Author Topic: Add-On Compiler  (Read 1254 times)

I was thinking if there's a part of an Add-On you wish to compile (something you don't want users looking at/modifying), you could submit the file on a blockland.us form.

The form could scan the CS file for anything suspicious, and if there isn't anything, return a DSO compiled with Badspot's modified Torque that can be executed in the Add-On?

What do you guys think? Is this stupid, would it not work, are there any flaws?

~Thinker, thinking every day

I want an option on rtb hosting manager where I can put all my addons into groups so when I launch a different server I know exactly which ones I need and quickly enable them

I want an option on rtb hosting manager where I can put all my addons into groups so when I launch a different server I know exactly which ones I need and quickly enable them
well that's completely off-topic but i agree i guess

How would this scanner work exactly? It needs a very specific huge database to know what is suspicious and what isn't. A database that takes years to form with new detections added to it.

Not worth it

If they were manually approved, then that might be fine.

Is this stupid
yes

are there any flaws?
It needs a very specific huge database to know what is suspicious and what isn't. A database that takes years to form with new detections added to it.

Not worth it

If you want to keep your addons from being seen then don't release them. Keep them to yourself or friends you can 150% trust with it.

yes

If you want to keep your addons from being seen then don't release them. Keep them to yourself or friends you can 150% trust with it.
Not the entire add-on, just things that you don't want people to be digging in to.
If they were manually approved, then that might be fine.
That would be better.

well that's completely off-topic but i agree i guess
My bad, read the post wrong.

I'm pretty sure i've seen badspot or someone say something about this idea before. In short, it wont happen. Its similar to why we cant disable other players saving bricks. If you don't want a script to be public, don't make it public, keep it to yourself.

There is no point in making a script encrypted anyway. The only two reasons I can see would be either the script is so terrible, that they don't want anyone else to be able to try to learn off it, and pick up bad habits or methods, or if they're a selfish idiot, and they want to keep their uber amazing 10/10 chatbot they copy-pasted off the forums private, but still share it with other people, so that only they can update it, and pretty much force everyone to go to them to get improvements for it.

Things wrong with this:
  • Using DSOs are not a good way of guaranteeing the user will not edit anything, as just like machine code it can and has been disassembled
  • Untrustworthyness, even if there was a verification process
  • Takes valuable time away from the people verifying it, and will probably end up like RTB where things wait for months on end
  • Would greatly hinder the ability for users to learn TS from add-ons
  • Artificial limitations presented by the need to verify safe code (For example, you wouldn't be able to have an auto-updater or any sort of data given in from a remote source without "possibility of contamination")

It's just like preventing users from saving. It defeats the purpose and opens up so many possibilities for malicious intent.

In addition, it's impossible to make a foolproof automated malicious code checker, even if you have the original source. Want proof? Anti-virus programs don't always detect viruses. This is the same concept.
« Last Edit: January 14, 2014, 07:43:29 PM by Ipquarx »

Why would you even want to do this?

I think it's really cool that people have been using my signature. Maybe I should start again. The drama topic just kind dissuaded me.

~Thinker, thinking every day

Thinker, it was making fun of you. It isn't that they find it cool or whatever, Subpixel was just pointing out how (in his mind) foolish it is. I also think it is annoying.

Also, what would you want to do with it, Subpixel?

I think it's really cool that people have been using my signature. Maybe I should start again. The drama topic just kind dissuaded me.

~Thinker, thinking every day
...