How to get a Q Auth

[F2]

This guide consists of three parts:

1. How to obtain a brand new Q-auth!
2. How to auth in Q
3. How to automatically get authed in Q every time you connect

Disclaimer: Please notice that the Q-Auth is not a service provided by us - it is provided by Quakenet. Therefore you should not contact us if you have problems with it but instead you should ask in #help

This guide is made for mIRC 6.31 but I guess it fits most other clients too.


1. How to obtain a new Q-auth

When you are connected to QuakeNet, type the following:

/msg q hello your@email your@email

Replace your@email with your real email address, and remember to write it twice.

Within a few minutes you should receive an activation email. (If not, check your Spam folder!)

Click the link in the mail. A webpage opens which tells you what password to use. Make sure to take note of the username and password.

Now you need to auth in Q.


2. How to auth in Q

Go back to mIRC.
Go to the Status Window (called something like QuakeNet YourNickname).

Now type the following to auth in Q:

/quote auth authname password

where authname is the nickname you registered with, and password is the password you were given on the activation page.

You should now be authed with Q.

Important Notice: When you disconnect you will no longer be authed in Q. So when you re-connect you have to auth again. Read the next part to see how you can make mIRC automatically auth when you connect.


3. How to auto-auth with mIRC

Everytime you connect to QuakeNet you want to be authed in Q.
To achieve this, in mIRC click the Tools menu and click Options.


In the Connect -> Options page, click Perform


Make sure "Enable perform on connect" is turned on.
In the Network list, choose QuakeNet (if it's not there, add it by clicking Add and choosing QuakeNet and clicking OK).
Now write the auth command in the text box.


Now click OK and OK again. You should now automatically get authed in Q when you connect.

Important: Putting your auth in perform will save your authname and password in a file on your computer. Anyone that gets hold of that file will have your authname and password, and can therefore auth as you. As of mIRC version 6.31 the settings are saved (on Windows XP) in C:\Documents and Settings\YourName\Application Data\mIRC\perform.ini so make sure you don't share that folder with anyone.

[Pumpkin]

Note: Doing this leaves your password in a .ini file in your mIRC directory. Therefore, you should make sure if you are at a lan, or using other filesharing situations, you DO NOT share your mIRC directory.

[F2]

Originally Posted by Pumpkin

Note: Doing this leaves your password in a .ini file in your mIRC directory. Therefore, you should make sure if you are at a lan, or using other filesharing situations, you DO NOT share your mIRC directory.

True. I have added a comment about that in the end now.

[larky]

F2's pass is....

[WhiteKnight]

Originally Posted by Pumpkin

Note: Doing this leaves your password in a .ini file in your mIRC directory. Therefore, you should make sure if you are at a lan, or using other filesharing situations, you DO NOT share your mIRC directory.

Or put it in a zip file on a publicly accessible web server *cough*boff*cough*

[Boffykins]

>_<

[Rob]

'oops'

[K]

Erm should "q" be replaced with "q@cserve.quakenet.org" for security?

[sh0ckwave]

Originally Posted by K

Erm should "q" be replaced with "q@cserve.quakenet.org" for security?

deja vu! i think this question got asked but it descended into flames and has been swept away

[Rob]

Really the thing with security to mention is that NEVER give out your password - you will never be pm'd for it.

[F2]

Originally Posted by K

Erm should "q" be replaced with "q@cserve.quakenet.org" for security?

In the /msg q hello statement? There's no need to, since you only write this once and on the correct network.
About whether to auth using /msg q@cserve.quakenet.org auth or /quote auth, the latter is at least as secure as the former.
If you want to discuss this, please don't do it in this sticky thread.

[WhiteKnight]

I was under the impression this was still exploitable during a netsplit when Q isnt on the network, and someone else changes their nick to Q.

Whereas if you explicitly define the full domain name, only the REAL Q would recieve your message.

Its also worth telling people the "full" line in case they use an IRC client other than MIRC that perhaps might not have a "per network" perform script.

[F2]

Originally Posted by WhiteKnight

I was under the impression this was still exploitable during a netsplit when Q isnt on the network, and someone else changes their nick to Q.

Whereas if you explicitly define the full domain name, only the REAL Q would recieve your message.

Its also worth telling people the "full" line in case they use an IRC client other than MIRC that perhaps might not have a "per network" perform script.

You can't change nick to Q - I have just asked in #help:

[17:22:48] * Now talking in #help
[17:23:05] <f2> During a netsplit, is it possible to change nickname to Q?
[17:23:16] <@Desolate> no f2

Also, even though you haven't a per-network perform, /quote auth is still as secure as /msg q@cserve.., but of course if you join a network where there's also an server-side auth command it will tell you that your username/password is wrong, just like it would say "no such user q@cserve..." if you use the other method.

[Fal]

Yes, that is correct.
I believe the reason why Quakenet changed their authing system from "/msg Q auth" to the extended one we presently use is due to people from other networks, such as Gamesurge, coming on to Quakenet without disabling their Auto Perform and therefore automatically attempting to Auth with Q. This ofcourse left a chance that they could infact auth as somebody else, if your information was the same.

So, simply; to stop this from happening - this is what we are left with today.

[F2]

No, on GameSurge you auth with /quote authserv auth username password