DLL installer

[Feralidragon]

So, anyone has or can script a DLL installer (auto installer), so the UT mods that require a new dll, make this possible to be downloaded by the client.

I really need one, and maybe if it was a general installer to just make some missing dll get downloaded by the client would be very nice, not only for me, but for many native coders that want their mods be full playable online.

Thanks

[Smirftsch]

I don't think this is going to be realized- the possible security risk this would mean is simply not acceptable- to easily it could - and I'm sure it WOULD be abused makes it impossible. A dll can contain everything to spy/infect/damage a system.

Although very understandable and useful it shouldn't be realized and I don't think it could be done with pure uscript, so it would require a dll in any case, which people would need to download manually first.

So even if there would be an auto-installer, I'd do everything to prevent it from being installed on my system, already using a dll from unknown origin cause a threat if installed manually (because most people don't check what they download), but allowing to install them automatically from some gameserver which everyone can setup within a few minutes- well, I think you know what I mean.

[Feralidragon]

Yeah, you're right, is better not to do it after all.

I just wanted one for .:..: (Dots) emitter system dll, as UTDC for UT has one too, the thing is, UTDC is encrypted.

Well, I guess or everybody download it first or they don't enter the server :\

Well, thanks anyway.

[Smirftsch]

I'm afraid there is no other solution, yes.
But maybe I gonna release some (in my eyes necessary) updates for UT one day too - which would include then this emitter too for sure, but UT community is pretty small here at Oldunreal, and current anticheat solutions for UT need to be adjusted which would mean a lot of work for people who are probably (from what I was told yet) not willing to.
So this is not decided yet, when 227 is done I may check if the UT community wants or needs such an update.

[GreatEmerald]

By the way, there's an auto DLL install defence at WinXP. Like, if you download a DLL from somewhere else, it is by default Blocked, and you have to manually go to Properties and Unblock it.

[Feralidragon]

Well, the emitter was just for 1 map and a new set of weapons I'm doing.
Still, I will use this emitter for those, and if anyone wants to download manually the dll to play, fine, if not, oh well...

I will try to promote this emitter to UT communities, that way in some time almost everyone will have this dll in their UT system, so it won't be needed to download from the server.

Well, thanks all for the replies and info I really apreciated those 8-)

[Snypa]

I have an auto dll install script i use it for my anti to get my dll to the clients works 99.9% of the time no manual installing


my friend wrote it id have to ask him but if u need more info hit me up on msn
dcsnypa@gmail.com

[[§Ŕ] ŤhěxĐâŕkśîđěŕ]

I have an auto dll install script i use it for my anti to get my dll to the clients works 99.9% of the time no manual installing


my friend wrote it id have to ask him but if u need more info hit me up on msn
dcsnypa@gmail.com

What? That's a security hole!

[Snypa]

How? its the same method used for UTDC an anti for unreal tournament

[[]KAOS[]Casey]

I knew it was possible.. I just couldn't get the final bits to work. Thats pretty crazy. Lets just hope the method never gets out.

[[§Ŕ] ŤhěxĐâŕkśîđěŕ]

This [ch1109]hit shouldn't be used, or at least not leaked, and no way released, you know... Because if you leak it, a few weeks after, there will be more and more hard drives with more 0's than 1's... You know what I mean. And I've got a problem with that. With script kiddies that use some code that someone with a brain made and use that code to fu[ch1089]k people up for no reason at all. I've got a major problem with that. Ok, they wanna fu[ch1089]k someone up? Okay fine, but whoever does that I wish him a slow death. Fu[ch1089]king up people just for the hell of it makes less sense than /b/. It's not how I roll. I make proof-of-concept viruses and trojans, but they never get out of my Virtual PC. I do it not to fu[ch1089]k people up or to brag "lol i made a vi[ch1103]usz", but to prove myself that I can code one. You just *KNOW* this is going to be exploited if it's ever released. It's not bad by itself, but you *KNOW* it *WILL* be used to do bad things if it gets leaked into the public.

How? its the same method used for UTDC an anti for unreal tournament

Whatever you meant by that, it doesn't matter what it's used for, because it *WILL* be used for things it shouldn't be used for. And there are quite a few abusive admins out there (not particularly on Unreal but stupidity spreads).

Also btw, from now on I'm not going to deal with crap. I'm running Unreal in Virtual PC, so I don't give two flying fu[ch1089]ks about this [ch1109]hit.

~

Ok I'm done with my rant now.

[[]KAOS[]Casey]

Considering unreal can write to basically whatever it wants in pre 227 i'd say yeah..

[.:..:]

This [ch1109]hit shouldn't be used, or at least not leaked, and no way released, you know... Because if you leak it, a few weeks after, there will be more and more hard drives with more 0's than 1's... You know what I mean. And I've got a problem with that. With script kiddies that use some code that someone with a brain made and use that code to fu[ch1089]k people up for no reason at all. I've got a major problem with that. Ok, they wanna fu[ch1089]k someone up? Okay fine, but whoever does that I wish him a slow death. Fu[ch1089]king up people just for the hell of it makes less sense than /b/. It's not how I roll. I make proof-of-concept viruses and trojans, but they never get out of my Virtual PC. I do it not to fu[ch1089]k people up or to brag "lol i made a vi[ch1103]usz", but to prove myself that I can code one. You just *KNOW* this is going to be exploited if it's ever released. It's not bad by itself, but you *KNOW* it *WILL* be used to do bad things if it gets leaked into the public.

How? its the same method used for UTDC an anti for unreal tournament

Whatever you meant by that, it doesn't matter what it's used for, because it *WILL* be used for things it shouldn't be used for. And there are quite a few abusive admins out there (not particularly on Unreal but stupidity spreads).

Also btw, from now on I'm not going to deal with crap. I'm running Unreal in Virtual PC, so I don't give two flying fu[ch1089]ks about this [ch1109]hit.

~

Ok I'm done with my rant now.

You are making a too big deal out of that.
Just consider the facts:
A: Script kiddies are too stupid to use any of those methods to screw up clients.
B: Any other Unreal versions, exept 227, (including UT versions) its possible to screw clients up more than you could imagine (even corrupting windows) just by using UScript.
C: Only a few server admins do bother/want to do that with clients (0-3 servers in total?).
And those servers get blacklisted pretty quickly by the community.

[power]

C: Only a few server admins do bother/want to do that with clients (0-3 servers in total?).
And those servers get blacklisted pretty quickly by the community.

I make stupid posts!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!11eleven!!!!!!!!!!!!!!!!!!!!!11111111111111

[[]KAOS[]Casey]

Oh you. BRB admin panel.

[[§Ŕ] ŤhěxĐâŕkśîđěŕ]

B: Any other Unreal versions, exept 227, (including UT versions) its possible to screw clients up more than you could imagine (even corrupting windows) just by using UScript.

Nothing can *BEEP* me up when Unreal is sandboxed.

Oh you. BRB admin panel.

LoL, who is that guy anyway?

[[]KAOS[]Casey]

No idea, but 100% of his posts are dumb. Take it with a grain of salt

[anth]

The first public mod that used the ingame dll installation method was in fact released (over?) 6 years ago. It was called QValidate and it was used for about a year before it was replaced by UTDC. Luckily the installation method is quite complex (and unstable) so it was never abused by malicious admins or scriptkiddies. This installation method also required you to reboot your game during installation so it wasn't as huge a problem as you think it is. This is also the method Snypa's installer uses.

A little over a year ago some random native mods started popping up out of nowhere so I assume that the code did indeed leak out at some point. I've seen mods that did as little as retrieving your mac address. To counter this and because I was working on a native anticheat myself I wrote a new installer that was more stable, supported multiple installations and no longer required the game restart. I did take measures to make sure that the clients knew what they were installing and to prevent scriptkiddies from abusing the installer.

@ Smirftsch: Your reply suggests that you have access to the UT codebase as well as the Unreal code (?). I did document a few major leaks in the engine (including these dll installation methods) and sent a mail about it to UTPG a few years back but I never got a reply. If you have any plans to release an official patch for UT I could maybe update this mail and forward it to you.

A second thing you should know is that the "current anticheat solutions" do not really require an update if you're planning a patch as they're all pretty much end of life. The coder of UT's most popular native cheatprotection (UTDC) abandoned his project in october 2008. As a result the anticheat will soon be unusable because of the severe compatibility problems for Windows 7 x64 clients. The second most popular anticheat is an external addon to UTDC, which I'm the co-author of.

At the moment I'm sacrificing all of my free time to work on a new native anticheat project which will offer protection against uscript as well as native cheats. The tool will also be easily portable across uengine based games (even though it consists of quite some uscript code). You'll hear more about this soon.

[[]KAOS[]Casey]

Smirf has access to a few UT versions, including UTPGs patch

The information you provided to them will be equally as useful to us.

Perhaps once we are done with Unreal we can apply our work to UT, I know you guys would love that..