i said 128-bit i think i'm on drugs; it's at the least 512-bit

No such thing as 512 bit. It stops at 128. 128 bit encryption is unbreakable. It's banned in china because the Goverment cannot see what they are doing.

Especially if you salt said encryption.

 

No such thing as 512 bit. It stops at 128. 128 bit encryption is unbreakable. It's banned in china because the Goverment cannot see what they are doing.

Especially if you salt said encryption.

Uh you can have 2048 bit RSA keys... >_>

http://en.wikipedia.org/wiki/Key_size

 

[super_]

No such thing as 512 bit. It stops at 128. 128 bit encryption is unbreakable. It's banned in china because the Goverment cannot see what they are doing.

Especially if you salt said encryption.

are you fucking retarded? oh yeah, you are. ps 'salting' encryption would turn it into a hash, genius.

 

[super_]

Regardless, all Runescape's files are stored server side. Meaning you'd have to hack into the Runescape DB (Data base) in order to get to anything.

If your talking about packet editing, Well there is a long explanation on why that's not possible.

One way or another, runescape is EXTREMELY secure. Not unhackable, no such thing as unhackable except a server with all ports closed or a BIOS on a computer (There are other examples aswell) but for the most part, almost everything that uses firmware is hackable.

you haven't got a clue. you're first point is obvious, your second point shows you have no idea why but you assume so, and your conclusion is a piece of shit, filled to the brim with misinformation. nice work, nimrod.

 

[war833]

No such thing as 512 bit. It stops at 128. 128 bit encryption is unbreakable. It's banned in china because the Goverment cannot see what they are doing.

Especially if you salt said encryption.

HAHA

gtfo

 

[runeowner]

Holy shit there is so much I need to learn if I want to go into software engineering and development.. by reading the replies here makes me think that I need to learn SOOOOO much...

 

[yo123]

I think the database has good 'security' / many firewalls and crud

 

[The Legit Shop]

whos facts are right, its turned into a flame war

 

[SuF]

You guys are morons.