PBEM Combat Replay Security Issue

[MorningDew]

I noticed today that, even through the loading of the PBEM combat replay by Player two prompts for a password, anything is accepted. No matter what I type in, I see the replay, meaning Player 1 can at any time watch the Player 2 replay.

[khyberbill]

Yes, you get to see the combat replay if you put in the wrong password. But, go to the operations report and signit report, they will be blank. To see those, the player has to put in the proper password.

[MorningDew]

ORIGINAL: khyberbill

Yes, you get to see the combat replay if you put in the wrong password. But, go to the operations report and signit report, they will be blank. To see those, the player has to put in the proper password.

Still provides an unintended level of intelligence gathering I believe.

[khyberbill]

I think that if each side sees the same combat reply. You have to put in the correct password to get the additional, accurate details.

[MorningDew]

Ok...so this is WAD?

[kaleun]

On the other hand, if you go to the save game file, you will have everyone's sigint, event, combat and ops report.[X(]

[pompack]

ORIGINAL: kaleun

On the other hand, if you go to the save game file, you will have everyone's sigint, event, combat and ops report.[X(]

Nope, not in a PBEM

EDIT: Actually I do not know that for sure in all cases. However, if you run a PBEM game where you take both sides, the Japanese OPS report is the same as the one in-game, but the Allied OPS report has only common data (one or two lines). However I must admit that I have no idea what the Allied player would see generated from the replay.

So... I can say that the Japanese player can't see the Allied data in the saved files but I didn't test what the Allied player would see after a replay.

[kaleun]

Hmmm. I always see both side's reports in the save game folder, but I've never opened the opponent's ones. Indeed I seldom open mine either, I just save them for future reference.
I'll have to check. (I'll open but not look[:D])

[michaelm75au]

Information available to both players will appear in their respective reports.
Usually it will be the exact same message.

PBEM will only write the player specific stuff their reports if they are the one running the turn.