Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

BOUNTY:: Web-Based Encrypted Whitelist

Burke Prefect
Cafe Owner, Superhero
Join date: 29 Oct 2004
Posts: 2,785
07-13-2006 14:50
Can't say why, I just have sudden need for one :D

Web Setup:
Website server-side list of names, XOR'd, only accepting connections from secondlife's servers, not just any browser. (files edited serverside, so no problem there).
LSL Setup:
On rez, calls up pre-programmed URL, pulls xor'd string down, applies key, and loads whitelist names for compare against for touch, listen, sensor, etc.

Prize:
L$1000 + a free copy of my next invention, to be determined.
Bonus Objectives: None I can think at this time.
_____________________
Jesse Malthus
OMG HAX!
Join date: 21 Apr 2006
Posts: 649
07-13-2006 15:18
I'm interested. I'm away from SL until tomorrow, but I can do a PHP script
_____________________
Ruby loves me like Japanese Jesus.
Did Jesus ever go back and clean up those footprints he left? Beach Authority had to spend precious manpower.
Japanese Jesus, where are you?
Pragmatic!
Burke Prefect
Cafe Owner, Superhero
Join date: 29 Oct 2004
Posts: 2,785
07-13-2006 15:29
Np. I was just a thought. I'm like... I have an email based whitelist and a way to get it's addres from the website.... but it's still a pain in the ass. So.... how about, since it'll be a short list of names, I just put it on the website.... it'd work. Also, the ability to filter by owner name,etc from objects would be nice. But it'd have to be toggleable. :D
_____________________
Keknehv Psaltery
Hacker
Join date: 11 Apr 2005
Posts: 1,185
07-13-2006 15:37
Can't you simply not make the name of the file public? It will make all the encryption unnecessary, and XOR is pretty weak anyways.
Burke Prefect
Cafe Owner, Superhero
Join date: 29 Oct 2004
Posts: 2,785
07-13-2006 16:06
From: Keknehv Psaltery
Can't you simply not make the name of the file public? It will make all the encryption unnecessary, and XOR is pretty weak anyways.


I suppose, but a light application of encryption still helps. Just cause it's not public doesn't mean it won't be stubled upon. I do intent to fix up robots and httaccess so only sl's servers can hit it, but I just want to be sure.
_____________________
Jesse Malthus
OMG HAX!
Join date: 21 Apr 2006
Posts: 649
07-13-2006 20:24
From: Burke Prefect
...I have an email based whitelist and a way to get it's addres from the website....

I think I wrote the script that put out the encrypted email address XP

From: Burke Prefect

Also, the ability to filter by owner name,etc from objects would be nice. But it'd have to be toggleable. :D

Could you elaborate a little more on this? I've got the base code down for the ACL and encryption.
_____________________
Ruby loves me like Japanese Jesus.
Did Jesus ever go back and clean up those footprints he left? Beach Authority had to spend precious manpower.
Japanese Jesus, where are you?
Pragmatic!