Disable guest logins globally.

ID:260731
 
Jun 10 2009, 9:15 am
Guest logins cause more problems than they solve, there is absolutely no reason for someone to have a guest account when creating a key is free and takes little more than five minutes.

Every use I've seen of guest keys has been malicious, and there is no simple "Disable Guest Logins" button anywhere on the BYOND interface. Meaning people use them to troll on servers, dodge bans, and generally be a nuisance.

I request that they are removed entirely, or the DS and DD interfaces are given such an option. And don't give any excuses like "Code this into the game", because some of us host games created by other people and such code would be impossible for them to put in.
Jun 10 2009, 9:20 am
I'm pretty Sure banning 'Guest' bans all of the guest keys.
Jun 10 2009, 9:27 am
I don't see how a guest key can be any more malicious than a regular key - you can ban them just as easily.

Just use something like this in your game and anyone logging in with a guest key will be immediately disconnected:

client/New()
    if(copytext(src.ckey, 1, 4) == "guest")
        del(src)


Alternatively, you could make guest keys a "tourist" key, where they have little ability to interact with the world in ways that could be malicious (no "say" verbs), but they can wander around and check out the world before they make a commitment.
Jun 10 2009, 9:31 am
In response to Foomer
Because a guest key can dodge a ban, and not all games run well in Dream Daemon, putting the Stickyban out of comission. That, and they're under a cloud of anonymity. See, if I used my key to raise Hell on Mitadake, I'd be on everyones ban list. If I raised Hell with a guest key, nobody would suspect a thing.
Jun 10 2009, 9:32 am
Not a bad suggestion (mainly for hosting other people's games, since as Foomer noted it is quite trivial to code this into your own game). We could probably build it into DD rather easily-- DS has a much more limited interface and we recommend you use DD for extensive control anyway.
Jun 10 2009, 9:32 am (Edited on Jun 10 2009, 8:22 pm)
In response to Winter Tail
Winter Tail wrote:
Because a guest key can dodge a ban, and not all games run well in Dream Daemon, putting the Stickyban out of comission. That, and they're under a cloud of anonymity. See, if I used my key to raise Hell on Mitadake, I'd be on everyones ban list. If I raised Hell with a guest key, nobody would suspect a thing.

They'd all ban your guest key. How can a guest key dodge a ban? All guest keys are unique keys just like your regular keys.
Jun 10 2009, 10:54 am
In response to Foomer
I think that Winter Tail might be unaware of the fact that a guest key is indeed computer specific and not randomly generated anew each time you log in as guest.
The fact that the guest id shares the computer_id number is not as obvious as it might seem.
Jun 10 2009, 4:22 pm
In response to Schnitzelnagler
I was going to recommended what Foomer did myself, but you know, it definitely wouldn't hurt to do what Tom is thinking of and allow people without coding experience to disable guest logins to the games they host through the Dream Daemon.
Jun 10 2009, 6:28 pm
In response to Geldonyetich
Geldonyetich wrote:
I was going to recommended what Foomer did myself

Then nay to you too for not reading the post you were going to reply to. ;P The OP first mentioned that he doesn't want a programming solution but rather an option for the host.
Jun 10 2009, 6:55 pm
Winter Tail wrote:
Guest logins cause more problems than they solve, there is absolutely no reason for someone to have a guest account when creating a key is free and takes little more than five minutes.

Every use I've seen of guest keys has been malicious, and there is no simple "Disable Guest Logins" button anywhere on the BYOND interface. Meaning people use them to troll on servers, dodge bans, and generally be a nuisance.

I request that they are removed entirely, or the DS and DD interfaces are given such an option. And don't give any excuses like "Code this into the game", because some of us host games created by other people and such code would be impossible for them to put in.

If you were smart you'd use the new client-id information to find out who this player is, and then punish them for thinking they are smart. ;)
Jun 10 2009, 7:22 pm
In response to AJX
AJX wrote:
If you were smart you'd use the new client-id information to find out who this player is, and then punish them for thinking they are smart. ;)

That only works if the user is also logged in under a regular key you can use for a comparison. And if they have logged out first, you have nothing to go by unless you cache computer_ids and keys for situations just like this. Which I doubt many people will do.

And the user specifically said he didn't want a code example, as it's not his game and he has no access to the source.
Jun 10 2009, 8:52 pm
In response to Tiberath
Tiberath wrote:
That only works if the user is also logged in under a regular key you can use for a comparison. And if they have logged out first, you have nothing to go by unless you cache computer_ids and keys for situations just like this. Which I doubt many people will do.
Archiving client IDs isn't difficult at all nor time consuming. :D

And the user specifically said he didn't want a code example, as it's not his game and he has no access to the source.
Oh. Fail. Missed that I spose. :(
Jun 10 2009, 9:03 pm
In response to Tiberath
Tiberath wrote:
That only works if the user is also logged in under a regular key you can use for a comparison. And if they have logged out first, you have nothing to go by unless you cache computer_ids and keys for situations just like this. Which I doubt many people will do.

Doesn't DD automatically log guest keys? The computer_id is tagged right on the end of them. Not to mention if they're spamming on a guest key (unless they can change their name in-game) you should have it. And even if they can change names! Hopefully the who list or something would show you their key...
Jun 10 2009, 9:06 pm
In response to Falacy
Falacy wrote:
Doesn't DD automatically log guest keys? The computer_id is tagged right on the end of them. Not to mention if they're spamming on a guest key (unless they can change their name in-game) you should have it. And even if they can change names! Hopefully the who list or something would show you their key...

Yeah, it should treat them like regular keys.
Jun 11 2009, 8:10 pm
In response to Tom
You have no idea how much of a help that is going to be to people.