Hey all now I have another question. Is it possible for others to when they connect to me hack into my server? And from there hack into other ppl that might be playing? I am asking these questions for personal saftey.
Umm hackers
Posted by Daryis on Mon 19 Feb 2007 01:00 PM — 4 posts, 17,773 views.
You can't really hack a MUD character. What someone could do though, is hack the server to get into it and mess around with pfiles or code. As long as your server is secure and you use a strong password, you shouldn't worry.
Yes. It's rather easy to hack into many mud servers. That's why you never want to run your mud under root permissions. If it's your server, run the mud under a very restrictive uid/gid.
Since your potential hackers know your IP address, all they have to do is try to telnet to your server and guess your administration password. Many people choose poor passwords, and can be subjected to a "dictionary attack".
That is, if your password is in a dictionary, you have trouble straight away.
A strong password would be long and random. MUSHclient has a "generate unique ID" function on its Edit menu, it generates a string like this:
This is different every time you use it, and is unlikely to be in a dictionary.
A handy utility for storing passwords is PasswordSafe, see this web site:
http://passwordsafe.sourceforge.net/
This free program lets you store your important passwords into a single file, which itself is password protected with strong encryption. That way you only need to remember one password (and anyone breaking into it needs to access your file in the first place), and then keeping long random passwords for your web sites is much easier.
That is, if your password is in a dictionary, you have trouble straight away.
A strong password would be long and random. MUSHclient has a "generate unique ID" function on its Edit menu, it generates a string like this:
8d1f03b11526594ed3fb15d4
This is different every time you use it, and is unlikely to be in a dictionary.
A handy utility for storing passwords is PasswordSafe, see this web site:
http://passwordsafe.sourceforge.net/
This free program lets you store your important passwords into a single file, which itself is password protected with strong encryption. That way you only need to remember one password (and anyone breaking into it needs to access your file in the first place), and then keeping long random passwords for your web sites is much easier.