Diff

Genuine question, what are you seeking here? What would you feel is appropriate compensation for your videogame crashing intentionally? He is no longer on the ModDB. He is no longer capable of uploading any mods at all. He is not and has never been capable of merging code into main directly.

Reproducible builds are unfortunately notoriously thorny. And so is automatically building other people's projects. Even solving both of those, there are some holes here that reduce the trust guarantee. If public source is not required, and source is not being reviewed, then you can just as easily upload evil source and the system will attest faithfully that your evil source is accurate to your evil DLL. This also doesn't stop someone from uploading private evil source to the ModDB that conflicts with what's in the public repo, but matches the evil DLL.

This thing specifically you claimed was happening with no hedging. There is no evidence of that happening and it is quite a claim to make without evidence. You laid this claim out specifically as if it were a concession on your part, an uncontested point to build off. It's not. Your misunderstanding is not a strawman.

I'm not interested in misrepresenting you or strawmanning you, that was not my intent. I will admit I'm not sure how I have managed to give you that poor impression. I never claimed it wasn't excluded from Git, so I'm not sure how I "lied," either. But I would be interested in continuing the discussing if you ever change your mind.

Wasn't intending to talk down to you, I included that bit for the benefit of the other fellows in here who don't know and are asking similar questions. We have no way of knowing until a statement has been made. We have no way of knowing even after that if we think ill of Anego. We have no way of knowing anything our computers do can ever be trusted if we want to get philosophical about it. We have no evidence that this thing, which you claimed is happening, has happened. That is an ass-pull far greater than claiming "We have no evidence of that." Can't be linked, it doesn't have a public home. It's excluded from Git. You know this, I know this. For accessing it, I recommend a decompiler. I like Rider, ILSpy is also cool. It's hiding in the "SettingsBuilder" class in the Yaml decoder's namespace. If you want it uploaded directly here, just say so and check back in a few hours. I accidentally left my laptop disconnected from Tailscale this morning when I left the house.

In that case I understand how you came to that conclusion. Those are two separate statements regarding two separate events. All code that goes into the game is reviewed, this is a standard software development procedure just to catch bugs and unintended behavior. As far as the mods, Maltiez let at least some people on the team know about his anticheat code inside his own mods, but not the full extent. There were no modifications to the core game API. And we can be relatively confident about that. If he inserted supporting anticheat code in the core game... why didn't the anticheat code it was supposedly supporting actually make use of it? It used normal methods, and I can think of nothing in there that would even benefit from being included in the game. As others have noted, the anticheat code predates him advising on the game. No statements, comments, or public evidence indicate that any anticheat code was added to the game, or any supporting functions or features to enable the anticheat code in Maltiez's mods. For accessing AdditionalStuff.cs, I can only recommend a decompiler. I like Rider, ILSpy is also cool. It's hiding in the "SettingsBuilder" class in the Yaml decoder's namespace.

Woah now, friend, where is any of this coming from? And that is a genuine question, I would very much appreciate knowing where you came to this understanding. No API changes were made to the game to support this anticheat behavior. No core game code was modified at all in relation to this issue, the responsible code was contained entirely within the affected mods. Maltiez's code, while well-hidden under the bones of a dependency, was not obfuscated. The additions were confined to one source file on top of what was checked into Git, "AdditionalStuff.cs." It's relatively short and its operations can be well-understood quickly.

You can decompile if you want, sometimes that's necessary. But if all you need is worldgen, it's all on GitHub: Anego Studios It's not open source, so I can't speak on licensing.

Maltiez's code wasn't obfuscated, just hidden under the bones of a bundled dependency. Hidden well. Even knowing it existed, it took me a while to find it. But once found, it's easily read. We can speak confidently about what the code did and didn't do. From my own research into it, the summary in the OP is pretty comprehensive. It mentions things I have found in the code myself and that I've seen missing from other summaries of the mod's behavior.

Wouldn't have avoided this unfortunately. Making it a dedicated, separate mod would have made it laughably easy to bypass. Patching out the checks of an anticheat mod like that is something you could accomplish following the generic "Quickstart" Harmony tutorial with 0 modding experience. It only works if you don't know it's there. Shouldn't have been done at all, but doing it any other way would have been pointless.

You seem more level headed, hello. It was missing from the public repository, it was only added during the build process and only present in the compiled releases. The code did take action to prevent itself from being spotted as the cause of the crashes, yes. It did conceal itself, absolutely. The meaningful difference is not in the past, it's now. Now that it's been revealed, we can reliably analyze it and talk about it confidently. We can speak authoritatively on what it did, what it didn't do, what effects it had, what unintended effects were possible, and what is just breathless, uninformed speculation that people are running away with. I think you misunderstand me as trying to defend/excuse Maltiez or say that this is "better" somehow. It's not. It's just useful.

They don't? They can be comorbid when you are writing bad code, but that general comorbidity goes out the window when you're writing code to intentionally produce certain effects. We know what his code did. We can disassemble and analyze it. Its effects were obscured but the code is not obfuscated. I'd love to have even more evidence of AI-riddled code being bad, but there is no evidence of that here in what you've presented and I couldn't find any myself when I went looking where you indicated I'd find it.

Yes, we know about the stability issues, that's literally what the code was designed to do. You claimed people were making claims of performance improvements. Your screenshots do not back you up. "No need to heap on made-up bullshit to dilute the actual bullshit" has always been my point.

Wouldn't read much into that without hard numbers to back it. Placebo effect's strong when performance is in question. Reflection (the type of code needed for code to analyze itself at runtime) is relatively slow, but not *that* slow. I'm also, like, not seeing that on the ModDB myself. Who's saying it? What are they saying? I see one comment related to performance and it's just:

Appreciate you asking, there's an awful lot of misinformation about the situation. I'm not a fan of what happened, but we don't help anything by drifting further away from the actual facts. There is a paid cheat client for Vintage Story. This is a product that has real users, it obfuscates its code, and it lets people cheat in multiplayer servers. Maltiez, who originally was just a modder but was actually hired by Anego later on, added code to 3 of his mods, including ConfigLib, that attempts to detect this hacked client and mess with them. When ConfigLib detects the cheat client during a multiplayer session, it will set random timers to disconnect the client, crash the game, or close the game normally. It does this in ways that hide that it's the one responsible for the crashes in the logs. From what I understand, Maltiez's detection paid attention mostly to variable names, whether they contained unprintable characters or whether they were consistently too short to be humanly readable, both signs of obfuscated code. I believe there was also some searching for specific strings associated with the cheat client. This has affected one innocent mod that I have heard of, Caves and Caverns, who obfuscated their code to prevent other people from stealing their tuned cave generation. There may be more, but like I said ConfigLib wasn't making it easy to identify it as the source.

Woof.mp4

Fun theory, but people are still talking about it right now. Better theory: They just don't like hawks.

I can find no person in this thread, top to bottom, telling you to be okay with it, so you still seem pretty confused. If I wanted to, yes, very easy. I just wonder about why I don't. Am I enjoying it here? Is this fun? Do I enjoy pointless bickering? Not sure, I just know I'm here now until I get bored. @Dilan Rona Pinning messages discussing the issue and directing all conversation to a dedicated area for it isn't very effective censorship, this is clearly more bait and now you have my attention as well. Cherish it.

Why was I here originally? Why am I here still? Because I get baited into stupid conversations online too easily. It's my fatal flaw, it's actually the reason I don't go on Discord or other major social media anymore. But even on a random web forum in the middle of nowhere, bait finds a way.

Idk, FBI was blowing up my phone within hours. I'm sure they'll do the same for you. Literally every single person that uses mods or even plays videogames is trusting some random idiot online to run hidden code on your computer unless you decompile and analyze every binary. That's just the power of proprietary software but I'm not going to get into all that right now. I literally never go on Discord, I was just there for information on whatever [Current Issue] is. I wasn't even making any statements on the Maltiez situation here, I was only trying to explain to you what happened on Discord since you seemed confused. If you're not looking for clarification, then I can only echo LadyWYT: File a ticket.

My dude this is so much not what's going on and not how the real world works but fine. Report it to the FBI. They have an anonymous online tip line, I've used it before, they respond quite quickly. Go ahead and put your gamer drama in there. You have that power as does anyone else. It's literally not possible to cover up federal crime by banning people on a Discord server.

You did move to offtopic, but the request was not to post about X anymore in main. And you did. In direct reply to the mod explaining why he made that call. Posting in offtopic doesn't exempt you from then going back to main later. You have the real reason, no gamer conspiracies needed.

You did reply directly to the mod's explanation for cracking down with more of the thing they're cracking down on. Even if you also posted in another channel, that's what probably did you in, Stoney.

So like in the top right of the forums there's a this That takes you to all unread posts. And there's a bunch of other filters in there, and you can create new streams based off of that. Today I stumbled through the Stream Options dropdown at the top of every stream, and inside that dropdown is an option to set any stream as your default when you press that header button. I didn't like that clicking on threads removed them from the feed, so I made a new "Activity" stream that includes both Read and Unread here: https://www.vintagestory.at/discover/30/ If you also don't like that, you can set this as your default stream too.

How are you running it? It's a terminal application