search

gtav-ent / GTAV-EnhancedNativeTrainer

GTA V PC Enhanced Native Trainer
http://gtaforums.com/topic/789786-vrelwip-enhanced-native-trainer
GNU General Public License v2.0
37 stars 14 forks source link

Another failure of open source #126

Closed gtav-ent closed 9 years ago

gtav-ent commented 9 years ago

I found out just now that one of the collaborators on this project has leaked the updates to the $20-a-time group of online mod makers, before I've even released the recent work - so props etc.

There are 24 collaborators, most of which have contributed work. I have now removed some of those too.

If I can't even make this work, I think it's time I stopped bothering with it altogether.

How do the other recent contributors feel about this?

shaneallgeier commented 9 years ago

Well, that's depressing. Can you link to where you found this leak? I'm hoping to track the leaker down. On Jul 22, 2015 10:54 AM, "gtav-ent" notifications@github.com wrote:

I found out just now that one of the collaborators on this project has leaked the updates to the $20-a-time group of online mod makers, before I've even released the recent work - so props etc.

There are 24 collaborators, most of which have contributed work. I have now removed some of those too.

If I can't even make this work, I think it's time I stopped bothering with it altogether.

How do the other recent contributors feel about this?

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126.

gtav-ent commented 9 years ago

The people publishing it are at http://nigger.menu

I'm informed that in their next version, it will have:

V5.12: Scripthook Updated for 1.0.393.4 Shake camera Water hydrant attack Clone vehicle Burn under kill menu is now anonymous New object menu with every object in the game Drop parachutes for other players Animation menu with every animation Movement clipsets Bodyguards Go to last vehicle Weapon damage modifier (replaced one hit kill) Neon light menu Hotkeys Vehcile preview images New teleports Updated error log (nigger.log) FiveM support

Sound familiar?

FlakTheMighty commented 9 years ago

That's really disappointing, I haven't contributed anything here but now I feel like I should. I've got a nice freeze radio thing that I can add, it's not the greatest or most efficient, but it works. On Jul 22, 2015 10:58 AM, "gtav-ent" notifications@github.com wrote:

The people publishing it are at http://nigger.menu

I'm informed that in their next version, it will have:

V5.12: Scripthook Updated for 1.0.393.4 Shake camera Water hydrant attack Clone vehicle Burn under kill menu is now anonymous New object menu with every object in the game Drop parachutes for other players Animation menu with every animation Movement clipsets Bodyguards Go to last vehicle Weapon damage modifier (replaced one hit kill) Neon light menu Hotkeys Vehcile preview images New teleports Updated error log (nigger.log) FiveM support

Sound familiar?

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-123770183 .

shaneallgeier commented 9 years ago

Well, I couldn't find that post on their site so I'm guessing it's behind a paywall. Since there's no way I'm giving them any of my money, I probably won't be tracking them down after all.

I'm not sure what we can do about this. I really don't want to see this project abandoned - especially since it seems to be the best trainer available.

And even if you actually removed the leaky collaborator, there's still a chance that people will reverse engineer the binaries we release and remove whatever online checks we have. At that point, we'd have to turn to obfuscation and this project would become way less fun to work on.

Despite that, I would still like to see this project continue. People are going to make online cheats no matter what. If they no longer have access to our source code then they'll probably move on to something else, or they'll simply be stuck writing their own code.

@FlakTheMighty If you're concerned about the efficiency or cleanliness of your feature, you can push it to a separate branch and then we can all help out on it. Or if you prefer to do it yourself, you can make a pull request and others can comment on your code.

Its-Patchi commented 9 years ago

The thing with hackers is that absolutely nothing can stop them, even with this extreme decision they will be able to get resources elsewhere. I read a2n article from either IGN or PC Gamer whom interviewed an unamed hacker/hack developer, and it said that after 30 minutes of the newest security patch for Counter Strike Global Offensive, (which is probably the most security mass patched game ever) a hack was developed. The interviewer stated so many true and understandable things about how no maater what they will find a way. And developer of garrys mod, ,facepunch/garry said that the worst thing you can possibly do is to stop the development of a mod, as it could lead to other recreating the mod, but in a less organised and tested manner, which could lead to even more hacks being made due to possible, new loopholes. Thus what I am saying is please do not cease development for this mod, as it is excellent, and possibly the best as I still wont play SP until U28 is released. I feel like it is my birthday every time an update is released. As stated ceaseing development will only make hackers go somewhere else. Not one game will ever be unhackable, not even Battlefield, so please continue development as I know you are doing you're best to prevent it but your mod is not the problem, according to me it is people with good knowledge to be able to create versions of scripthook v that bypasses the online check thus no error is thrown to your mod. Plus if the people claim that their are hackers but don't report them, obviously the hacker count won't go down. In fact i reported and caused the ban of 25 hackers this week.

rkwapisz commented 9 years ago

Wow. They're not even subtle about stealing code from this project. What a bunch of children. Whoever is leaking this stuff to them must have some financial incentive to do so. If they had a one-hit kill option in their trainer already, what is the point of them stealing our weapon damage mod code?

I've contributed because I love coding, and I've already learned so much. It would be a shame to close the repo because of some bad apples who feel differently about treating people's work with respect.

I'm still committed to helping ENT be the best trainer out there. A bunch of script kiddies trying to make a buck isn't going to deter my passion for this project. I hope you guys feel the same.

Its-Patchi commented 9 years ago

here here ^

rkwapisz commented 9 years ago

They're free to do whatever they want with our code, but since they're violating the license by not distributing their source code freely, can something be done via http://www.gnu.org/licenses/gpl-violation.en.html ?

sub205 commented 9 years ago

of course you can. but you have to get an address for legal actions. i was not able to find an imprint in their forum. As they are selling their stuff for money while using our code, there is of course the possibility to do some legal actions.

Am 22.07.2015 um 22:00 schrieb Robert Kwapisz:

They're free to do whatever they want with our code, but since they're violating the license by not distributing the source code freely, can something be done via http://www.gnu.org/licenses/gpl-violation.en.html ?

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-123846097.

rkwapisz commented 9 years ago

I feel that the failure to protect the online community is 100% on Rockstar, and you can't get down on yourself and feel like you're to blame. Protecting GTA Online was never the mandate of the project, nor was it Alex's goal when developing ScriptHookV. There are so many different ways Rockstar can prevent online cheats, but they're still catching up. Eventually they'll figure it out.

Is it frustrating that people have taken this code and use it to cheat? Yes. Is it frustrating that people have made money off the backs of people working on this project? Sure. That's the unfortunate reality -- there are people out there who will pay for any advantage in any situation. But in the end, for me, this is a hobby. I'm doing this because I enjoy it.

Online cheating will persist regardless of what happens to this project. Fact is, we've got our shit figured out here, right now, and it would be a shame to just abandon it all. Let's let Rockstar worry about getting theirs figured out while we continue doing our thing and making the most kickass GTA V trainer ever.

FlakTheMighty commented 9 years ago

I've managed to get ahold of one of their "developers" Skype names if you'd like it.

Its-Patchi commented 9 years ago

@gtav-ent will you even read your supporter's comments here and on http://gtaforums.com/topic/789786-enhanced-native-trainer/ ? Better yet will you ever reply?

rkwapisz commented 9 years ago

Flak -- There's nothing to be gained by engaging these guys in dialog. I've seen their webpage and I've seen their Reddit comments. They soak up schadenfreude like a sponge soaks up water, and they're just generally unintelligent. They know that what they're doing is breaking copyright law and they don't care. FBI isn't going to go after them.

Let's be real -- making calls to GTA's functions is easy. If you want to blow up a server, it's trivial to get a for loop to pull every player's ID and then make them explode. The real difficulty comes in developing the architecture and features around these functions, and that's the stuff that got stolen because they can't do it themselves.

They're idiots. Best way to go after them is report their Paypal accounts for accepting funds for copyrighted work that doesn't belong to them. Paypal is notorious for freezing accounts that smell the least bit fishy. Even shutting the owner out of just $60 in a Paypal account is enough to put a smile on my face.

qaisjp commented 9 years ago

If they're selling it they need to be stopped, irregardless of the troublemaking nature of the mod.

ghost commented 9 years ago

wtf i have just got out of hospital and i read this grr the same thing is happening with mafins and his menu

https://www.youtube.com/watch?v=HeQFDcMQ9eE Notice the leeching and copying from menyoo? [7/20/2015 4:52:28 PM] MAFINS: this n_gga [7/20/2015 4:54:07 PM] MAFINS: Inspects every new menyoo update. uses my base. copies everything in my updates as well. And stole 2 of my mapmods somehow. Need f_cking obfuscation.

rkwapisz commented 9 years ago

Obfuscation won't do anything if it's being leaked by someone internal to the project. Is Menyoo being decompiled somehow or is the source getting leaked?

ghost commented 9 years ago

i wasn't aware of any application that can decompile c++ i dont think its possible so the source must be leaked / github exploit or something

FlakTheMighty commented 9 years ago

There's a few ways of decompiling C++, but you get Assembly back.

gtav-ent commented 9 years ago

I'm pretty sure they got it from here, i.e. being a collaborator. I'm less sure who it was, although I have an idea. Time will tell.

The problem I have is this. I'm a professional software engineer, and personal feelings about it aside, I can't keep doing this - or even support it - if my work ends up providing significant help towards someone else's abuse.

What do you guys want to see happen? What will you be happy with? Since we went to closed GitHub, the contributions have taken off again, and you deserve a voice. At the same time, it's shown that this way of working is still a dangerous model - it's very hard to trust people.

sub205 commented 9 years ago

Personally, i would tell paypal they are selling pirated source-code without obaying the GPL license. Everyone of us can contact paypal individually. More voices than just a single will for sure put some pressure on it. Also, we might contact gnu.org (https://www.gnu.org/licenses/gpl-violation.html)

This is a serious violation of the license.

Maybe the name of the product "nigger.menu" will also give paypal some more pressure to do something.

I was a bit confused why this project is closed-source at first, but now i see why. As i do not play GTA online, i may not be really sensitive to the cheaters, also i thought the in-built protection of the game itself is good enough. But ok, another thing learned.

Has anyone registered to the forum there and got some address or responsible person contacts? whois-data? I'll contact paypal later, but maybe its better if we plan this step together.

kind regards, Stephan

gtav-ent commented 9 years ago

Don't worry about that, I'm already doing most of that - probably the less said the better at this point :-)

qaisjp commented 9 years ago

Also, it's worth noting that the nature of this closed sourceness actually violates the GPL agreement.

Just playing devil's advocate here.

On Fri, 24 Jul 2015 10:15 pm gtav-ent notifications@github.com wrote:

Don't worry about that, I'm already doing most of that - probably the less said the better at this point :-)

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-124726799 .

FlakTheMighty commented 9 years ago

@sub205 I registered to their forum and they've got nothing on there. But I did manage to get the one that goes by FreeOffset or Smokevapors Skype name.

rkwapisz commented 9 years ago

People's work will always be hacked, cracked, reverse-engineered, ripped off, etc. It's inevitable, and it's an unfortunate risk and inevitability that exists when you create something original, interesting, and innovative. It's easy to lose sight of all the good things your work has produced when this happens.

If people gave up each time someone took their work and did something shady with it, there would be no more innovation. It really sucks to be the one who has his sweat and hard work stolen and misappropriated by others, but it's important to keep your eyes on your goal and not let it stop you; in this case, we're all here to make the best trainer out there.

Best we can do is try to "plug" the leaks. Hopefully this has already been done. There was the unfortunate risk of at least one unscrupulous user getting into the closed group, but hopefully the benefit of having extra contributors working on this wonderful project outweighs the negative consequences of what should be a one-time thing.

I'm all for keeping this alive so we can all contribute. I'm having fun learning new things, recalling old things I used to know, and thinking of ways to improve the trainer. A bunch of kids isn't going to make me lose sight of the fact that apart from giving something to the GTA V community, I'm also improving my own knowledge of something I love to do.

sub205 commented 9 years ago

nope, it doesn't.

as we all agree that we don't want to publish the source code of our work, one can not simply withdraw it to other projects and sell it. its theft - end of story.

Am 24.07.2015 um 23:43 schrieb Qais Patankar:

Also, it's worth noting that the nature of this closed sourceness actually violates the GPL agreement.

Just playing devil's advocate here.

sub205 commented 9 years ago

in germany, every private or commercial site needs an imprint. if not, every lawyer can make $$$ fast ;-)

Am 25.07.2015 um 01:34 schrieb FlakTheMighty:

@sub205 https://github.com/sub205 I registered to their forum and they've got nothing on there. I have the one that goes by FreeOffset or Smokevapors Skype name.

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-124766270.

gtav-ent commented 9 years ago

It's true that it's currently in breach of its own license. However the only people who can complain are the copyright owners, i.e. prior contributors, who are all still collaborators. It probably needs sorting out but it can wait until a few things are figured out.

Its-Patchi commented 9 years ago

Contribution wise i don't do code as I only know Java, thus ask me for pics or other stuff. Will learn it this semester of varsity

gtav-ent commented 9 years ago

After doing a little digging, I've removed Danny Simms from this project.

FlakTheMighty commented 9 years ago

So we should be good now? No more leaks?

gtav-ent commented 9 years ago

Who knows!

shaneallgeier commented 9 years ago

Aww, that sucks. He actually contributed some useful code occasionally. Oh well, c'est la vie. Let's hope that's the last of the leakers.

rkwapisz commented 9 years ago

I had a feeling it was Simms as well, for a number of reasons. Might wanna let the maintainer of Menyoo know; I think Simms was involved with that project as well and they just had a leak.

shaneallgeier commented 9 years ago

I just got an email notification that dannysims forked @Andre-Maartens' fork of this repo. Also paging @FlakTheMighty since you also have a fork of this repo. You two need to go to your settings page (either here or [here](https://github.com/FlakTheMighty /GTAV-EnhancedNativeTrainer/settings/collaboration)) and remove dannysimms from the list of collaborators.

FlakTheMighty commented 9 years ago

Yeah I got that email as well, I wasn't aware forking shared the collaborators. He's off mine now.

qaisjp commented 9 years ago

Yes, forking does share collabs. I have gotten several emails saying that I've been added to forks, this is actually one of the reasons why NTAuthority strictly prefers GitLab to GitHub (stricter controls over forks)

On Sun, 26 Jul 2015 12:35 am FlakTheMighty notifications@github.com wrote:

Yeah I got that email as well, I wasn't aware forking shared the collaborators. He's off mine now.

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-124914769 .

gtav-ent commented 9 years ago

Ha, didn't know that. No apparent harm done yet. I'm going to remove @Andre-Maartens briefly and add him back, so it kills off that branch. Don't worry, not your fault.

FlakTheMighty commented 9 years ago

We might want to send an email to Github to get them to remove his fork since he still has it.

shaneallgeier commented 9 years ago

It's not a huge deal if dannysimms has his own repo. He certainly still has a local copy of it on his computer. The important part is that he no longer has access to any new commits we add. On Jul 26, 2015 12:45 PM, "FlakTheMighty" notifications@github.com wrote:

We might want to send an email to Github to get them to remove his fork since he still has it.

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-125022309 .

gtav-ent commented 9 years ago

It's a private fork, and he can't read or write to this one. Ultimately he has the code from that point in time whatever happens, so I'm probably going to just it leave alone. The only annoyance is that he's got a private repo out of it.

I could possibly delete it by re-adding him to this project and then removing him immediately, but if nothing else it draws attention to it, whereas noone outside of this project actually knows quite what has happened yet.

qaisjp commented 9 years ago

Hmm I didn't know that was possible. You can't rename forks anyway afaik, so if he wants to use that private repo he'll be stuck with that name.

On Sun, 26 Jul 2015 6:53 pm gtav-ent notifications@github.com wrote:

It's a private fork, and he can't read or write to this one. Ultimately he has the code from that point in time whatever happens, so I'm probably going to just it leave alone. The only annoyance is that he's got a private repo out of it.

I could possibly delete it by re-adding him to this project and then removing him immediately, but if nothing else it draws attention to it, whereas noone outside of this project actually knows quite what has happened yet.

— Reply to this email directly or view it on GitHub https://github.com/gtav-ent/GTAV-EnhancedNativeTrainer/issues/126#issuecomment-125022847 .

FlakTheMighty commented 9 years ago

I renamed my fork to have "Flak Fork" in it.