Latest Uploads
Dungeon Ga ... n Progress

rychan

image-17-0 ... -18-36.jpg

Jayenkai

image-07-0 ... -20-20.jpg

Jayenkai

Kuron Cap Get!

rychan

Merry Christmas

Jayenkai

Invasion V ... tup screen

rychan

Forum Home

Open and secure?

UserMessage
Posted : Saturday, 25 February 2012, 04:01 | Permalink
Afr0


WW Entries : 3
Lately I've been working on a patching system for Project Dollhouse.
The system is awesome and works great, but last night I realized it has a gaping flaw - security.
The thing is, I want Project Dollhouse to remain 100% open source, and I am not willing to make any compromises there.
I want people to be able to run their own servers. But as of right now, there is no stopping people from leaking off each other's bandwidth.
Scenario:

Person A runs his own server, but is too cheap to provide a webserver for patching.
Person B runs his own server, including a webserver that hosts patches.
Person A directs PDPatcher to download patches from person B's server. This can be done either through a recompile or through a *.ini file.

Does anyone have any ideas to prevent this scenario?
My patch scripts can be found here.

Edit: I realize that providing patches, per definision, is a pretty open service that should and could neccessarily be accessed by anyone, but I'd just like some kind of insurance against systematic leaking, if possible...

-----
Afr0 Games

Project Dollhouse on Github - Please fork!
Homepage : http://www.afr0games.com
Posted : Saturday, 25 February 2012, 04:22 | Permalink | Mark Here
Afr0


WW Entries : 3
Oh!
I just realized I can instruct people to change 'patch.php' so that instead of accepting a URL of "?Version", it'll accept an entirely different URL.
That would also involve recompiling PDPatcher... I think I'll have to change the license, because the Mozilla License requires you to release any source modifications under the Mozilla License free of charge.

-----
Afr0 Games

Project Dollhouse on Github - Please fork!
Homepage : http://www.afr0games.com
-=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- (c) WidthPadding Industries 1987 -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=-
Latest Posts
Artistic Payments
therevillsgames Fri 17:04
The Observatory
therevillsgames Fri 16:58
InDev : SpikeDislike3
Jayenkai Fri 15:03
Marketing Bollocks
rockford Fri 12:24
Jayenkai's Daily Blog! Attempt #3923
Jayenkai Fri 04:00
InDev: Mini LD Dungeon Crawler
rychan Thu 16:17
Great Big Youtube thread
Jayenkai Wed 14:19
Pebble Watch Clocks
rockford Tue 04:07
My Teachers photo?
Jayenkai Mon 16:36
Every Day is Cakeday
steve_ancell Sun 15:56
More

Latest Items
Blog : Back on the run
Jayenkai Tue 15:16
Dev-Diary : Helichopper stuffs
GfK Thu 09:13
Showcase : Crime (reloaded)
rockford Wed 07:30
Showcase : Blockman Forever
Steve Elliott Sun 12:42
Snippet : Lotto Number
Jayenkai Thu 15:14
Showcase : Invisible Munky 2
Jayenkai Thu 04:52
Blog : New Fence..
steve_ancell Wed 11:28
Snippet : Rotating Sphere
Dabz Sun 19:36
Woot : Three Years Later...
Kuron Fri 07:05
Snippet : IFS Fractal Viewer
Andy_A Mon 14:20
Showcase : Futrino
Jayenkai Thu 06:16
Showcase : Millenipede
Steve Elliott Mon 17:44
Snippet : Simple stack-based interpreter
tbohon Wed 12:08
Showcase : Santa's Workout 2
jayparker Tue 00:43
:
Wed 17:00
More

Who's Online
therevillsgames
Fri, at 17:29
steve_ancell
Fri, at 16:56
zzoom
Fri, at 16:38
ferdi
Fri, at 16:29
Jayenkai
Fri, at 15:50
rychan
Fri, at 15:42
Hotshot
Fri, at 15:41
GfK
Fri, at 15:38
Afr0
Fri, at 15:02
rockford
Fri, at 14:55
Link to this page
Site : Jayenkai 2006-Infinity | MudChat's origins, BBCode's former life, Image Scaler.