 |
Magic-League.com Forums of Magic-League: Free Online tcg playing; casual or tournament play.
|
|
|
| Have you tried out the newest Sept 2009 release of OCTGN 2.0 yet? |
| Yes |
|
33% |
[ 2 ] |
| No |
|
66% |
[ 4 ] |
|
| Total Votes : 6 |
|
| Author |
Message |
NahHolmes
Joined: 13 Jan 2005 Posts: 652
|
Posted: Thu Jan 24, 2008 11:10 pm Post subject: |
|
|
For the purpose of this argument, all that matters is relevant hackers and programmers know how online games function to some level if they are messing with magic gaming script. Seriously to edit any program, even open source, you have to have some knowledge of programing. I mean it's not like you can show your dad open source code and he can be like, "Oh, if you edit out this line it's totally a cheat." Anyways though any good hacker is a programmer and any good programmer is most likely pretty sharp and could probably hack (I mean at least if they program networkable apps). Sure it would be more profitable to just write solid code then to hack a free online app, and a given that you would get busted pretty quick if someone (even a group) using the same hacked app won more a handful of online Majors, but seriously people have wasted their time on less productive shit in the past. Basically an open source game with no server is just an invite for trouble. Hopefully for them this is just a midpoint to running on a server, which would actually be a smart move because if someone was to release a hack it would maybe show possible weakpoints in the program for a server based release, while at the same time opening the program to a wider audience.
Anyways in the end the best way to release such a product is to have an open source client, with a closed source server. This way you get the best of both worlds. Committed players/proggers would be able to edit the client side and make it more flashy, but at the same time the server handles all the info you don't want to players to see and remains secure. I mean in the end the client is the important part in such a program. You only have to get the server side straight once with a small team and then let the dedicated fans make the client flashy, implementing only the best, most solid mods in the official version. All this from someone who is currently in the preliminary process of planning an online game, so yeah, due to the way money would be generated for the company from my program, network security is the #1 concern. |
|
| Back to top |
|
 |
Craze
Joined: 30 Jan 2005 Posts: 5647 Location: Indiana, U
|
Posted: Fri Jan 25, 2008 12:42 am Post subject: |
|
|
| NahHolmes wrote: |
Anyways in the end the best way to release such a product is to have an open source client, with a closed source server. This way you get the best of both worlds. Committed players/proggers would be able to edit the client side and make it more flashy, but at the same time the server handles all the info you don't want to players to see and remains secure. I mean in the end the client is the important part in such a program. You only have to get the server side straight once with a small team and then let the dedicated fans make the client flashy, implementing only the best, most solid mods in the official version. All this from someone who is currently in the preliminary process of planning an online game, so yeah, due to the way money would be generated for the company from my program, network security is the #1 concern. |
the problem with having a closed set server, is that everyone would be on that server at once. Imagine a 100+ trial(not to hard to imagine) and the program has only 1 set server! Were talking major traffic and a potential crash and thats with one trial not counting all additional games in ML and else where.
allowing players to host is the easiest way to do it but also the least secure. |
|
| Back to top |
|
 |
Jorbes
Joined: 14 Feb 2006 Posts: 309 Location: Netherland
|
Posted: Fri Jan 25, 2008 3:12 pm Post subject: |
|
|
Ok people, let's focus on feedback on the program instead of arguing if it's hackable (i'll hack it when it becomes a threat to GO/OPT j/k obv..... or not??)
Anyway, I've downloaded it, installed .net 3.5 and booted the sucker and here are some thoughts Mr Clark Kant can pass on to the programmer, as I dont really feel like finding / contacting him myself.
I was unable to find a fast (2 clicks) way to start a solitaire game, however, it seems to be possible to just start an 'online' game with just you as a player.
So, I load a deck, i must say, the loading is instantly, so that's a big plus. No delay for picture loadings and whatnot.
On to the table. I try to draw one of those world famous select boxes to see how the interface feels, but instead of getting a rectangle on the table, the whole table starts to move around, at least, some object i dont understand (because i dont know blue moon) moves around on it.
Now the functionality is minimal, even for an alpha release im sorry to say. So i try a right mouse click on the draw pile, something you all know as the library.
There are some options that popup, like draw to 6 cards, fills your hand to 6 cards and shows a message in the box, even when you already have 6 cards in hand... (if blabla < 6 then blabla else message('already got 6) ...maybe?) but OK
The draw... pops up a box asking how many cards i want to draw. I was unable to find a quick way to just draw a single card. (Draw to 6 is the default action, so this happens on doubleclick.. sadly) Clicking the X when asked for a number does not cancel the action, but simulates an OK press instead... comeon now programmer, what were you smoking?
The shuffle... I can only asume it works properly.
The view cards...(of the draw pile) pops up a window with all the cards layed out in a grid 6 cards wide.. (now what if a player uses a 200card deck...? But ok, not everyone has
heard of listboxes obviously)
This action does not show in the message box, so your opp has no idea you're checking your deck obv.... (who even needs hacks with this kind of programming? )
This same popup window has the annoying feature of turning semi transparent (alpha 50%) when being rightclicked on.
The zones arent implemented yet, neither are basic interface thingamadoodies for proper playing, like tap, attack and whatnot... where is the life meter?
The one (and only??) positive thing I have to say about it right now (im sure it will be better in the summer of 2009)
is that the graphics are very smooth, with a nice zooming function when moving over your hand (I might just steal that for OPT if you dont mind)
So, to conclude without having tested the stability of the network implementation.... NOT YET SUITABLE FOR USE!
I think in all his enthousiasm (wich i can understand) Mr Clark Kant has posted (spammed) the forums a bit to soon and this may really cause some serious damage to the popularity (was there any?) of this neat program, since the first impression is very important (I should know, GO was/is bashed on a regular basis also)
But.. dont let all this bring you down, just keep on going and going and going, even if it means losing your dayjob, wife, kids and life savings, it's all worth it!! (ok, not sure if i was being sarcastis there or whatever, it's been a long day)
Looking forward to seeing a usable beta some day (no sarcasm, really, really none!) |
|
| Back to top |
|
 |
Laplie League Staff
Joined: 31 Aug 2004 Posts: 561
|
Posted: Fri Jan 25, 2008 5:43 pm Post subject: |
|
|
It is definitely possible to have a secure open source program that isn't easy to hack (without needing a server). There are many security problems with open source software, but they are all solvable. For example:
how do you keep the cards and the order of the cards private from both players?:
1) Player A encrypts each card then shuffles the library and passes the deck to player B,.
2) Player B then encrypts each card again then shuffles the library and passes the deck back to player A.
3) Player B then repeats the process with his own deck.
in order to see what a card is, player a must pass a card to player b, for him to decrypt, then player A decrypts the card seeing its text
This solves a bunch of problems such as:
What if player A doesn't shuffle his deck? Doesn't matter cause player B shuffles the deck
How do you prevent someone from looking at their cards? you need both players to decrypt the card.
etc, etc.
Open source doesn't mean insecure. PGP is open source and is used worldwide for security. |
|
| Back to top |
|
 |
jods
Joined: 26 Jan 2008 Posts: 1
|
Posted: Sat Jan 26, 2008 4:50 am Post subject: |
|
|
Hi, I'm jods. I am the coder behind OCTGN 2. This thread has been brought to my attention and I think I'd like to point out one thing or two.
Please take note that I am not watching those boards, so if you want to ask me questions you'd better come over to my blog.
The original poster was mostly correct, but made a few mistakes:
- The current release is the first alpha. It's not even a beta. There are many features still missing. E.g. the OP mentions drafting. Although this is planned, drafting is not available yet. Actually, the alpha has been artificially locked to play Blue Moon only.
- The program is indeed free and open-source. But there is no "encrypted version checking" built-in. This was the case with OCTGN 1.x, but not 2.0. You can grab the full sources, modify your client any way you like, and play against me with your modified client. There is no concept such as "closed open source".
This brings me to the most important point: cheating. Sorry for you guys, but an open-source program can be cheating-proof. You can play with MWS if you want to, but altough it's closed source cheats are available today. Keeping your sources closed "for security" is called "security by obscurity" and it's proven not to work. OCTGN 2.0 is secure by design and like all good, really secure systems I make no secret about its design. I am not going to spend my time explaining here how it works. If you really are interested in security you can come to my blog, or download the sources and see for yourself why you won't be able to cheat.
We don't advertise OCTGN 2.0 much right now because we don't think it's ready for prime time. But we honestly believe that when it comes out of beta it may very well be the best CCG client available. Stay tuned
-jods
[EDIT]BTW, what Laplie wrote in the post just before mine is correct. This is - in essence - how OCTGN 2.0 works. |
|
| Back to top |
|
 |
ClarkKant
Joined: 01 Sep 2007 Posts: 14
|
Posted: Sat Jan 26, 2008 11:27 am Post subject: |
|
|
Thank you for posting jod.
I mistakenly thought that 2.0 uses the same security methods as 1.0. Guess I was wrong about that.
Regardless, to all the posters that have no clue about security whining about how the program is hackable, why don't get off the chair and actually do it and prove us wrong if it's so hackable.
| Jorbes wrote: | This action does not show in the message box, so your opp has no idea you're checking your deck obv.... (who even needs hacks with this kind of programming? ) |
Like most of your post, you're misinformed about this comment as well. It doesn't show the action in your message box, but it does in your opponents. Similarly, the default actually is to draw 6 cards because you don't draw just one card in blue moon. Whatever game's module you load will have it's own settings about what the default actions are.
If you read the developers blog, you would realize that almost none of the "problems" you cite actually exist. |
|
| Back to top |
|
 |
CarterFarter
Joined: 08 Dec 2007 Posts: 8
|
Posted: Sat Jan 26, 2008 12:07 pm Post subject: |
|
|
| center425 wrote: |
its open source>>>I feel this is a problem |
I'm sorry, but that's a foolish attitude to take. Security through Obscurity is counterproductive and insufficient. All the developers I've seen for Magic apps seem to take this stance, and it's bullshit.
(Excluding, of course, MWS, because they actually sell the thing.) |
|
| Back to top |
|
 |
Jorbes
Joined: 14 Feb 2006 Posts: 309 Location: Netherland
|
Posted: Sat Jan 26, 2008 1:14 pm Post subject: |
|
|
| ClarkKant wrote: | Regardless, to all the posters that have no clue about security whining about how the program is hackable, why don't get off the chair and actually do it and prove us wrong if it's so hackable.
|
If and when octgn becomes used by the big public (read: is being used for m-l tourneys) I'll have a cheat version ready in a few days, just to show you it can be done.
Nonetheless, I'm looking forward to a (post) beta release or one we can really do some serious testing on.
ps: Make sure we can play MtG with it next time, really, it's very imporant for players of a MtG league... |
|
| Back to top |
|
 |
Craze
Joined: 30 Jan 2005 Posts: 5647 Location: Indiana, U
|
Posted: Sat Jan 26, 2008 1:55 pm Post subject: |
|
|
| ClarkKant wrote: | Twhy don't get off the chair and actually do it and prove us wrong if it's so hackable.
|
by making a mtg cheat program for a program that in fact doesn't play mtg?
| Jodes wrote: | | You can play with MWS if you want to, but altough it's closed source cheats are available today. |
Available where? I made a huge effort to attempt to find one in order to validate your statement(not to use as I don't cheat).
And currently their is NO public cheat program for MWS.
However wait till a playable version of OCTGN 2.0 gets out. Bet someone makes a cheat prog for that. |
|
| Back to top |
|
 |
imafag
Joined: 24 Jan 2008 Posts: 2
|
Posted: Sat Jan 26, 2008 2:55 pm Post subject: |
|
|
| jorbes wrote: | | If and when octgn becomes used by the big public (read: is being used for m-l tourneys) I'll have a cheat version ready in a few days, just to show you it can be done. |
Hmm... I'm sorry but aren't statements like that more or less FUD as you aren't outlining here the actual methods for the cheat program you claim is perfectly possible? (or alternatively pointing out the actual weaknesses the client might have).
Don't get me wrong but this just sounded so bad. I've played with MWS for years and never quite trusted for the closed source approaches, this just got me thinking that:
1. Either there is huge fundamental security flaw already in the octgn2 design by the author or,
2. Then you just know already about his program and code more than he does,
3. or then this is actually FUD as it's no secret you're the developer of GO (really looking forward to it, I like it's approach and feel). |
|
| Back to top |
|
 |
ClarkKant
Joined: 01 Sep 2007 Posts: 14
|
Posted: Sat Jan 26, 2008 3:30 pm Post subject: |
|
|
Well said.
You would have to be an idiot to think that just because a program is open source, that it's easy to hack.
Linux is open source and any dev worth his salt would tell you that it's by far the most secure OS out there.
Now to water your mouth.
 |
|
| Back to top |
|
 |
CarterFarter
Joined: 08 Dec 2007 Posts: 8
|
Posted: Sat Jan 26, 2008 5:55 pm Post subject: |
|
|
| ClarkKant wrote: |
Linux is open source and any dev worth his salt would tell you that it's by far the most secure OS out there. |
Not that I'm disagreeing entirely with your goal in posting, but what qualification can you prove you have that allows you to say that Linux is the most secure OS with some credibility?
I agree with essentially everything else you've said here tho. |
|
| Back to top |
|
 |
Craze
Joined: 30 Jan 2005 Posts: 5647 Location: Indiana, U
|
Posted: Sun Jan 27, 2008 12:26 am Post subject: |
|
|
| I'm srry but those pics don't look any better then what my MWS currently looks... |
|
| Back to top |
|
 |
Laplie League Staff
Joined: 31 Aug 2004 Posts: 561
|
Posted: Mon Jan 28, 2008 8:52 am Post subject: |
|
|
The key to this thread is:
| jods wrote: | We don't advertise OCTGN 2.0 much right now because we don't think it's ready for prime time. But we honestly believe that when it comes out of beta it may very well be the best CCG client available. Stay tuned  |
I think the OP jumped the gun a little. |
|
| Back to top |
|
 |
ninguem
Joined: 28 Jan 2008 Posts: 21
|
Posted: Mon Jan 28, 2008 8:53 am Post subject: |
|
|
yeah yeah i agree with you
NOT |
|
| Back to top |
|
 |
|
Powered by phpBB © 2001, 2005 phpBB Group
|