Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

1 account per device?

Comments in 'Plugin Development' started by minebuilder0110, Jan 5, 2016.

  1. minebuilder0110
    Offline

    minebuilder0110 Notable Member

    Joined:
    Dec 8, 2014
    Posts:
    485
    Minecraft User:
    Apparitional
    I recently found a server that blocks you if you already have an account on your device. It is not dependant to IP either, and UUID in MCPE is just IP, name and the last one I can't remember hashed with MD5. How is it possible to achieve that?
  2. Svile
    Offline

    Svile Active Member

    Joined:
    Mar 30, 2015
    Posts:
    239
    Minecraft User:
    svile
    ClientID ?
  3. minebuilder0110
    Offline

    minebuilder0110 Notable Member

    Joined:
    Dec 8, 2014
    Posts:
    485
    Minecraft User:
    Apparitional
    So is it unique per device and unchangeable?
  4. Svile
    Offline

    Svile Active Member

    Joined:
    Mar 30, 2015
    Posts:
    239
    Minecraft User:
    svile
    it's unique per device . can be changed
  5. minebuilder0110
    Offline

    minebuilder0110 Notable Member

    Joined:
    Dec 8, 2014
    Posts:
    485
    Minecraft User:
    Apparitional
    Oh right, I thought UUID = Client ID :p
    How can it be changed?
  6. Samueljh1H8sLag
    Offline

    Samueljh1H8sLag Active Member

    Joined:
    Jun 20, 2015
    Posts:
    168
    Minecraft User:
    Samueljh1_
    theres a file in the /games/com.mojang/minecraftPE folder called clientID.txt which u can change
  7. Legoboy0215
    Offline

    Legoboy0215 Notable Member

    Joined:
    Nov 1, 2014
    Posts:
    1,724
    Minecraft User:
    Legoboy0215
    Use a file browser like iFunbox or ES File Explorer.
  8. Hotshot_9930
    Offline

    Hotshot_9930 Notable Member Plugin Developer

    Joined:
    May 26, 2014
    Posts:
    665
    Plugins:
    2
    Minecraft User:
    HotshotHD
    Its kinda scary that a player can never be truly banned. If they get IP banned they can just connect to a VPN, if they get client ID banned they can just change their client ID, lol.
    KubixQ and Tee7even like this.
  9. minebuilder0110
    Offline

    minebuilder0110 Notable Member

    Joined:
    Dec 8, 2014
    Posts:
    485
    Minecraft User:
    Apparitional
    I know, and I was spending last hour spamming the hell out of a server using copy and paste. You can send 4 lines of text at a time so I sent this
    MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
    M is pretty big so I use that.
    rapidly. The server was then later closed. It had 80 players online. :p
  10. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    Anything apart from IP can be modified through mods. Even if MCPE adds device ID sending (which won't be allowed), we can just create a mod that sends fake device ID.
  11. Thunder33345
    Offline

    Thunder33345 Notable Member

    Joined:
    Apr 3, 2014
    Posts:
    755
    Minecraft User:
    Thunder33345
    That is just how it is right
    they Can make a auth sys like how MCPC did but it is pointless since registering cost 0 which you can just make more acc & mcpe dont really need that tbh

    why not use "@" ???
    minebuilder0110 likes this.
  12. amiremad
    Offline

    amiremad Active Member

    Joined:
    Sep 8, 2015
    Posts:
    192
    Minecraft User:
    amir107
    subnet you will find this code in the jail plugin
  13. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    Many players may use the same subnet if they are from the same place, if they use the same internet provider. It is basically racial discrimination if you ban a subnet.
    And players can use a VPN. Different VPN providers have apparently different subnets.
    applqpak and minebuilder0110 like this.
  14. amiremad
    Offline

    amiremad Active Member

    Joined:
    Sep 8, 2015
    Posts:
    192
    Minecraft User:
    amir107
    so banning a subnet may lock out many players
    hoyinm14mc likes this.
  15. Samueljh1H8sLag
    Offline

    Samueljh1H8sLag Active Member

    Joined:
    Jun 20, 2015
    Posts:
    168
    Minecraft User:
    Samueljh1_
    I just want to make a note that using $player->getUniqueId() is a safe way to check if a player is real (and safer than just IP). This is because someone could be able to mask their IP, but they would not know what, for example, the owners own clientID is. $player->getUniqueId() creates a UUID based on both of these things.
  16. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    If you only have one server on your network, consider using client secret instead. That value is unique to your server, so nobody can fake it. On the other hand, unique ID can still be faked if someone, as you suggested, masked the IP (I doubt if that's possible), and client ID can be stolen if you join another server with it. Client secret contains a hash that is dependent on device ID + server address. Since your device ID cannot be directly known by the server, it is very hard for hackers to create the correct client secret. You can basically assume it as impossible.
    wolfdale and applqpak like this.
  17. Thunder33345
    Offline

    Thunder33345 Notable Member

    Joined:
    Apr 3, 2014
    Posts:
    755
    Minecraft User:
    Thunder33345
    hmm is client secret can be altered? (if not we can use it to ban ppls)
  18. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    Everything sent by the client can be directly changed by mods. So IP is the only thing that you can't directly change with mods, as the IP address is sent by the low-level protocols like UDP or IP (not sure). I am not saying your IP is constant, but you can't change it to a fake one so directly.
    applqpak likes this.
  19. wolfdale
    Offline

    wolfdale Active Member Plugin Developer

    Joined:
    Dec 3, 2014
    Posts:
    276
    Plugins:
    1
    Minecraft User:
    ace
    Wait... i just found out that client secret cannot be saved properly into yml?? It also cant be displayed normally, is it supposed to be like that?
    applqpak likes this.
  20. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    bin2hex() or base64_encode() it.
    applqpak likes this.

Share This Page

Advertisement