Cosmos Question...

[braincandy99]

A guildmate posted this to our forums:


Well I hate to bring this up but I feel as though I must after seeing this post. First off I'd like to say I'm sorry to ThemBones for this happening to you. Secondly, I met Alaair a few weeks ago, I seen the title author of cosmos above his head and decided to tell him what a great mod it was. He seemed nice and stopped to talk to me. However something he did is rather disturbing now that I think about it. I guess as an act to show off in some form he forced my character to bow down to him and salute him without me touching anything on my machine. Now at the time I thought it was kinda cool because I thought he was like a game official or helper of some sort. After reading this I have uninstalled cosmos for good. Sorry but that's just too scary for me to continue to use cosmos. I have nothing against Alaair like I said he was very nice to me, but I cannot take a chance using that software and possibly down the road getting into a confrontation with him and something happening to my 3 thousand dollar computer. Or worse him stealing my password somehow and deleting my character at a high level. Not saying this will or can happen, but simply something that I'm not willing to take that chance on.


anyone else hear about this. This was quoted from somewhere else, I'm waiting to get the original.

I think the dmg (to the computer) and stolen password fears are a bit out of la-la land, but what about being able to make another do stuff without their hands on the keyboard.

[Krimzan]

That's pretty easy, probably. I haven't examined the WoW UI API (three acronyms in a row, someone give me a ****ing cookie...now!) but it can probably read the text that comes in, and he is probably just typing something in either say or tell that is a command that the UI reads, and doesn't send through to the text window, and it just sends back /bow.

I seriously, seriously, seriously doubt that there is no way he could delete a character or steal a password, as Blizzard would have to be stupid to colossal levels to expose the account/login stuff to the user-created GUI stuff.

Agreed, this is somewhat lame and really doesn't go far on the whole credibility thing and is questionable with regard to programming morals, but I do not think it poses a security risk.

*Note: Do not take medical/financial/security advice from The Safehouse.*

[JookaWoo]

I dont use the cosmos updater anymore but i do use the ui files outside of the patcher. Just using the ui I dont think they can do anything that could rip your password or something like but using the .exe patcher they have at any time in the future they can steal info from you.

As far as the bow down/salute thing, I know there is a trinket in game that makes everyone in a certain range dance. Could be something like that perhaps.