Source Pawn Text Editor - Page 2

Jasonbourne · 12-13-2012 , 04:20 Re: Source Pawn Text Editor

Quote:

Originally Posted by BAILOPAN

I've removed the attachment in the first post. As a general policy for protecting users, I think we should forbid attaching untrusted executable code. This doesn't necessarily mean source code is required (though maybe it should). Rather, if we're going to host executable code, we need some way to trust or vet it first.

All hail the mighty Bail

I personally think we would need to upload source for any exe we put on the forums
I can't belive that some people actually ran the exe ..

psychonic · 12-13-2012 , 07:46 Re: Source Pawn Text Editor

Quote:

Originally Posted by Jasonbourne

I can't belive that some people actually ran the exe ..

I didn't before checking to see that nothing was packed in and decompiling it first.

BAILOPAN · 12-13-2012 , 18:29 Re: Source Pawn Text Editor

Quote:

Originally Posted by Jasonbourne

I personally think we would need to upload source for any exe we put on the forums

Personally, I do think that would fit the spirit of the community

but we make exceptions for MM:S plugins and that seems fine.

recon0 · *Last edited by recon0; 12-13-2012 at 18:44.*

Quote:

Originally Posted by BAILOPAN

Personally, I do think that would fit the spirit of the community

but we make exceptions for MM:S plugins and that seems fine.

MM:S plugins are "usually" executed by server processes running under restricted permissions, so there's only so much damage they can do; an untrusted executable running on a client machine, though, could be pretty nasty.

+1 for requiring source code.

Dr. McKay · 12-13-2012 , 18:52 Re: Source Pawn Text Editor

Here, check out this cool program I made.

recon0 · *Last edited by recon0; 12-13-2012 at 19:04.*

It looks like all it does is print "My super-cool program!" to the screen. (Don't worry, I didn't execute it.)

Dr. McKay · 12-13-2012 , 19:04 Re: Source Pawn Text Editor

Quote:

Originally Posted by recon0

It looks like all it does is print My super-cool program! to the screen. (No, I didn't execute it.)

It's not even an executable, I just typed "My super-cool program!" in Notepad and saved it as an exe.

Also, that's not how you decompile exe files.

recon0 · *Last edited by recon0; 12-13-2012 at 19:09.*

Quote:

Originally Posted by Dr. McKay

It's not even an executable, I just typed "My super-cool program!" in Notepad and saved it as an exe.

Also, that's not how you decompile exe files.

I just opened the zip file in Notepad++ and looked for strings. Actually extracting the zip file and engaging in a serious analysis is way too much effort