Alright, here's the new thread (See the Applescript thread below ). Anyway, my grand announcement is that my previously announced (how long ago was it? 6 months?) program, RegCodeX (A program to let you require a registration code to install your game), is nearly done. I'm not going to disclose many details, but it will likely be between 7 and 20 dollars, and it will allow you to ship unlimited game copies with numerous name/code combinations. There's some bad news, though:

First, it ain't done yet. I'm getting there, but there are a few small things that need fixing.
Second, it isn't 100% secure. Then again, is anything 100% secure? : (I would give details, but that would make it less secure. Email me and if I know you, I'll explain).

The purpose of this topic, though, is two-fold. The first purpose was to tell you what was happening with the program. The second is to get feedback. What do you guys want to see in this program? I want this thing to be as useful as possible to everyone so that your game can be secure and so that the installation process can run smoothly. Currently, you can select an archive, specify a name/password algorithm (no details for you!), select a name for your installer, and get back a bunch of files (including the installer and a code generator). On my to-do list now is more security and more efficiency. If you guys want anything else (custom dialog messages, etc.) please ask here and I'll do what I can. Now, the floor is open. Any requests you have, make them now!

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

Quote

Originally posted by CI-Ia0s:
**Alright, here's the new thread (See the Applescript thread below;) ). Anyway, my grand announcement is that my previously announced (how long ago was it? 6 months?) program, RegCodeX (A program to let you require a registration code to install your game), is nearly done. I'm not going to disclose many details, but it will likely be between 7 and 20 dollars, and it will allow you to ship unlimited game copies with numerous name/code combinations. There's some bad news, though:

First, it ain't done yet. I'm getting there, but there are a few small things that need fixing.
Second, it isn't 100% secure. Then again, is anything 100% secure? : (I would give details, but that would make it less secure. Email me and if I know you, I'll explain).

The purpose of this topic, though, is two-fold. The first purpose was to tell you what was happening with the program. The second is to get feedback. What do you guys want to see in this program? I want this thing to be as useful as possible to everyone so that your game can be secure and so that the installation process can run smoothly. Currently, you can select an archive, specify a name/password algorithm (no details for you!), select a name for your installer, and get back a bunch of files (including the installer and a code generator). On my to-do list now is more security and more efficiency. If you guys want anything else (custom dialog messages, etc.) please ask here and I'll do what I can. Now, the floor is open. Any requests you have, make them now!

**

For the installer could you allow it to have the ability to save a separate file or folder in a set location on the startup disk (allowing the use of the file:/// command for activating files and applications in Coldstone games).

Also could you allow a custom text field for an End-user license agreement.

------------------
Thanks,
GrahamVH
graham@vhpublications.com
http://www.warcraftc...t/CGD/home.html

The license agreement box: I was thinking about it and I do believe I will. However, Java text boxes w/ scrolling are a pain, so it may take a me a while.

As for installing into a separate directory, I don't think it would work. You see, all the app does is encrypt another archive and decrypt it if the user enters the right name/password combination. To move a file into a separate directory would require it to decompress the archive, find the file, find the correct directory and move it. The other thing with this is that again, it wouldn't work on PCs or Mac OS 9 computers (which cuts out a lot of stuff).

The first suggestion is good, though, and I'll get to work on that. As soon as I finish up with my security stuff.

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

Quote

Originally posted by CI-Ia0s:
**I would give details, but that would make it less secure.

**

It's broken, then. Security through obscurity is pretty much certain to be broken in less than a month.

------------------
(url="http://"http://www.magnatune.com")www.magnatune.com(/url) - Just Say No Corporate Pop: Use Magnatune!
"It must be remembered that there is nothing more difficult to plan, more doubtful of success, nor more dangerous to manage, than the creation of a new system. For the initiator has the emnity of all who would profit by the preservation of the old institutions and merely lukewarm defenders in those who would gain by the new ones." -- Niccolo Machiavelli, 1513

Quote

Originally posted by Bryce:
**It's broken, then. Security through obscurity is pretty much certain to be broken in less than a month.

**

Microsoft Windows(all versions) is kept secure through obscurity. Why do you think people freaked out when some of the source code was leaked for Windows 2000. So how is this any different?

------------------
Thanks,
GrahamVH
graham@vhpublications.com
http://www.warcraftc...t/CGD/home.html

Bryce, you're right. But then, refer to my first comment: Is anything REALLY secure? The only way to do it is to use keys only accessible from a server which means that you need an internet connection to use the installer, a restriction that I think most of us would like to avoid. A good enough programmer can hack into pretty much anything. I'm sure that Ambrosia's own installer has been broken into at some point, just for some kid to see if he was up to the challenge. I'll leave you with the assurance that I doubt any of you would be able to break into it (though again, no details).

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

That sounds like a chalenge?

By saying you doubt any of us can do so, you are only asking for it.

------------------
Magnum gloriam Efeionae est!
The forest is calling,how
will you answer?
(url="http://"http://www.angelfire.com/biz7/pppgames/index.html")P.P.P. Games Online(/url)

(This message has been edited by Efeion (edited 08-04-2004).)

Quote

Originally posted by Bryce:
**It's broken, then. Security through obscurity is pretty much certain to be broken in less than a month.

**

Aren't our forum accounts just security through obscurity. They are only safe as long as no-one knows your username and password

------------------
Pilky
(url="http://"http://www.mcubedsw.com")M cubed homepage(/url)
(url="http://"http://www.mcubedsw.com/network")M cubed Network(/url)

Quote

Originally posted by Efeion:
**That sounds like a chalenge?

By saying you doubt any of us can do so, you are only asking for it.

**

You an advanced Java programmer? Didn't think so.

EDIT: If you are, my apologies. You might have a slight chance of breaking it then, if you go about it the right way.

Just so everyone knows, security has been increased slightly. Once I work out one annoying little bug, I'll add in the license agreement box, brush up some status screens and dialogs, and then I'll be done.

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

(This message has been edited by CI-Ia0s (edited 08-04-2004).)

I my self have little or no chance... I bet some one out there can...

Just making a point.

------------------
Magnum gloriam Efeionae est!
The forest is calling,how
will you answer?
(url="http://"http://www.angelfire.com/biz7/pppgames/index.html")P.P.P. Games Online(/url)

Quote

Originally posted by Pilky:
**Aren't our forum accounts just security through obscurity. They are only safe as long as no-one knows your username and password

**

No... A password is a `key' type piece of data, it's secrecy is a given - like encryption keys or such. The fact that the UBB's source (and thus the details of it's operation) are avalible to anyone who buys it mean that it is not (in this instance) relying on obscurity for it's security. So, while we might know that the UBB authenticates passwords by checking a database with a perl script (or something), since we don't know the password, the system remains secure.
The key is secret, not the workings of the mechanism. If your system can't survive with the mechanism known, it isn't very secure.

On the other hand, expecting the system to remain secure after the `key' is comprimised is like expecting a lock to keep a burglar out if you give him the key

------------------
(url="http://"http://www.magnatune.com")www.magnatune.com(/url) - Just Say No Corporate Pop: Use Magnatune!
"It must be remembered that there is nothing more difficult to plan, more doubtful of success, nor more dangerous to manage, than the creation of a new system. For the initiator has the emnity of all who would profit by the preservation of the old institutions and merely lukewarm defenders in those who would gain by the new ones." -- Niccolo Machiavelli, 1513

(This message has been edited by Bryce (edited 08-11-2004).)

News update: The bug I mentioned has been fixed! Also note that the length of the password has been increased to 16 characters (from for additional security. I'm currently working on making things look nice (interfaces), sound nice (dialog messages, and the like), and on adding the license agreement box. I'm also looking into adding a progress bar (it's actually pretty likely). I can't make any promises, but I hope to have RegCodeX out to testers within a month.

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

Cool!!

------------------
-- Debra
Danillitphil Productions
(url="http://"http://www.danillitphil.com/graphics/index.html")www.danillitphil.com(/url)

Small update (this is getting to be a kind of "progress report" thread): I finished testing the new 16-character registration code system and brushed up a few dialogs. So far so good. I'll start working on the license agreement box, and then, later (I'll need to read up on a few things), the status bar.

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

News: After a lot of work, sweat, and big headaches, I've finished the license agreement box system!!! After lots of coding and bug-hunting, it finally works! I have been working pretty much straight through the last 8 hours (minus breaks for eating, etc.), and now I'm just glad it's done. All that's left is the progress bar (and getting any bugs I haven't found yet).

Other news: I added an option to randomly generate your "algorithm."
Other other news: I am happy to say that RegCodeX will be competitively priced: I've been looking around and have seen things like it (albeit, with more sophistication) going in the $200 range. I've pretty much settled on $12, though don't hold me to it.

P.S. One of the aspects the other more sophisticated programs had was the ability to add a ReadMe to your installer. I don't personally think this is necessary (I mean, it's going to be sitting right next to the installer, and the chances of the person reading it don't really improve much), though I am willing to add it if there is enough demand.
P.P.S. I am also willing to take any further features requests. If you guys want more sophistication, I'll do my best to accommodate you.

EDIT: Spelling

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

(This message has been edited by CI-Ia0s (edited 08-25-2004).)

ATTN: There's been a breakthrough!!! I've managed to get the status bar working. Now all I have to do is implement it in the Installer file and it'll be done! At that point I'm gonna talk to some people and work on security. Please, make any features requests now. I'll be glad to add whatever you guys want (well, within reason ). I'm glad that this is finally moving along!

------------------
Cha0s
(url="http://"http://www.world-of-cha0s.hostrocket.com")The Homepage of Cha0s(/url)

More news: The progress bar has been completed (finally!). I'm now officially moving RegCodeX into the alpha test stage. I'll be testing and bug-hunting myself for this stage (yes, I have been doing that all along, but this will be a focused bug-hunt). I am still taking requests for more features, so please, speak now. Once RegCodeX enters beta testing it will be harder to add more features. Features added now will get more thorough testing and better implementation.

Small update: I've found and fixed a few small bugs. Alpha stage is progressing smoothly and should be complete within a week (I hope).

(Deleted... Double-post...)

This post has been edited by CI-Ia0s : 11 September 2004 - 02:54 PM

I'm curious, what sort of protection is given with this program to require a registration code. Does it integrate with the Coldstone app in any way (to not allow the user to just place the Coldstone game folder on a cd and give it away free)?