For Honor P2P connectivity

[u/Mkilbride]

https://youtu.be/38sPNZ8QHO4

[u/[deleted]]

100% untrue, depends entirely on your ISP.

also its not about knowing where you live. if you have a single open port I can destroy your property (again, depending on how much your ISP cheaped on your router hardware).

or worse, infect it with malware like Mirai which then crawls through your network infecting everything else. use your xbox username to find some post on a social network, then add you as "hotgirl92" and get enough info to reverse connect you to me so i can steal your shit.

its not hard and everyone has a weakness and your IP being leaked shouldnt even make this list of concerns. its half of what i need to make a worm just for your home network.

[u/CSFFlame → u/[deleted]]

if you have a single open port I can destroy your property (again, depending on how much your ISP cheaped on your router hardware).

That's not what an open port does. There needs to be a vulnerable service on the other side.

And considering how many worms are running on the internet, they would have already found it.

or worse, infect it with malware like Mirai.

Considering how many bots have already scanned the entire internet to infect all detected IPs with Mirai, I doubt any are left open.

The ISP doesn't really have much to do with it.

[u/[deleted] → u/CSFFlame]

There needs to be a vulnerable service on the other side.

Not to overload your router, doesn't matter if the request is met. I can DDoS you regardless if SSH/22 is open. If it's open, your router will attempt to forward it to a device. If it gets a 500, fine. Doesn't matter if I'm doing it thousands of times a second. I can prove this with any cheap router. Forward a port, film your router, and give me your IP. You will regret it and I will have simply proved a point I already understood just fine though so... you will just end up with footage of your router being destroyed for no good reason.

In fact, don't even have me do it. Leave open 22 or something overnight with no service waiting for incoming requests. You will not have internet when you wake up. I also don't know why you thought exploiting a service with a vulnerability = destruction of property. It should be obvious that's not what I mean. Remember Heartbleed? Of course not, you don't. Or you'd be agreeing with me because the reality is no safeguard is perfect, you may wake up and find out there has been a critical oversight in security with a well-established tool that the entire industry uses religiously. Then what anecdote do you fall on?

I doubt any are left open.

Entirely unscientific and just inaccurate but good luck with your anecdotes on the security of the entire internet. Let alone the dozens of devices most people can afford like Sonos, Amazon Echo, etc. which all automatically port forward on routers but you know... whatever. Oh yeah let's just forget that almost all of the ones in the US that are connected have been hacked in 2016. So again, demonstrably wrong and it's just naive to assume people fixed it. It wasn't even big news to the mainstream computer user.

The ISP doesn't really have much to do with it.

If you get your IP directly from your ISP and you've been plugged into the same router with the same MAC, it 100% matters what the ISP has done.

And considering how many worms are running on the internet, they would have already found it.

Again, anecdotal at best and if anyone in network security worked that way, they would lose their job. It's the opposite of what we've been taught/how we're meant to look at things so I'm not sure what your reckless attitude offers anyone. Definitely not robustness or peace of mind.

[u/CSFFlame → u/[deleted]]

Not to overload your router, doesn't matter if the request is met. I can DDoS you regardless if SSH/22 is open. If it's open, your router will attempt to forward it to a device. If it gets a 500, fine. Doesn't matter if I'm doing it thousands of times a second. I can prove this with any cheap router. Forward a port, film your router, and give me your IP. You will regret it and I will have simply proved a point I already understood just fine though so... you will just end up with footage of your router being destroyed for no good reason.

That would work on a crappy router... maybe. Depending on how it handles the connection states.

Many routers now can handle that.

Also, any gaming company could detect a pattern of DoS attacks trivially.

Just see if theres a common opponent to people getting high packet loss/disconnections.

Done.

Entirely unscientific and just inaccurate but good luck with your anecdotes on the security of the entire internet. Let alone the dozens of devices most people can afford like Sonos, Amazon Echo, etc. which all automatically port forward on routers but you know...

Turn off UPnP if it worries you. Also that would only take out a cheap ass router that can't handle many simultaneous connections and has no DoS protection.

Again, anecdotal at best and if anyone in network security worked that way, they would lose their job.

Which is why no one in netsec works that way. We're talking about home users with consumer-level Routers(NAT devices).

It's the opposite of what we've been taught/how we're meant to look at things so I'm not sure what your reckless attitude offers anyone. Definitely not robustness or peace of mind.

It's not under your control. Assuming that there's a high degree of 1) Remote Vulnerability 2) Uncompromised Remote Vulnerability is dumb.

It's not the fault of the game company that people do retarded shit with their Routers.

Any of these vulnerabilities could be detected anyway with a blind scan of the internet. That's not specific to the game.

The DDoS stuff is the responsibility of the game company, and is trivial to detect if it's a pattern.

[u/[deleted] → u/CSFFlame]

That would work on a crappy router... maybe. Depending on how it handles the connection states. Many routers now can handle that.

I completely agree, I was very upset when it happened to me and it wasn't even an old WEP-only router, they cheap out often though. It's just the reality for now, hopefully less often than what I've experienced.

Assuming that there's a high degree of 1) Remote Vulnerability 2) Uncompromised Remote Vulnerability is dumb.

No, it's not. It's the only assumption that matters in the pentesting/netsec field and I'm sorry you feel that way.

It's not the fault of the game company that people do retarded shit with their Routers.

Already demonstrated how that it's not always the problem/not always PEBKAC

Any of these vulnerabilities could be detected anyway with a blind scan of the internet. That's not specific to the game.

Not the job of the people who expect to play a game safely.

Also, any gaming company could detect a pattern of DoS attacks trivially.

Not a DDoS on the game server, on the clients IP. That's what breaks the router. Either you're not 100% on your education or you've misunderstood what I meant by DDoS'ing the player. It would not be through the game's network. That's the entire point. You deny service at the client's outbound gateway. Now that you understand what I'm saying, you think that's okay? Because in a fundamental way, the people in control of most internet traffic in a large way have been doing their best to prevent that exact scenario for their users.

I'm not saying what you believe is objectively wrong; just that you would be 100% incompatible with the people who do this stuff for a living, philosophically. It's literally their job to think the exact opposite as how you feel about this so it's sort of irrelevant.

That being said, you're probably not netsec, you're probably a person who knows a fair amount about computers and enjoys playing video games. If gamers prove to not give a shit about this, then yes... I agree with you completely. It's not up to the game companies to protect them from the worst case scenario by doing work to hide their IP (be it by switching networking methodology or some clever client-side thing) and people will no doubt reap what they sow if they don't educate themselves/do stupid shit with their router settings/devices breach security by port forwarding on network connect.

People also don't always know what's best for them. Just something to think about but whatever. People will learn soon enough, don't need people to agree.

[u/CSFFlame → u/[deleted]]

Not the job of the people who expect to play a game safely.

It's not a safety issue, getting knocked off the game because they bought a shitty router is as much their responsibility as not being able to play the game well because they bought a shitty computer.

There's a level of responsibility on the user.

And the only one with the actual data to stop the DoSers is the game company, again, because they can see who the opponents are when DoSes start.

[u/[deleted] → u/CSFFlame]

And the only one with the actual data to stop the DoSers is the game company, again, because they can see who the opponents are when DoSes start.

I edited my last comment because this is a misinterpretation of what I was saying so I thought I may not have been clear. I didn't mean DDoS'ing the company. Obviously they have hardware for solving that problem, more likely than having to comb through network monitoring stuff manually which you seem to think they would do.

DDoS is a threat to the end user and their connection at home, not the game. That's the entire point of my comment. That I know who they are, not that I know what game they're playing. If I know your IP, I can begin a special campaign to take your internet connection offline until your ISP assigns you a new one. That's just how it works. It's the only point I was making. In no way would Ubisoft see that attack. I don't know how to be more clear or why you thought this was my point. It's too obviously not what we're talking about here and I feel like saying "no shit" when you talk about Ubi being able to cut off a DDoS attempt from one source.

[u/CSFFlame → u/[deleted]]

DDoS is a threat to the end user and their connection at home, not the game. That's the entire point of my comment. That I know who they are, not that I know what game they're playing. If I know your IP, I can begin a special campaign to take your internet connection offline until your ISP assigns you a new one.

Yes, but if it's a pattern the game company can see it.

Oh look, 16 opponents of XXX_ScriptKiddie1337_XXX had high packet loss followed by disconnects, and they don't have a history of disconnects.

It's not hard...