[DiscordArchive] <@271350028985958408> don't think you went into that territory ?
[DiscordArchive] <@271350028985958408> don't think you went into that territory ?
Original source
One for GlueXML and one for FrameXML
rektbyfaith
03-11-2024, 07:58 PM #21Archived author: Nix • Posted: 2024-03-11T19:58:44.393000+00:00
Original source
One for GlueXML and one for FrameXML
Original source
technically couldn't we enforce specific MPQ files if we keep that check and make sure our custom MPQs are properly signed ? idk if that's possible
rektbyfaith
03-11-2024, 07:59 PM #22Archived author: Titi • Posted: 2024-03-11T19:59:15.465000+00:00
Original source
technically couldn't we enforce specific MPQ files if we keep that check and make sure our custom MPQs are properly signed ? idk if that's possible
Original source
Warden has a MPQ check
rektbyfaith
03-11-2024, 07:59 PM #23Archived author: Nix • Posted: 2024-03-11T19:59:42.002000+00:00
Original source
Warden has a MPQ check
Original source
signature is checked by the client, not server right?
rektbyfaith
03-11-2024, 07:59 PM #24Archived author: Titi • Posted: 2024-03-11T19:59:44.811000+00:00
Original source
signature is checked by the client, not server right?
Original source
Which I assume lets you check files and maybe their hashes on the client or at least have it returned
rektbyfaith
03-11-2024, 08:00 PM #25Archived author: Nix • Posted: 2024-03-11T20:00:00.795000+00:00
Original source
Which I assume lets you check files and maybe their hashes on the client or at least have it returned
Original source
The main thing is, you can imagine if someone have warden hooked and bypassed, they can either unhook/revert the thing you're scanning while you scan, or they could feed the original bytes into the function that produce that result in the first place, which will result in the correct data being sent back.
rektbyfaith
03-11-2024, 08:00 PM #26Archived author: Nix • Posted: 2024-03-11T20:00:55.600000+00:00
Original source
The main thing is, you can imagine if someone have warden hooked and bypassed, they can either unhook/revert the thing you're scanning while you scan, or they could feed the original bytes into the function that produce that result in the first place, which will result in the correct data being sent back.
Original source
It would of course make it hard for anyone who is simply doing MPQ edits, but anyone who knows what they're doing, warden is pretty much useless
rektbyfaith
03-11-2024, 08:01 PM #27Archived author: Nix • Posted: 2024-03-11T20:01:06.490000+00:00
Original source
It would of course make it hard for anyone who is simply doing MPQ edits, but anyone who knows what they're doing, warden is pretty much useless
Original source
well yeah it's not a 100% block, but if it blocks 99.9% including all the people who just know how to do mpq edits it's good enough
rektbyfaith
03-11-2024, 08:01 PM #28Archived author: Titi • Posted: 2024-03-11T20:01:42.513000+00:00
Original source
well yeah it's not a 100% block, but if it blocks 99.9% including all the people who just know how to do mpq edits it's good enough
Original source
Looks like the MPQ Check returns sha1 of the file
rektbyfaith
03-11-2024, 08:02 PM #29Archived author: Nix • Posted: 2024-03-11T20:02:22.418000+00:00
Original source
Looks like the MPQ Check returns sha1 of the file
Original source
So you could run something that generates SHA1 for all MPQ files and store it in your DB
rektbyfaith
03-11-2024, 08:02 PM #30Archived author: Nix • Posted: 2024-03-11T20:02:40.551000+00:00
Original source
So you could run something that generates SHA1 for all MPQ files and store it in your DB
1 Guest(s)
1 Guest(s)