At least, for now. It'll hopefully be fixed soon. #railroadsonline Just so it's tagged with the right game. Didn't have it in the title, so gotta have it here.
An update to try and patch the problem was released on Monday, 9/18/23. You can read the short steam article here: store.steampowered.com/news/app/1696810/view/7032989564145324801?l=english Or if you prefer video style updates, I've made a quick one here: ruclips.net/video/rkVq4FvQm-E/видео.html
Railroads Online is long overdue for host permissions, it would also be nice for singleplayer sessions to be easier to make but I think host permissions like kicking or disabling building and destruction for clients joining would be healthier overall for the game's lifespan.
They really need a ‘kick player’ button added to the player list. That way if you see someone who has entered your map and is causing mayhem you can get rid of the problem
This happened to me recently (yesterday) and I just quit the game, played later that day on single player and haven’t had a problem since, so single player is hopefully safe.
Here's the thing about an IP address...every website you visit has it. Your IP address is public. The worst someone can do is launch a DoS attack on your network, and I highly doubt someone is going to do that to another player in RRO, mostly because I'd be surprised if more than 10 people who play it actually know how to do that.
Lotsa comments on this in particular, so might as well clear things up a bit-- The IP stuff doesn't really matter for the common player. It's extremely unlikely anyone's gonna do something serious with this kind of information, especially to some random person on the internet. Worry more about the fact that someone can just join your game without permission. I, however, am a streamer, and more prone to potential harassment, such as DDOS attacks. It's more prevalent in my mind; And I know I'm not the only one who'd be concerned by something like this, whether or not it actually matters. *Feeling* safe is as important as *being* safe, and saying "it doesn't matter" misses the point that humans are quite emotional beings. Also, "most places already know your IP" - yes, but how many times does a singular person know the exploits of a system as large as Steam's to gain that information, and then has the intent to go around trying to harass you with that information by plastering it everywhere? It's WAY more concerning in such a context, you goons. TL;DR: The IP stuff isn't really as big a deal as the video may have made it look to be, but spreading awareness on how to protect yourself regardless helps to quell the panic.
There is a much bigger concern about that than you think. Once I have your IP, I have access to every device on your network. I can download anything I want, I can get whatever information I want (bank information), I can shut down your internet or computer at any time, etc. And railroads online doesn't use steam servers at all. It's a P2P direct LAN connection. Which means you are connecting directly to someone's IP. I tested this on a couple of friends in my discord and found that I have a direct link to their IP. So yes, it is a very big concern that was very badly implemented in a high school project level that 2asnt meant to be a full release game
@@steelthfighter Oooh l33t hax0r! Next you'll crack my wifi password right? IPs are public, and a firewall (which is enabled by default both on the router and on every computer you use) will block everything you just listed unless the victim explicitly opens their network to it. Stay in school kiddo
Others have already explained that IPs are public (hence why they're called "public IPs")but I don't see anyone explaining how to protect yourself. You can have very good baseline network security by simply keeping every computer you own up to date, ensuring Windows Firewall is enabled, ensuring Windows Defender is enabled and scans periodically, ensuring your router is up to date and has its firewall enabled (your ISP can assist with verifying this, and it probably automatically keeps itself this way) and avoid port-forwarding on the router. The firewall and antivirus software that's built into our computers these days have gotten very good, and as long as you don't actively kneecap it by changing settings you shouldn't touch, forwarding ports without understanding the full implications of doing so or running weird crap off the internet, you are fairly well-protected from most hackers and cyberattacks. There's countless bots on the internet that simply exist to scan every single IP that exists for common network flaws/holes (like exposed SSH with a weak/default password) and anyone who operates a web server can tell you they see hundreds of illegitimate login attempts per hour that get blocked by basic security measures so if you show your IP on a stream or something that's no new information. When I was in college, one of the IT instructors had a monitor that simply showed the running active log of every blocked login attempt on one of his servers 24/7. Again he just had a basic firewall with close-to-default settings (as a server it needed some services allowed through of course) kept it up to date, and for remote management used unique, secure passwords (more accurately, he used SSH key authentication) TL:DR Don't change silly settings on your computer and hackers will have limited ability to cause you trouble if they happen to learn your public IP
@@Trainguyrom and here folks, we have your typical retard trying to be that keyboard warrior trying to sound smart. your only as smart as your brain will allow you to be. i can indeed do all of what you said, and firewall does a whole lot less than you think it does, so shut up before someone decides to prove just how stupid you are on the internet
Spectrum doesn't always give a different IP address. They only give me a new one after a storm where power went out on their end or about once every eight months. Verify that after a DHCP release/renew that you got a new address.
Don't be too worried about the IP showing, it doesn't do much for you either way. It gets worse if Keume has FUBARED the game client in such a way that it allows whomever has access to the server to do remote code execution, at that point, things become dangerous and knowing the IP is moot at that point. But if all they can do is join the game at this point, then it is bad news for the savegames, and you better keep a backup of them in case you get trolled and have work erased.
ill point it out so you can feel a little better but an ip alone inst a huge privacy compromise, it shouldn't happen still but they wouldn't be able to narrow much else down besides your town, if that.
We need to to something about these demons we call “hackers.” They are core problems with games and they think they can go about ruining people’s time and enjoyment and meaning they find in these great games! They need to be taught a serious lesson, and I think they don’t deserve a computer, these hackers should have their computer confiscated or their ability to make new accounts on Steam to be revoked somehow.
there is a deep ban that can be done, MAC address ban. The MAC address is your computers network cards unique address, every card is different. It "can" be changed (flashed) but doing so is much more difficult, and if its a built in card to the Mobo, even more so. So surface level bans is just simple account banning, doesn't stop people from making spoof accounts. 2nd level is IP banning, but with a VPN this can be bypassed as well but you do have to jump through hoops to do it. final level is MAC banning, its the most permanent of bans you can do as even a VPN won't get around it. In the end no banning it ever going to stop all trolling, your just trying to make it hard enough for the fucks to not bother doing it. This is hardest to do in a F2P game, but even paid for games are not immune.
Some of the very first hackers, telephone network "Phreakers" in the 60s and 70s were members of the MIT model railroad club. I believe they still use old telephone network gear to control the signals on the club layout
Seeing your IP in itself isn't a big deal. But if the code is that vulnerable, I hate to think what other opportunities are lying in there for hacking.
It's not really that big of a deal if they have your IP, unless you've setup a network DMZ or something, they likely can't get into anything on your network regardless.
I always play with no password and the players set to 1, the other day I loaded my save and before It even loaded it says someone had joined the game; odd, I immediately closed the game and havent had it happen since. Now i put a random password just incase
Of course, the rumors that RO is dead are simply not true... Discord is also well alive... And yeah, troll hackers without a personnel life are everywhere, not only at RO. But Devs are already working out a solution.
I always have railroad’s extended running in the back ground soon as a player joins I watch them on it 2 players called MIKE and c something with numbers got 2 trains running in circles on a 100% regulator then left the session but I also saved as soon they join I knew what they Upto thnx to RRO extended so there plans were failed before they were implemented these players think there gods when they do this crap but to me it’s 5yo crap my advice get railroads extended when someone joins save then watch them on it before you continue further my best advice
I'm not sure I follow why them getting your IP is such a big deal. IPs are public anyways. If you visit any websites, if you send emails, if you use any online chats, basically if you use the internet at all, there are plenty of ways people can find your IP if they want to. There's not alot anyone is going to gain from having the average persons IP though. And if it's really that much of a concern to you, frankly you really need to stop and think about what you're doing. Firstly, what is it you're doing, or what is the situation that you are in that makes having your IP address known such a threat to you? Should you be doing whatever it is? Or given the situation you are in that makes it that much of a threat, should you be using the internet? Especially on such non essential things such as gaming? Secondly, look at the rest of the security setup. Have you setup the security settings on your router correctly? Is said router properly updated? Are you using reputable firewalls and antivirus? Are you using a VPN? Are you being suitably careful with your privacy settings and what you post on any social media sites you have an account for? Any personal info you may post to this is for more valuable and dangerous to you than your IP. And remember, just because your privacy settings were set properly doesn't mean hackers can't get hold of it. It's less likely, as social media sites tend to have decent security in place, but then we've seen data breaches before from places you'd expect to have decent security in place. I'm sure there are many other things I've not listed here, I could go on forever. My point being, if your IP getting out is genuinely a threat to you, you're a specialist case and there are much bigger risks to you. You're either already an expert in hiding yourself online and have stuff in place that nullifies this issue anyway, else you've got much bigger problems to worry about. Honestly, I'd be more concerned about the bypassing the password to join the game side of things. Especially if the RO team are saying this is an issue with the way steam does things, rather than how they do things. Potentially that means we're going to get a bunch of hackers turning up in many of our online games ruining our fun.
Sensationalist BS. Your IP is public! Every player that connects to your game, every webserver or internet service you connect to has your IP. You can guess IPs (like guessing phone numbers at random). It means nothing! SteR clearly has no idea how the internet works.
You are very wrong on the region thing people in Canada and USA don't need to change their DL region to connect to their games (maybe also countries south of USA are included did not test) same is for europe most of europe can connect to each others games with out changing DL region
It's not that people cannot join each other from other download regions - it's that the way they scrape your information is by sending some command to the steam servers for that region in particular. At least, from my understanding. So if they send a command to US - Seattle but you're in Canada - Vancouver, you shouldn't be hit.
If people from USA and Canada can see each others games then i don't see a problem why hackers can't call info from all the dl regions EDIT: looked into it and they can call info from all regions, not saying where i found the info how to do it, but even a bone head like me could do it
No... why. There is no need for that. Your IP is public. Its meant to be like this. Thats how the internet works. And there is no realistic threat if someone has your IP. Heck there is even more potential for abuse if someone has your phone number.
@@XORA-CODEYX noo... you always need a vpn, dont sit here like some idiot, someone can get your ip then get your adress then get easy your info. VPN are very useful for everyday, website can easy sell your data to scammer, hackers can easy get your info from website etc VPN are useful you just dont know what they are used for
An update to try and patch the problem was released on Monday, 9/18/23.
You can read the short steam article here: store.steampowered.com/news/app/1696810/view/7032989564145324801?l=english
Or if you prefer video style updates, I've made a quick one here: ruclips.net/video/rkVq4FvQm-E/видео.html
Railroads Online is long overdue for host permissions, it would also be nice for singleplayer sessions to be easier to make but I think host permissions like kicking or disabling building and destruction for clients joining would be healthier overall for the game's lifespan.
Dedicated servers makes this kind of thing harder since you can configure your own security instead relying on steam
They really need a ‘kick player’ button added to the player list. That way if you see someone who has entered your map and is causing mayhem you can get rid of the problem
Fully Agreed dude!
God bless this man. I was going to try to play this game again so it's good to know how to stay safe.
This happened to me recently (yesterday) and I just quit the game, played later that day on single player and haven’t had a problem since, so single player is hopefully safe.
Here's the thing about an IP address...every website you visit has it. Your IP address is public. The worst someone can do is launch a DoS attack on your network, and I highly doubt someone is going to do that to another player in RRO, mostly because I'd be surprised if more than 10 people who play it actually know how to do that.
Don't doubt stupid and desperate
Oh you'd be surprised. More than you'd think.
I hope this is fixed soon, shame it is happening, thanks for the information Ster!
Welp, glad I haven't played RRO in 3 months
Same
Lotsa comments on this in particular, so might as well clear things up a bit--
The IP stuff doesn't really matter for the common player. It's extremely unlikely anyone's gonna do something serious with this kind of information, especially to some random person on the internet. Worry more about the fact that someone can just join your game without permission.
I, however, am a streamer, and more prone to potential harassment, such as DDOS attacks. It's more prevalent in my mind; And I know I'm not the only one who'd be concerned by something like this, whether or not it actually matters. *Feeling* safe is as important as *being* safe, and saying "it doesn't matter" misses the point that humans are quite emotional beings.
Also, "most places already know your IP" - yes, but how many times does a singular person know the exploits of a system as large as Steam's to gain that information, and then has the intent to go around trying to harass you with that information by plastering it everywhere? It's WAY more concerning in such a context, you goons.
TL;DR: The IP stuff isn't really as big a deal as the video may have made it look to be, but spreading awareness on how to protect yourself regardless helps to quell the panic.
There is a much bigger concern about that than you think. Once I have your IP, I have access to every device on your network. I can download anything I want, I can get whatever information I want (bank information), I can shut down your internet or computer at any time, etc. And railroads online doesn't use steam servers at all. It's a P2P direct LAN connection. Which means you are connecting directly to someone's IP. I tested this on a couple of friends in my discord and found that I have a direct link to their IP. So yes, it is a very big concern that was very badly implemented in a high school project level that 2asnt meant to be a full release game
@@steelthfighter Oooh l33t hax0r! Next you'll crack my wifi password right? IPs are public, and a firewall (which is enabled by default both on the router and on every computer you use) will block everything you just listed unless the victim explicitly opens their network to it. Stay in school kiddo
Others have already explained that IPs are public (hence why they're called "public IPs")but I don't see anyone explaining how to protect yourself. You can have very good baseline network security by simply keeping every computer you own up to date, ensuring Windows Firewall is enabled, ensuring Windows Defender is enabled and scans periodically, ensuring your router is up to date and has its firewall enabled (your ISP can assist with verifying this, and it probably automatically keeps itself this way) and avoid port-forwarding on the router.
The firewall and antivirus software that's built into our computers these days have gotten very good, and as long as you don't actively kneecap it by changing settings you shouldn't touch, forwarding ports without understanding the full implications of doing so or running weird crap off the internet, you are fairly well-protected from most hackers and cyberattacks.
There's countless bots on the internet that simply exist to scan every single IP that exists for common network flaws/holes (like exposed SSH with a weak/default password) and anyone who operates a web server can tell you they see hundreds of illegitimate login attempts per hour that get blocked by basic security measures so if you show your IP on a stream or something that's no new information. When I was in college, one of the IT instructors had a monitor that simply showed the running active log of every blocked login attempt on one of his servers 24/7. Again he just had a basic firewall with close-to-default settings (as a server it needed some services allowed through of course) kept it up to date, and for remote management used unique, secure passwords (more accurately, he used SSH key authentication)
TL:DR Don't change silly settings on your computer and hackers will have limited ability to cause you trouble if they happen to learn your public IP
@@Trainguyrom and here folks, we have your typical retard trying to be that keyboard warrior trying to sound smart. your only as smart as your brain will allow you to be. i can indeed do all of what you said, and firewall does a whole lot less than you think it does, so shut up before someone decides to prove just how stupid you are on the internet
thanks for letting us know i usually only play single player anyway
as someone who plays alone i see this as a win
You can't play the game offline, it's always online, unless you set the max limit to allow only yourself
@@norliasmith which makes it solo lol
Spectrum doesn't always give a different IP address. They only give me a new one after a storm where power went out on their end or about once every eight months. Verify that after a DHCP release/renew that you got a new address.
Yesterday I launched R:O, and before I could even start a server, it gave me a firewall warning. I do not feel safe.
Are you talking about the Windows Firewall prompt to allow traffic from and to R:O? If so, that is completely normal and its not a warning.
Called this out long ago. Tried to tell keume about this only to be ignored just like every other issue that popped up
Don't be too worried about the IP showing, it doesn't do much for you either way.
It gets worse if Keume has FUBARED the game client in such a way that it allows whomever has access to the server to do remote code execution, at that point, things become dangerous and knowing the IP is moot at that point.
But if all they can do is join the game at this point, then it is bad news for the savegames, and you better keep a backup of them in case you get trolled and have work erased.
Yo
Edit:man this is not good I hope this gets fixed
Gave up on RO a loooong time ago, but it is sad to see it like this…
ill point it out so you can feel a little better but an ip alone inst a huge privacy compromise, it shouldn't happen still but they wouldn't be able to narrow much else down besides your town, if that.
if you click show more on video details if the category is gaming you can select a specific game that way, thanks for the psa
I... kinda uploaded this at 3:20 AM and was more focused on sleep, and that completely skipped my mind. Thanks for the reminder! Should be fixed now.
bro, so I quit RRO at the right time lol
The Devs worked out a solution. It has to be tested now and if it works, it will be released.
We need to to something about these demons we call “hackers.” They are core problems with games and they think they can go about ruining people’s time and enjoyment and meaning they find in these great games! They need to be taught a serious lesson, and I think they don’t deserve a computer, these hackers should have their computer confiscated or their ability to make new accounts on Steam to be revoked somehow.
there is a deep ban that can be done, MAC address ban. The MAC address is your computers network cards unique address, every card is different. It "can" be changed (flashed) but doing so is much more difficult, and if its a built in card to the Mobo, even more so.
So surface level bans is just simple account banning, doesn't stop people from making spoof accounts.
2nd level is IP banning, but with a VPN this can be bypassed as well but you do have to jump through hoops to do it.
final level is MAC banning, its the most permanent of bans you can do as even a VPN won't get around it.
In the end no banning it ever going to stop all trolling, your just trying to make it hard enough for the fucks to not bother doing it. This is hardest to do in a F2P game, but even paid for games are not immune.
1:43 do you mean this as in if they are in the multiplayer server with you or your single player server
We need a ban player button, so he can no longer join my Savegame.
Sounds like a Steamproblem, only RRO or other games too?
Who in the fresh hell hacks a train game?!
Some of the very first hackers, telephone network "Phreakers" in the 60s and 70s were members of the MIT model railroad club. I believe they still use old telephone network gear to control the signals on the club layout
Laughs in having monsters friends to play or get hacked *sobs*
Also the best password is is to mash the shit out of the keyboard, I think at least
Damn seems like no games are safe from hackers
Seeing your IP in itself isn't a big deal.
But if the code is that vulnerable, I hate to think what other opportunities are lying in there for hacking.
DEAR GOD NO
Restarting your game and using a different password seems to fix it
It's not really that big of a deal if they have your IP, unless you've setup a network DMZ or something, they likely can't get into anything on your network regardless.
I always play with no password and the players set to 1, the other day I loaded my save and before It even loaded it says someone had joined the game; odd, I immediately closed the game and havent had it happen since. Now i put a random password just incase
It still got tagged as train simulator 💀💀💀💀💀💀💀💀💀
How does this game have hackers? Are there that many still playing?
Of course, the rumors that RO is dead are simply not true... Discord is also well alive... And yeah, troll hackers without a personnel life are everywhere, not only at RO. But Devs are already working out a solution.
max player limit doesnt matter because the list of servers always shows 1 player anyways so it lets you join
I always have railroad’s extended running in the back ground soon as a player joins I watch them on it 2 players called MIKE and c something with numbers got 2 trains running in circles on a 100% regulator then left the session but I also saved as soon they join I knew what they Upto thnx to RRO extended so there plans were failed before they were implemented these players think there gods when they do this crap but to me it’s 5yo crap my advice get railroads extended when someone joins save then watch them on it before you continue further my best advice
I'm not sure I follow why them getting your IP is such a big deal. IPs are public anyways. If you visit any websites, if you send emails, if you use any online chats, basically if you use the internet at all, there are plenty of ways people can find your IP if they want to.
There's not alot anyone is going to gain from having the average persons IP though. And if it's really that much of a concern to you, frankly you really need to stop and think about what you're doing.
Firstly, what is it you're doing, or what is the situation that you are in that makes having your IP address known such a threat to you? Should you be doing whatever it is? Or given the situation you are in that makes it that much of a threat, should you be using the internet? Especially on such non essential things such as gaming?
Secondly, look at the rest of the security setup. Have you setup the security settings on your router correctly? Is said router properly updated? Are you using reputable firewalls and antivirus? Are you using a VPN? Are you being suitably careful with your privacy settings and what you post on any social media sites you have an account for? Any personal info you may post to this is for more valuable and dangerous to you than your IP. And remember, just because your privacy settings were set properly doesn't mean hackers can't get hold of it. It's less likely, as social media sites tend to have decent security in place, but then we've seen data breaches before from places you'd expect to have decent security in place. I'm sure there are many other things I've not listed here, I could go on forever. My point being, if your IP getting out is genuinely a threat to you, you're a specialist case and there are much bigger risks to you. You're either already an expert in hiding yourself online and have stuff in place that nullifies this issue anyway, else you've got much bigger problems to worry about.
Honestly, I'd be more concerned about the bypassing the password to join the game side of things. Especially if the RO team are saying this is an issue with the way steam does things, rather than how they do things. Potentially that means we're going to get a bunch of hackers turning up in many of our online games ruining our fun.
I get one yerstoday ,swpawn whit me ,and start spawn numbers on text board my Ip adress ,i just disconect
You don't get a new IP just because you reset your modem. DHCP will reassign you the same IP based on MAC address, even on the ISP side..
There's no bugs in RRO, you must've imagined it. /s
Sensationalist BS.
Your IP is public! Every player that connects to your game, every webserver or internet service you connect to has your IP. You can guess IPs (like guessing phone numbers at random). It means nothing!
SteR clearly has no idea how the internet works.
You are very wrong on the region thing people in Canada and USA don't need to change their DL region to connect to their games (maybe also countries south of USA are included did not test) same is for europe most of europe can connect to each others games with out changing DL region
It's not that people cannot join each other from other download regions - it's that the way they scrape your information is by sending some command to the steam servers for that region in particular. At least, from my understanding.
So if they send a command to US - Seattle but you're in Canada - Vancouver, you shouldn't be hit.
If people from USA and Canada can see each others games then i don't see a problem why hackers can't call info from all the dl regions EDIT: looked into it and they can call info from all regions, not saying where i found the info how to do it, but even a bone head like me could do it
PSA: always have a VPN
No... why. There is no need for that. Your IP is public. Its meant to be like this. Thats how the internet works. And there is no realistic threat if someone has your IP. Heck there is even more potential for abuse if someone has your phone number.
@@XORA-CODEYX noo... you always need a vpn, dont sit here like some idiot, someone can get your ip then get your adress then get easy your info. VPN are very useful for everyday, website can easy sell your data to scammer, hackers can easy get your info from website etc VPN are useful you just dont know what they are used for
@@XORA-CODEYXTrue, tf they gonna do? I tried what I can do with my own IP and the only thing it’s showing is a Server in Vienna or some shit!
Another massive L to RRO and it’s community