Sentinel+ character extractor: Here it is!
By
Ad Astra,
Posted on: 2012-09-06 24:01 in CoH and CoV General Discussions
Edit: Just got an updated version and uploaded it; the one at
http://cit.cohtitan.com/downloads/SentinelPlus.tgz
Has been updated with fixes for all known issues. So grab a fresh copy and find us some more!
Quote:
Would this be one (or more) of them?
|
Originally Posted by Mind Forever Burning
Five years later, the stub had still never been replaced with real encryption the way I had intended. That year users found a way to trivially gain access to the micro feature... not by reverse engineering my ridiculous toy algorithm, but by simply swapping versioned components from other installations, defeating the higher level logic that decided whether the encryption handshaking needed to happen at all.
There's probably more than one lesson in there, somewhere. |
My characters at Virtueverse
Faces of the City
Quote:
There are a couple of systems I have authorization to for which I have both an access code and a duress authentication code. The system I mentioned above contained support for duress authenticators but the client didn't want to use them.|
Originally Posted by Megajoule
|
On a laptop I would use something like a TrueCrypt hidden volume.
The lesson is there is always a procedural element to security separate from the technological element. Something I tell/remind IT security professionals often is that bank vaults are rated according to the estimated time it would take to break into them. That time is often surprisingly short: generally minutes to hours.
The reason its not that long is that the purpose of a bank vault is not to protect the contents. The purpose of a bank vault is to protect the contents long enough for the police to arrive and arrest the would-be bank robbers. Something IT security people often forget when designing security systems.
I usually then quiz them: why is it necessary for us to have eight character passwords protecting our files but only four digit pins protecting our money?
[Guide to Defense] [Scrapper Secondaries Comparison] [Archetype Popularity Analysis]
In one little corner of the universe, there's nothing more irritating than a misfile...
(Please support the best webcomic about a cosmic universal realignment by impaired angelic interference resulting in identity crisis angst. Or I release the pigmy water thieves.)
The first rule of cryptography:
Quote:
You guys are out of control. Version 1.0, version 1.1, then a Mac version, in what.... 11 days? |
Originally Posted by Codewalker
Edit: Just got an updated version and uploaded it;
|
yikes!
Very impressive.
Paragon City Search And Rescue
The Mentor Project
Quote:
There was also a stealth update a couple days ago for 1.1 that fixed a handle leak (non-issue since it exits after each run anyway), and the line endings for the bio text, but since they were both minor issues the version number wasn't bumped. |
Originally Posted by Ironblade
You guys are out of control. Version 1.0, version 1.1, then a Mac version, in what.... 11 days?
yikes! Very impressive. |
Quote:
At some point, I was sure that I'd have to step in and remind the guys that we don't have the resources mail RSA key fobs to everyone. Thank goodness it didn't get to that point.
|
Originally Posted by Codewalker
If it were up to me it would be a 4096-bit RSA signed SHA512 hash with a secret salt that's assembled by hardened code with reverse engineering countermeasures, but that would be massive overkill and probably a waste of time to implement given that this needed to be available sooner rather than later.
|
We've been saving Paragon City for eight and a half years. It's time to do it one more time.
(If you love this game as much as I do, please read that post.)
Quote:
You stealth-updated my software? O-:|
Originally Posted by Codewalker
There was also a stealth update a couple days ago for 1.1 that fixed a handle leak (non-issue since it exits after each run anyway), and the line endings for the bio text, but since they were both minor issues the version number wasn't bumped.
|
I'm gonna go sulk in the corner now...
Quote:
im in ur repoz fixin ur codez.
|
Originally Posted by GuyPerfect
You stealth-updated my software? O-:
|
Quote:
That explains why the newest version is just saving pictures of cute kittens! |
Originally Posted by Codewalker
im in ur repoz fixin ur codez.
|
Quote:
|
Originally Posted by ShadowNate
;_; ?!?! What the heck is wrong with you, my god, I have never been so confused in my life!
|
Quote:
I don't care if it gets hacked, only if it gets hacked before I die by someone that makes less money than me.
|
Originally Posted by GuyPerfect
The first rule of cryptography:
|
[Guide to Defense] [Scrapper Secondaries Comparison] [Archetype Popularity Analysis]
In one little corner of the universe, there's nothing more irritating than a misfile...
(Please support the best webcomic about a cosmic universal realignment by impaired angelic interference resulting in identity crisis angst. Or I release the pigmy water thieves.)
Can someone post a step by step instruction of what to do with this program for the computer illiterate..
Thank you...
The hard things I can do--- The impossible just take a little bit longer.
If numbers are so much more important than a teammate who is fun to play with, forget about the game altogether and go play with a calculator instead. -Claws and Effect-
Quote:
|
Originally Posted by Airhammer
Can someone post a step by step instruction of what to do with this program for the computer illiterate..
Thank you... |
- Start City of Heroes
- Log in to the character you want to backup
- If you want your badges, type /infoself into the chat box
- While leaving CoH open in the background, switch over to the folder where you downloaded Sentinel+
- Double click the Sentinel file you downloaded
- It's done!
Are there any specific parts you're unsure about? You can repeat steps 2-6 for each of your characters.
Quote:
|
Originally Posted by ShadowNate
;_; ?!?! What the heck is wrong with you, my god, I have never been so confused in my life!
|
actually im just having an issue about how to download it.. the first time I did it opened up but I dont see the file on my PC anywhere.. I would have just saved it to desktop for simplicity but I didnt get the option to ever do so...
again excuse my ignorance..
The hard things I can do--- The impossible just take a little bit longer.
If numbers are so much more important than a teammate who is fun to play with, forget about the game altogether and go play with a calculator instead. -Claws and Effect-
You mean when you clicked the link to download it, it simply automatically opened the program? What web browser are you using?
Quote:
|
Originally Posted by ShadowNate
;_; ?!?! What the heck is wrong with you, my god, I have never been so confused in my life!
|
Quote:
Yes thats what happened. I am using chrome but I have Firefox and IE ( which I never use )
|
Originally Posted by Kitsune Knight
You mean when you clicked the link to download it, it simply automatically opened the program? What web browser are you using?
|
The hard things I can do--- The impossible just take a little bit longer.
If numbers are so much more important than a teammate who is fun to play with, forget about the game altogether and go play with a calculator instead. -Claws and Effect-
Quote:
In Chrome, right click on this link and select 'Save Link As...' from the menu, and then select where you want it to be downloaded to.
|
Originally Posted by Airhammer
Yes thats what happened. I am using chrome but I have Firefox and IE ( which I never use )
|
Quote:
|
Originally Posted by ShadowNate
;_; ?!?! What the heck is wrong with you, my god, I have never been so confused in my life!
|
I've found this utility to be useful because it allows me to search the XML files for items that are on my characters (I use grep). The only problem is that the names used are internal to the game, and not the names displayed to the user. That means that IOs have names like "Crafted_Luck_of_the_Gambler_A" instead of the actual name, which includes the bonuses that the IO gives.
It would be really cool if the file could also include the display name of the items, perhaps inside the <slot> tag along with things like the level="50" information. That way I could grep the files to see which character has what and actually know what it means .
The way text is organized in the game, the closest the exporter could reasonably get is a "p-string", the game's internal identifier for text that gets stored in a hash table. They did this so long text could be represented with short IDs regardless of what language the client was set to use.
In short, there's not really any conventional way for Sentinel+ to resolve these ID strings into their corresponding English display names.
Worse comes to worse, you could always copy the internal name into the City of Data URL to see what it is: http://tomax.cohtitan.com/data/power..._the_Gambler_A
EDIT:
Come to think of it, you could probably wget along with your grep and automate the whole thing that way.
.
Quote:
There are some unconventional ways, but last I checked, the post about not discussing them was still there.
|
Originally Posted by GuyPerfect
In short, there's not really any conventional way for Sentinel+ to resolve these ID strings into their corresponding English display names.
|
Cool tool!
Now, if someone could figure out how to make an external custom editor ...
@Spindisc
Super Babes database
http://www.randomdice.com/coh/
Electronic Super Greetings
http://www.randomdice.com/cohgreetings/
Quote:
The file clientmessages-en.bin within the bin.pigg archive contains the mappings between the p-strings and their corresponding text. But in order for Sentinel+ to support that, it would need a PIGG archive handler (which includes, to an extent, a VFS implementation), zlib support and since the p-strings aren't sorted, it would need to pre-process the information for fast access when the exports are made. Every single time you run the program.
|
Originally Posted by Katie V
There are some unconventional ways, but last I checked, the post about not discussing them was still there.
|
Is there a version of this in the works that will work for the Beta server? As a non-vip, I can't play most of my characters on the regular servers, but I can play them on the beta and the free test servers.
Quote:
Couldn't a database be created that maps the internal names (that are currently exported) to the display names, and package that along with either Sentinel+, or another utility that takes the xml files as input? No need to then dive into the PIGG files on every run, just read the database shipped with the utility. CoD's database would likely be a good starting point.|
Originally Posted by GuyPerfect
The file clientmessages-en.bin within the bin.pigg archive contains the mappings between the p-strings and their corresponding text. But in order for Sentinel+ to support that, it would need a PIGG archive handler (which includes, to an extent, a VFS implementation), zlib support and since the p-strings aren't sorted, it would need to pre-process the information for fast access when the exports are made. Every single time you run the program.
|
IMO, making it a separate utility is the better course of action, as it leaves Sentinel+ to focus on what it's meant for. Anyone using grep to search through the file could likely handle throwing some pipe action in there.
Quote:
|
Originally Posted by ShadowNate
;_; ?!?! What the heck is wrong with you, my god, I have never been so confused in my life!
|
MAC VERSION!!!!! Squeeeee.
Ahem...I mean to say that the script appears to be working. One character saved xml file.