Windower Patch @ Aprox. 10 PM Tonight

[Hyjynx]

I realize there are ways around every fix but honestly, how many people do you think would use 3rd party programs if windower didn't exist?

All the people that do now. If windower didn't exist, said 3rd party programs would have been coded to work in a full screen environment or had some sort of windowing feature included in the package.

Windower makes it "easier" true, but blaming windower for bots ect is like blaming air plane manufacturers for skydivers.

[Mekami]

Edit: The whole issue surrouding timestamp and being released on accident... it was not an accident. I had planned to release it with this newer version, as soon as I fixed the bugs. However, the plugin module and the plugin itself cause problems with POL files due to the method it uses to modify the chatlog, for a currently unknown reason. This in turn causes POL to detect a problem when FFXI loads and will refuse, forcing you to reinstall the whole thing at some point. I wanted to prevent people from becoming further upset with me by notifying them. I don't appreciate people thinking I am lying to them or trying to use a scare tactic to cover something up... when all I have done is provide a program people enjoy for free, and fixed it when it broke-- for free. Why tell everyone to delete their whole directory? Simple: I want re-installation to be easy for those who aren't fantastic with computers. (Please remember I get people who say their windower is broken, and they don't have the files in the same directory to work together. So I have to cater to these people.) Also, please realize that if a GM looks at your logs at all, they will see the timestamp and you will definitely be banned. This was another reason it wasn't made public yet, until I finished working on a mechanism to hide it from GMs (there are similar mechanisms for other parts of Windower).

Don't know if that's been posted yet... straight from ffxi.archbell.com

[Pro]

Azaril created Windower, not Cliff. Cliff just picked up where azaril left off.

[SephYuyX]

Edit: The whole issue surrouding timestamp and being released on accident... it was not an accident. I had planned to release it with this newer version, as soon as I fixed the bugs. However, the plugin module and the plugin itself cause problems with POL files due to the method it uses to modify the chatlog, for a currently unknown reason. This in turn causes POL to detect a problem when FFXI loads and will refuse, forcing you to reinstall the whole thing at some point. I wanted to prevent people from becoming further upset with me by notifying them. I don't appreciate people thinking I am lying to them or trying to use a scare tactic to cover something up... when all I have done is provide a program people enjoy for free, and fixed it when it broke-- for free. Why tell everyone to delete their whole directory? Simple: I want re-installation to be easy for those who aren't fantastic with computers. (Please remember I get people who say their windower is broken, and they don't have the files in the same directory to work together. So I have to cater to these people.) Also, please realize that if a GM looks at your logs at all, they will see the timestamp and you will definitely be banned. This was another reason it wasn't made public yet, until I finished working on a mechanism to hide it from GMs (there are similar mechanisms for other parts of Windower).

Don't know if that's been posted yet... straight from ffxi.archbell.com

I bet that guy is really pissed at me lol.

Kekeke 'scare tactic'. Truth is though ive yet to have any problems with the 'things' I found on the site. Im not using my acc though :3

[Devek]

http://virusscan.jotti.org/[/url]

Since when are a few lines of code that can report keyboard entries and sent to a URL noticable?

That online shit doesnt really work for programs like these.

Not to mention that the good ffxi trojans don't log keystrokes..

Your password is stored 4 places plain text in polcore.dll..

Nope.

I bet you're soo stupid.... you got some hex editor or something and found the actual polcore.dll on your hard drive and searched that file for your password.

Of course you didn't find it! I must be wrong.. I must be such a moron!

Fucking eurotrash.[/quote]

I haven't looked myself, but you did say it was stored in plain text. If he couldn't find his password with a simple hex editor (or even notepad, in among the gibberish), then its not stored in plain text. Maybe its still unencrypted and easy to find (stored as binary rather than ascii, for example), but not "plain text".

Unless you consider plain text to be anything that anyone can make a 30 second program to read through the file and locate your password and present it in plain text without decryption.[/quote:3d25e]

what he means by plain text is that you can search through the memory spaces which polcore.dll reserves and find your password. Ollydbg or even the registered version of Artmoney can find this very simply.

In all honesty, i could whip up some code that I could attach to POS or Argus or Fleetool or even something more beneign like Mapmon or ACTools or FFAssist or the recast timers to just scan those memory locations, pick out the passwords, grab your POL ID as well and have them sent to a webserver or even an email to a forwarder account...

Dont believe me? grab Ollydbg and try it yourself.[/quote:3d25e]

Yeah.. I once changed my password and saved it on one of my mule accounts.. I forgot what I changed it to but it was still saved. Took me 5 min and like 15 lines of C to print out what my password was. That program wasn't detected by nod32

Thats the part that really pisses me off though... I see friends running programs that change status icons, or modelviewers, or chat parsers, etc that arn't even considered "cheats".. but norton didn't detect it as a virus so they don't care and when they get their stuff stolen...

I wish SE would let you buy something like this for your account with some sort of additional charge...

http://www.rsasecurity.com/node.asp?id=1156

[Khamsin]

http://virusscan.jotti.org/[/url]

Since when are a few lines of code that can report keyboard entries and sent to a URL noticable?

That online shit doesnt really work for programs like these.

Not to mention that the good ffxi trojans don't log keystrokes..

Your password is stored 4 places plain text in polcore.dll..

Nope.

I bet you're soo stupid.... you got some hex editor or something and found the actual polcore.dll on your hard drive and searched that file for your password.

Of course you didn't find it! I must be wrong.. I must be such a moron!

Fucking eurotrash.

I haven't looked myself, but you did say it was stored in plain text. If he couldn't find his password with a simple hex editor (or even notepad, in among the gibberish), then its not stored in plain text. Maybe its still unencrypted and easy to find (stored as binary rather than ascii, for example), but not "plain text".

Unless you consider plain text to be anything that anyone can make a 30 second program to read through the file and locate your password and present it in plain text without decryption.[/quote:bbedc]

what he means by plain text is that you can search through the memory spaces which polcore.dll reserves and find your password. Ollydbg or even the registered version of Artmoney can find this very simply.

In all honesty, i could whip up some code that I could attach to POS or Argus or Fleetool or even something more beneign like Mapmon or ACTools or FFAssist or the recast timers to just scan those memory locations, pick out the passwords, grab your POL ID as well and have them sent to a webserver or even an email to a forwarder account...

Dont believe me? grab Ollydbg and try it yourself.[/quote:bbedc]

Yeah.. I once changed my password and saved it on one of my mule accounts.. I forgot what I changed it to but it was still saved. Took me 5 min and like 15 lines of C to print out what my password was. That program wasn't detected by nod32

Thats the part that really pisses me off though... I see friends running programs that change status icons, or modelviewers, or chat parsers, etc that arn't even considered "cheats".. but norton didn't detect it as a virus so they don't care and when they get their stuff stolen...

I wish SE would let you buy something like this for your account with some sort of additional charge...

http://www.rsasecurity.com/node.asp?id=1156[/quote:bbedc]

You'd think they'd realize something was up when their firewall pops up asking them if its ok if "spellswapper.exe" or whatever accesses the internet.

[Devek]

You'd think they'd realize something was up when their firewall pops up asking them if its ok if "spellswapper.exe" or whatever accesses the internet.

Now you're just really failing...

Do you even know how software firewalls work?

[Khamsin]

You'd think they'd realize something was up when their firewall pops up asking them if its ok if "spellswapper.exe" or whatever accesses the internet.

Now you're just really failing...

Do you even know how software firewalls work?

I suppose you're going to explain it to me. I just know every other legit program of mine that sends information out causes a pop up, the first time at least or unless I've made a profile for it.

My router firewall, on the other hand, seems not to do much other than fill the log up with things like "IP lease renewed" "Connected/Disconnected" and "Blocked attempt to whatever".

[Devek]

You'd think they'd realize something was up when their firewall pops up asking them if its ok if "spellswapper.exe" or whatever accesses the internet.

Now you're just really failing...

Do you even know how software firewalls work?

I suppose you're going to explain it to me. I just know every other legit program of mine that sends information out causes a pop up, the first time at least or unless I've made a profile for it.

My router firewall, on the other hand, seems not to do much other than fill the log up with things like "IP lease renewed" "Connected/Disconnected" and "Blocked attempt to whatever".

Right.. legit programs standing on their own cause a pop up...

Notice there isn't a windower process on your machine? Programs have the ability to allocate memory inside of other processes and start their own threads of execution there.

When my program tries to send your password to my gmail account, its going to go through pol.exe which you clearly have to enable in your software firewall if you want to play ffxi at all.. amirite?

Tons of virus type software has used simular techniques for years to use iexplore.exe to reach out to the web since most people enable that anyway in their software firewall. This isn't hard to do stuff.. a simple google search will net you all you need to know.

The fact is.. software firewalls and anti-virus programs are WORTHLESS.

DO NOT DOWNLOAD SHIT OFF RAPIDSHARE!

Just take the word of people who know what the fuck they are talking about, k?

[Raineer]

You'd think they'd realize something was up when their firewall pops up asking them if its ok if "spellswapper.exe" or whatever accesses the internet.

Now you're just really failing...

Do you even know how software firewalls work?

I suppose you're going to explain it to me. I just know every other legit program of mine that sends information out causes a pop up, the first time at least or unless I've made a profile for it.

My router firewall, on the other hand, seems not to do much other than fill the log up with things like "IP lease renewed" "Connected/Disconnected" and "Blocked attempt to whatever".

Right.. legit programs standing on their own cause a pop up...

Notice there isn't a windower process on your machine? Programs have the ability to allocate memory inside of other processes and start their own threads of execution there.

When my program tries to send your password to my gmail account, its going to go through pol.exe which you clearly have to enable in your software firewall if you want to play ffxi at all.. amirite?

Tons of virus type software has used simular techniques for years to use iexplore.exe to reach out to the web since most people enable that anyway in their software firewall. This isn't hard to do stuff.. a simple google search will net you all you need to know.

The fact is.. software firewalls and anti-virus programs are WORTHLESS.

DO NOT DOWNLOAD SHIT OFF RAPIDSHARE!

Just take the word of people who know what the fuck they are talking about, k?

e-thug

[Imaulle]

http://virusscan.jotti.org/[/url]

Since when are a few lines of code that can report keyboard entries and sent to a URL noticable?

That online shit doesnt really work for programs like these.

Not to mention that the good ffxi trojans don't log keystrokes..

Your password is stored 4 places plain text in polcore.dll..

Nope.

I bet you're soo stupid.... you got some hex editor or something and found the actual polcore.dll on your hard drive and searched that file for your password.

Of course you didn't find it! I must be wrong.. I must be such a moron!

Fucking eurotrash.

I haven't looked myself, but you did say it was stored in plain text. If he couldn't find his password with a simple hex editor (or even notepad, in among the gibberish), then its not stored in plain text. Maybe its still unencrypted and easy to find (stored as binary rather than ascii, for example), but not "plain text".

Unless you consider plain text to be anything that anyone can make a 30 second program to read through the file and locate your password and present it in plain text without decryption.[/quote:84f15]

what he means by plain text is that you can search through the memory spaces which polcore.dll reserves and find your password. Ollydbg or even the registered version of Artmoney can find this very simply.

In all honesty, i could whip up some code that I could attach to POS or Argus or Fleetool or even something more beneign like Mapmon or ACTools or FFAssist or the recast timers to just scan those memory locations, pick out the passwords, grab your POL ID as well and have them sent to a webserver or even an email to a forwarder account...

Dont believe me? grab Ollydbg and try it yourself.[/quote:84f15]

Yeah.. I once changed my password and saved it on one of my mule accounts.. I forgot what I changed it to but it was still saved. Took me 5 min and like 15 lines of C to print out what my password was. That program wasn't detected by nod32

Thats the part that really pisses me off though... I see friends running programs that change status icons, or modelviewers, or chat parsers, etc that arn't even considered "cheats".. but norton didn't detect it as a virus so they don't care and when they get their stuff stolen...

I wish SE would let you buy something like this for your account with some sort of additional charge...

http://www.rsasecurity.com/node.asp?id=1156[/quote:84f15]

nod32 wouldnt detect just reading the string from the file, but it would detect the combination of reading the string and trying to upload to random ip etc etc

[Snowknight26]

I realize there are ways around every fix but honestly, how many people do you think would use 3rd party programs if windower didn't exist?

All the people that do now. If windower didn't exist, said 3rd party programs would have been coded to work in a full screen environment or had some sort of windowing feature included in the package.

Windower makes it "easier" true, but blaming windower for bots ect is like blaming air plane manufacturers for skydivers.

Quoted for Cozma.

[Coz]

Timestamp does send to server.

GMs can see it on your logs.

I have already been jailed for this and thus why I don't use it anymore til it can be fixed... so that I don't get banned for it.

I've had to reinstall ffxi many times because of timestamp, and other misc plugins.


There is no scare tactic here. You wanna get banned? That's your business, don't come to the site later blaming us.


"Windower makes it "easier" true [3rd pt program usage], but blaming windower for bots ect is like blaming air plane manufacturers for skydivers."

Hyjynx is so right.