search

CCBlueX / Old-LiquidBounce-Issues

Issue tracker for LiquidBounce.
https://liquidbounce.net
20 stars 8 forks source link

[FEATURE] Signing for Scripts #3865

Open superblaubeere27 opened 4 years ago

superblaubeere27 commented 4 years ago

Scripts are marked as unsafe as long as they aren't signed by us.

Tcm9 commented 4 years ago

Meh this is useless. Many scripts are open source. There you can see exactly what it does. And those who obfuscate don't want to show the code to others. There will be only a few people who will give the scripts to check.

superblaubeere27 commented 4 years ago

@Tcm9 No it is not useless.

Tcm9 commented 4 years ago

So yes, the sense is there. But I would be interested to know who will give you his obfuscated script then. Make it so that normal scripts just don't say anything. And for safe scripts it should say that it is safe. This way you don't make everyone insecure if every second script is "unsafe".

SenkJu commented 4 years ago

No one is forced to give us his script. Only people who want it to be signed do so. If you don't care, just don't give us your script to check it through. This is only supposed to let our users know that a script they are using is 100% safe.

Tcm9 commented 4 years ago

ok

aftery142 commented 4 years ago

How are you gonna make that work with a public client src tho

SenkJu commented 4 years ago

I have explained the purpose of script signing multiple times already. I am not going to do it again. Just read what I have said.

yorik100 commented 4 years ago

You can actually do pretty nasty stuff with scripts and if they're obfuscated it can sometimes be hard to know like sending requests to a website or accessing files that aren't related to scripts

1zun4secondary commented 4 years ago

Maybe later. We currently don't have a good concept right now.