pmzuloo.blogg.se

1. #KERBAL SPACE PROGRAM STEAM WORKSHOP MOD#
2. #KERBAL SPACE PROGRAM STEAM WORKSHOP ARCHIVE#
3. #KERBAL SPACE PROGRAM STEAM WORKSHOP FULL#
4. #KERBAL SPACE PROGRAM STEAM WORKSHOP ANDROID#
5. #KERBAL SPACE PROGRAM STEAM WORKSHOP MODS#

From there on, it's just a matter of making sure your API doesn't provide any arbitrary file or network I/O and you're set.įinally, you can run your own VM that you make sure cannot be exploited. At work, we are using these to create Python bindings inside all of our C# tools, and while it's a bit of an effort to set up a custom attribute like this initially, thereafter, any API call you are using in parts code you want to be accessible from JavaScript would just take something like attribute and just work. The only disadvantage here for a game like KSP2 is that you'll need to make sure your API has JS bindings, but C# actually makes that very easy with Attributes.

#KERBAL SPACE PROGRAM STEAM WORKSHOP ANDROID#

JavaScriptCore used by all iOS devices or V8 used by Chromium and Android devices are good candidates, as they are well tested and open source. Letting modders run JavaScript is an excellent way to have them extend the game without creating giant security holes. Fortunately, the entire internet relies on existence of fast, reliable, and secure VMs - specifically, for JavaScript on web pages. Now, there are plenty of stories where VMs have been exploited to gain arbitrary code execution, so not just any VM will do. This is a lot of work, however, and I wouldn't even fully trust myself with something like this, so this would take a security expert hire to do this right.Ī better approach is to run the code in some sort of a VM. In that case, worst it can do is break something in the game. Even an executable is reasonably safe, because if you create a separate process with no kernel modules, and only provide your custom API, which is carefully designed to prevent malicious operations, then all the code can do is talk to your API and perform actions in the game. The general approach is to create a sandbox for imported code. Unfortunately, I haven't looked at either Cities Skyline or Truck Simulator mods, so I can't comment on these specifically, but there are safe (to within reasonable definition) ways to distribute code with UGC. A bad actor with burner Steam account and KSP2 key could hit thousands or tens of thousands of machines with malicious software, and that will make it worth it for somebody. With KSP2 reaching for wider audience and if there will be Workshop support, this all goes out the window. The reason this hasn't flared up yet is because KSP modding community is fairly niche and basically works on reputation.

#KERBAL SPACE PROGRAM STEAM WORKSHOP MOD#

So downloading a stranger's KSP mod is a huge risk. In fact, in a lot of ways even worse, because it's easier to sneak a DLL file past antivirus software, as it might not match any known signatures, and malicious behavior is easier to obfuscate if you can use engine API for parts of it. That can contain absolutely anything and is about as secure as running an executable you downloaded straight off the internet.

#KERBAL SPACE PROGRAM STEAM WORKSHOP MODS#

The problem with KSP mods is that they are distributed with a compiled DLL plugin.

#KERBAL SPACE PROGRAM STEAM WORKSHOP ARCHIVE#

scs files, probably acting like archive for everything inside. Plus, at least in truck sim case, mods are just separate. I suppose they don't interfere with game code and just work on top of it.

#KERBAL SPACE PROGRAM STEAM WORKSHOP FULL#

Take full control over your ship’s setup to execute complex flight maneuvers.

Build spaceships, rockets, and vehicles using any imaginable combination of parts, each with their own function that will affect the way your spacecraft behaves.In Sandbox, you are free to build any spacecraft you can think of, with all parts and technology in the game. In Career Mode, oversee every aspect of the space program, including construction, strategy, funding, upgrades, and more. In Science Mode, perform space experiments to unlock new technology and advance the knowledge of Kerbalkind. Kerbal Space Program features three gameplay modes. Launch your Kerbal crew into orbit and beyond (while keeping them alive) to explore moons and planets in the Kerbol solar system, constructing bases and space stations to expand the reach of your expedition. You have access to an array of parts to assemble fully-functional spacecraft that flies (or doesn’t) based on realistic aerodynamic and orbital physics. In Kerbal Space Program, take charge of the space program for the alien race known as the Kerbals.