Forged allianced forever client safe?

[CutiePie]

Hey guys, super noob here. Just purchased the game after seeing it on a youtube video making me remember how much I loved Supreme Commander back when the first one came out all those years ago.

The guy in the video recommended you download FAF for the multiplayer, fixes etc... But I see a topic has been locked further down with people saying the FAF client is intrusive and buggy. I am a little lost whether to bother downloading the client or not, and if it is safe?

Thank you!

[Bird of Hermes]

interested too

[SimpleMinded]

Forged allianced forever client is asking for my steam ID and password!!!

[TrustTheFall]

It is an open source project on GitHub with ~100 stars(thats LIKES). Everybody can read the code and see what it does. If there would be maliciouse code in there I would know and others as well. I am one of its main contributors. I can assure you I read all code that was contributed to it closely. And not only I read the code that is added to the project.

There is always the risks that your passwords are leaked due to security vulnabilities in software. I would advise you in gernal do not reuse passwords. But has never happened on FAF. I think there were some unsuccesful Brute Force attacks on passwords of certain users. But there has never been a leak of data as of today that FAF is aware of.

Some anti virus software detects FAF client to be maliciouse, but those are false positives. I think Avasta did(think not anymore).

You can go read the code for the client here: https://github.com/FAForever/downlords-faf-client
If anybody should ever find any security relevant issue, FAF and I are happy to immediately hot fix this.

[TrustTheFall]

@K-9 FAF is not asking you for your steam password. FAF does not have your Steam password. FAF redirects you to steam(just see your browser address bar). There you enter your steam password. Steam in return gives faf a token that enables faf to read user details the token is also only restricted to READ User details. FAF then checks you own the game and stores your user id, so that you can not use one steam account twice. If you want to you can read the Code that does this here:
https://github.com/FAForever/faf-java-api/blob/adee5052eaa7e74a0afdbf5f692f1967e612a15b/src/main/java/com/faforever/api/user/SteamService.java

[SimpleMinded]

Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk.

[Red Spot]

If you dun know how PC's and security works and dun feel like accepting the answer given ... simply dun use it.

[Seven7]

Microsoft Defender Smart Screen - this app well-known as app that have regular messed up signatures base, sometimes even deleted system files, lol (and no, this is NOT modified files, it's original, signed, and checked on Virus Total)
Smart Screen don't like non M$ files, don't like packers for exe and dll, don't like non-standart ico embedded in exe, dll, and so on...

It is very easy to "poison" the reputation databases of antiviruses, which will lead to the massive deletion of critical system and user files and, as a result, to reinstall the entire system or applications - attacks on reputation databases have been known for more than 10 years, since the appearance of this function.

[SimpleMinded]

i downloaded it no problems it is safe

[SimpleMinded]

can i uninstall Microsoft Defender Smart Screen

i want to uninstall defender are they any good free security software, i have a lifetime key for malwarebites

[TrustTheFall]

Microsoft wants you to pay you get a certificate that make this screen go away on install. We might do that in the future but have not done yet that is what the warning is about.

[Red Spot]

引用自 alexander.von.trostorff：

Microsoft wants you to pay you get a certificate that make this screen go away on install. We might do that in the future but have not done yet that is what the warning is about.

Wut?

[TrustTheFall]

A certificate does not cost much money but it does cost some