I was hoping that someone could offer their opinion as to why it is necessary for the FiveM server listing to reflect every single mod a given server is running. I know for a fact that when many of the little script kiddies are looking for a server to join, the read the list of modules, jump on GitHub to find the code, then cheerfully go about grabbing all the relative TriggerServerEvent calls that appeal to them.
Is there any purpose it serves at all for FiveM to disclose all this information? Sure, it can be obtained in other ways but, if I may ask… WTF? Can we at least make some of these clowns work a little harder to obtain the information rather than just giving it over?
Aye - agreed! Renaming resources and namespace details in the code is doable. It’s a pain in the tail but still, doable. I do know though, a number of these muppets do use the resource listings to find which modules are potentially vulnerable to exploitation through injection. So the question is… sure, we can obscure the data on the server side but, is there any reason FiveM needs to post it?
Thanks for your comment! Appreciate the discussion.
The purpose is for people to know what the server has. Some people prefer certain resources or hate others. I will for example never play on a server that has any esx resource. So by being able to read the resources list I can not join certain servers. Other people have other reasons for liking to see it.
The concern about “they can just go grab the event names”. Yea and? You then are afraid they will abuse them? But why can they abuse them in the first place. If you don’t do any server checks then ofcourse they can abuse it.