NATION

PASSWORD

NationStates++ | Browser Extension for NationStates

Bug reports, general help, ideas for improvements, and questions about how things are meant to work.

Advertisement

Remove ads

User avatar
Valfor
Bureaucrat
 
Posts: 48
Founded: Aug 08, 2011
Left-Leaning College State

Postby Valfor » Sun Apr 20, 2014 3:43 pm

My my entire puppet list has disappeared..?

User avatar
Enfaru
Minister
 
Posts: 2921
Founded: Apr 20, 2012
Ex-Nation

Postby Enfaru » Sun Apr 20, 2014 3:52 pm

That happens from time to time... back up your puppet list from time to time...like I'm not doing.
Sovereign Charter Quick Links
Factbook · Role-plays · RMB · Map (Origin | Quantum) · Chat · Members: 73
Myraxia: One does not learn to GM; One throws oneself in and prays they don't fuck up too badly.
Game Master
Founder of the Sovereign Charter,
4th President and,
Tutor of the College of Theatrics

User avatar
Alyekra
Minister
 
Posts: 2828
Founded: May 03, 2012
Ex-Nation

Postby Alyekra » Sun Apr 20, 2014 4:00 pm

Valfor wrote:My my entire puppet list has disappeared..?


If you're on HTTPS, switch to HTTP, or vice-versa.
(FOR LEGAL REASONS, THAT'S A JOKE)

65 dkp

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Sun Apr 20, 2014 7:37 pm

The Blaatschapen wrote:http://forum.nationstates.net/viewtopic.php?f=15&t=292879

A bug.


Thanks, I will look into it.

Valfor wrote:My my entire puppet list has disappeared..?


Typically this is because of 1 of three things:

1.) You switched between the http://www.nationstates.net and https://www.nationstates.net sites. The HTTPS site is treated as a totally separate site from HTTP, and so you must export puppets from HTTP and re-import on HTTPS.

2.) You cleared your browser local storage. In this case, your puppets are gone. This is why I added the export feature. Back 'em up.

3.) You installed an extension that clears local storage. Some people like extensions that "cleanup" after websites that try and track you. This interferes with NS++.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
Valfor
Bureaucrat
 
Posts: 48
Founded: Aug 08, 2011
Left-Leaning College State

Postby Valfor » Sun Apr 20, 2014 9:31 pm

#1 seems most logical. I am pretty sure I don't have any other extensions, and I haven't cleared anything in like, forever. Thanks! I will watch that more often now.

User avatar
Gomlis44
Chargé d'Affaires
 
Posts: 460
Founded: Aug 17, 2013
Ex-Nation

Random Ideas

Postby Gomlis44 » Tue Apr 22, 2014 3:00 pm

Hello i have a few ideas and suggestions. Im posting them here so i can edit this and add more later :)

1) A button generator!

What does it do? It generates a button on your nation page for quick links.

How do i use this? Youd fill out a application and the generator would add the button to your nation page.

What would i use this for? A instant link to offsite forums,RMB's,Puppets,etc

2) A notification system!

What does it do? It provides a notification at the top of the tab to tell you that you have received a TG or someone posted on the RMB.

Point of this? It is so you may be on another tab and not have to watch NS waiting for that TG. You would receive a notification telling you. It would be a handy tool for internet browsing.

3) RMB Tags!

What do you mean? Well instead of the normal RMB Tags we could add color ones too.

Purpose? To make awesome messages :P

4) Regional Flag Idea

What? Possibly make regional flags bigger so we can see more details on them.

5) A floating IRC chatbox on the sidebar

What? A IRC channel small chatbox on the sidebar. Its purpose is so you can refresh/change the page without losing connection.

6) A arcade!

What is it now? Remember bytecoin? Well i thought maybe a arcade with world wide scores! The scores would refresh weekly and the arcade would contain games like pacman,tetris,etc

Point of this? To have fun and increase activity through NS.
Last edited by Gomlis44 on Tue Apr 22, 2014 3:02 pm, edited 1 time in total.
I am in fact a retired raider. My raider information can be found here.
---------------
---------------
---------------

My skateboarding appearance.
Just call me "Gom".
About my nation!

User avatar
Todlichebujoku
Senator
 
Posts: 4979
Founded: Feb 24, 2012
Civil Rights Lovefest

Postby Todlichebujoku » Tue Apr 22, 2014 3:37 pm

For #2, something like that already exists on the sidebar, right next to your region name. Same with telegrams. NS++ already has a notification feature for forum posts, right next to "FORUM" on the sidebar.
早晨!ToBu for short.
[violet] wrote:You are my go-to nation for long names.
Oct 16 2018- Indo States wrote:YOU'RE FALSE TOBU
Apr 21 2020- Llalta wrote:omg tobu you’ve literally given me asthma with ur art

User avatar
Gomlis44
Chargé d'Affaires
 
Posts: 460
Founded: Aug 17, 2013
Ex-Nation

Postby Gomlis44 » Tue Apr 22, 2014 4:49 pm

Todlichebujoku wrote:For #2, something like that already exists on the sidebar, right next to your region name. Same with telegrams. NS++ already has a notification feature for forum posts, right next to "FORUM" on the sidebar.

Wring type of notification system. One like FB. When you get a message(TG) it makes a sound and a 1 appears next to the tab name.
I am in fact a retired raider. My raider information can be found here.
---------------
---------------
---------------

My skateboarding appearance.
Just call me "Gom".
About my nation!

User avatar
Enfaru
Minister
 
Posts: 2921
Founded: Apr 20, 2012
Ex-Nation

Postby Enfaru » Tue Apr 22, 2014 5:27 pm

Re the api.

If I use the api... but also send recruitment telegrams manually, would that have any affect on the speed of the api? For instance skipping over those that have been manually tg'd rather than wasting time?

*doesn't understand how it works at all*
Sovereign Charter Quick Links
Factbook · Role-plays · RMB · Map (Origin | Quantum) · Chat · Members: 73
Myraxia: One does not learn to GM; One throws oneself in and prays they don't fuck up too badly.
Game Master
Founder of the Sovereign Charter,
4th President and,
Tutor of the College of Theatrics

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Tue Apr 22, 2014 5:33 pm

Enfaru wrote:Re the api.

If I use the api... but also send recruitment telegrams manually, would that have any affect on the speed of the api? For instance skipping over those that have been manually tg'd rather than wasting time?

*doesn't understand how it works at all*

Each method of recruitment, stamps, API, and manual is totally independent from one another. None of them interfere. At worst, you will just telegram a nation twice, and the extra tg is automatically bounced back by the game for you. It's impossible to mess up.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
Lemmingtopias
Diplomat
 
Posts: 607
Founded: Apr 03, 2007
Left-Leaning College State

Postby Lemmingtopias » Wed Apr 23, 2014 1:49 pm

How does one put the Newspaper image on the Region Page? I've seen a few regions do it but can't find the option.
LBC News:Lemmingtopias now de facto split between East and West | Junta forces fail to storm Palace of the Sages, withdrawal from West Lomapolis | COUP! Advised to stay at home! More Info coming soon | Prince of Lemmingtopias killed during summit with Tropican President| Invasion of The Tropican Islands cancelled. Diplomatic talks to resume

User avatar
The Leningrad Union
Chargé d'Affaires
 
Posts: 471
Founded: Apr 23, 2014
Ex-Nation

Postby The Leningrad Union » Wed Apr 23, 2014 1:53 pm

Lemmingtopias wrote:How does one put the Newspaper image on the Region Page? I've seen a few regions do it but can't find the option.

Newspapers can use the [img] code
I founded Madrigal and Confederacy of Allied States. However, I have given up my power in both. I reside in Iraq currently. Come join me!

Parody of typical NSG sig:

NSG's resident Liberal Gay Atheist because there's totally no other liberals, gays or atheists here!
Impeach GP, Legalize RP, NSG 2016!
Mallorea and Riva should resign
*Insert some uneducated statement about how I support a stupid ideology that I heard about in my middle school social studies class*
*Insert some typical liberal and/or edgy statement about Gaza and/or Ukraine*

some popular TETer wrote:Leningrad iz kewl

some dude that agreed with me on a debate wrote:Just listen to Leningrad!

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Wed Apr 23, 2014 3:12 pm

Lemmingtopias wrote:How does one put the Newspaper image on the Region Page? I've seen a few regions do it but can't find the option.


BBCodes work in newspaper titles. ;)

I intentionally left it like that, because it leads to clever ideas, like with the images some regions use. More power to the people! 8)
Last edited by Shadow Afforess on Wed Apr 23, 2014 3:13 pm, edited 1 time in total.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
Lemmingtopias
Diplomat
 
Posts: 607
Founded: Apr 03, 2007
Left-Leaning College State

Postby Lemmingtopias » Wed Apr 23, 2014 9:45 pm

ah. Thanks :)
LBC News:Lemmingtopias now de facto split between East and West | Junta forces fail to storm Palace of the Sages, withdrawal from West Lomapolis | COUP! Advised to stay at home! More Info coming soon | Prince of Lemmingtopias killed during summit with Tropican President| Invasion of The Tropican Islands cancelled. Diplomatic talks to resume

User avatar
Enfaru
Minister
 
Posts: 2921
Founded: Apr 20, 2012
Ex-Nation

Postby Enfaru » Sat Apr 26, 2014 11:43 pm

I'm pretty sure that the survey said something about forums, could you tell us more about what you have in mind?
Sovereign Charter Quick Links
Factbook · Role-plays · RMB · Map (Origin | Quantum) · Chat · Members: 73
Myraxia: One does not learn to GM; One throws oneself in and prays they don't fuck up too badly.
Game Master
Founder of the Sovereign Charter,
4th President and,
Tutor of the College of Theatrics

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Sun Apr 27, 2014 1:11 am

Enfaru wrote:I'm pretty sure that the survey said something about forums, could you tell us more about what you have in mind?


Basically this:

A lot of regions use outside forum services. Most of these free services are pretty terrible. Ad-laden, uncustomizable, hidious forums. You have to register an account for each one. It's a real pain, if say, you have to be a part of multiple regions. And since all the forums are shady fly-by-night services, you can't trust them with your real email or any half-decent password either. Basically 99% of the forums regions use now are terrible. They are terrible because regions can't afford to pay hundreds of dollars for forum licenses and server costs.

I empathize with that. Forums are not that complex a problem. I envision a free, skinnable forum that regional admins can create and control with NS++. Regions will get a web address, so non-NS++ users can use it. NS++ users will not need to log into these forums, their NS identity will simply "sync" right over. Regional administrators can easily control which members have moderator privileges, create subforums, etc, just like a normal forum. NS users can stop handing over emails and passwords, just log in with their NS nation. NS++ users will autologin. No ads. No space constraints or limits, except that the forums must be created and used by a region in NS.

NS++ users would see a new sidebar link to show a direct link to their regional forums. When they are on their region forums, it feels like they are still "on" NS, instead of leaving the site (say, the sidebar is still there). Regions could upload their maps, set their constitution, embassy requests, customize the forums look and layout.

Of course, such a service is no small task. It would require a while to create. Probably 2-3 months, plus testing.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
The Most Glorious Hack
Retired Moderator
 
Posts: 2427
Founded: Mar 11, 2003
Anarchy

Postby The Most Glorious Hack » Sun Apr 27, 2014 7:00 am

Shadow Afforess wrote:And since all the forums are shady fly-by-night services, you can't trust them with your real email or any half-decent password either.

Fly-by-night? Invision's been around for over a decade.
Now the stars they are all angled wrong,
And the sun and the moon refuse to burn.
But I remember a message,
In a demon's hand:
"Dread the passage of Jesus, for he does not return."

-Nick Cave and the Bad Seeds, "Time Jesum Transeuntum Et Non Riverentum"



User avatar
Ballotonia
Senior Admin
 
Posts: 5494
Founded: Antiquity
Liberal Democratic Socialists

Postby Ballotonia » Sun Apr 27, 2014 8:55 am

Shadow Afforess wrote:Of course, such a service is no small task. It would require a while to create. Probably 2-3 months, plus testing.


Before you implement this, perhaps you should first see whether there are any large regions willing to sign up for this at all. It means you'd get access not only to passwords of NS++ nations, but also of non-NS++ nations trying to use their regions' forum. Regions run the risk of getting split over whether or not they can sufficiently trust you. You'd have access to all their regional secrets as well. Would be a shame to spend months of work implementing this only to find out hardly anyone would be willing to use it.

Ballotonia
"Een volk dat voor tirannen zwicht zal meer dan lijf en goed verliezen, dan dooft het licht…" -- H.M. van Randwijk

User avatar
Enfaru
Minister
 
Posts: 2921
Founded: Apr 20, 2012
Ex-Nation

Postby Enfaru » Sun Apr 27, 2014 9:04 am

Shadow Afforess wrote:Most of these free services are pretty terrible. Ad-laden, uncustomizable, hidious forums. You have to register an account for each one.


I feel that. I really do. We've currently been down for about five or six hours, pretty unacceptable.

Shadow Afforess wrote: It's a real pain, if say, you have to be a part of multiple regions. And since all the forums are shady fly-by-night services, you can't trust them with your real email or any half-decent password either. Basically 99% of the forums regions use now are terrible. They are terrible because regions can't afford to pay hundreds of dollars for forum licenses and server costs.


Anyone who is concerned with password security would be using a password manager and a unique password so i don't think the security part there is an issue. Although I do agree that server costs play a big part in what you get. Unfortunately. Though I wouldn't say it's down to the software per se, for instance I'm a huge fan of Phpbb and SMF. Sure they're free and yes have their independent issues but frequently they're more customizable than the paid versions.

Shadow Afforess wrote:
I empathize with that. Forums are not that complex a problem. I envision a free, skinnable forum that regional admins can create and control with NS++. Regions will get a web address, so non-NS++ users can use it. NS++ users will not need to log into these forums, their NS identity will simply "sync" right over. Regional administrators can easily control which members have moderator privileges, create subforums, etc, just like a normal forum. NS users can stop handing over emails and passwords, just log in with their NS nation. NS++ users will autologin. No ads. No space constraints or limits, except that the forums must be created and used by a region in NS.


I would really be interested to see just how customizable the forums are, particularly regarding permissions. I would be happy to see some synchronicity, but I would be interested to see whether users would be able to register independently or whether usernames could be changed. There are also a couple of mods and additional services that the Sovereign Charter uses as well, which we would also like to see available, they're pretty much free for PHPbb.

I actually wouldn't mind about the adds if they were there to keep the forums going, maybe a bit of a donate button at the bottom or in the side bar or something. I appreciate that servers aren't free and many regions I suspect will either pay for the service or tolerate those features with a strong run of adblock+. :blush: I would 'love' to see an https version, but I'm damn confident that'll be a paid for service, certificates are expensive unless they're self signed.

Shadow Afforess wrote:NS++ users would see a new sidebar link to show a direct link to their regional forums. When they are on their region forums, it feels like they are still "on" NS, instead of leaving the site (say, the sidebar is still there). Regions could upload their maps, set their constitution, embassy requests, customize the forums look and layout.

Of course, such a service is no small task. It would require a while to create. Probably 2-3 months, plus testing.


That would in fact be handy. I assume that what you mean by this is that you would actually put the forums possibly in a frame on the NS website in place of the RMB? That would look cool, but i would be still be suspicious of the capabilities especially with integration. I'm happy with an external service for instance, it's relative easy, keeps everything neat and tidy there's usually a half way decent backend for it.

Ballotonia wrote:
Shadow Afforess wrote:Of course, such a service is no small task. It would require a while to create. Probably 2-3 months, plus testing.


Before you implement this, perhaps you should first see whether there are any large regions willing to sign up for this at all. It means you'd get access not only to passwords of NS++ nations, but also of non-NS++ nations trying to use their regions' forum. Regions run the risk of getting split over whether or not they can sufficiently trust you. You'd have access to all their regional secrets as well. Would be a shame to spend months of work implementing this only to find out hardly anyone would be willing to use it.

Ballotonia


I would have to agree to this, I'm not overly happy with the password sharing myself, but I use a good password policy so I'm not too fussed.
Sovereign Charter Quick Links
Factbook · Role-plays · RMB · Map (Origin | Quantum) · Chat · Members: 73
Myraxia: One does not learn to GM; One throws oneself in and prays they don't fuck up too badly.
Game Master
Founder of the Sovereign Charter,
4th President and,
Tutor of the College of Theatrics

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Sun Apr 27, 2014 2:16 pm

The Most Glorious Hack wrote:
Shadow Afforess wrote:And since all the forums are shady fly-by-night services, you can't trust them with your real email or any half-decent password either.

Fly-by-night? Invision's been around for over a decade.


And Invision has had so many exploits and bugs that security is laughable.

Ballotonia wrote:
Shadow Afforess wrote:Of course, such a service is no small task. It would require a while to create. Probably 2-3 months, plus testing.


Before you implement this, perhaps you should first see whether there are any large regions willing to sign up for this at all. It means you'd get access not only to passwords of NS++ nations, but also of non-NS++ nations trying to use their regions' forum. Regions run the risk of getting split over whether or not they can sufficiently trust you. You'd have access to all their regional secrets as well. Would be a shame to spend months of work implementing this only to find out hardly anyone would be willing to use it.

Ballotonia


At this stage, it's purely speculative. Beyond drawing lines in the sand, I have taken no actual steps towards this. I realize adoption is a problem, and so is concern over security. I've actually had this idea for a forum service for about 6 months already. It's not exactly new.

Regarding passwords, the forums would not use passwords, but the NS authentication system. There would be no passwords involved. Yes, regional secrets are a problem - in fact I've already considered this problem and this is why the idea remains in the idea stage. I have had a few thoughts on how a truly secret forum could be accomplished. Possibly a passphrase for a secret forum to be able to read its contents. This would not be a user password, but a password to see the secret forum. The contents of the forum would be decrypted client side, and posts encrypted when they are sent to my server, so the passphrase stays totally client side. But browser-based cyrptography remains sketchy at best. Of course, I would also release the code for this as open source.

Enfaru wrote:Anyone who is concerned with password security would be using a password manager and a unique password so i don't think the security part there is an issue. Although I do agree that server costs play a big part in what you get. Unfortunately. Though I wouldn't say it's down to the software per se, for instance I'm a huge fan of Phpbb and SMF. Sure they're free and yes have their independent issues but frequently they're more customizable than the paid versions.

I don't trust password managers. Single point of failure is bad design.

Enfaru wrote:I would really be interested to see just how customizable the forums are, particularly regarding permissions. I would be happy to see some synchronicity, but I would be interested to see whether users would be able to register independently or whether usernames could be changed. There are also a couple of mods and additional services that the Sovereign Charter uses as well, which we would also like to see available, they're pretty much free for PHPbb.

Offering user "aliases" that replace NS nation names would be pretty easy. I'm not sure what other mods you are using though.

Enfaru wrote:I actually wouldn't mind about the adds if they were there to keep the forums going, maybe a bit of a donate button at the bottom or in the side bar or something. I appreciate that servers aren't free and many regions I suspect will either pay for the service or tolerate those features with a strong run of adblock+. :blush: I would 'love' to see an https version, but I'm damn confident that'll be a paid for service, certificates are expensive unless they're self signed.

HTTPS all the way. No self-signed certs here. If I actually did all this work, I would not mind paying for certs.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
Klaus Devestatorie
Minister
 
Posts: 2937
Founded: Aug 28, 2008
Capitalist Paradise

Postby Klaus Devestatorie » Sun Apr 27, 2014 7:19 pm

Regarding this forums initiative;

I have seen this kind of thing before in other nation simulator games (most notably Earth 2025/Empires, another game that was temporarily underneath Jolt). Various alliance hosting services, such as Boxcar and GHQ as well as a few that no longer exist were attractive because on top of a reasonably easy to use setup, they also came with significant tools for analysis for various ingame functions; functions for both peace and war. These tools, by far, are their largest upsides, and one can only imagine the kind of stuff that could be set up for something like this- a disturbingly accurate automatic triggering tool using the raw game maths to calculate updates, for starters, and I bet it would be possible to come up with some really freaky standardized regional map stuff. However, they also always came with significant downsides and weaknesses.

For starters, while their security is generally okayish, they were by no means secure in a game where every major alliance had their own coders. People wouldn't just target each other's forums; they would actively target the hosting service itself in order to gather as much data as possible on direct military competitors; both numerical and political. The admin of Boxcar is also the admin of the game itself, and even then it does not prevent those attacks.

This hosting service would also need to make the IP addresses of users available to the admins of specific forums, to ensure people are not using duplicate nations. Otherwise it would be largely incompatible with most existing gameplay regions.

Finally, every now and then, a service goes down. Earth 2025 lost some massive ones in the form of Gamerstown and Earthstats; Gamerstown was shut down after a hacking attack and the admin of Earthstats simply vanished. In the former, most alliances were able to recover their data, but the users of the latter lost as much as 10 years of posts and user accounts. It would need to be possible for users to easily download a backup of their data. It would be -really- good if that data could then be directly uploaded and placed into an IPB or SMF forum without major hiccups.

I'm not personally sure on any roleplay specific needs, but I hope I've provided some context from having used this kind of service regularly since 2007.

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Sun Apr 27, 2014 8:53 pm

Klaus Devestatorie wrote:Regarding this forums initiative;

I have seen this kind of thing before in other nation simulator games (most notably Earth 2025/Empires, another game that was temporarily underneath Jolt). Various alliance hosting services, such as Boxcar and GHQ as well as a few that no longer exist were attractive because on top of a reasonably easy to use setup, they also came with significant tools for analysis for various ingame functions; functions for both peace and war. These tools, by far, are their largest upsides, and one can only imagine the kind of stuff that could be set up for something like this- a disturbingly accurate automatic triggering tool using the raw game maths to calculate updates, for starters, and I bet it would be possible to come up with some really freaky standardized regional map stuff. However, they also always came with significant downsides and weaknesses.

For starters, while their security is generally okayish, they were by no means secure in a game where every major alliance had their own coders. People wouldn't just target each other's forums; they would actively target the hosting service itself in order to gather as much data as possible on direct military competitors; both numerical and political. The admin of Boxcar is also the admin of the game itself, and even then it does not prevent those attacks.


When you say "target", what exactly do you mean? The tools I build are not vulnerable to SQL injection or other standard weaknesses. I haven't yet been the target of any DDoS, but as I use a cloud hosting provider, I can simply spin up more servers in a few minutes at a need. I did so for the April fools event.

Klaus Devestatorie wrote:This hosting service would also need to make the IP addresses of users available to the admins of specific forums, to ensure people are not using duplicate nations. Otherwise it would be largely incompatible with most existing gameplay regions.


I think I would make up to the user whether the admin can see their IP address. I don't want to allow exploitation of privacy just to satisfy the whims of any region. I don't collect this information currently.

Klaus Devestatorie wrote:Finally, every now and then, a service goes down. Earth 2025 lost some massive ones in the form of Gamerstown and Earthstats; Gamerstown was shut down after a hacking attack and the admin of Earthstats simply vanished. In the former, most alliances were able to recover their data, but the users of the latter lost as much as 10 years of posts and user accounts. It would need to be possible for users to easily download a backup of their data. It would be -really- good if that data could then be directly uploaded and placed into an IPB or SMF forum without major hiccups.

I'm not personally sure on any roleplay specific needs, but I hope I've provided some context from having used this kind of service regularly since 2007.


I would build an export mechanism. That goes without saying. I already do backups myself, but I think data should be open.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
Klaus Devestatorie
Minister
 
Posts: 2937
Founded: Aug 28, 2008
Capitalist Paradise

Postby Klaus Devestatorie » Mon Apr 28, 2014 12:35 am

Shadow Afforess wrote:
Klaus Devestatorie wrote:Regarding this forums initiative;

I have seen this kind of thing before in other nation simulator games (most notably Earth 2025/Empires, another game that was temporarily underneath Jolt). Various alliance hosting services, such as Boxcar and GHQ as well as a few that no longer exist were attractive because on top of a reasonably easy to use setup, they also came with significant tools for analysis for various ingame functions; functions for both peace and war. These tools, by far, are their largest upsides, and one can only imagine the kind of stuff that could be set up for something like this- a disturbingly accurate automatic triggering tool using the raw game maths to calculate updates, for starters, and I bet it would be possible to come up with some really freaky standardized regional map stuff. However, they also always came with significant downsides and weaknesses.

For starters, while their security is generally okayish, they were by no means secure in a game where every major alliance had their own coders. People wouldn't just target each other's forums; they would actively target the hosting service itself in order to gather as much data as possible on direct military competitors; both numerical and political. The admin of Boxcar is also the admin of the game itself, and even then it does not prevent those attacks.


When you say "target", what exactly do you mean? The tools I build are not vulnerable to SQL injection or other standard weaknesses. I haven't yet been the target of any DDoS, but as I use a cloud hosting provider, I can simply spin up more servers in a few minutes at a need. I did so for the April fools event.

Klaus Devestatorie wrote:This hosting service would also need to make the IP addresses of users available to the admins of specific forums, to ensure people are not using duplicate nations. Otherwise it would be largely incompatible with most existing gameplay regions.


I think I would make up to the user whether the admin can see their IP address. I don't want to allow exploitation of privacy just to satisfy the whims of any region. I don't collect this information currently.

Klaus Devestatorie wrote:Finally, every now and then, a service goes down. Earth 2025 lost some massive ones in the form of Gamerstown and Earthstats; Gamerstown was shut down after a hacking attack and the admin of Earthstats simply vanished. In the former, most alliances were able to recover their data, but the users of the latter lost as much as 10 years of posts and user accounts. It would need to be possible for users to easily download a backup of their data. It would be -really- good if that data could then be directly uploaded and placed into an IPB or SMF forum without major hiccups.

I'm not personally sure on any roleplay specific needs, but I hope I've provided some context from having used this kind of service regularly since 2007.


I would build an export mechanism. That goes without saying. I already do backups myself, but I think data should be open.


When I say "target" I mean just generally trying to break in to gather information. There's only been one or two instances of someone actually trying to cause damage in my memory. I imagine your stuff is rather secure but you are by no means the only coder in NS.

If nations are going to be able to hide their IP addresses from regional governments, don't expect many regions with interest in R/D to make these forums their primary home. IP address checking is routine in gameplay for processing citizenships, to ensure someone isn't behind a proxy, isn't already banned or someone that probably should be banned, isn't lying about who else they are in the game.

User avatar
Shadow Afforess
Ambassador
 
Posts: 1270
Founded: Nov 06, 2013
Ex-Nation

Postby Shadow Afforess » Mon Apr 28, 2014 1:01 am

Klaus Devestatorie wrote:When I say "target" I mean just generally trying to break in to gather information. There's only been one or two instances of someone actually trying to cause damage in my memory. I imagine your stuff is rather secure but you are by no means the only coder in NS.

If nations are going to be able to hide their IP addresses from regional governments, don't expect many regions with interest in R/D to make these forums their primary home. IP address checking is routine in gameplay for processing citizenships, to ensure someone isn't behind a proxy, isn't already banned or someone that probably should be banned, isn't lying about who else they are in the game.


I would hope any individual who wants NS++ information would just ask. Very little information I store is meant to be private and I'm happy to share.

As for IPs I fear I am not explaining my privacy concerns and the alternative. Admins would be able to "request" the IP of a user through the forum service, and the user would see this request and could either approve or deny it. If a person doesn't want to share, regions are free to do whatever, including assume guilt.

In addition things like bans would apply to the users IP. The admins would not need to see the IP if the software could do the IP ban automatically.

Basically I don't want to have to "store" users IPs. It is way too easy to go from storing IPs to unmasking all puppets. A large number of R/D types use NS++ and I do not want to drive them away.
In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move.

User avatar
Glen-Rhodes
Powerbroker
 
Posts: 9027
Founded: Jun 25, 2008
Ex-Nation

Postby Glen-Rhodes » Mon Apr 28, 2014 8:00 am

What Klaus is getting at is that many regions do store IP addresses. There are blacklists shared among the GCRs, for example, where IP addresses are matched up with players. New citizen applicants are checked against those blacklists. It's not just about banning, but also preventing multiple citizenship registrations or enemy registrations. Citizen applications are also denied for political reasons.

The R/D community is super protective of IP addresses and wants uber-privacy. But they also like hoarding IP addresses as part of basic intel ops.

PreviousNext

Advertisement

Remove ads

Return to Technical

Who is online

Users browsing this forum: Axixic, Bresinnia, Caffeinated, Castelia, The Dominion of the Asmorian Empire, The Koryoan Union, The Plough Islands

Advertisement

Remove ads