Jump to content


  • Posts

  • Joined

  • Last visited

Everything posted by michaelk

  1. Right, I forgot -- this is the place to talk ad nauseam about PvP, rollbacks, and exploits...stuff that really matters. Discussing how NQ treats their employees is totally less important than those vital topics with 5000 pages of people rehashing decisions NQ made about their video game, but employee treatment...totally "a waste of time". That you associate a discussion about how a company treats employees as "cancel culture" is a projection and says more about your perspectives than it does the actual topic.
  2. Yeah, it's only two perspectives...years apart that say the same thing. It's odd that NQ is given a presumption of innocence while employee complaints are given a presumption of exaggeration or lies. This isn't specific to NQ; it tends to be how people view employee complaints in general. Most people have worked under rotten management. It is absurdly common. A lot more common than two people lying on Indeed years apart just because. Two accounts is hardly rock-solid proof, but that doesn't mean they don't count. Deciding that these complaints don't count is also a value judgement that is also based on assumptions. It's weird that when NQ deploys a change people don't like that's proof they are incompetent or malicious, but toxic workplace that actually affects livelihoods? Nah, we don't care about that.
  3. I wonder about the morale at NQ -- the development velocity is mystifyingly slow despite years and years of foundations. I stumbled on these reviews about the (alleged) workplace culture: https://ca.indeed.com/cmp/Novaquark The second review is from 2016 and first is from 2019...well before the bandwagon of hating on NQ in these forums lol. How is it that the dev team is crunching (even in 2016) yet nothing is getting done...? The upcoming 0.24 patch is very big relative to past updates...but even then seems to be pushing very incomplete features relative to the time in development and size of NQ's team. I really feel for the devs at NQ...no wonder NQ has trouble communicating with players; they won't even listen to their own employees... I have plenty to say about JC's never working in game dev before NQ...but running a toxic workplace? No wonder production data got screwed up with the schematic prices and dev velocity is slow: why should the devs care...? Demoralized devs find a way to look productive while doing the absolute minimum. And if there's a perception that your ideas won't be heard? That you aren't really a part of the creation of the game...? You'll hold your tongue instead of offering good ideas. You'll never really go the extra mile or add your full potential to the project. Not like you really want the boss to be successful. Look....this is just a game for us. It's really not a huge deal if the game thrives or dies for us. We'll live. The devs at NQ have to go to work every day -- this is their livelihood and their lives -- and if they're facing toxic management and constant crunch, that's just not something I really want to support with my dollars. NQ could make every mistake with the game itself and I'd still probably be interested enough to maintain a sub, but not if they're running their employees into the ground.
  4. Personally, I don't see the point in schematics if NQ is planning on implementing power. Power seems like a much more intuitive and realistic way to gate industry -- and one that would be easier for new players to understand and afford. As a design concept, schematics don't feel like they really fit -- it's a clumsy solution to the core problem. The point of alpha/beta isn't to have a balanced game. That would be an absurd goal that requires an extremely detailed plan -- game design discipline that most studios couldn't achieve, never mind NQ. I don't think 0.23 was "horrible" -- but I do think it was a major waste of time that could have been better spent on feature development. Schematics were a balance change, and balance changes don't really add anything to the game, they shuffle around the parts that already exist. Why spend time balancing a game that isn't done? You'll need to revisit as more features roll out, regardless...I get that they promised "no wipes" -- that doesn't somehow make it more plausible to balance an alpha/beta as you go. NQ is really slow at dev -- it might be a different story if they were faster, but they aren't. They should have invested the time it took to develop 0.23 into finishing features rather than trying to balance the very incomplete features they already have. That's why I actually agree with them ignoring the schematic price exploit -- they're slow enough as it is without distractions, their only goal should be finishing the game's core features so that the discussion of balance actually makes sense.
  5. This is a classic Hanlon's Razor situation: "never attribute to malice that which is adequately explained by stupidity" I think "stupidity" is too harsh a description here, but I don't think NQ is "corrupt". I think they're feeling the pressure more than anyone. There's always time to tweak the economy -- but very limited time to prove that they can push the product toward a completed state with new features. This bug is annoying and obviously unfair, but in their mind is less an issue than the mass-production that happened before schematics were rolled out. As has been said before, fixing this isn't as easy as it sounds -- it never is, but touching production data caused this problem and touching it again would just be risky. Sure, they "should have dev environments", but that isn't so simple, either. They have a dev environment, but likely not one with production data loaded. The cost of doing that isn't immaterial at scale. I agree it is unfair...but in the past NQ has knee-jerked to try to balance the game, and that really hasn't done much to move the game closer to release and the main complaint has still been "not enough features"...so it isn't a surprise that they'd focus 100% on 0.24 and let this ride. There will be exploits in the future, anyway -- if everyone thinks "DU is dying" I don't think spending the time to fix a one-off manual error is completely wise...?‍♂️
  6. Xsolla supports a grace period field...has anyone tried logging in to an account that's been expired for months? Xsolla handles subscription status with webhooks -- it's always possible for there to be a bug on the receiving end that doesn't properly update the user's account, but it isn't a complex system. If you can log into an account that's been expired for a while, they might have temporarily stripped out the logic that checks for a valid sub on login (e.g. the webhook still works, but they aren't requiring a sub for now). Otherwise, it means the either the webhook is no longer working or there's now a grace period on failed subs.
  7. Some of us take circle Js very seriously thank you very much.
  8. Being impolite and disrespectful isn't great. I've done very poorly with being positive at times, but have tried to improve -- I haven't commented much recently beyond an extremely long and boring rant about GDPR and privacy. You don't have to like DU or NQ, but if you're going to criticize, at least make a reasonable point. Don't direct anger at the poor CMs who probably definitely don't get paid enough to deal with a bunch of misplaced anger. For real, Naunet is doing a great job -- she might not respond to every post, but she reads a whole mess of negativity all the time and is still polite and positive. Give her a break. At the end of the day, it is just a game for us. It's Naunet's job and no one should be talking crap about the job she's doing. So maybe if you want people to be more positive you should resist the phrase "neck beard circle jerk"...? Just saying lol.... People are entitled to an opinion, especially about a freakin' video game they've paid for...there's nothing "entitled" about expressing your thoughts on a public forum where the whole point is to collect feedback and opinions. Actual entitlement is treating people like a jerk and acting self-righteous about it. Anyway....looking forward to 0.24 lol.
  9. Yeah I agree 100%, I hope it is clear that my post was aimed at the people calling it "tin foil hat wearing paranoid" And yeah, it isn't like any of this compliance is optional....NQ made the API, they have an obligation to understand and abide by GDPR (and CCPA, etc.)
  10. I don't understand why people think that data governance is paranoia. Don't be naive! "Oh that's not important, no one can use that for harm!". Yes, they can...and the law doesn't let you decide that case-by-case. It's baffling because part of NQ's job is game design -- understanding how people exploit systems for personal gain is kind of their wheelhouse? You think the situation I've outlined is obscure and unlikely? Great, so do I...that still means it is a viable attack vector. There's a long list of companies that have learned the hard way that even obscure vectors eventually get exploited...how many cases have there been where corporations have been warned about an insecurity well before it was exploited, but didn't bother to do anything...? They probably thought it was paranoid, too -- that the risk was so low it didn't matter. A lawsuit or exploit from a game API like this will materialize at some point. It might not be with DU, but it will happen.
  11. No data that can cause harm...? ?As NQ has no doubt discovered, people are creative when it comes to exploits. It currently isn't possible to block these methods -- it isn't about being smart, it is about what API methods and settings NQ makes available. You could use player names to match against social media handles and emails Most people don't use the same player name as their social media handle or email. As a scammer, I don't care about "most people". If I have a crapload of records, I'm looking for gems. It's a numbers game with exploits and DU is protected because the numbers are somewhat low. If DU had 2 million players, this would be a no-brainer. Take every player name. Add common TLDs like "@gmail.com". Easy. You could phish by impersonating NQ If I have a list of emails/social media handles (even a small list), I can create a targeted phishing campaigns to try to compromise your account, other PII, or financial information. If you receive a random spam email, you don't even look at it. Receiving something that looks like it is from NQ? It speaks to you because it is personalized -- even a tiny amount of context is valuable for scammers. Would you fall for it? I don't care, it's a numbers game and I have thousands of records. Someone will fall for it. This is exactly why laws like GDPR exist -- people are damn creative when there's a buck to be made...and it means being vigilant against every cybercriminal on the planet. Also (and I hate to pitch this philosophy) but it doesn't really matter if the data can cause harm or not -- GDPR still applies to EU citizens no matter how worthless it seems...so long as it falls into the criteria of PII (which I've already talked way too much about why a player name does count). TLDR: don't use a character name that is remotely similar to a real life email or social media handle
  12. Sure, but there's a big difference between baseless conspiracy and concern over data privacy and governance. That there are bad actors lurking everywhere eager to abuse and exploit data isn't a conspiracy, it's a fact. GDPR is really clear about what data is protected. There's been multiple explanations written about how it applies to game data, including player names. No court would buy the argument that these data are "not related to natural persons" because it is logging the activities of an "avatar" vs. a person. That's not what the law says and various entities that specialize in collecting game analytics agree. There are actual reasons to keep this data protected...beyond it being the legal requirement for EU citizens where GDPR applies. I'm sure no one will care and most people think it is paranoid. I'm also sure that someday an API like this will be involved in GDPR lawsuits or fines or brute force attacks that further compromise PII.
  13. I'm a bit confused by the section that says that rewards are non-binding. So...does the reward get put in escrow too, or only the collateral? That makes it seem like there's mechanics that enforce and require collateral, but nothing for rewards...? I don't understand the design rationale behind that. How? What price will be paid beyond having a poor review...? If someone runs 10 legit missions then 1 scam, that hardly makes them "pay a price", it just lowers their average. There's also no incentive to leave honest reviews -- if I rate someone highly and they rate me a zero, can I then change my review...? What's to stop people from weaponizing this system...? Or farming out a bunch of very easy jobs to org mates to inflate their reviews and burry negative ratings? "Business has risk" isn't really a design, it's a random thought. Haulers will already face risk from piracy and are already investing time...anyone that's played an MMO knows that time is the most precious investment. It seems like they are codifying a way for people to create scams because they think it will be fun...but there's no real way to retaliate, especially as a new player. The risk seems extremely lopsided -- the employer seems to risk very little (guaranteed collateral) while the hauler risks everything and has almost no recourse if they get scammed or ambushed. Just better hope that your one review is seen? Maybe I'm not understanding the design, here?
  14. https://www.dualuniverse.game/news/devblog-missionsystem I'm sure most of y'all have seen this already... I'm doing what has been asked, which is to go to the forum and discuss ? It seems like this answers a lot of questions I've seen related to how the mission system will work. I'm curious what else might be coming with 0.24 or if it is mostly just the mission system. It sounds like missions will launch with only hauling missions. I wonder if there will be enough people hauling to make it worthwhile...I mean, it isn't mining, right?
  15. As if having some extra threads is such a freakin' inconvenience. Not like there's a mess of activity around here anyway. In other words, he should quit and work for Newsmax? ?
  16. For someone with a PHD in AI and robotics, JC (NQ) is mysteriously resistant to the concept of AI in DU. There are many great applications for NPCs that would enhance the emergent possibilities and round out the lack of options with PVP....instead, the only AI we get is ore bots. "Everything must be run by players" isn't a real design, it's an arbitrary aspiration that wasn't really thought-out. Even the most fundamental aspects of this aspiration were left on the drawing board (like how to inject fresh currency supply into a game with no NPCs). It also makes the game thematically dead. We all survived the death of earth....now we land on a planet with a bunch of identical cities linked together that have zero residents, but a home-depo-esque showcase of various materials and doors...? I know many people don't care at all about theme or lore -- but it does add dimension and immersion which DU lacks.
  17. I think they belong in new threads...probably should be pinned by the mods too ? Unclean exotic dancers with a propensity for ganja use...? Finally the news is speaking to me as a human being, talking about the real issues without a didactic narrative pushing their owner's ideals. Seriously though what is your doctorate in...? "Botany?"
  18. Ah, wipes. Everyone's favorite conspiracy. Still no compelling reason for NQ to wipe -- there's been exactly 0 major updates so far. It doesn't make a lot of sense to do a wipe in conjunction with the first major update, at least IMHO. If the game's balance is broken, they need room to keep breaking it until closer to release. There's not much point doing a wipe, dropping a big update, then realizing that this update introduced a new crop of exploits that once again unbalances the game. They'd be creating a lot more problems than they would be solving. The balance of the game really isn't their top priority at this point. That should be kind of obvious based on their collective shrugs toward exploits until now. They have a mountain of bugs to fix and features to implement. If they can't prove that DU is capable of moving beyond Alpha, it really doesn't matter how balanced or fair the game is. Wipe or not, the game's future does hinge on the next big update. It'll soon be six months since "beta" launch. NQ needs to show they can actually get the game to a releasable state before they prove that the game is balanced and fair...they can always wipe later, but they have very limited time to prove that the game can actually be finished.
  19. It's never been a question of intent or even application. It isn't about "not liking" these boxes or some paranoid rant about the intent behind them. Personally, I think it is a brilliant facet of emergent gameplay. The merit of this data logging isn't really the issue for me. The question (for me): "is this legal under GDPR?". Specifically, logging a player name and then giving or selling that data to third parties. This is a question NQ needs to understand and answer. This is a question that will not go away, especially as other games offer in-game APIs or as DU grows (if it grows). Having a valid player name might seem like it is "completely useless" and has no relation to the real world -- or that anonymous data mined by javascript like Google Analytics is "more harmful" -- it isn't that simple! It can and will eventually lead to real-world phishing. That's why privacy laws exist...because companies like NQ don't always think about how clever criminals can abuse data they give away freely to run highly targeted scams. Let's pretend it isn't even DU. Some other MMO launches with a similar model and is highly successful. A player creates a similar logging system using in-game tools: they store player names and the last time they were recorded -- that's it. They sell this data for in-game currency. Someone buys or farms a huge list of two million player names and last active time. They create a bot that adds common email TLDs to every user name (@gmail, @yahoo, etc.) and scans social media for matching handles. They spam everyone on the list with messages and emails that look like they originate from the game studio. They don't care if the match rate is horrible because they have 2 million records and already know enough about those people to create a targeted, compelling campaign. By spoofing the studio's login pages, they gain credentials and start selling off compromised game accounts. Or worse, they collect and sell credit card information or other PII. Only then would the game studio face complaints and GDPR fines for not complying with the law... Will this ever happen to DU? Probably not unless they magically explode their player base. But it will happen to some game studio eventually, especially if the idea of in-game coding for content generation keeps gaining traction.
  20. Not easily -- but they have avenues through international treaty, especially between US/EU. GDPR supersedes any clause hidden in the terms of use when it comes to EU citizens. Honestly, NQ would probably be the party that receives the fine -- they're the ones that own the data and it is their obligation to make sure their users abide by GDPR. I don't think there's ever been a case where the EU fines an individual for GDPR violations...random gamers probably don't have anything to worry about....but NQ? They maybe should. Chances are good they could ignore it and there'd never be a problem...but if there was a breach (see my phishing description above) they'd be in trouble.
  21. Right? ? It's a really interesting topic -- games will have to consider privacy laws nowadays, especially those with APIs. If the party processing the data has a "presence" in the EU they do have to adhere to GDPR, so that would include NQ as an entity. The person complaining might not have rights under GDPR, but if these beacons are sucking up data for even one EU citizen, that's a GDPR issue. With the patchwork of state legislation, it is much easier to implement GDPR across-the-board. This is something that NQ is (likely) liable for because they are effectively giving this data to third parties.
  22. Supposedly, there won't be a reset once the game goes live -- so people playing now will keep the progress they made during beta. However, it isn't really certain if that will still be the case because there have been a few glitches that have affected the economy and given some players a lot of wealth. NQ won't really confirm one way or the other, but if they do wipe it is likely that you'll be able to keep some progress if not all. I agree. Unfortunately, decisions like this tend to be made because of economics and not fairness. For example, here's a chart that shows population, gamer population, and game revenue in millions (bolded): 1 China 1,439 637 44,000 Chinese 2 United States of America 331 190 41,300 English 3 Japan 126 67 19,500 Japanese 4 Republic of Korea 51 32 7,100 Korean 5 Germany 84 45 6,600 German 6 United Kingdom 68 35 6,100 English 7 France 65 35 4,400 French 8 Canada 38 21 3,400 English, French 9 Italy 60 35 3,000 Italian 10 Spain 47 27 2,900 Spanish (Source: https://www.localizedirect.com/posts/which-languages) That's why studios translate to German...because they think there's more German gamers that spend more, but don't bother to do the math and sum the values for all Spanish-speaking countries.
  23. The USA has no federal PII laws -- it's a patchwork of state regulations (some of which are very similar to GDPR). GDPR does apply to people in the states if they collect and process data on EU citizens. (Source: https://gdpr.eu/compliance-checklist-us-companies/) It's a violation of several points in the EULA/code of conduct since you agree to abide by applicable privacy laws. I think it is mad clever and a great nugget of emergent gameplay...but people do have rights and GDPR exists for a reason. Is it paranoid whining? Well, GDPR is supposed to be paranoid. Imagine someone buys a list of all known player names, then writes a bot to spam users with matching handles on social media. They could conduct a phishing campaign by impersonating NQ, steal game credentials, etc...if DU did have millions of players, this would be a no-brainer for a criminal of moderate skill. Data is a powerful tool that can be exploited in ways that aren't always apparent at first...that's why GDPR exists.
  24. I'd love to have the confidence to "know" I'm right despite a mess of articles and explanations that say otherwise. More power to you. Here's another source, specific to game dev, which says exactly the same thing the ICO website says and a mess of other sources say: https://gameanalytics.com/gdpr-faq/ You can believe whatever you want -- but it isn't very convincing without sources that support your assertion.
  25. It doesn't matter if the character is a real person or not. It doesn't matter if the player ID is "useless" and can never be associated to a real person. Let's go back to the ICO explanation: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/what-is-personal-data/what-are-identifiers-and-related-factors/#pd3 The fact that player ID distinguishes one individual from another is sufficient to classify it as PII in this context. It might not seem logical or even reasonable, but that's what the law says. ?‍♂️
  • Create New...