It's funny how I had to enter 5 (
FIVE!) different CAPTCHA's in order to register here, yet the developers act so casual about something as serious as a publicly available database that has been proven to be accessible by people that had no business in this database. Yes, it's annoying that someone wiped the data but no, it's not their fault. Team Meat made a horrible mistake in their design by:
- using a model that pivots around database that is accessible through the internet
- putting the login data inside the executable for the world to see
- giving full access to the database user when read access should be more than enough
- ignoring multiple messages from concerned players
This is not just leaving the door open, this is posting inventory lists containing every valuable thing in your house on every street post with a skeleton key for every door taped to it. And then, when you get a call from concerned neighbours, saying: "I don't care if people look at my stuff."
The dev team made some horrible mistakes and every decent programmer should know better than this. Data should be made available through some sort of API (be it SOAP, REST or whatever else) and
not under any circumstances by providing direct database access.
Show Posts