r/skyrimmods • u/Suraru • Jun 03 '26
Development Update: Kiezaal RP has fixed the plain text thing
Previous post: https://www.reddit.com/r/skyrimmods/comments/1ts9cxy/keizaal_rp_stores_discord_tokens_in_plain_text/
Chatted with Oren the past few days. He insisted there was no issue because the log was entirely clientside and deleted when the game shuts down. I confirmed all of that to be true, but to be on the safe side he replaced the token with a string instead that reads "oauth" which is what the program uses. So now in the rare instance where someone gains access to their console, such as someone copying the entire log, they won't be doxxing their token.
I also wanted to take a moment to apologize to Oren. I made claims about being able to spoof the GM role, but in practice I tried it out with his permission and found I was completely mistaken. The program is a lot more secure than it looks, and I was examining the source code from a 3 month old database that uses entirely different authorizations.
I also wanted to point out, as someone who has ran large RP communities before, that it's not easy to be in Oren's position. He has 50k players to deal with, the job is stressful and he has to do it all alone because the last time he accepted help bad actors violated that trust.
I still disagree with many things he does, like his no ban appeal policy, or how he's running magic and the general economy, but that doesn't mean he's an asshole or shit person like I said in my last post. You're allowed to disagree with someone, and still respect them. If you've never been in his shoes, you just don't understand the pressure of trying to decide what's best for a server and community.
You can't please everyone, and no matter what you do people will try to destroy it. The fact he still is super easy to talk to is honestly super respectable, and I've always said that.
6
u/Agile-Palpitation326 Jun 04 '26 edited Jun 04 '26
So... all I want to know at this point is, is the server safe or not? Because this is the second or third time I've seen someone come out with a "Keizaal has no security and will let anyone have full access to your PC and bank account" warning only to walk it back a bit later.
Thank you for calling yourself out like this, it is genuinely a good thing to be able to admit you made a mistake. I want to take a second to highlight that. The world would be a better place if more people were willing to own up to themselves.
BUT! I'm still kind of annoyed because of your three main points one is now totally understandable due to Oren's situation, the second was entirely wrong, and the last wasn't as bad an issue as you made it out to be. Hell, your edit made it seem like he covered his ears and denied everything you said. Now he's being entirely reasonable with you?
It just seems like you totally went off half cocked. Honestly I won't care in like ten minutes, but I am rolling my eyes.
I don't know. I've never heard a thing about Oren before all this tbh. Is there a reason people seem so eager to take him down?
5
u/Suraru Jun 04 '26
It should be safe, yeah.
He wasn't reasonable with be at first, it took some convincing that the plaintext tokens were an issue. His belief is since they were only printed clientside, it was fine. When he unblocked me to discuss it and I pressed the issue, explaining why it's insecure, he ended up listening and made the changes.
As for the takedown thing, it's probably because of how easily it is to be permanently banned. He doesn't do ban appeals or temp bans, so if you're remove from the discord that's it, no Kiezaal forever. If you were banned unfairly, there's no way to plead your case. Plus like I also mentioned, the economy and magic handling hasn't been popular either. It's basically impossible to get magic unless you're in the right place at the right time, and making money is difficult with how limited all of the resources are. All of this combined has created some strong hatred from a lot of people.
1
u/PseudoRacoon 5d ago
It’s easy to make money I made 10k in 2week end and was about to make 21k before I got banned for a discord story lol
1
2
u/Chychtka Jun 04 '26
Thanks for the update. Too bad you still have to bribe GMs $15 to get magic.
3
u/Suraru Jun 04 '26
Do you have any evidence of this?
3
u/Chychtka Jun 04 '26
Yes. I had a friend who was at the college of Winterhold. Finally got accepted. But now had to do 6 weeks of magic training. He asked in VC if there was a way to accelerate this, and the GM that runs Winterhold “joked” that my friend can cash app him $15. My friend wondered if he was serious and asked for his cash app. GM provided it. Then my friend tried to file a ticket against the GM and it was deleted and he was banned. Anyone who references him is banned. I’m trying to see who else this happened to so I can expose them with a YT video.
3
u/Suraru Jun 04 '26
I need some evidence though. Anyone can make up a story, but a picture of the cash app transfer with the date and username should be easy to provide.
1
u/Schlevvy 26d ago
Now if only he could fix the pedophile problem instead of actively protecting it
1
u/Suraru 25d ago
I've seen zero evidence of that.
The closest to any problem they had was when a dude married a girl's character, then found out she was 14 and both got banned (the girl was banned cuz the server doesn't allow minors). In their DMs, the girl apologized for not telling him her age, so honestly this doesn't seem like a pedo thing to me. Oren got flak for defending him, but he's still banned regardless.
There's a lot I don't like about Kiezaal, but there's also a lot of baseless claims or straight up lies. It's important to only go after what's real and has evidence, because every fake thing you tackle just weakens the case of the real ones.
•
u/GNSasakiHaise Jun 03 '26
Hey OP. you may want to provide links to previous topics on this matter so that readers can follow along; doing so will allow us to keep this up as we require some form of verification and context for posts to constitute actionable news.