The inability to assert the "state of the world" through authentication and authorization within Sims 2 is just a matter of functionality versus security.

It would be the same as downloading a patch for Quake, Doom, CnC, Everquest (1 or 2) and expecting it to be secure.

Are these "patches" promoted by the game corporation or are they just "free" at specific sites?

If the corporation isn't distributing these patches or "sharing worlds" as a service or expected updates and functionality through their own distribution systems, then in my opinion they are not necessarily at fault.

While I don't condone functionality without security, the authorization and authentication of modules, whether through installation or execution, it seems that the general game playing community being hacked by these "unclean" modifications is the failure of the game players "trusting" the content that they download.

Trusting the person that you are getting your "updates" from is as important an issue of trust as installing the program in the first place.

Anyone getting some corporate information on this one? They intend on trying to "fix" these problems?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10232/29830#29830