Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

Randomized Backstories

67 (25.9%)

Genetic Additions

98 (37.8%)

Mess Hall

50 (19.3%)

Revamped Area

44 (17%)

Total Members Voted: 257

[Someguyo]

Only time that would could have been bad would be many months back, when Florit was mad about something or another.

Also, I have no idea what/how git works.

EDIT- Huh. This isn't my account. Forgot to log out of my friend's. One second.

[Dr. Johbson]

There we are.

[qwertyuiopas]

I had looked into it earlier, but a certain recent feature enhanced the possiblities from proccalling an un-unban proc to something truely horiffic, though easily cured. Actually, thinking on it, this also fixes a group of similar exploits where:
-Any player may be turned into an admin(Can no longer set the owner attribute nor the rank, defeating the purpose)
-A low-level admin could alter their own rank to a higher level, such as host.

I still don't think I'll publicly reveal the details for a few days, but basically, it is a massive exploit that allows an administrator or other with sufficiently high permission to access settings and alter variables that not even the host should have full access to in-game.

A recent upgrade revealed the latent exploit by uncovering a previously unreachable set of inputs to an insufficiently secured procedure. The fix was to add additional authentication to the procedure to block inputs that should not be allowed. At a future date, I would reccomend making further admin levels, and giving the greatest the ability to bypass this fix, but only if such a rank was severely protected. I would reccomend it could only be activated by setting the server's IP, port, and the user's key into the settings, debug mode being enabled, and them encoding the date as well. Further, such a rank would be reserved for debugging only.

[qwertyuiopas]

Well, after 3 posts while I was posting....

Also, I have no idea what/how git works.

The easiest way, if you never plan to upload changes, would be to get Git GUI, on the main menu, "Clone Existing Repository".

Before that will work, you need to use help->show SSH key, and then input that in the host site's "Manage public keys" page.

The source can be found at the host site's "User Home" page.

To get new changes, the menu option(s) of remote->Fetch from->origin
You might also need to merge, and in that case, would use Merge->Local Merge, although merging like that may only be required if the repository has changed since you accuired a copy and you have edited files yourself.

Also of intrest, Repository->[either visualize option}, as it spawns gitk, a graphical view of all past revisions, in a neat flowchart.

Everything else is either unnessecary(until you want to add your own changes...) or too technical for me to understand without further effort.

It would be best to have BYOND recompile, to ensure that all code changes are in effect.

[Googolplexed]

Johb doesn't have git access. We are limited to 5 members and its better to keep them to people who need to commit changes rather then just download.

I do want to move our git repo to my server, so hopefully this will be fixed soon.

Also, what kind of setting shouldn't even the host be able to change, byond restricts filesystem access and external DLL calling unless in trusted mode, and if the host wants to screw-up their server then they should feel free to.

[quinnr]

Yes, host awesomeness is what they get for being a host!

[bluephoenix]

Can we get a server please?

[Randomonioum]

Yes, a server WOULD be enjoyable.

[dbfuru]

I agree, a server would be nice right now.

[head]

SERVER UP.

[Randomonioum]

WHOOP server!

No, wait, the server is down for me.

Any chance of the server coming back up?

[qwertyuiopas]

Also, what kind of setting shouldn't even the host be able to change, byond restricts filesystem access and external DLL calling unless in trusted mode, and if the host wants to screw-up their server then they should feel free to.

In-game, "host" admin level, access to /mob.[/mob/var/client/]client.[/client/var/obj/admin/]holder.<anything>.

Simply due to the fact that within there lies admin level settings, so greater authentication would be a good thing, since if someone finds an exploit to give them access to certain admin verbs, they couldn't further edit their abilities or degrade the abilities of admins to ban them.

Further, I guess distinguishing primary hosts and secondary hosts is the big area, as it is possible to give just the compiled files for a "lower ranked" host, and such a host sould at most have the powers of a regular admin. Only the most trusted hosts should get the higher ranks that include, among other abilities, banning fellow admins.

[Ringmaster]

Who blew it up this time?

[head]

Router crashed. server back up you may continue from where you was

[Orb]

Head just put his server down, and blew up the station while he was at it....

Anyway, could we have someone else host, please?