Post What's on Your Mind

[Fayte]

I woke up at 5am and drove to my parents house and there’s no breakfast. it’s christmas, but I wouldn’t call it merry.

 

[aphadeon]

so. I woke up, ran out to the living room, and what horror. the tree is gone, the presents are gone. all traces of anything christmas are gone. i think i got grinched. i mean, either that or i forgot to decorate at all. i wonder which.

i need coffee. anyone else want some?

 

[Ellie]

Oh what am I doing. I shouldn't try and get back into game making.

Trying to map with Time Fantasy is just making me hate it and want to go back to Celianna's tiles again, which would completely change the look and feel of the game so I might as well just continue with Afar.

I don't even know any more.

I'm good at coming up with the looks of a game, laying down the systems and taking a first screenshot. Anything past that seems to be beyond me.

 

[Xilef]

I tried out Time Fantasy. I really hated it - especially the characters - I find it incredibly difficult to work with (I'm not skillful enough) and so many projects are now using it in an attempt to move away from RTP.

At the moment I'm still trying to figure out systems for my project. I know that next up I'll be working on a new message box system (will probably make it a publicly available Plugin) so I can get my project's special way of handling dialogue done. I need to get on with the battle system at some point, but I'm thinking have a playable test map first with completed assets and test dialogue, a sort of cross-slice of what the end product will look like. Worry about the battle system after that.

EDIT: Still don't have a solid story down or character designs. I might do it PS1-era Square style and come up with the characters first then "cast" them as roles in the story.

 

[Ellie]

Hmm

 

[ZenVirZan]

i feel like doing a netplay thing now, the server is gunna be a nightmare to program tho

EDIT: on a scale of 0 to 10, how bad is sending a key on connection open? it means that obviously if the connection opening is seen by an attacker, they can decrypt the contents but i cant really think of another way that is reasonable for a hobbyist project using udp and tcp

beats plaintext messages anyway

 

[Fayte]

I love YouTube.. YouTube is my life

 

[Xilef]

EDIT: on a scale of 0 to 10, how bad is sending a key on connection open? it means that obviously if the connection opening is seen by an attacker, they can decrypt the contents but i cant really think of another way that is reasonable for a hobbyist project using udp and tcp

beats plaintext messages anyway

There's definitely worse things to send over the network, but honestly why are you sending keys at all? Send action commands, takes like 10 seconds to set it up and it's what everyone else on planet Earth does for their online systems.

 

[ZenVirZan]

There's definitely worse things to send over the network, but honestly why are you sending keys at all? Send action commands, takes like 10 seconds to set it up and it's what everyone else on planet Earth does for their online systems.

i am, i meant for initial login & auth though i forgot to specify

 

[Xilef]

i am, i meant for initial login & auth though i forgot to specify

For a hobby program that you're not going to release to the public, do what you want, but as soon as you go public there's a wealth of security issues you need to consider when rolling your own auth. You'll be okay to send plain-text username and password over a secure connection, but you need to guarantee it's a secure connection.

If you're sending key-presses then you might as well send in plain-text. If you're attempting to send key presses as a way to do security-through-obscurity then give up because that's not real security. Might as well save yourself time and effort and go plain-text until you decide to release anything to the public.

 

[ZenVirZan]

i am, i meant for initial login & auth though i forgot to specify

For a hobby program that you're not going to release to the public, do what you want, but as soon as you go public there's a wealth of security issues you need to consider when rolling your own auth. You'll be okay to send plain-text username and password over a secure connection, but you need to guarantee it's a secure connection.

If you're sending key-presses then you might as well send in plain-text. If you're attempting to send key presses as a way to do security-through-obscurity then give up because that's not real security. Might as well save yourself time and effort and go plain-text until you decide to release anything to the public.

so this 'secure connection' is what i'm trying to work out

do i need to use existing libraries or something for it?

 

[Xilef]

so this 'secure connection' is what i'm trying to work out

do i need to use existing libraries or something for it?

It's a rather complex subject. For a hobby system; I'm not sure even I would bother. Easiest way would be "RSA encryption", there's likely a library for that (here's a tiny one written in C). There's a few out there.

I might write my own for fun, actually. Always seemed like a neat little computer science task. https://en.wikipedia.org/wiki/RSA_(cryptosystem)#Code

The way it works is; the public keys are exchanged over the network in plain-text, anyone can look at these, that's perfectly fine.
If I want to send a secure message from A to B then A needs to use B's public key to encrypt the message. The encrypted message can now be sent to B (anyone can look at this, it's encrypted so it should be nonsense). B now uses its private key (that it hasn't sent to ANYONE, it must never leave B!) to decrypt the message it received from A. Secure transmission completed.

RSA doesn't protect from man-in-the-middle attacks, where an attacker sits between A and B, pretends to be A, pretends to be B and decrypts, reads, re-encrypts the messages as they come. SSL certificates is an attempt to protect from this (and are even more of a headache to set-up, for a game it might not be worth it).

The best security is always let one of the big boys handle the authentication. Facebook auth, Google sign-in, etc. These are a pain to implement also, but they're the best way to handle authentication (let someone else with lots of money and lots more at stake handle it).

 

[Mega Flare]

Just spoke to the most racist person ever. He said "you better not send a nigger or ill beat his ass"

 

[Fayte]

Just spoke to the most racist person ever. He said "you better not send a nigger or ill beat his ass"

lol just point me in the right direction. we’ll take care of the rest.

 

[Mega Flare]

I got this blood blister on my upper butt crack. It hurts to sit move and do anythft

 

[Fayte]

all racist people should die. just drop dead. the world would be much better off.

also, all species commit some kind of homosexual activity, but only one species has killed over it. think about that.

 

[Ellie]

Yeah, those bastard dolphicidal dolphins.

 

[Ellie]

I got this blood blister on my upper butt crack. It hurts to sit move and do anythft

don't sit move or do anythft

 

[Ellie]

Hairy nude bears everybody.

 

[Ellie]

Whatever happened to Daxis?