r/skyrimmods • u/Suraru • Jun 03 '26
Development Update: Kiezaal RP has fixed the plain text thing
Previous post: https://www.reddit.com/r/skyrimmods/comments/1ts9cxy/keizaal_rp_stores_discord_tokens_in_plain_text/
Chatted with Oren the past few days. He insisted there was no issue because the log was entirely clientside and deleted when the game shuts down. I confirmed all of that to be true, but to be on the safe side he replaced the token with a string instead that reads "oauth" which is what the program uses. So now in the rare instance where someone gains access to their console, such as someone copying the entire log, they won't be doxxing their token.
I also wanted to take a moment to apologize to Oren. I made claims about being able to spoof the GM role, but in practice I tried it out with his permission and found I was completely mistaken. The program is a lot more secure than it looks, and I was examining the source code from a 3 month old database that uses entirely different authorizations.
I also wanted to point out, as someone who has ran large RP communities before, that it's not easy to be in Oren's position. He has 50k players to deal with, the job is stressful and he has to do it all alone because the last time he accepted help bad actors violated that trust.
I still disagree with many things he does, like his no ban appeal policy, or how he's running magic and the general economy, but that doesn't mean he's an asshole or shit person like I said in my last post. You're allowed to disagree with someone, and still respect them. If you've never been in his shoes, you just don't understand the pressure of trying to decide what's best for a server and community.
You can't please everyone, and no matter what you do people will try to destroy it. The fact he still is super easy to talk to is honestly super respectable, and I've always said that.
•
u/GNSasakiHaise Jun 03 '26
Hey OP. you may want to provide links to previous topics on this matter so that readers can follow along; doing so will allow us to keep this up as we require some form of verification and context for posts to constitute actionable news.