Script Protection Questions
ByPhoenixf129 @GSat 18th of October 2016 14:52:56
Personally, people that download leaks were most likely not going to pay for your script. I implemented ashaming schemeon SE recently when people are caught using leaked scripts, which has forced some of those users to purchase them. I have noticed an increase in my sales due to this.Leaks will only really start hurting you when you no longer release updates for your script, then they have zero reason to purchase it.
You can pay to be unbanned? What bullshit is that? Just goes to show you're only out for money. Fuck off with that noise.
Bynullsat 20th of October 2016 05:30:18
You can pay to be unbanned? What bullshit is that? Just goes to show you're only out for money. Fuck off with that noise.
They are only banned from using scripts that use ScriptEnforcer. A percentage of the money from the unban goes to developer of the script they leaked/used.
By|UDG| The Commanderat 20th of October 2016 06:41:17
They are only banned from using scripts that use ScriptEnforcer.A percentage of the money from the unban goes to developer of the script they leaked/used.
I know you love jerking off Phoenix whenever SE is brought up, but he should not be charging for unbans, especially when other people's IP come in to play, and not to mention the fact he has 0 fucking clue what he is doing with SE nor did he have much to do with original development on it in the first place due to lack of coding knowledge - if what I've heard is even remotely true. But let's not get in to that, eh?
Allowing malicious users to use your service for a "one time fee" is fucking retarded.
They are not banned for using leaks, the server is banned for using leaks.
Are you promoting the use of leaks ? They are not forced to pay, they can still change the server port.
ByLapinat 20th of October 2016 07:34:49
They are not banned for using leaks,the serveris banned for using leaks.Are you promoting the use of leaks ? They are not forced to pay, they can still change the server port.
what happens if x user buys a server with the ip of 1.1.1.1.1 but then gets rid of it and y gets a server with the same ip??
When a server is linked by an another user, the server is unbanned, if relinked by the same, rebanned.
with the ip of 1.1.1.1.1
lucky us, ip have only 4 numbers
Bynullsat 20th of October 2016 06:53:54
and not to mention the fact he has 0 fucking clue what he is doing with SE nor did he have much to do with original development on it in the first place due to lack of coding knowledge - if what I've heard is even remotely true. But let's not get in to that, shall we?
Why is it every time you guys have to say I can't code? Attack my character, or my service? It's none of your business what I do. Lmao. Keep stirring shit in the background.
Granted, at the beginning of the project (nearly 2 fucking years ago!) I may have had limited knowledge, however times change. 
For me it is completely unnecessary and stupid. The only people that his penalized, it's the customer because it simplyremove the easily access to the source code for editing. And it's just a flaw, people don't know what he is being loaded on their server and gateway enabling access the code (ScriptEnforcer, ect, ect) may not respond for X reason (DDOS, ect, ect).
If everyone could pay scripts, everyone would. The problem is that at the beginning, put the money in a server is difficult because it is not profitable. I used scripts leak in my server when i started it. And today I spent $ 650 on purchase ScriptFodder. All you do is slow down the development of community and penalize this could be your future customers.
Also better to have people who uses leaks rather than people who open disputes on Paypal.
I began to stop buying scripts that use ScriptEnforcer or other DRM (It's become a buying filter for me). And for the scripts I have already, I had fun to fetch the source code.
The best protection against the "leaking" is simply to update your scripts more often. Anyway some think it is better to spend more time to hide a piece of code rather than improve this one.
Btw, it didn't protect anything because i successfully got all the source code of my script ...
Sorrry for my english, i know ...
By[MyDarkRP] DiaZzZyat 23rd of October 2016 18:59:37
For me it is completely unnecessary and stupid. The only people that his penalized, it's the customer because it simplyremove the easily access to the source code for editing. And it's just a flaw, people don't know what he is being loaded on their server and gateway enabling access the code (ScriptEnforcer, ect, ect) may not respond for X reason (DDOS, ect, ect).If everyone could pay scripts, everyone would. The problem is that at the beginning, put the money in a server is difficult because it is not profitable. I used scripts leak in my server when i started it. And today I spent $ 650 on purchase ScriptFodder. All you do is slow down the development of community and penalize this could be your future customers.Also better to have people who uses leaks rather than people who open disputes on Paypal.I began to stop buying scripts that use ScriptEnforcer or other DRM (It's become a buying filter for me).And for the scripts I have already, I had fun to fetch the source code.The best protection against the "leaking" is simply to update your scripts more often. Anyway some think it is better to spend more time to hide a piece of code rather than improve this one.Btw, it didn't protect anything because i successfully got all the source code of my script ...Sorrry for my english, i know ...
fWrite()
Stat tracking is still the most demanded, and the best, leaks now-a-days aren't really a problem cause most of the leakers are banned, and once they get banned they make new accounts and buy your shit all over again.
I began to stop buying scripts that use ScriptEnforcer or other DRM (It's become a buying filter for me).And for the scripts I have already, I had fun to fetch the source code.
Tell the developer about it, most are kind enough to provide source code (at least from what I've experienced) if you just ask. Most developers who make good scripts either make their own drm which is small enough just to manage it which isn't causing no harm. If I where you just filter out SE, a lot of good scripts use their own DRM and you'll barely notice it.
By[MyDarkRP] DiaZzZyat 23rd of October 2016 18:59:37
For me it is completely unnecessary and stupid. The only people that his penalized, it's the customer because it simplyremove the easily access to the source code for editing. And it's just a flaw, people don't know what he is being loaded on their server and gateway enabling access the code (ScriptEnforcer, ect, ect) may not respond for X reason (DDOS, ect, ect).
The customer benefits and loses at the same time. The customer can enjoy the benefit of auto-updating (most of the time) and easier access to a refund.
I've already addressed the issue with the "gateway" being down in this thread. The developer just needs to make a backup system.
But yes, you are right that it can cause lots of issues if implemented incorrectly or has no transparency. That's up to the developer.
If everyone could pay scripts, everyone would. The problem is that at the beginning, put the money in a server is difficult because it is not profitable. I used scripts leak in my server when i started it. And today I spent $ 650 on purchase ScriptFodder. All you do is slow down the development of community and penalize this could be your future customers.
There's nothing you can do about the monetization of Garry's Mod addons. This is not a leak or DRM specific problem. Nobody really has an issue with a small, starting up communities using leaks, btw. It's just when those communities start making some real profit where it becomes an issue.
Also better to have people who uses leaks rather than people who open disputes on Paypal.
Actually, it isn't, leaks can be stopped with DMCA requests. Plus, chargebacks exist, which imposes a $25 charge (most of the time). Disputes are easy to deal with.
I began to stop buying scripts that use ScriptEnforcer or other DRM (It's become a buying filter for me).And for the scripts I have already, I had fun to fetch the source code.
You should ask the developer about their scripts and their protection before making assumptions. I have done everything I can with my DRM to be as friendly to the customer as possible.
The best protection against the "leaking" is simply to update your scripts more often. Anyway, some think it is better to spend more time to hide a piece of code rather than improve this one.
This is simply not true. Sure, updates can drive leak users away from downloading the leaks - but they're still out there. The best way to stop leaks (without DRM) is to DMCA them and check LeakForums regularly. I actually quite enjoy being a narcissistic, cocky cunt on LeakForums.
For me it is completely unnecessary and stupid. The only people that his penalized, it's the customer because it simplyremove the easily access to the source code for editing. And it's just a flaw, people don't know what he is being loaded on their server and gateway enabling access the code (ScriptEnforcer, ect, ect) may not respond for X reason (DDOS, ect, ect).
If you can't code, you're not supposed to edit the code, only touch config files. If you can code, you can get rid of the DRM.
Makes support easier when the code is the original and not edited
Also drm allows to push updated without needing to re-dl the addon
DRM is a good concept, but honestly it just doesn't work in Garry's Mod due to the nature of Lua.
Sorry for the bump, I didn't want to create an entire new topic for something related.
I was looking at the API and I was thinking of a simple no-download DRM (possibly obfuscate the code of the http.Post request, and the allowing addon to run if owned, or response failed). So the idea is to have a simple POST request to scriptfodder using a script read-only API key (which I assume is safe to give to the purchaser) and see if that person owns it.
- I noticed the API returns ALL purchasers. This could be a bit slow? Is there a way to go "Does [steam64] own this?"
- Is it better to obfuscate the DRM-check script, or leave it?
- Is there a way to test this BEFORE uploading the script?
Thanks.
ByGeoffry Skionfinschiiat 6th of November 2016 02:58:46
So the idea is to have a simple POST request to scriptfodder using a script read-only API key (which I assume is safe to give to the purchaser) and see if that person owns it.
Don't give any API keys to the customer. Instead, create an API yourself for your scripts that uses the Scriptfodder API, so the API returns only "purchased" and "not purchased" instead of all the people who bought your addon. You would also need a way to cache the results because scriptfodder can be offline sometimes.
An it's still not a real DRM. You can disable this part of "DRM" very fast and leak it. Just don't use DRM and don't obfuscate your code, it's just pain for the customer. You will only have problems with DRM. Take ScriptEnforcer for example. It's expensive, no protection from leaks, requires the customers to register all their servers and still sometimes has problems with availability.
It's expensive, no protection from leaks
No ?????
You're supposed to code your own protection.
When you don't know what you're talking about, just don't talk.
By[E-G] ibot3at 6th of November 2016 12:56:02
Don't give any API keys to the customer. Instead, create an API yourself for your scripts that uses the Scriptfodder API, so the API returns only "purchased" and "not purchased" instead of all the people who bought your addon
The plan is when the server is down it returns true. Also, looking at php as a way to do it.
An it's still not a real DRM. You can disable this part of "DRM" very fast and leak it. Just don't use DRM and don't obfuscate your code, it's just pain for the customer.
The obfuscated part is the DRM, and it should never have false negatives. "should" ;)
Thanks for the reply