SRL Archive - Discussions and Debates

Script Verification


Dynamite

2012-01-18 11:37:48

Hi guys, so finally I believe that DeiJaiVui came up with a decent idea.
The idea of a Verification badge.
With more users coming to the forum and complaining that their accounts have been hacked, the script isn't safe etc.
I think it is a good idea to have a "verification team" that would simply check through the script to make sure there is no "dangerous" code.

I'd be happy to volunteer.
-Boom

Markus

2012-01-18 11:40:32

Practical use? The amount of unsafe scripts here is atm 0.

RISK

2012-01-18 11:46:57

It's more a peace of mind for less savvy users, Markus.

Markus

2012-01-18 11:48:40

And they will believe the SRL verification team?
In Holland we would call this a wc-eend ad, 'we from company X say company X is the best'.

RISK

2012-01-18 11:51:30

Perhaps the team could go thru each part of the script and say what each thing does and post it in a 'Report' type thing? Just to reinforce it then and make sure they are believed.

Dynamite

2012-01-18 11:54:54

I believe that new members think that SRL Members+ are almighty :P
So I think that they would trust our approval.

-Boom

Kyle Undefined

2012-01-18 11:55:40

Sounds a bit useless to be honest.

hamster31

2012-01-18 12:00:57

I do agree with that, because if they get hacked because of some dumb youtube video the first thing they blame is the script. It would be a peace of mind and also it will help the new users feel secure :)

Flight

2012-01-18 20:35:43

And how many accounts have ever been hacked from scripts? Sorry, but the idea seems useless to me personally, all scripts here are safe.

P1nky

2012-01-18 23:27:59

If this 'bill' does go through, who ever wants their script verified can send a PM/Post on a thread/report thread to get the extra trophy/icon or whatever to notify the users that the script is verified :)?

noidea

2012-01-18 23:55:58

From: Flight
And how many accounts have ever been hacked from scripts? Sorry, but the idea seems useless to me personally, all scripts here are safe.


+1, not all, but we don't have this issue often enough. Having this system will create more issues.

Harry

2012-01-18 23:58:07

It just gives a false idea of security. Terrible idea, no offense.

Also wtf, like all your threads I visit give me messages like this (I NEVER starred the thread at all, yet I apparently rated it a 1?):

noidea

2012-01-19 00:00:07

From: Harry
It just gives a false idea of security. Terrible idea, no offense.

Also wtf, like all your threads I visit give me messages like this (I NEVER starred the thread at all, yet I apparently rated it a 1?):


I'm getting this too. Other funky things are happening as well.

Kyle Undefined

2012-01-19 00:16:37

Same for me, um wut?

Iron Man

2012-01-19 01:48:44

And what happens when you want to update your script, you'd have to get it re-approved every time before you get the badge again?

If anyone accuses another persons script just read through the script and tell the poster if it does anything malicious or not, this achieves the same but without all the hassle to the scripter.

Home

2012-01-19 01:58:44

Can I has peice uf this masta plan! I has scrptorz talents tu bi super scriptorz mi appruve.

Really I don't think that is is really needed :S


~Home

Jagex_Fagex

2012-01-19 06:35:57

I haven't used Simba before, but if it was anything like SCAR, which it seems to be fairly similar. It would have built in security/firewall to stop communications with other servers, so there isn't really a way for it to happen anyway?

Dgby714

2012-01-19 06:44:07

From: Jagex_Fagex
I haven't used Simba before, but if it was anything like SCAR, which it seems to be fairly similar. It would have built in security/firewall to stop communications with other servers, so there isn't really a way for it to happen anyway?


Currently the Security extension is very lacking.
Socket connections are not monitored at all.

Tho we could argue there is no point >..> anyone with half a brain can just read the script before running it.

Jagex_Fagex

2012-01-19 06:50:35

From: Dgby714
Currently the Security extension is very lacking.
Socket connections are not monitored at all.

Tho we could argue there is no point >..> anyone with half a brain can just read the script before running it.


Ah fair enough then. While everyone could read the script, not everyone understands it and not everyone would be bothered to do it. They would just rather run it and profit.

Anyway, i think this has basically been answered and people don't really need to entertain the idea too much. It's all too much work, for little results.

cause

2012-01-21 14:44:20

Dynamite bro, what are you going on about? There aren't any unsafe scripts on this website, rendering this "preemptive" strike useless and futile.

Main

2012-01-21 15:53:21

Hows this, if some one posts a thread, any srl member just take a quick glance at it, and make a post saying "looks sexy/good to me!" and any srl member afterwards who see theres already confirmation, can just leave it. If not they could check it out themselves:P

putonajonny

2012-01-21 17:43:12

Remember that users can upload new versions of scripts at any time, would all versions have to be checked?

[XoL]

2012-01-21 17:56:41

We don't need this because 99% of the time a srl member will download the script anyway. I download all the scripts on all threads I view, even if I won't ever use the script (Just to see how they made it, etc.)

We haven't had any issues yet, I doubt it will start either. The verfication will be a lot of extra work, + would have to be re-done every update.

'Toxin

2012-01-21 19:16:11

I like this idea. However it's more of a visual for the users just so that they don't spam/complain that their accounts were hacked for whatever reason. Realistically, we don't need this, but smacking an "SRL Verified" sticker on a script will make some people feel safe in terms of security.

Jagex_Fagex

2012-01-21 22:47:17

By using external programs to aid you in a game, there is always the risk of your account being removed from your possession, whether this is by being hacked or banned doesn't matter. The fact is, you shouldn't be running anything you don't trust anyway, as such, you should be reading the script before running. If you don't understand the code, go and learn.

If you have your account removed due to laziness on your part, too bad, they can contact someone at that point stating they think the script is bad, but someone would have reported it very quickly anyway. SRL members should be focussing on scripting or helping others to script and growing the community, not doing other peoples work for them.

Kyle Undefined

2012-01-22 00:51:46

From: Jagex_Fagex
By using external programs to aid you in a game, there is always the risk of your account being removed from your possession, whether this is by being hacked or banned doesn't matter. The fact is, you shouldn't be running anything you don't trust anyway, as such, you should be reading the script before running. If you don't understand the code, go and learn.

If you have your account removed due to laziness on your part, too bad, they can contact someone at that point stating they think the script is bad, but someone would have reported it very quickly anyway. SRL members should be focussing on scripting or helping others to script and growing the community, not doing other peoples work for them.


This. You said it perfectly!