This video made me aware of something I had no idea would ever be a problem I'm not an expert coder by any means and I'm at best an absolute amateur... however I know how important input sanitization is and why it's important to use it everywhere. If you don't sanitize inputs, like on a contact form on a website, or URL request line, a hacker can elevate their access to your website server. Eg limiting what the server accepts as valid input to execute on, that is what input sanitation is in a nutshell. In the same vein of thought, a hacker can use un-sanitized data to CIG servers to exploit. This appears to be what's happening in the video above. In the video, in Arena Commander, it documents some yahoo subpar pilot exploiting the server to one shot ships including the Idris BOTH by ship and by EVA. I think the only way this can happen through a client is that the process CIG servers accepts client data to know who/what/where is happening is NOT sanitized properly. I assumed they had it so player data/ship data/weapon category/power levels/etc are limited in scope so that something like this could not happen. Eg you would never see an Idris rail gun on an Aurora and the game would never allow this on server inputs even if you could force the client side to do it. Likewise, if this hacker was using say a planetary laser or something as the identifier of weapon damage being shot, that should never be accepted from a ship origin/player, etc. So, unless I'm entirely wrong, please please PLEASE carefully sanitize all client data being streamed into servers within their expected domains for each data set. Something like this should never happen. Edit: I just was told it's not new and that CIG "relies heavily on client authority" and "They fixed some of it during the mass cheating wave last year, but mostly they just bought time with enforcing EAC". I didn't realize it was THAT much client authority. That must be like candy land for hackers. IMO this should not be.