With the official release of members worlds so close i can practically smell the grimy ranarrs, I decided I couldn’t wait to start testing things out, and since i have servers a plenty, i figured i’d set this up as a dedicated server for anyone else to test whatever they want to test.
This server is set up as a development environment
that means cheats are enabled. it’s for testing purposes only.
Log in with any username/password combination except your real login for anything else.
If you need to get ahold of me, my name on that server is Mod Jaiden & my username on the official server is Jaiden W or just leave a comment here if i’m not around.
Likewise! I was surprised to randomly run into someone only a few minutes after putting it online even with the whole map available, it’s still a small world.
is it possible for this creation to collect cookie data from my browser then utilizing the reverse md5hash to collect my password from the cookies in my browser then proceed to steal my 04 account?
I would have no idea how to do that. If you’re paranoid, play in a separate browser maybe? unless you’re worried I’m serving you malware, if that’s the case, I guess host your own world, it’s free & open source.
The chances of something like this happening are extremely low. Your Lost City credentials are not saved in plain text anywhere inside your browser, as a cookie or otherwise. Websites cannot read stored passwords. Browsers are quite secure if kept up to date.
The things you should worry the most about, security-wise, are
phishing
password strength
password re-use
malicious browser extensions
human error
If you are not tricked by a phishing site into giving away your Lost City credentials, and if you do not re-use your Lost City password on any other site, it would be nigh impossible for a malicious actor to hijack your account. Bonus points if you use a strong password and not a weak one.
Also be aware of what browser extensions you use, review them every so often and uninstall any that aren’t strictly necessary or don’t look trustworthy.
For the human error bit, we’ve had a few instances of players using AHK to type login credentials for them, in order to speed up the login process. The human error occurs when they accidentally trigger the AHK script with the wrong window focused, and their credentials are spat out into a public chat.
Follow these guidelines and keep your browser up to date and you’ll be fine!
This is your last chance to try out members before the official launch!
Craft your theories, Realize that a pivotal part is not in the game. Get sad, and then craft a newer, better theory!