SRL Archive - General

SCAR Idea!


The Element

2007-08-14 20:21:00

I'm going to probably start working on a new "version" of "SCAR" soon. Bascly it will probably be for public release but the most important part is that it will contain a lot of new fatures! Here is some info:

Name : WUD.

Reason : Learning experience.

New features : A lot but primarily a PHP server that scans your scripts for possible "hidden features" and support for a wide range (aproximatly 20) new encryption methods available to everyone with the correct key. Only those with more then 200 posts will receive a key and no one can decrypt a script.

What I need : Basicly…

SCAR must have some sort of run time enviroment or something that recognises the typed commands as key words. I need to know where I can get this data. Also, is this worth it?

3Garrett3

2007-08-14 20:25:08

So it encrypts stuff?

Explain over MSN pl0x?

Smartzkid

2007-08-14 20:28:03

I don't think it's possible unless Freddy added some new functionality to SCAR. (execute string type stuff)

I've thought about something like this quite often. Have a string stored on a server. The script sends u/p to this server. If they're correct, the script receives the string and executes it on the fly, without writing any of it to the user's harddrive.

I doubt it will be added because it could pose some major security problems.

Kik

2007-08-14 20:33:19

Good idea - or maybe you had to pass some scar tutorial to get the key or something.

The Element

2007-08-15 11:12:48

@smartz
Indeed. But, with risks come greatness. I am not talking about adding it to SCAR but createing my own little version of SCAR with those added features.

Hobbit

2007-08-15 11:17:12

He means security risks to the people using scripts.

example: M.O.B

Got banned for stealing peoples passwords in his script that he tried to obfusicate but Star caught him.

The Element

2007-08-15 11:33:39

I thought abut that too :p. I will be adding a feature where when you try to encryopt it will send your script as a string to a PHP server and then will search through for any place that an out going internet connection would be called (excluding things like SRL stats) and if found the script will be stored in a database to be reviewed before an encryption takes place. Otherwise, the scripter will enter their unique code and the script will be encrypted in the user set encryption mode.

Spky

2007-08-15 11:35:58

Be original, don't use the same stuff as Scar.

LISP as the scripting language, maybe?

The Element

2007-08-15 11:42:12

LISP is horrible. I used to use it but it only has a few advantages. And too many disadvntages.

shaunthasheep

2007-08-15 11:45:35

Instead of making a new scar, you could remake every function in SCAR and then make a compiler.

Spky

2007-08-15 11:50:46

Ok, W/e.

SCAR uses this compiler i think: EDIT FAWK: Privatised.

The Element

2007-08-15 13:17:11

So, this is my first time building one of these. What do I do with that compiler you posted?

Spky

2007-08-15 13:45:33

1. Download the interpreter
2. Install it or w/e
3. Read the guide(s) on the page I posted
4. Use it

The Element

2007-08-15 20:10:56

Thank you. I appreciate it.

The Prince of Randomness?

2007-08-15 22:59:02

-.-

There are a few SCAR encrypters.

Infantry001

2007-08-16 00:22:51

Nope, only obfuscators. If you want encryption, that's Freddy's job.

~alex~

2007-08-16 08:05:40

This would be pretty funky.

Killerdou

2007-08-16 08:09:10

no not true, mastaraymond(on holiday now) found a way in a plugin to encrypt and run the script:)

Smartzkid

2007-08-16 08:21:25

Not possible…unless he re-made all of SCAR's procedures inside that plugin…?

You can't run any SCAR procedures from a plugin.

Killerdou

2007-08-16 08:23:09

thats what you would think… dont ask me how lol;)

The Element

2007-08-16 12:47:28

The problem is that scar checks the code for errors before running. So it will find the encryption and completely screw up unless the decryption is activated first. Which is quite impossible without an injection into scar.

Markus

2007-08-16 16:53:13

From: Smartzkid
Not possible…unless he re-made all of SCAR's procedures inside that plugin…?

You can't run any SCAR procedures from a plugin.


Just wait and see, we spent a lot of time on it.

Smartzkid

2007-08-16 17:00:57

Hmm….

This plugin that makes it possible…will it be script-specific, or would any script be able to harness it's power?

Also, is the encrypted string loaded from a webpage, or is it built into the plugin?

EDIT: Have you tested it's strength yet? How long do you think it'd take someone to crack?

Markus

2007-08-16 17:04:10

1. Only the ones we want.
2. What you think?

Smartzkid

2007-08-16 17:19:05

Sounds really nice, good job

You got time for msn?

Markus

2007-08-16 17:32:28

I ain't got msn at my PSP, it takes much time typing one msg ;)
About it's strength, in the past 48 hours it's reduced by 50%, but it's still at least as hard to crack as the Stressminer, I think even harder.
It took me two weeks just to perfect the IDEA, and I'm only at 35% of the actual code necessary to make it work.

R0b0t1

2007-08-16 20:38:51

Lol. Bragging :p