Re:Veloren is a multiplayer voxel RPG written in Rust
by AngelOnFira on Sunday March 13, 2022 @11:59PM
(#30668390)
Let us know if you find any holes!
We currently have an MR where we're overhauling some of the auth, and I know in the future we do want to explore what else we could add/improve for our backends :)
Re:Veloren is a multiplayer voxel RPG written in Rust
by daguava on Monday March 14, 2022 @12:01AM
(#30668397)
The only hole I found was if you bypass UI hashing you can create an account that can never be logged in to, but... that's the most secure account I can think of.
Re:Veloren is a multiplayer voxel RPG written in Rust
by Jweb_Guru on Sunday March 13, 2022 @11:58PM
(#30668386)
Credentials use argon2.
Re:Veloren is a multiplayer voxel RPG written in Rust
by daguava on Monday March 14, 2022 @12:03AM
(#30668407)
Thanks for the info, I saw the length matched the usual sha256 so assumed it ended there.
I'm from a bcrypt crowd which is why I offered the suggestion but as long as you're taking things seriously I'm all for it :)
Re:Veloren is a multiplayer voxel RPG written in Rust
by KyleBerezin on Tuesday March 15, 2022 @06:17PM
(#30692628)
Cubeworld was never completed. It makes sense that people try to take up the torch.
Things seemed pretty clean, and because everything has source posted I was able to mess around with the apis, and try a few things against your services :) (hope I didn't set off any alarms lol). That said, what I'm assuming is Sha256 could always be a bit tighter, consider a strength upgrade on those credentials.
There's a bit of snobbery going on here for go / voxel hate, but I really enjoyed digging into a completely open source setup for something that is already a nice intro of game, services, and execution, well done :)