"I put my addons on a server but the owner took them/someone stole my addons!"
what if i get a wirus
By$$FUMONEY$$at 17th of August 2017 13:45:58
Thats crazy and a massive overreach. Most servers have Co Owners especially larger ones. You cannot help if someone steals your addons. My recommendation is start implementing a whitelist for any addons on gmodstore. Its also easy for someone to steal addons via just joining a server. Ive spent tons of money here because of the content creators provide here. Lets not be quick to hit the ban button and help us resolve issues. Thank God no one has stolen my addons i would hate to be banned for it......
What? This isn't an overreach in the slightest. Your co-owners shouldn't be having access to your files. As the owner of such a "massive" community you should be controlling every aspect of your server. To add to this I've stated appeals are a thing, and if you've outed such a person from your community and shown you've resolved the problem across the board then you're good.
It's the reason you create a separate FTP login for the user to access whatever server you give them access to, and you should be controlling what they have access to. Proof of logs and access restriction.
You cannot help if someone steals your addons.
What an absolutely ignorant thing to say. I have no words other than this is just dumb.
Its also easy for someone to steal addons via just joining a server.
You have no clue what you're talking about and it's obvious from this alone. Nobody can steal your addons from just joining, and this makes your post lose all credibility in regards to what you seem to actually know.
Ha. When I saw the stealing addons by joining in the post above ^^^^ I totally agree with nooky. Obviously the owner of this massive community doesn't know what client side files are.
By$$FUMONEY$$at 17th of August 2017 13:45:58
Thats crazy and a massive overreach. Most servers have Co Owners especially larger ones. You cannot help if someone steals your addons. My recommendation is start implementing a whitelist for any addons on gmodstore. Its also easy for someone to steal addons via just joining a server. Ive spent tons of money here because of the content creators provide here. Lets not be quick to hit the ban button and help us resolve issues. Thank God no one has stolen my addons i would hate to be banned for it......
I hope images can explain to you and people that think the same way about the situation.
It's like this for everything, how do you think people who make playermodels rip them from games? Cause they're clientside, you can get anything clientside that displays but serversided files on any platform will not allow you to view them/see their contents, that's why it's always better to save sensitive information in them and not files that can be downloaded with scripthook.
If you honestly want to do some basic protection because some people don't know how: sv_allowupload 0 sv_allowdownload 0
Just use FastDL in your public folder, should not be too hard.
Ok, this is sort of getting more and more crazy. If you ban a user basically because they gave access to a user, and that user steals the scripts and leaks it, that makes sense. But this is so abusable, and no server owner should have to use fastDL, or be banned if they get hacked or be falsely accused. This rule basically allows anyone who takes scripts from server owners to use those scripts and NOT is banned because if they caught, the victim is banned for it (Which btw, that actually causes more trouble for script creators). If anything, there should be a system such as providing a free DRM system so that both the script creator and the server owner have more equality. This is just putting the blame on the server owner in which it could be possible that they have no possible way to prevent how the person stole the script and also saying that it's not at all the script creator when the script creator could easily set a DRM. You say you can appeal, but like I said before, what if the user was falsely accused? Are you just going to unban them for just saying that they have no idea who the person is that framed them? They can't at all provide proof of that, so that would essentially be the only way.
ByGordon Janksonat 18th of August 2017 03:51:20
Ok, this is sort of getting more and more crazy. If you ban a user basically because they gave access to a user, and that user steals the scripts and leaks it, that makes sense. But this is so abusable, and no server owner should have to use fastDL, or be banned if they get hacked or be falsely accused. This rule basically allows anyone who takes scripts from server owners to use those scripts and NOT is banned because if they caught, the victim is banned for it (Which btw, that actually causes more trouble for script creators). If anything, there should be a system such as providing a free DRM system so that both the script creator and the server owner have more equality. This is just putting the blame on the server owner in which it could be possible that they have no possible way to prevent how the person stole the script and also saying that it's not at all the script creator when the script creator could easily set a DRM. You say you can appeal, but like I said before, what if the user was falsely accused? Are you just going to unban them for just saying that they have no idea who the person is that framed them? They can't at all provide proof of that, so that would essentially be the only way.
Please actually read the posts instead of just spewing out stuff that makes no sense.
ByGordon Janksonat 18th of August 2017 03:51:20
Ok, this is sort of getting more and more crazy. If you ban a user basically because they gave access to a user, and that user steals the scripts and leaks it, that makes sense. But this is so abusable, and no server owner should have to use fastDL, or be banned if they get hacked or be falsely accused. This rule basically allows anyone who takes scripts from server owners to use those scripts and NOT is banned because if they caught, the victim is banned for it (Which btw, that actually causes more trouble for script creators). If anything, there should be a system such as providing a free DRM system so that both the script creator and the server owner have more equality. This is just putting the blame on the server owner in which it could be possible that they have no possible way to prevent how the person stole the script and also saying that it's not at all the script creator when the script creator could easily set a DRM. You say you can appeal, but like I said before, what if the user was falsely accused? Are you just going to unban them for just saying that they have no idea who the person is that framed them? They can't at all provide proof of that, so that would essentially be the only way.
You're missing a lot of counter arguments to this:
- It's extremely hard to dodge all the holes you'd need to, to get someone a false ban by framing them, because mainly your first attempt will fail as said before once it does the moderators aren't robots, they'll know something is up and put extra investigation into it if more people come up with the same shit, and it'll probably turn out to be alts and the server owner will be protected.
- Getting hijacked like I said is literally a 1 in 1 billion chance unless you can't do a bit of common security checkups such as not using the same password for everything, and a randomized ftp password will take years and years to crack, especially if you keep your ftp username and info private too, so nothing to worry about there.
- You don't need to use fastdl, idk what that one guy was talking about but all exploits from sv_allowdownload/upload where fixed a long time ago, regradless people will always beable to download client/shared files because they are required by the game to be sent to the client so the visuals of that script actually work.
- It's completely useless to have a DRM even a free one that's simple because of how hard it is to frame someone and of how extremely hard it is to hijack a moderately good secure account.
- Then the rest of your arguments loop back into mainly 1 and 2.
ByBucketat 18th of August 2017 01:48:47
If you honestly want to do some basic protection because some people don't know how:sv_allowupload 0sv_allowdownload 0Just use FastDL in your public folder, should not be too hard.
Stop misfeeding people information. If you have no clue what you're talking about, refrain from posting giving "advice".
So If i pay someone from the gmod store to do a job and they steal some scripts its my fault? Even tho Its coming from your service?
By|KE| CookieDahDev™at 18th of August 2017 11:51:02
So If i pay someone from the gmod store to do a job and they steal some scripts its my fault? Even tho Its coming from your service?
Yes, because you gave access to all your files to someone who you have no reason to trust. Please read posts 1 and 2 on this thread.
By|KE| CookieDahDev™at 18th of August 2017 11:51:02
So If i pay someone from the gmod store to do a job and they steal some scripts its my fault? Even tho Its coming from your service?
You shouldn't be giving random developers you hire from here access to your full server, that's just asking for trouble. A lot of unrepped people will apply to jobs, get access, and steal your addons to leak them. That's how the majority of scripts seem to be leaked.
You need to keep in mind we are just a marketplace. We are not hiring these developers for you, nor are people selling scripts because we hire them to. We just serve as the platform that people can thrive on. So that means not everyone who applies for your job is trustworthy/skilled enough.
If you hire someone for a job, have them do the work on their own local server and give you the script. Any time you're hiring someone to do "bug" fixes and giving them full access to your FTP you're gambling with other people's livelihoods.
I don't really see the big issue here. I currently run a server and have not had any issues of the sort. Everything I have is highly secure behind highly complex passwords and even complex usernames. It's not hard to keep your stuff secure especially with all the tools provided to you with the modern day internet. Password Generators, Password Security checkers, etc. All useful tools in determining your security. The site is just trying to do its best to protect the Content Creators and if that means turning away people who can't lock your stuff behind strong passwords and trust barriers then I say let them. It's a business and they have got to keep making money and each leak hurts both the Site and the Content Creators.
Giving a random person in a 'developer' job your ftp password is entirely your fault and I agree that the owner(s) should be to blame for this so unless (in the rare case) you are actually hacked. As long as you aren't an idiot it is almost impossible for someone to steal your addons and get you banned.
Hey guys!
The whole "always blame the script owner" religion is really not a good thing. Let me explain why.
I have seen so many server owners needing some work done, and I understand how sometimes relying on experienced developers is absolutely necessary. Alright, let's hire someone somewhere! Even if the owner is brilliant and only gives access to just a few folders (especially excluding the whole garrysmod/addons folder), it's easy to grant read access to Lua files through some Lua script.
Do you have a safe binary module replacement for file.Open() that would prevent reading addons' Lua files and then sending them whereva? And even if it existed, it would mess up with some kinds of addons (.lua files not containing Lua [for Workshop] or Lua files analysis).
Seriously, Garry's Mod is not made for paid content. No anti-theft features, no guarantee of genuine functions like in PHP, etc. I honestly wish that Garry's Mod is protected, but it's not.
I'm sorry for hurting anyone in this message, but be sure that I do not intend this message to be used as an addon theft tutorial.
Momo ♥
ByMohamed RACHID, baguetteat 20th of August 2017 00:45:17
Hey guys!The whole "always blame the script owner" religion is really not a good thing. Let me explain why.I have seen so many server owners needing some work done, and I understand how sometimes relying on experienced developers is absolutely necessary.Alright, let's hire someone somewhere!Even if the owner is brilliant and only gives access to just a few folders (especially excluding the wholegarrysmod/addonsfolder), it's easy to grant read access to Lua files through some Lua script.Do you have a safe binary module replacement forfile.Open()that would prevent reading addons' Lua files and then sending them whereva? And even if it existed, it would mess up with some kinds of addons (.lua files not containing Lua [for Workshop] or Lua files analysis).Seriously, Garry's Mod is not made for paid content. No anti-theft features, no guarantee of genuine functions like in PHP, etc. I honestly wish that Garry's Mod is protected, but it's not.I'm sorry for hurting anyone in this message, but be sure that I do not intend this message to be used as anaddon theft tutorial.Momo ♥
"Blame the script owner religion" - let me explain how this term is well... dumb.
We get countless users who will hire someone through the job section who just grant the "developer" full FTP access to whatever they want. They don't think and just want them to "fix" it. These people are a problem as it puts the script marketplace sellers at risk.
You claim that they can get "easy read access" to Lua files through some Lua script. Again, you shouldn't be giving the developer access to put whatever he wants on the server, and this mainly applies to a lot of unrepped "developers".
You also make a baseless claim that Gmod is not made for paid content, yet tell that to a marketplace that is thriving AROUND paid content.
Your post is ignorant and ridiculous. You're just spewing out trash.
Server owners do know they don't have to include lua files in FastDL or workshop content, right?
what happen exemple if i put my addon in my Dedicated Server ftp that i buy and the owner of the Dedicated Server take my addon im responsable or not because that very bad if yes
Byxavproglitcherat 20th of August 2017 12:44:26
what happen exemple if i put my addon in my Dedicated Server ftp that i buy and the owner of the Dedicated Server take my addon im responsable or not because that very bad if yes
If you paid for a Server and it's a legit company, then you may sue them if they steal your files, however if a "friend" offered you his server and then steals all your files you might be a little bit more fucked and you can be banned I guess.
But in the first case you will probably not be banned if you can explain and proof it was the hosting company
Byxavproglitcherat 20th of August 2017 12:44:26
what happen exemple if i put my addon in my Dedicated Server ftp that i buy and the owner of the Dedicated Server take my addon im responsable or not because that very bad if yes
Did you even bother reading the post?
ByMomox | MomoxStudios.Netat 20th of August 2017 12:55:33
If you paid for a Server and it's a legit company, then you may sue them if they steal your files, however if a "friend" offered you his server and then steals all your files you might be a little bit more fucked and you can be banned I guess.But in the first case you will probably not be banned if you can explain and proof it was the hosting company
You're pretty retarded to not understand this concept especially since the guy was asking about a situation that is exactly the fucking title of this thread.