cannawen / dota-gsi-discord-bot

Use Dota 2's Game State Integration API to make helpful announcements in a discord voice channel
MIT License
5 stars 2 forks source link

[feature] add warning to top of private coaching page not to share the link with anyone #90

Closed cannawen closed 1 year ago

cannawen commented 1 year ago

If an attacker knows someone's student id, the attacker can put the id into the gamestate_integration .cfg authKey and the bot will start sending the imposter's GSI data to the real person's discord channel.

Not the most devastating attack in the world, but security by obscurity is probably not the best way to go ... Creating separate story to handle this properly later [#91]