Its clear text for sure in UDP - but in TCP its formed in a set packet -
which can be disassembled and viewed.   You can give me any IP Address and I
can sniff/watch the traffic from that IP.  SSL encrypts the entire TCP
packet - I'm speaking the % garbling it to make it harder to understand what
the password is - ie,
my password is:  freestuff   - thats viewable easy - but %freestuff  would
make it look like %1f72s734  - weird.

Britt

----- Original Message -----
From: "Simon Garner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 22, 2003 6:51 PM
Subject: Re: [hlds_linux] Reporting Server Hackers


> On Wednesday, July 23, 2003 11:36 AM [GMT+1200=NZT],
> Britt <[EMAIL PROTECTED]> wrote:
>
> > You can easily sniff network traffic if you have the target IP and
> > resolve their MAC Address with certain progs out there - however
> > since this is all UDP - not much you can do - if it used TCP - you
> > could add the % sign in the password and it will garble it when
> > sniffed (data section of the TCP packet).
> >
> >
>
> Only if you have access to a machine in the route between the client
> using rcon and the game server. Which would be very very uncommon.
>
> I'm not familiar with what you're saying about TCP, but I can't see how
> that would work, and if such a feature did exist then surely there would
> be no use for SSL? Cleartext is cleartext no matter how you look at it.
>
> -Simon
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to