Deep Island UAM database

General debates and discussion about the Guild of Writers and Age creation

Deep Island UAM database

Postby diafero » Fri Jan 27, 2012 7:57 am

Since Dustin no longer maintains his UAM database, we need an alternative to comfortably download and install ages for offline TPOTS installations. With the recent release of Somewhere, this became quite urgent (at least, a lot of people were complaining ;-) ), so in my spare time I created a copy of Dustin's UAM database (containing only the three most recent releases of every age), and added the recent age updates and releases (Rell-too and Somewhere). You can find the result at http://www.the-deep-island.de/uru-ages/. I did some testing, but there might still be rough ages. For the future, I plan to move most of the old files to the GoW server which Hoikas kindly provided (the DI hard disk is quite full already), and I hope to provide an RSS feed for easier notification of age updates - but the latter will probably not happen before end of February.

To use the new age database, you need to configure your UAM to connect to it: Hit the "Change Server" button in the UAM tab, and enter the following URL: http://www.the-deep-island.de/uru-ages/. Then hit "Ok" and finally "Get Latest List". That's it.

Currently, there is no upload form for age authors. I propose the following procedure for age releases:
* The age author uploads the archive with all age files on some one-click hoster and announces the release or update, with the link, on these forums
* As soon as I find the time, I can put it on to the Deep Island dataserver and UAM database, so everyone on the DI Shard or using that datavase can comfortably get the age. Impatient explorers do not have to wait, but if they choose to sue the original package they might hit into some rough edges (I perform some automatic checks, and file organization normalization, when putting an age onto the dataserver). And, of course, admins of other Shards do not have to wait until I finally wrote that exam, or whatever is blocking me ;-)

Please tell me if things work properly on your side. Suggestions for improvements are always welcome, both for the user and author side of things. However please keep in mind that Drizzle/UAM itself (that is, the tool you are using) is still unmaintained, I am just going to maintain that UAM database.
I prefer e-mails to "diafero arcor de" (after adding the at and the dot) over PMs.

"Many people's horizon is a circle with a radius of zero. They call it their point of view."

Deep Island Shard | Offline KI
diafero
Deep Island Admin
 
Posts: 2824
Joined: Mon May 05, 2008 5:50 am
Location: Germany

Re: Deep Island UAM database

Postby Karkadann » Fri Jan 27, 2012 3:26 pm

Yay It works,

Show Spoiler


Thank you thank you,
"It is the responsibility of every student to try and surpass there teacher"
Sorry teach a Bahro ate my homework.
Hanging onto anger is like eating rat poison and expecting the rat to die!
User avatar
Karkadann
 
Posts: 1220
Joined: Sun Aug 02, 2009 10:04 am
Location: Class Clown University

Re: Deep Island UAM database

Postby Rabenschwinge » Sat Jan 28, 2012 5:44 pm

Great, thank you! :)
Rabenschwinge
 
Posts: 86
Joined: Thu Mar 26, 2009 5:56 am

Re: Deep Island UAM database

Postby diafero » Thu Feb 02, 2012 6:03 am

The move of mos of the data to the GoW server is completed - thanks a lot, Hoikas!
For you, nothing should change. You may have to "Get the latest list" again if Drizzle still sees the old links.
I prefer e-mails to "diafero arcor de" (after adding the at and the dot) over PMs.

"Many people's horizon is a circle with a radius of zero. They call it their point of view."

Deep Island Shard | Offline KI
diafero
Deep Island Admin
 
Posts: 2824
Joined: Mon May 05, 2008 5:50 am
Location: Germany

Re: Deep Island UAM database

Postby gimlet » Sat Feb 04, 2012 6:53 am

Why am I getting a privacy/security/persistency risk warning? And a suggestion to delete the file _socket.pyd?
Gimlet (does the KI number matter anymore?)
gimlet
 
Posts: 13
Joined: Wed Feb 06, 2008 3:02 pm

Re: Deep Island UAM database

Postby Chacal » Sat Feb 04, 2012 9:58 am

You get this warning when you select the "Network access" module in Drizzle.
This module lets Ages access external content, for example get data from servers on the internet, which is a security and privacy risk.
If you have absolute confidence in Age writers, keep this module and disregard the warning.
Otherwise delete this module in Drizzle and you won't get the warning anymore.
Chacal


"The weak can never forgive. Forgiveness is an attribute of the strong."
-- Mahatma Gandhi
User avatar
Chacal
 
Posts: 2439
Joined: Tue Nov 06, 2007 2:45 pm
Location: Quebec, Canada

Re: Deep Island UAM database

Postby Branan » Sat Feb 04, 2012 11:40 am

Chacal wrote:You get this warning when you select the "Network access" module in Drizzle.
This module lets Ages access external content, for example get data from servers on the internet, which is a security and privacy risk.
If you have absolute confidence in Age writers, keep this module and disregard the warning.
Otherwise delete this module in Drizzle and you won't get the warning anymore.


There's no additional security/privacy risk to enabling the network access module. The python scripts in URU already have full system access - they can run arbitrary executables and scripts on the users computer.

The only benefit you'll get from disabling it is to make Drizzle STFU


EDIT: That's not to say I think scripts should have arbitrary network access - they probably shouldn't. But to imply that disabling it makes running fan ages safer is just wrong. There is always a risk when running python code from an unknown source.
Image
Your friendly neighborhood shard admin
User avatar
Branan
Gehn Shard Admin
 
Posts: 694
Joined: Fri Nov 16, 2007 9:45 pm
Location: Portland, OR

Re: Deep Island UAM database

Postby gimlet » Sat Feb 04, 2012 11:52 am

Branan wrote:...The python scripts in URU already have full system access - they can run arbitrary executables and scripts on the users computer......

Hmm - can one "sandbox" this? Set a firewall to prevent TPoTS from "leaving the premises" even if a "bad" age arrives via Drizzle?
Gimlet (does the KI number matter anymore?)
gimlet
 
Posts: 13
Joined: Wed Feb 06, 2008 3:02 pm

Re: Deep Island UAM database

Postby Tsar Hoikas » Sat Feb 04, 2012 11:58 am

gimlet wrote:
Branan wrote:...The python scripts in URU already have full system access - they can run arbitrary executables and scripts on the users computer......

Hmm - can one "sandbox" this? Set a firewall to prevent TPoTS from "leaving the premises" even if a "bad" age arrives via Drizzle?


Aside from running Uru in a virtual machine... no
Image
User avatar
Tsar Hoikas
Councilor of Technical Direction
 
Posts: 1898
Joined: Fri Nov 16, 2007 9:45 pm
Location: South Georgia

Re: Deep Island UAM database

Postby Chacal » Sun Feb 05, 2012 1:22 am

Branan wrote:But to imply that disabling it makes running fan ages safer is just wrong. There is always a risk when running python code from an unknown source.


Exactly. It is a question of managing risk.
Disabling network access lowers the risk.
I don't know about "safer", it is not a term we use in information security.
Chacal


"The weak can never forgive. Forgiveness is an attribute of the strong."
-- Mahatma Gandhi
User avatar
Chacal
 
Posts: 2439
Joined: Tue Nov 06, 2007 2:45 pm
Location: Quebec, Canada

Next

Return to General Discussion

Who is online

Users browsing this forum: No registered users and 1 guest