"I put my addons on a server but the owner took them/someone stole my addons!"
I've received multiple reports regarding this and I want to clarify a few things.
For starters you will be banned if your scripts are leaked. When you purchase these addons they are your responsibility. You are the one who controls where they go, how they are used, and what happens to them. So when you put them on your "friend's" server and he revokes your access, you have nobody else to blame but yourself.
People who think your addons were stolen - chances are it's because you're giving "developers" (aka just DarkRP job people) your FTP login credentials, and they just copy the addons. That or you're not properly securing your logins. Regardless nobody can get your serverside files and nobody cares about clientside files. If these are found leaked and lead back to you - you'll also be banned.
Properly secure your stuff because you are held responsible if anything happens to your scripts, and don't be surprised if you fail to do so and it falls back on you.
**YOU DON'T NEED TO PUT YOUR LUA FILES IN FASTDL!!!**
Adding on to this: Give everyone separate user accounts for your filesystem. This ensures that you can kick people out whenever you want and track their movements. Also, learn how permission systems work so you can give your people access to only what you need.
There's also some tips on our knowladge base located https://www.gmodstore.com/knowledgebase/
This announcement should show up as an alert on the main page in my opinion.
Having a similar impossible to talk to, "its sellers fault" situation here. Just linked them to this. Thank you.
It's mind boggling that people don't already understand this.
By[ZG] Zandorumat 15th of August 2017 18:18:56
It's mind boggling that people don't already understand this.
Ditto. Friendships are disposable, and you wouldn't believe what people would do for some forum karma on a shtty leak forum.
Didnt you say you didnt ban for leaks anymore?
ByDeathwalker9959at 15th of August 2017 19:59:26
Didnt you say you didnt ban for leaks anymore?
Using leaks.
So, what would happen if say someone was to actually hack into the server files and take them? Would it still be our fault?
ByMeLikeyDaCheeseat 15th of August 2017 20:37:32
So, what would happen if say someone was to actually hack into the server files and take them? Would it still be our fault?
Give or take yeah, your server your responsibility, if someone is hijacking your shit in the first place you obviously need a step-up in security for your own personal use.
aka don't use the same password for every account
So I'm responsible for any brute-force attacks on my server, which is hosted by another company, not me? Considering I personally have an advanced password, this seems a little over the top. Unless I go putting a 20 character password with symbols and other weird things on my accounts, I don't see this being "preventable". In which then that would rely on me, as a user to take my own precautions. If you wanted more account security, I would go and make it so that people's gmodstore accounts must have more complicated passwords. That way anybody that has got a password from another account has less of a chance of it being the same one for gmodstore. It's obviously not the only cause of leaks, I know. But I'd say personally it's not a bad place to start.
ByMeLikeyDaCheeseat 15th of August 2017 20:49:20
So I'm responsible for any brute-force attacks on my server, which is hosted by another company, not me?Considering I personally have an advanced password, this seems a little over the top.Unless I go putting a 20 character password with symbols and other weird things on my accounts, I don't see this being "preventable".In which then that would rely on me, as a user to take my own precautions.If you wanted more account security, I would go and make it so that people's gmodstore accounts must have more complicated passwords.That way anybody that has got a password from another account has less of a chance of it being the same one for gmodstore.It's obviously not the only cause of leaks, I know. But I'd say personally it's not a bad place to start.
"GmodStore" account passwords? What? We use Steam so if your steam account is hacked, it's also going to be on you.
It's your purchases, your property, and thus your responsibility.
Ultimately this is to let people know that we will permanently ban for these situations. However appeals are a thing, and let's say this happens to you - you can create an appeal, show how you've remedied the situation, and we'll see it's a first time offense. Chances are we'll unban you then.
However if it's a repeat offense, you'll have proven you can't be trusted to have access to the purchases. Makes sense?
ByMeLikeyDaCheeseat 15th of August 2017 20:49:20
So I'm responsible for any brute-force attacks on my server, which is hosted by another company, not me?Considering I personally have an advanced password, this seems a little over the top.Unless I go putting a 20 character password with symbols and other weird things on my accounts, I don't see this being "preventable".In which then that would rely on me, as a user to take my own precautions.If you wanted more account security, I would go and make it so that people's gmodstore accounts must have more complicated passwords.That way anybody that has got a password from another account has less of a chance of it being the same one for gmodstore.It's obviously not the only cause of leaks, I know. But I'd say personally it's not a bad place to start.
Brute force attacks can take years even with major processing power if your password is strong enough, do you know how much possibilities there are if you use uppercase, special, lowercase, etc...? Literally millions to billions to trillions depending on your character sizes.
You always have to take your own precautions as a user cause it's your accounts' not gmodstores or anyone elses.
gmodstore uses steam as their login, steam has 2factor and everything to secure your account, so there isn't any real problem there, but honestly this is on ftp passwords n' shit not gmodstore accounts.
Edited
Not to mention if your host is smart and locks people out for like too many attempts, it'll take even more years to crack.
If you're insecure on your password strength this thing is pretty accurate: https://howsecureismypassword.net/
what if the leaker plants your steamid64 inside a file or whatnot? does that still make it your responsibility
ByDeathwalker9959at 15th of August 2017 21:47:52
what if the leaker plants your steamid64 inside a file or whatnot? does that still make it your responsibility
I think this is a goofy question.
Hello I do not give or sell my addons I keep them personely I use them on another account my is my test server I respect the rules and I do not want to be banned because I put a lot of money for the language I Am thank you for answering me
This is the result of people pretending to know how to develop and getting access to desperate server owners files.
ByGringo famillyat 15th of August 2017 22:37:10
Hello I do not give or sell my addons I keep them personely I use them on another account my is my test server I respect the rules and I do not want to be banned because I put a lot of money for the language I Am thank you for answering me
If it's all being used on your own stuff and they're not being leaked that's fine.
if i am a co owner with my friend (co founder) can we put addons on the same server cause we want to devide the money toghter sry for my english
ByOfficalVaneixat 15th of August 2017 22:51:08
if i am a co owner with my friend (co founder) can we put addons on the same server cause we want to devide the money toghter sry for my english
If he takes your addons and leaves your "community" you'll be banned.