perchbird @perchbird.dev · May 22

so i wrote a quick proof-of-concept where i used the logs sent to the game on accident and correlated that with data that the game is supposed to receive. if you ended up getting the correct logs (took a while and a bit of luck), you would be able to get any random player's IP address.

29 likes 1 replies

?

Replies

perchbird · May 22

for the sake of his privacy i won't mention the process of getting ahold of Koji, but i did manage to tell him about this bug and he told me he'd route it to the proper team. in 6.2, server logs were no longer sent to the client in any of the packet types i had been observing!