SCAR Idea!
The Element
2007-08-14 20:21:00
I'm going to probably start working on a new "version" of "SCAR" soon. Bascly it will probably be for public release but the most important part is that it will contain a lot of new fatures! Here is some info:
Name : WUD.
Reason : Learning experience.
New features : A lot but primarily a PHP server that scans your scripts for possible "hidden features" and support for a wide range (aproximatly 20) new encryption methods available to everyone with the correct key. Only those with more then 200 posts will receive a key and no one can decrypt a script.
What I need : Basicly…
SCAR must have some sort of run time enviroment or something that recognises the typed commands as key words. I need to know where I can get this data. Also, is this worth it?
3Garrett3
2007-08-14 20:25:08
So it encrypts stuff?
Explain over MSN pl0x?
Smartzkid
2007-08-14 20:28:03
I don't think it's possible unless Freddy added some new functionality to SCAR. (execute string type stuff)
I've thought about something like this quite often. Have a string stored on a server. The script sends u/p to this server. If they're correct, the script receives the string and executes it on the fly, without writing any of it to the user's harddrive.
I doubt it will be added because it could pose some major security problems.
Good idea - or maybe you had to pass some scar tutorial to get the key or something.
The Element
2007-08-15 11:12:48
@smartz
Indeed. But, with risks come greatness. I am not talking about adding it to SCAR but createing my own little version of SCAR with those added features.
Hobbit
2007-08-15 11:17:12
He means security risks to the people using scripts.
example: M.O.B
Got banned for stealing peoples passwords in his script that he tried to obfusicate but Star caught him.
The Element
2007-08-15 11:33:39
I thought abut that too :p. I will be adding a feature where when you try to encryopt it will send your script as a string to a PHP server and then will search through for any place that an out going internet connection would be called (excluding things like SRL stats) and if found the script will be stored in a database to be reviewed before an encryption takes place. Otherwise, the scripter will enter their unique code and the script will be encrypted in the user set encryption mode.
Be original, don't use the same stuff as Scar.
LISP as the scripting language, maybe?
The Element
2007-08-15 11:42:12
LISP is horrible. I used to use it but it only has a few advantages. And too many disadvntages.
shaunthasheep
2007-08-15 11:45:35
Instead of making a new scar, you could remake every function in SCAR and then make a compiler.
Ok, W/e.
SCAR uses this compiler i think: EDIT FAWK: Privatised.
The Element
2007-08-15 13:17:11
So, this is my first time building one of these. What do I do with that compiler you posted?
1. Download the interpreter
2. Install it or w/e
3. Read the guide(s) on the page I posted
4. Use it
The Element
2007-08-15 20:10:56
Thank you. I appreciate it.
The Prince of Randomness?
2007-08-15 22:59:02
-.-
There are a few SCAR encrypters.
Infantry001
2007-08-16 00:22:51
Nope, only obfuscators. If you want encryption, that's Freddy's job.
~alex~
2007-08-16 08:05:40
This would be pretty funky.
Killerdou
2007-08-16 08:09:10
no not true, mastaraymond(on holiday now) found a way in a plugin to encrypt and run the script:)
Smartzkid
2007-08-16 08:21:25
Not possible…unless he re-made all of SCAR's procedures inside that plugin…?
You can't run any SCAR procedures from a plugin.
Killerdou
2007-08-16 08:23:09
thats what you would think… dont ask me how lol;)
The Element
2007-08-16 12:47:28
The problem is that scar checks the code for errors before running. So it will find the encryption and completely screw up unless the decryption is activated first. Which is quite impossible without an injection into scar.
Markus
2007-08-16 16:53:13
From: Smartzkid
Not possible…unless he re-made all of SCAR's procedures inside that plugin…?
You can't run any SCAR procedures from a plugin.
Just wait and see, we spent a lot of time on it.
Smartzkid
2007-08-16 17:00:57
Hmm….
This plugin that makes it possible…will it be script-specific, or would any script be able to harness it's power?
Also, is the encrypted string loaded from a webpage, or is it built into the plugin?
EDIT: Have you tested it's strength yet? How long do you think it'd take someone to crack?
Markus
2007-08-16 17:04:10
1. Only the ones we want.
2. What you think?
Smartzkid
2007-08-16 17:19:05
Sounds really nice, good job
You got time for msn?
Markus
2007-08-16 17:32:28
I ain't got msn at my PSP, it takes much time typing one msg ;)
About it's strength, in the past 48 hours it's reduced by 50%, but it's still at least as hard to crack as the Stressminer, I think even harder.
It took me two weeks just to perfect the IDEA, and I'm only at 35% of the actual code necessary to make it work.
R0b0t1
2007-08-16 20:38:51
Lol. Bragging :p