| Pages: [1] :: one page |
| Author |
Thread Statistics | Show CCP posts - 0 post(s) |

FlukeySphere
|
Posted - 2004.11.26 18:18:00 -
[1]
CCP should make an md5 hash available for the full client and all major patches. This would make third party downloads much more trustable. The md5 sum is only a few bytes long.
You will find that this is common practice with most publicly available downloads.
The MD5 check would also weed out corrupt downloads, which could be causing a lot of hidden bugs.
The md5sum program can be downloaded from http://www.etree.org/md5com.html and is 48KB in size.
|

FlukeySphere
|
Posted - 2004.11.26 18:18:00 -
[2]
CCP should make an md5 hash available for the full client and all major patches. This would make third party downloads much more trustable. The md5 sum is only a few bytes long.
You will find that this is common practice with most publicly available downloads.
The MD5 check would also weed out corrupt downloads, which could be causing a lot of hidden bugs.
The md5sum program can be downloaded from http://www.etree.org/md5com.html and is 48KB in size.
|

Lomithrandra
|
Posted - 2004.11.26 18:23:00 -
[3]
AFAIK the EVE install is verified for authenticity before it starts to install, for just this purpose.
_____________________________
Lomithrandra Lead Forum Moderator
[ Forum Rules ] |

Lomithrandra
|
Posted - 2004.11.26 18:23:00 -
[4]
AFAIK the EVE install is verified for authenticity before it starts to install, for just this purpose.
_____________________________
Lomithrandra Lead Forum Moderator
[ Forum Rules ] |

FlukeySphere
|
Posted - 2004.11.26 18:25:00 -
[5]
Edited by: FlukeySphere on 26/11/2004 18:28:16 That does not stop 3rd party/warez sites from distributing hacked versions of the eve client.
Players need a way to make absolutly certain by manual means that the client file is authentic, which is why the EVE server gets hit so hard on patch day. People will not trust a 3rd party download.
|

FlukeySphere
|
Posted - 2004.11.26 18:25:00 -
[6]
Edited by: FlukeySphere on 26/11/2004 18:28:16 That does not stop 3rd party/warez sites from distributing hacked versions of the eve client.
Players need a way to make absolutly certain by manual means that the client file is authentic, which is why the EVE server gets hit so hard on patch day. People will not trust a 3rd party download.
|

Scorpyn
|
Posted - 2004.11.26 18:29:00 -
[7]
Edited by: Scorpyn on 26/11/2004 18:58:48
Originally by: Lomithrandra AFAIK the EVE install is verified for authenticity before it starts to install, for just this purpose.
That kind of protection can be *****ed, better to put up the MD5 sum next to the download link. A lot safer that way.
The way it's done now is only to check whether a download got corrupted in the transfer. Downloading from non CCP sites have never been an issue, because we have always downloaded from official trusted CCP servers.
|

Scorpyn
|
Posted - 2004.11.26 18:29:00 -
[8]
Edited by: Scorpyn on 26/11/2004 18:58:48
Originally by: Lomithrandra AFAIK the EVE install is verified for authenticity before it starts to install, for just this purpose.
That kind of protection can be *****ed, better to put up the MD5 sum next to the download link. A lot safer that way.
The way it's done now is only to check whether a download got corrupted in the transfer. Downloading from non CCP sites have never been an issue, because we have always downloaded from official trusted CCP servers.
|

Holi
|
Posted - 2004.11.26 19:03:00 -
[9]
I'm guessing the patch itself verifies it's integrity, and not the patch-auto-downloader (and if you are downloading the patch manually, only the patch itself can verify it's integrity anyway, so it doesn't matter).
So: - 3rd party site offers alternate download method - little virus hopps on back of file (can happen even to profession file hosters) - infected stuff gets downloaded - patch is run, computer is infected, and then the patcher sais "sorry, bad crc, try downloading again" - but it's already too late, client is infected with the virus
With md5 checking (BitTorrent has automatic md5 checking): - 3rd party site offers alternate download method - little virus hopps on back of file - infected stuff gets downloaded - player uses program to calculate the checksum of downloaded patch, and compares it to the checksums listed on official eve patch site - checksums differ, patch gets deleted immediatelly (and player informs 3rd party that they somehow got an infected file)
-- Holi
[ md5 checksum calculator ] |

Holi
|
Posted - 2004.11.26 19:03:00 -
[10]
I'm guessing the patch itself verifies it's integrity, and not the patch-auto-downloader (and if you are downloading the patch manually, only the patch itself can verify it's integrity anyway, so it doesn't matter).
So: - 3rd party site offers alternate download method - little virus hopps on back of file (can happen even to profession file hosters) - infected stuff gets downloaded - patch is run, computer is infected, and then the patcher sais "sorry, bad crc, try downloading again" - but it's already too late, client is infected with the virus
With md5 checking (BitTorrent has automatic md5 checking): - 3rd party site offers alternate download method - little virus hopps on back of file - infected stuff gets downloaded - player uses program to calculate the checksum of downloaded patch, and compares it to the checksums listed on official eve patch site - checksums differ, patch gets deleted immediatelly (and player informs 3rd party that they somehow got an infected file)
-- Holi
[ md5 checksum calculator ] |

FlukeySphere
|
Posted - 2004.11.26 19:07:00 -
[11]
Originally by: Scorpyn Edited by: Scorpyn on 26/11/2004 18:58:48
Originally by: Lomithrandra AFAIK the EVE install is verified for authenticity before it starts to install, for just this purpose.
That kind of protection can be *****ed, better to put up the MD5 sum next to the download link. A lot safer that way.
The way it's done now is only to check whether a download got corrupted in the transfer. Downloading from non CCP sites have never been an issue, because we have always downloaded from official trusted CCP servers.
Welcome to the real world. As the latest patch day showed, the official EVE servers are simply unable to cope with the high demand. Also a sizable population are either unwilling or more importantly unable to use the BitTorrent software.
An official MD5SUM will make 3rd party downloads trustable.
|

FlukeySphere
|
Posted - 2004.11.26 19:07:00 -
[12]
Originally by: Scorpyn Edited by: Scorpyn on 26/11/2004 18:58:48
Originally by: Lomithrandra AFAIK the EVE install is verified for authenticity before it starts to install, for just this purpose.
That kind of protection can be *****ed, better to put up the MD5 sum next to the download link. A lot safer that way.
The way it's done now is only to check whether a download got corrupted in the transfer. Downloading from non CCP sites have never been an issue, because we have always downloaded from official trusted CCP servers.
Welcome to the real world. As the latest patch day showed, the official EVE servers are simply unable to cope with the high demand. Also a sizable population are either unwilling or more importantly unable to use the BitTorrent software.
An official MD5SUM will make 3rd party downloads trustable.
|

Scorpyn
|
Posted - 2004.11.26 19:11:00 -
[13]
Originally by: FlukeySphere Welcome to the real world.
Thanks 
|

Scorpyn
|
Posted - 2004.11.26 19:11:00 -
[14]
Originally by: FlukeySphere Welcome to the real world.
Thanks 
|

FlukeySphere
|
Posted - 2004.11.26 19:15:00 -
[15]
Edited by: FlukeySphere on 26/11/2004 19:17:37
Originally by: Scorpyn That kind of protection can be *****ed, better to put up the MD5 sum next to the download link. A lot safer that way.
Thats the general plan. 
|

FlukeySphere
|
Posted - 2004.11.26 19:15:00 -
[16]
Edited by: FlukeySphere on 26/11/2004 19:17:37
Originally by: Scorpyn That kind of protection can be *****ed, better to put up the MD5 sum next to the download link. A lot safer that way.
Thats the general plan. 
|
| |
|
| Pages: [1] :: one page |
| First page | Previous page | Next page | Last page |