Jump to content
Frequently Asked Questions
  • Are you not able to open the client? Try following our getting started guide
  • Still not working? Try downloading and running JarFix
  • Help! My bot doesn't do anything! Enable fresh start in client settings and restart the client
  • How to purchase with PayPal/OSRS/Crypto gold? You can purchase vouchers from other users
  • Remove getClient().getPassword()


    JustSoPro

    Recommended Posts

    getClient().getPassword() can be used in scripts to return passwords of accounts that are logged in AND not even in the account manager, I feel like this isn't safe in practice unless EVERY script is scanned before being uploaded to the SDN and ALL scripts that are not on the SDN have to be open source. Someone could easily send your login and password to their e-mail or website.

    Link to comment
    Share on other sites

    1 minute ago, JustSoPro said:

    getClient().getPassword() can be used in scripts to return passwords of accounts that are logged in AND not even in the account manager, I feel like this isn't safe in practice unless EVERY script is scanned before being uploaded to the SDN and ALL scripts that are not on the SDN have to be open source. Someone could easily send your login and password to their e-mail or website.

    All SDN scripts are checked for malicious intent and quality assurance.

    Also let this be a note not to run any snoopy scripts that people hand you. If anybody is found handing out such stuff, they will be dealt with.

    Link to comment
    Share on other sites

    Store scripts are checked by both man and technology for malicious intent of the scripter. This includes any changes they make to an already uploaded script to the store.

    Link to comment
    Share on other sites

    People use this for private purposes (that aren't malicious) so no, we wouldn't remove it.

    We look at the code of every SDN script before it's compiled or accepted.

    Local scripts can do much more malicious things than call getPassword, and even if we did remove it, local scripts can still use reflection to get the password from the game (the same way we do)

    Like Xephy said, let it just be a stark reminder to look at the code yourself for any local scripts you use, including private scripts you purchase from other scripters. These are not regulated by us.

    Link to comment
    Share on other sites

    Archived

    This topic is now archived and is closed to further replies.

    ×
    ×
    • Create New...

    Important Information

    We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.