@Sunny said in How to Escape the OOC Game:
I am way, way, way, way, way more at risk just existing on FB than I am using my name in my email and sharing that with people.
This is absolutely not accurate, FYI. I'm in IT and do a lot of infosec stuff, so take that as a qualifier if you will, but this is entirely not true.
Facebook For starters, any personal information you share over have had collected by Facebook is their property to distribute, but is also protected by high-security data centers and IT teams who are regularly audited for security standards.
Mush? Everything you type is subject to data sniffing/interception(non-SSH telnet), potentially stored on a database that gets stolen by lame people who steal code, and is very rarely scrubbed. There are no existing standards in mushing for which information can be kept and for how long, nor are there any real guarantees what the owners of said mush space to with your IP/loggable information.
Facebook: You have control of outward facing information shared with the public. You have the ability to whitelist people who can view this content by approval or denial of friend requests. You can remove people's access to view your information after they've once had access it.
Mush: Making a login to this forum is free. If this forum is insecure or Ark's password is easy to crack even via a rainbow table, I would then have access to IP information that could be backtraced to physical locations. You and many other mushers have listed who they are playing and where, and I think some 98% of these games are using default telnet, so if I apply sniffing to data coming out telnet on said IPs that I've stolen? Voila. I could then monitor your mush traffic. To make things worse, mushers (and this forum) are very susceptible to social engineering attacks. If you think about it, with sone acting ability and a little time, some of the people's need for RL human contact could be leveraged to build false flag friendships that could be used to socially engineer information about the target or (since mushers like to gossip) other potential targets (which means you dont need to be compromised. Other people who have been compromised could share your information either to others or a malicious attacker directly or via sniffing default telnet port.
There is no identity validation in this hobby, but a clever hacker could easily use this insecure as shit hobby as a listening point for data mining.
Not scolding or whatever, but once you were like "I'm way safer on Facebook" I didn't feel right not speaking up due diligence-wise to let you know for your own safety, that this is absolutely not true.
Mushing is hackable as shit.
