SecureGMod

BynissaNat 13th of September 2017 08:37:40

I had a bad experience with your system and ram consumption in an simple addon. but good luck in your project.

Hi, yes this has been a problem in the past. I fixed this about a month ago to make the RAM usage extremely lower.

Byfreemmaannat 12th of September 2017 19:36:38

I understand. In general, how it works? I assume the local copy contacts your API to get a decryption key that is used to unlock the encrypted code?EditedAlso, I think it was a bit too soon to push this out. ScriptEnforcer, for what of an utter mess it was, did give plenty of information about, statistics, looked presentable. I realise the framework, the backbone of the DRM, might be far superior, but its really hard to to see that from first glance.

I'm aware the website may not look top notch and that is because I am terrible at UI. However generally I take feedback to heart and try to improve and add whatever the testers wanted. If you have a feature you'd like added you can tell me and I will try my best.

Right now we have logs for gamemode, server name, ip, timestamp, steamid of connected servers.

For what I can say about the first part is that once you download the addon, the only code that will be run is the code you got from gmodstore.

ByMeepenat 13th of September 2017 09:43:45

I'm aware the website may not look top notch and that is because I am terrible at UI. However generally I take feedback to heart and try to improve and add whatever the testers wanted. If you have a feature you'd like added you can tell me and I will try my best.Right now we have logs for gamemode, server name, ip, timestamp, steamid of connected servers.For what I can say about the first part is that once you download the addon, the only code that will be run is the code you got from gmodstore.

UI is my nightmare aswel.

Lets say I do not have my own protection. I simply do not know what would happen if I would use your system.

1. If its always-online type of deal or only initial connetion;
2. What it sends exactly, some sort of instructions or just some key;
3. Does it obfuscate or what, if so, how much;
4. If a client of mine has a lua error, any chance of tracking it down, if its heavilly obfuscated;
5. Any limitations of the minifier (I've used it a few times, some parts of my code breaks).

And so on.

I am definitely in favour of DRM and sellers having the right to protect their own work. And there needs to be something that washes that bad SE memory in our minds. But yeah, as a client, I wouldn't use a system unless I know atleast these things about it.

Byfreemmaannat 13th of September 2017 12:30:47

UI is my nightmare aswel.Lets say I do not have my own protection. I simply do not know what would happen if I would use your system.If its always-online type of deal or only initial connetion;What it sends exactly, some sort of instructions or just some key;Does it obfuscate or what, if so, how much;If a client of mine has a lua error, any chance of tracking it down, if its heavilly obfuscated;Any limitations of the minifier (I've used it a few times, some parts of my code breaks).And so on.I am definitely in favour of DRM and sellers having the right to protect their own work. And there needs to be something that washes that bad SE memory in our minds. But yeah, as a client, I wouldn't use a system unless I know atleast these things about it.

The GMod Server requires connection to my DRM server every map start. It does not ever send code to the server to run. Obfuscation is a bit odd, but I am adding a better way to get errors. Right now you will get errors in the form of something my parser can read. Once a client reports that error you can put it into the error parser at https://securegmod.com/drm/#/errors The minifier is not used at all in the DRM service, but if you would like to report any errors about the minifier to me I can attempt to fix it.

I will write more descriptive things for the DRM as I see how this would be an issue for some people and make people weary about using this service. Thanks.

ByMeepenat 13th of September 2017 13:49:45

The GMod Server requires connection to my DRM server every map start. It does not ever send code to the server to run. Obfuscation is a bit odd, but I am adding a better way to get errors. Right now you will get errors in the form of something my parser can read. Once a client reports that error you can put it into the error parser at https://securegmod.com/drm/#/errors The minifier is not used at all in the DRM service, but if you would like to report any errors about the minifier to me I can attempt to fix it.I will write more descriptive things for the DRM as I see how this would be an issue for some people and make people weary about using this service. Thanks.

Love the parser.

But yeah, nice job overall.

ByMeepenat 12th of September 2017 18:20:26

I believe it's priced fairly because of how much work is put into it as well as future support of the service. To compare, ScriptEnforcer was $10/month and had almost no features. If someone wants DRM on their addons then they can feel safe paying.

I mean, there's not much to go on here, feature-wise...

By🅱️illy 💻🌚 #PrayForNordahlat 13th of September 2017 17:55:23

I mean, there's not much to go on here...

yer

btw idk what you're using to display it but if you're not signed in and you slow-load the page you can see this purchase bar. If you're using php you should just do a if(!isset($_SESSION[]) and it'll block regardless

ex: not logged in but i stopped the page load mid-way: https://i.lunaversity.xyz/jpl0.png

ByLunaversity.xyz 🌸at 13th of September 2017 18:07:20

If you're using php

look at the source, JS framework lmao. I think it's nodejs?

It's vue with Vuetify. I regret ever using it as it's horrendous.

By🅱️illy 💻🌚 #PrayForNordahlat 13th of September 2017 17:55:23

I mean, there's not much to go on here, feature-wise...

The frontpage still needs to be changed, sorry about that. If you are looking for features you can look at the posts I have made on this thread in the meantime.

ByMeepenat 14th of September 2017 01:02:39

It's vue with Vuetify. I regret ever using it as it's horrendous.

Hope you decide to use an actual backend language instead of javascript https://drewdevault.com/2016/11/24/Electron-considered-harmful.html - from josh

ByLunaversity.xyz 🌸at 14th of September 2017 03:37:28

Hope you decide to use an actual backend language instead of javascripthttps://drewdevault.com/2016/11/24/Electron-considered-harmful.html - from josh

Electron isn't used at all in the backend, and at this point I am definitely not considering changing the backend as it has worked so well so far.

For the frontend I would definitely change it, and when I get the time I will for sure.

ByLunaversity.xyz 🌸at 14th of September 2017 03:37:28

Hope you decide to use an actual backend language instead of javascripthttps://drewdevault.com/2016/11/24/Electron-considered-harmful.html - from josh

Lol this article is just a big pile of shit (also it's for desktop apps?). Quick summary: 1) Electron apps are "bloated" (yes, they are pretty heavy) 2) The author doesn't like JS. Love they way he assumes all JS developers must suck and come from the frontend world and have never used anything but jQuery.

Electron enables lazy developers to write garbageLet me be clear about this: JavaScript sucksThe reason people choose Electron is because they are too lazy to learn the right tools for the job. This is the worst quality a developer can have

... ok, what are the right tools? Also to quote Bill Gates “I choose a lazy person to do a hard job. Because a lazy person will find an easy way to do it“. People choose electron because it makes hard things like cross platform and UI pretty easy. Guess i'm lazy.

For the love of God, learn something else. Learn how to use GTK or Qt. Maybe Xwt is more up your alley. How about GNOME’s Vala thing? Learn another programming language. Learn Python or C/C++ or C#.

Ok, what if i know C++ and just don't want to spend hours on pointer shit and debugging crashes and #if WIN32 just to get the most basic cross platform? Sick of all the linker nightmares?

JS is actually quite nice for backend dev, most of its shortcomings are addressed when using things like Typescript and it keeps improving as well. PHP also isn't the greatest of all languages with lots of inconsistencies as well.

BTW @Meepen: If you want to try something new for frontend, Angular2 has become really nice! With the CLI you can get the build set up really quickly and if you like Rx you'll love it.

ByMeepenat 14th of September 2017 12:56:23

Electron isn't used at all in the backend, and at this point I am definitely not considering changing the backend as it has worked so well so far.For the frontend I would definitely change it, and when I get the time I will for sure.

I shoulda been more clear in my post mb, I really meant it's pretty true that js frameworks let lazy developers make backend shit in anything so they don't learn actual backend languages.

... ok, what are the right tools? Also to quote Bill Gates “I choose a lazy person to do a hard job. Because a lazy person will find an easy way to do it“. People choose electron because it makes hard things like cross platform and UI pretty easy. Guess i'm lazy.

Right tools are actual tools for backend usage, not using front-end languages to put together a mess of an application. If billy gates hires lazy people to do easy jobs it'll most likely be inefficient which using front-end languages for backend usage becomes very inefficient easier than backend languages would. Inefficiency can show in: Performance, efficiency in the app working, security, etc...

Ok, what if i know C++ and just don't want to spend hours on pointer shit and debugging crashes and #if WIN32 just to get the most basic cross platform? Sick of all the linker nightmares?

There are hundreds of backend languages, move onto one that can do the exact same thing but is easier and not a front-end primary language. (javascript) Or use a framework for that backend language, like javascript but you don't have to install 4000+ node modules :v

JS is actually quite nice for backend dev, most of its shortcomings are addressed when using things like Typescript and it keeps improving as well. PHP also isn't the greatest of all languages with lots of inconsistencies as well.

JS is awful for backend dev, like the article said it makes excuses for lazy developers to make inefficient shit, which is js in general, regardless of the framework cause (like said in the article) it's just javascript under the cover. I have no idea what you're talking about either, php is really contestant especially the newest version PHP7, you shouldn't try to drive people to use a front-end language other than a backend language for actual backend purposes (aka your statement for php) Not to mention frameworks like laravel make php even better, I've made a ton of huge backend reliable sites on just pure php, and it's still more efficient than javascript would ever be, because... it's... a... backend language... made for a backend reliable site.

** edited **

not to mention: if you're looking to do something that requires an app w/ js, you'll need to install a huge module, then maybe 5 others for the module and then add more on top of it if they require it. While in actual backend languages you can make them yourself easily instead of wasting about 100-500+ lines on a script that determines if your string is a number then have 2-3 other scripts require it to run :v

I'd say Vue.js, if used correctly, is a great front-end framework and can be very powerful. I think what Kamshak meant about PHP or to add onto it, PHP is a loosely written language meaning it's easy for people to create bad code. I know frameworks like Laravel exist and reduce a lot of bad PHP code.

I would look into using this if I didn't have to pay $15 to see features/examples.

Anyways, seems like a good release. Will keep a eye on this thread for feedback on purchasers.

Alright, so, I've downloaded the local file for the securegmod that was included in one of the addons I have purchased.

Looks damn unreadable, nice job.

Also, I've noticed entity code is fully out there. Any plans on adding support for entity code?

you should give content creators 2-3 week free trials, it'd be a good way to get an understanding of what ur subscribing to, and it'll lead to a lot more subscriptions ;)

I'll just start by saying that I wouldn't javascript as a backend language, I am more fluent in and prefer other languages :P

But I just thought i'd chime in here.

NodeJS has a lot of issues, sure, but I don't think that its use of javascript, or javascript in general, is all that bad. NodeJS is actually pretty pretty performant with the backend being written in C++ and all, and with its async design, making coding it a nightmare (if you don't know what you're doing), it actually works really well with multi-core machines. Of course this is nothing new to webservers.

What I think you, Lunaversity, and the author of that article hate is the culture that NodeJS spawned, which I agree has some pretty bad parts about it. The whole thing of using 50+ libraries that can be as little as 10 lines each is pretty damn absurd, and javascript developers' constant need to be changing libraries to the "next big thing" is pretty annoying. But it has resulted in a very large and thriving base of libraries and community behind it, which is why I think, despite all its shortfalls, it is an excellent platform to develop on.

As far as "real" backend languages go, I mean, we've seen a resurgence back to native languages with stuff like Go and Rust, and functional programming is topical with things like Clojure and (if you like torturing yourself) Haskell, but generally speaking I think writing a webserver in C++ is kind of reserved for highly performance and memory demanding software, and its a pain in the ass to write what with all the aforementioned stuff (let alone C++ is a mess and C is far better).

As for this DRM software, I understand that lots of information can't be handed out about its inner workings (security through obscurity and all) but even some information on the main page would be nice, this is very intriguing for me as I am putting off writing my own DRM software :|

Bybizzyat 15th of September 2017 03:57:57

you should give content creators 2-3 week free trials, it'd be a good way to get an understanding of what ur subscribing to, and it'll lead to a lot more subscriptions ;)

I think even a 7 day trial would be good enough. They'll learn most of what it has to offer in the first 24 hours really. At least as it starts off the ground, down the road when it's established, features are more defined, etc. then it will be a lot easier to sell to people.

Edited

ByRBat 15th of September 2017 08:33:40

Spot on.

ByRichardat 15th of September 2017 08:36:35

I think even a 7 day trial would be good enough. They'll learn most of what it has to offer in the first 24 hours really. At least as it starts off the ground, down the road when it's established, features are more defined, etc. then it will be a lot easier to sell to people.

Agreed with 7 days. It should be good: 2-3 weeks is too much since you directly see the point of using this service when you have access to it so you don't need as many days for a demo.

The 7 day trial thing is a good idea, but it will have to be manually given to people by myself. I will be giving out a 7 day trial to some people, and if you want it just quote this text. Requirements are that you will have to have at least one approved script on gmodstore or are a prominent member of this community.

Byfreemmaannat 14th of September 2017 20:22:47

Alright, so, I've downloaded the local file for the securegmod that was included in one of the addons I have purchased.Looks damn unreadable, nice job.Also, I've noticed entity code is fully out there. Any plans on adding support for entity code?

Entity code is fully supported but it's up to the content creators to put the DRM on whatever files they want.