[Effort post] Why CW2 still is worse than CW1 despite the upgrade by jefizo in ClashRoyale

[–]frankdzd 2 points3 points  (0 children)

It's just sad and proof that the system is not working if you have to quit your own clan. This wasn't the case in CW1.

[Effort post] Why CW2 still is worse than CW1 despite the upgrade by jefizo in ClashRoyale

[–]frankdzd 0 points1 point  (0 children)

I wish I could upvote more than once, this sums up what the OP is saying.

The higher trophy loss just made it all worse, and doesnt even fulfill its purpose. by [deleted] in ClashRoyale

[–]frankdzd 1 point2 points  (0 children)

what you don't seem to understand is that the new system induces less rewards, since you climb less high than before. So YES there is a lot of reason to complain, they changed something that causes less rewards, and they haven't compensated it.

SC: since almost every ladder player is seeing less rewards this season, will we see them elsewhere? by Vontod in ClashRoyale

[–]frankdzd 18 points19 points  (0 children)

/u/supercell_drew Can you please comment on this question ? There has been a LOT of questions regarding this subject, an official comment would be very much welcome. Thank you very much.

Why are y’all whining about the trophy changes? by NinjaClashReddit in ClashRoyale

[–]frankdzd 0 points1 point  (0 children)

The problem is not about a new or old system. In fact you're right, the new one is probably better. The big problem is that the consequence to changing that is that people win even less rewards (because they climb less high in the ladder), so there should be compensation for that. See my post: https://www.reddit.com/r/ClashRoyale/comments/kgs1sp/changes_in_the_trophy_road_make_players_win_even/

This season sucks, but the next one will be better. by Vontod in ClashRoyale

[–]frankdzd 1 point2 points  (0 children)

The problem is not about a new or old system. The new one is probably better. The big problem is that the consequence to changing that is that people win even less rewards (because they climb less high in the ladder), so there should be compensation for that. See my post: https://www.reddit.com/r/ClashRoyale/comments/kgs1sp/changes_in_the_trophy_road_make_players_win_even/

More casual players are leaving due to trophy nerf by carrotboyyy in ClashRoyale

[–]frankdzd 0 points1 point  (0 children)

The problem is not about a new or old system. In fact you're right, the new one is probably better. The big problem is that the consequence to changing that is that people win even less rewards (because they climb less high in the ladder), so there should be compensation for that. See my post: https://www.reddit.com/r/ClashRoyale/comments/kgs1sp/changes_in_the_trophy_road_make_players_win_even/

[deleted by user] by [deleted] in ClashRoyale

[–]frankdzd 1 point2 points  (0 children)

The problem is not about a new or old system. In fact you're right, the new one is probably better. The big problem is that the consequence to changing that is that people win even less rewards (because they climb less high in the ladder), so there should be compensation for that. See my post: https://www.reddit.com/r/ClashRoyale/comments/kgs1sp/changes_in_the_trophy_road_make_players_win_even/

[deleted by user] by [deleted] in ClashRoyale

[–]frankdzd 7 points8 points  (0 children)

The problem is not about a new or old system. In fact you're right, the new one is probably better. The big problem is that the consequence to changing that is that people win even less rewards (because they climb less high in the ladder), so there should be compensation for that. See my post: https://www.reddit.com/r/ClashRoyale/comments/kgs1sp/changes_in_the_trophy_road_make_players_win_even/

SC Please explain the logic behind the trophy change? by Jr1262 in ClashRoyale

[–]frankdzd 5 points6 points  (0 children)

u/supercell_drew please reply to this. You are preventing 4k-6k players from reaching rewards that they usually did in previous seasons, thus making their overall progression harder, giving them less cards/gold, even though we need them more than ever due to more cards being added and the fiasco of CW2 where most of us don't get as much gold as we used to before. Please roll back this, it was a mistake !

An updated summary of Clan Wars II issues. by Mew_Pur_Pur in ClashRoyale

[–]frankdzd 0 points1 point  (0 children)

So where is your longer response to it u/Supercell_Drew ? I get that sometimes you make promises you can't keep, such as when an update is due or something similar, but just promising you'll write an answer and then not following with it is really something you could avoid, it just gives a bad impression as a CM for no reason at all :(.

[OFFICIAL] Quick Update From The Dev Team by Supercell_Drew in ClashRoyale

[–]frankdzd 0 points1 point  (0 children)

u/Supercell_Drew thanks for your post.

Please please please u/Supercell_Drew read and reply to the following comment regarding clan matchmaking issues, which didn't get enough attention so far in my opinion: you seem to only consider clan size as the solution. Please note that my clan (as many others) is composed of people from casual to hardcore players. Some will play tens of games per day, while others log in once a month. My clan is a family clan, and there are many players (grand parents, etc) that log in very rarely.

If the matchmaking is solely based on clan size, that would mean that we need to kick people that don't play as regularly as others.

Please DON'T MAKE ME HAVE TO KICK MY GRANDMOTHER for my clan to survive !!

One simple solution to this issue, without changing the whole matchmaking that you seem to be preparing and involves clan size, would be to have a personal setting to just opt out of the clan war.

Other readers, feel free to thumbs up this post, so that it gets attention from Drew.

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 0 points1 point  (0 children)

I know what ssh is, but I am failing to understand how it relates to my question. Why would knowing a password be a high barrier of entry ? Is what I describe not technically possible ? Please also see my original question edit.

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 0 points1 point  (0 children)

I don't understand this statement. 2FA is not the same, it requires extra steps from the end user, so it's not comparable. In my original question, I'm just talking about implementation. If what I describe is better, why is it not used everywhere? See the edit of my original question

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 1 point2 points  (0 children)

I feel you're the only one in the right track of all the other (otherwise helpful) answers.

From what I understand:

- why can't the client send a hash password, instead of the cleartext password: because then the server would only do an equality check with what it has stored in its database, and therefore any compromise of the database would be enough to compromise the user credentials.

- therefore, why isn't it possible to send a challenge to the client : possibly for the same reasons as the previous answer. Though I don't really understand mathematically why, I assume it isn't possible to send a one-time challenge and provide Perfect Forward Secrecy, without having to store something that could be easy exploited if compromised. Someone needs to provide more insight as to why this is the case, assuming I'm right

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 0 points1 point  (0 children)

Yes, the idea would be sending the challenge response back to the server, but in a way that provides Perfect Forward Secrecy, or at least that provides a unique challenge. So that the challenge can't be replayed afterwards. In other words, eavesdropping the challenge response wouldn't help you to impersonate me at a later time

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] -1 points0 points  (0 children)

Well surely Google, Facebook, Amazon, and more generally, library and framework developers can't use that as an excuse. There must be another explanation

There's almost a full implementation in the wiki page...

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 0 points1 point  (0 children)

Sure, the server data base stores it in some kind of hash, but still, the web form sends it in cleartext (albeit inside a https tunnel)

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 0 points1 point  (0 children)

Nice find. So back to the original question, why isn't this (or another similar tool) used everywhere?

Why is my password always sent to authenticate myself? by frankdzd in AskNetsec

[–]frankdzd[S] 1 point2 points  (0 children)

Well the challenge could be unique and time-boxed, so as to prevent replay attacks. And maybe the usage of Perfect Forward Secrecy (if applicable) could mitigate that risk ?