Flav wrote on Nov 22
nd, 2020 at 4:22pm:
Now, and it's going to devolve rapidly back into geek stuff between noamineo and me, they might have found a way to tickle the login server to provide informations. ( and in that case they might be able to track the anonymous, since they appears as login, but not in the who list )
It was inevitable, really.
So "API" is one of those tech buzz-words that can mean all kinds of different things depending on who's making it. The game's intentional public API that you speak of is probably very long dead, but we shouldn't omit the notion that the login server or game servers themselves had independent APIs someone might have tripped into accessing.
Another notion to consider - there may be some not terribly difficult way to pull this information out of the client. We already know its possible to manually trigger a request(open the social panel and go to the "who" page) - its possible this process presents some kind of request to the server. Something like:
Client "How many people are online?"
Server "528 people with 147 anonymous"
Client: "Display non-anonymous players" (client busily makes a table with 381 rows to hold the data)
It wouldn't take much to figure out where this information is being returned and pull it out of there. At the very least a packet trace could do it the same way they reverse-engineer MMO servers.
Knowing how incredibly hostile the SSG devs are towards any players who do anything remotely like that, its fairly easy to see why the guy doing it might say "Oh I just have a bunch of friends manually counting for me!" while quietly weeping to himself about how no one will ever know his true cleverness.