SRL Archive - Discussions and Debates

We have a serious leaking problem at the moment, I have been here for a whole and I can't ever remember anything like this, it seems like I can't go day to day without seeing something new leaked be that procedure or script, never have I seen scripts sold to gain membership here


I have no idea how to fix it and I can fairly assume its being talked higher up but I can't see anyone wanting to post anything in the members section having faith it will be kept to the select few that can view it


Is there any way to fix this? Does anyone know where the leaks are coming from? I know people are going to suggest a prune of members and I would be a prime candidate but I cannot see that working but rather push the problem back and this site will be in the same state of affairs a few months after the prune

Edit that took me 5 goes my safari kept freezing on my phone sorry if I repeat myself or seem to go off in a strange direction

Well Farmer Jack isn't a member anymore.. he was caught selling the natures script.. It can't be him. None of us know who's doing what. All I have to say is keep your scripts to yourselves until your ready to release or use them. Don't even bother using private pastes. It's all any of us can do.. and why would anyone suspect you? You've been here since 2006 >.>

I meant if members were pruned, I fall in that been here forever and inactive pile

Farmer jack I don't even remember seeing his members app so many new members lately, not too point fingers

I would like to know what the plan of attack is or I there can be anyway of attacking this except keeping every script private and not posting anything but that would be a pretty dead community

I'm sure the staff will figure something out.

It's just sad that we probably shouldn't release anything in members section due to lurking leakers.

Why don't we create a PM system, if the person who made the script DEEMS YOU worthy to use their script then they can send it to you (Provided you asked for it).

But then that person who gets it can just leak it.

Yes, but wouldn't it be easier to keep tabs on people that way?

Yeah but wouldn't it be like people begging for scripts then?

From: Bonfield
Yeah but wouldn't it be like people begging for scripts then?

Could make rules regarding it, ask once if they say no then no.. don't even respond if you do you get infraction etc.
—

Would be a better way to keep a tab on all who "have" it. Then you can decide who seems to leak

I like the idea of being able to keep track of who has your script?

Also maybe an admin can answer this are the ips logged when people download a script? If not is it hard to implement? I suppose it won't help that much as people are just using pastebin and the likes

From: Bonfield
I like the idea of being able to keep track of who has your script?

Also maybe an admin can answer this are the ips logged when people download a script? If not is it hard to implement? I suppose it won't help that much as people are just using pastebin and the likes

I believe that I saw in a previous thread that Admins can view who downloaded what attachments…so yes they are logged.

could this be used to narrow down the leakers?

Also, if a script is setup for SRL stats but no username is put in, it sends in an anonymous report correct? That could be used as well…

From: cause
Also, if a script is setup for SRL stats but no username is put in, it sends in an anonymous report correct? That could be used as well…

An experienced user will be able to find out and remove the part where it sends the report.

But we won't tell them they can do that :P

This idea is actually not bad, I'm just wondering if this can be included somewhere in the SRL so that users will not notice unless they are aware of the updates in the include.

Kind of a [off topic] suggestion (may take care of the lousy leaks for the future).:

What we can do is close applications…And have chosen scouts to recommend the Members/Staff that who should be capable to apply for SRL Members (request them to apply).

From: P1nky
Kind of a [off topic] suggestion (may take care of the lousy leaks for the future).:

What we can do is close applications…And have chosen scouts to recommend the Members/Staff that who should be capable to apply for SRL Members (request them to apply).

This I think needs further discussion but I agree with the notion. In the past few weeks we have got quite a lot of rulebreakers and plagiarizers in the community. I don't recall that being so serious when I joined back in November.

Although they're mostly caught and dealt with quickly, I believe we need to do more than that. We might not catch everyone of them and some may eventually become the source of leaks.

E: Your idea has also reminded me the Juniors Lookout section. Maybe applications can only be initiated with referral of SRL members+ (just like a lookout)?

Bonfield, I feel that only one thing can be said about this… New members are the source of the leak, as brutal as that seems, it's true. Ever since all the bots closed, and SRL became known, there has been such a huge influx of applicants, and even approved applicants for that matter. To be frankly honest, I think we're going a little too easy on some of them. I mean, that goes without saying, examples of very capable beings such as Mat, and Sin, who I see all over the forums, I can say they are legitimate. However there's been people who got memberized, who ever since they did, they've been a ghost… (in my eyes). So I will be the one to point the fingers at them, if you won't. Either that, or we've just been ruthless with pastebin and haven't been posting private pastes… I simply cannot see another reason.

Following the idea of our paste tool:
If it is possible to see the IP of every person who visits the paste, why don't we put SRL member scripts there as private pastes? It would be easier to rule the list down.

Also, for the scripts that auto update, they can simply check the visited IPs for the page, can't they? If they feel their script has been leaked, that is.
The same idea goes for version checkers.

From: RISK
Following the idea of our paste tool:
If it is possible to see the IP of every person who visits the paste, why don't we put SRL member scripts there as private pastes? It would be easier to rule the list down.

Also, for the scripts that auto update, they can simply check the visited IPs for the page, can't they? If they feel their script has been leaked, that is.
The same idea goes for version checkers.

Instead of IP, can private paste be implemented such that it takes SRL forum account to login? With IP checks you can still evade by using proxies.

Any eta on the script manager? Could solve this completely but this might mean adding a auth system like rsbuddy but account sharing would need to be looked at then

I was planning on writing a script for members, and having a little authorisation system behind it using a plugin. Some essential methods in the script would actually be performed in the plugin, and also in that plugin would be a system that meant only uses with a valid username and password would log in.
Pretty simple idea:

function findObj: boolean; register;
begin
  if Authorised then
    //TPA or other stuff below
end;

Where authorised is a boolean that checks with an online server to compare the username and password entered.

Because it would be a plugin, the code would be unreadable to the inexperienced. Generally the people leaking are also inexperienced (hence buying scripts into members), so wouldn't be able to easily crack the plugin.

From: Richard
I was planning on writing a script for members, and having a little authorisation system behind it using a plugin. Some essential methods in the script would actually be performed in the plugin, and also in that plugin would be a system that meant only uses with a valid username and password would log in.
Pretty simple idea:

function findObj: boolean; register;
begin
  if Authorised then
    //TPA or other stuff below
end;

Where authorised is a boolean that checks with an online server to compare the username and password entered.

Because it would be a plugin, the code would be unreadable to the inexperienced. Generally the people leaking are also inexperienced (hence buying scripts into members), so wouldn't be able to easily crack the plugin.

I was thinking the same thing, I just don't have the technical experience to implement my idea but yours is perfect. This would 99% stop the leakers and leave the ones who actually know what they are doing.

From: Kyle Undefined
But then that person who gets it can just leak it.

Have something different in each copy of the script you send out to people. If it gets leaked, it will be a different script to the others that got sent out, script owner can see which person that specific script was sent to.

Lock members applications. Make SRL members nomination only?

Done. No more buying scripts for apps.

I like the idea of nominating people for SRL Members, that alone would help.

From: cycrosism
Have something different in each copy of the script you send out to people. If it gets leaked, it will be a different script to the others that got sent out, script owner can see which person that specific script was sent to.

That's actually a pretty good idea in my opinion.

From: Dgby714
Lock members applications. Make SRL members nomination only?

Done. No more buying scripts for apps.

Agreed. Nominations from a few members is required and then the applicant can apply. It stops script buying, and we won't have to see those noscript applications as well. Also this requires the applicant to be sufficiently involved in the community before applying. Everybody wins.

I like the whole idea of the "nominating" thing. We should also get a prune going on as a couple people in the thread already mentioned. If you have done it once and are known around here already, I doubt you would have a hard time getting back in.

This is the result of our very own members voting yes to people who apply with extremely simple scripts.

From: kingarabian
This is the result of our very own members voting yes to people who apply with extremely simple scripts.

Or saying yes to people who have amazing scripts but paid someone to code it.

I think in the last 10 members who got in, I probably only votes yes on 3 of them.

We should consider making an authentication check for members only scripts. To use these scripts you 1st have to enter your user and pass… Similar to the way how iBot had VIP scripts and you had to login.

From: Richard
I was planning on writing a script for members, and having a little authorisation system behind it using a plugin. Some essential methods in the script would actually be performed in the plugin, and also in that plugin would be a system that meant only uses with a valid username and password would log in.
Pretty simple idea:

function findObj: boolean; register;
begin
  if Authorised then
    //TPA or other stuff below
end;

Where authorised is a boolean that checks with an online server to compare the username and password entered.

Because it would be a plugin, the code would be unreadable to the inexperienced. Generally the people leaking are also inexperienced (hence buying scripts into members), so wouldn't be able to easily crack the plugin.

From: kingarabian
We should consider making an authentication check for members only scripts. To use these scripts you 1st have to enter your user and pass… Similar to the way how iBot had VIP scripts and you had to login.

Richard said he is working on it :D
I think the prune should be for people who are not active, there should be a way in ACP to check who has posted since (date) and then you just put a limit perhaps 10 posts a month or something.

Im still bringing this up again. Leaking is not only an issue anymore, because the new members are the cause of it. I do however suggest an idea taught to me by Cruzin. Im not sure if that can be implement here but knowing SRL, you guys already thought about it. Each user with the same script but different userids with iplogging to see if the script leaked is that specific one. Variables and parts of the scripts can be hosted online so identification is a must. :)

From: R4nd0m
I think the prune should be for people who are not active, there should be a way in ACP to check who has posted since (date) and then you just put a limit perhaps 10 posts a month or something.

I think reviewing all SRL members accepted since bot nuke would not take a lot of time, since there are not many of them. Not trying to point fingers at anyone, but if it needs to be done, it should be done to narrow down the potential leaks.

I say as of right now, do not allow any the new SRL members to download scripts until this problem is sorted.

From: nosaj.421
I think reviewing all SRL members accepted since bot nuke would not take a lot of time, since there are not many of them. Not trying to point fingers at anyone, but if it needs to be done, it should be done to narrow down the potential leaks.

I agree :) not an issue, Since Bot Nuke until now…I dont mind :) SRL member is a title worth apply for again :)

I'll say my bit and leave you all to it.

First of all, I thoroughly oppose any form of authentication or the like. SRL has and, to the best of my knowledge, always will be open and free for everyone to use. I believe that this open nature has and always will be SRL's greatest asset, because of the community it builds around it. Free means fun: everyone is here for a mutually enjoyable experience of overcoming problems, learning and bonding over a shared goal. If money is what is wanted, there are programming and scripting jobs, things like making mobile phone applications or designing and building websites.

Secondly, there is one very good way to stop the leaks: give everyone the script. I'm really not sure why no one has said this already. If people are trying to sell it on other sites, making it so everyone can get it for free here is a good way to squash that while reinforcing SRL's image. Maybe "I don't get it because I haven't made a real script" or something like that, but I don't see any reason to keep the vast majority of scripts squirreled away. People say things about wanting to keep it away from the leechers and goldfarmers, but no one has really said why.

The two reasons I've deduced from the subtleties around are "Earn" and "Dilute". People have some idea that others should earn the right to use their script or that having more people use their script makes their use of the script less effective.

Earning the right to use a script is a strange thing. It has no basis beyond, "I'm such a good scripter that only other good scripters should be allowed to use my script." I hope it's evident how egotistical that approach is, especially when SRL itself has had so much work from such bright minds that it's very doubtful a script is advanced enough to make this stance at all justified.

Being unwilling to dilute their script is similarly precariously balanced. Any skill based script cannot adopt this position, because gaining experience is a one-way street. Any money making script is one that, assuming this position, should never be shared as it would, relatively, reduce the worth of your own cash. However, realistically, I'm only aware of one such script that, if given to everyone, could actually disrupt the economy in some way.

As an after message, releasing the scripts would also mean we wouldn't have people paying for application scripts or applying with no scripts, because there would be no incentive for them. The people who apply will be those who want to be acknowledged as possessing a certain, respectable level of skill. That's a good incentive for the scripter and a great way to reward the scripter.