rest wrote on Mar 10^th, 2014 at 1:25pm:


By all means, store your account name and password on your machine in an unencrypted .xml file whose name is clearly known. 

I bet the xml looks like this:

<user>
   <account>dumbass</account>
   <password>minenow</password>
</user>
 

rest wrote on Mar 10^th, 2014 at 3:46pm:


I appreciate the "concept" of the DDO-ML thing, but goddamn, fucking people need to think sometimes when they write code.  That's an elementary school-level security hole.

rest wrote on Mar 10^th, 2014 at 4:09pm:


The problem isn't whether it works.  It's the rank stupidity of storing account/pass combos in a plain text file anywhere, at anytime.  By the same token could also say Akami works.

Let's say this.  If I get into your machine long enough to put something on it which will scan your unencrypted files for terms like (which is not all that long):

pwd
pass
password
pw

Then send off any files containing those terms, how long before you think I own your account?

A lot of things "work" assuming everyone plays nice.  That's not the way the world is, however.

rest wrote on Mar 10^th, 2014 at 4:41pm:

If it doesn't then it's fine.  The instructions for DDO-ML clearly state you edit a .xml file to add your account/password.  They also weren't both written by the same person.  AtomicMew ripped pyLOTRO which wasn't created by them, to create DDO-ML.

ETA:  Considering AM just re-confirmed the instructions, my guess is they weren't smart enough to figure out how to exeucte it using a keyed password, so instead they picked the worst possible backup solution.  One can be afraid of p2p all they want, but if they're dumb enough to store passwords on disk unencrypted, p2p is the least of their problems.

Just a quick confirmation that Pylotro doesn't store your password unless you want it to.

TractorsareEpic wrote on Mar 10^th, 2014 at 2:03pm:


I was having crash on load issues before.  I ran pylotro today and didn't have that problem.

(mine is not an old machine either).

a Kitteh wrote on Mar 10^th, 2014 at 11:07am:


I told my firewall to not allow akami access to the internet and I'm logging in to DDO just fine.  I use DDO-ML as my launcher.

Edit:  I'm lying in the text above.  I'm actually using DDO-preload and not DDO-ML.
https://www.ddo.com/forums/showthread.php/420738-How-to-make-the-game-loading-fa...

iliveyourdream13 wrote on Mar 10^th, 2014 at 4:33pm:


Do you realize how much of your info and passwords are sent over plain text?  Did you know that passwords stored in your browser are also stored as plain text? 

This isn't a program to make other people happy, it's a personal program to satisfy my own personal uses that made multiboxing, loading the client, managing awesomium etc. easier for me.  I don't have my password the same as my bank account password, and I don't have my CC info stored in my DDO accounts. 

That said, it isn't too hard to program in some basic encryption, so I will likely get around to it sometime.

AtomicMew wrote on Mar 10^th, 2014 at 5:54pm:

Considering I've encrypted data for the healthcare industry, yes.  I wouldn't use any of the millions of flawed examples as an excuse to be lazy about password storage.  Your own account may be "insulated", but dumping software out there that encourages others who might not even realize the risk and some almost certainly have CC's tied to their accounts, is the equivalent of software malpractice (especially because you didn't post a caveat about that). 

I don't store personal data anywhere I don't have to.  I've been using browsers since mosaic, so yeah, I'm well aware of their flaws (put aside the fact no one should ever be "storing" a password in a browser).

Just because other idiots do it isn't an excuse to do it yourself. 

iliveyourdream13 wrote on Mar 10^th, 2014 at 6:56pm:


Fair enough ,I'll do some updating of the program and post soon.

TractorsareEpic wrote on Mar 10^th, 2014 at 2:17pm:


You can use a flash drive. those are fast enough to mitigate the double login syndrome

After updating via pyLOTRO, it no longer loads DDO

TractorsareEpic wrote on Mar 10^th, 2014 at 7:37pm:



How does this work? Do I just copy everything over and run from there, or do I have to install to the flashdrive?

Also, is using a flashdrive faster, or can I use a portable harddrive?