Backup system

[dmahehs]

Hello, i cant make my backup, it stoped at 99%, what can i do.

[skullatbash]

http://forum.warmane.com/showthread....nish-my-backup

[pedawan]

what's the point of a backup? Isn't the data stored on an SQL server anyways?

[skullatbash]

in case of a huge disaster, better safe than sorry

[pedawan]

What is there to back up? I doubt players have access to the sql server...

If so that would be a big security flaw. Looks like an easy way to get a botnet to me.

[Islingr]

What is there to back up? I doubt players have access to the sql server...

If so that would be a big security flaw. Looks like an easy way to get a botnet to me.

except the database is highly uniquely encrypted and you can't use anything to make the file 'run'... so no botnet, all it is is a disaster-prevention mechanic

the high amount of time it takes to 'finish' the backup is likely the time it takes to encrypt a relatively small amount of data and buffer it into a much larger file in segments or something to make it just about impossible to decrypt it

[Sixtyninee]

What is there to back up? I doubt players have access to the sql server...

If so that would be a big security flaw. Looks like an easy way to get a botnet to me.

We all have access to the SQL server in a very limited state. The backup system just allows downloading a personal copy of everything related to YOUR OWN account, which is also encrypted. And after consulting with common sense, it's not an easy way to get a botnet.

[Rivendare]

Also having problems with backup (stuck on 99%). Not quite sure what causes this to happen, its happened multiple times in the past and it always got fixed again.

[vogyy]

And after consulting with common sense,

Don't be that guy.

Ok lets say I decrypt it and modify it. The server get's wiped and I upload my modified backup.

[vogyy]

except the database is highly uniquely encrypted and you can't use anything to make the file 'run'... so no botnet, all it is is a disaster-prevention mechanic

the high amount of time it takes to 'finish' the backup is likely the time it takes to encrypt a relatively small amount of data and buffer it into a much larger file in segments or something to make it just about impossible to decrypt it

Thanks, that makes sense, although I doubt it's highly encrypted.

[Anyone0]

Don't be that guy.

Ok lets say I decrypt it and modify it. The server get's wiped and I upload my modified backup.

We don't know how it's encrypted but I assume it's some kind of system with encryption and decryption keys. You would need decryption key to decrypt it and encryption key to encrypt it back. Without them it should not be possible. Encryption key is on the server to encrypt backups. Decryption key is stored by people who would restore backups if something happens. How are you planning to obtain both of those keys? If someone is able to decrypt such system without keys Warmane backups won't be what they would focus on.

[Obnoxious]

Don't be that guy.

Ok lets say I decrypt it and modify it. The server get's wiped and I upload my modified backup.

Why "let's say"? Go ahead and do it.
I'll be waiting.

[vogyy]

Why "let's say"? Go ahead and do it.
I'll be waiting.

lol I wouldn't do that, it would be illegal plus I enjoy playing here xD

[vogyy]

We don't know how it's encrypted but I assume it's some kind of system with encryption and decryption keys. You would need decryption key to decrypt it and encryption key to encrypt it back. Without them it should be possible. Encryption key is on the server to encrypt backups. Decryption key is stored by people who would restore backups if something happens. How are you planning to obtain both of those keys? If someone is able to decrypt such system Warmane backups won't be what they would focus on.

I won't go into detail but there are ways.

[Obnoxious]

lol I wouldn't do that, it would be illegal plus I enjoy playing here xD

So you're perfectly capable of doing it, but are just worried you'd get banned?

Well, let me alleviate that worry then! People who report exploits, for example, have to be able to do it and tell us how it's done. They don't get banned for it, and depending on the severity of the exploit even get rewarded with coins. With that in mind, and with your skills in consideration, it would be foolish to not get your hands on some easy coins by showing us how the encryption is weak so we can make it better, yes?