Latest Uploads
Day 1 - Ga ... eboy Racer

rychan

Pain_Claim.png

Jayenkai

Monkey Maz ... pload test

Pakz

image-26-1 ... 37-09.jpeg

Jayenkai

image-14-1 ... 50-52.jpeg

Jayenkai

Socoder_9yo.png

Jayenkai

Forum Home

Open and secure?

UserMessage
Posted : Saturday, 25 February 2012, 04:01 | Permalink
Afr0


WW Entries : 3
Lately I've been working on a patching system for Project Dollhouse.
The system is awesome and works great, but last night I realized it has a gaping flaw - security.
The thing is, I want Project Dollhouse to remain 100% open source, and I am not willing to make any compromises there.
I want people to be able to run their own servers. But as of right now, there is no stopping people from leaking off each other's bandwidth.
Scenario:

Person A runs his own server, but is too cheap to provide a webserver for patching.
Person B runs his own server, including a webserver that hosts patches.
Person A directs PDPatcher to download patches from person B's server. This can be done either through a recompile or through a *.ini file.

Does anyone have any ideas to prevent this scenario?
My patch scripts can be found here.

Edit: I realize that providing patches, per definision, is a pretty open service that should and could neccessarily be accessed by anyone, but I'd just like some kind of insurance against systematic leaking, if possible...

-----
Afr0 Games

Project Dollhouse on Github - Please fork!
Homepage : http://www.afr0games.com
Posted : Saturday, 25 February 2012, 04:22 | Permalink | Mark Here
Afr0


WW Entries : 3
Oh!
I just realized I can instruct people to change 'patch.php' so that instead of accepting a URL of "?Version", it'll accept an entirely different URL.
That would also involve recompiling PDPatcher... I think I'll have to change the license, because the Mozilla License requires you to release any source modifications under the Mozilla License free of charge.

-----
Afr0 Games

Project Dollhouse on Github - Please fork!
Homepage : http://www.afr0games.com
-=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- (c) WidthPadding Industries 1987 -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=-
Latest Posts
Scent of Coder
rockford Sat 08:52
AGameAWeek : 2016 - Part One
rockford Sat 07:28
Sickibackup
GfK Fri 13:19
Top Gear V3
GfK Fri 10:59
I need to change company name
GfK Fri 10:23
Manga Studio
Dabz Fri 09:30
BlitzCoding
GfK Fri 08:40
PIP Crap
rockford Fri 08:24
Usborne Coding Books
Jayenkai Fri 06:41
Pebble Watch Clocks
rockford Thu 07:14
More

Latest Items
Showcase : Monkey Plotting
zzoom Tue 15:46
Showcase : Waifu Clicker
rychan Mon 14:54
Showcase : Space Station A6-100
Jayenkai Wed 12:20
Showcase : Novascape
rychan Fri 01:09
Showcase : Space INvasion Zero
rychan Wed 15:38
Showcase : Harpoons and Balls
Jayenkai Tue 02:46
Showcase : NeonPlat's Cosmic Adventure
Jayenkai Fri 12:56
Dev-Diary : Centipede remake
steve_ancell Wed 19:25
Showcase : Beta Collexion
rychan Mon 13:55
Dev-Diary : Global Variables!
rychan Thu 06:33
Showcase : Spike Dislike GB
rychan Wed 04:18
Blog : Back on the run
rychan Wed 01:03
Showcase : The Catcher Van
rychan Mon 04:40
Showcase : GodOfMiniWars
gameleaper Sun 20:12
Showcase : WarTactical
gameleaper Mon 17:08
More

Who's Online
Jayenkai
Sat, at 09:04
rockford
Sat, at 08:53
GfK
Sat, at 08:39
Dabz
Sat, at 08:39
Pakz
Sat, at 08:13
steve_ancell
Sat, at 07:23
rychan
Sat, at 06:16
shroom_monk
Sat, at 01:46
spinal
Sat, at 01:28
therevillsgames
Fri, at 19:58
Link to this page
Site : Jayenkai 2006-Infinity | MudChat's origins, BBCode's former life, Image Scaler.