PC Now Has a Global Auction House

rotaugen454 · July 2017

SteveCampsOut wrote: »

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

I don't personally RP myself but I Love Santi Claws posts!

I role play a grouchy old man, so I can appreciate anyone that stays in character, even the lazy, entitled millennials.

Ubung · July 2017

Its back up for download again. Seems esoui have approved it. Still not sure whether to try it though.

I really really want the functionality.

PlagueSD · July 2017

No game addon should EVER have an .exe file. Addons are coded in a language called LUA. There should only be .lua, .txt, and .xml files in any addons you download.

https://wiki.esoui.com/Writing_your_first_addon

Stormshaper · July 2017

Ubung wrote: »

Its back up for download again. Seems esoui have approved it. Still not sure whether to try it though.
I really really want the functionality.

The file isn't available quite yet I think. I clicked download but a window appears saying we're waiting for an admin to review it.

edit: didn't try Minion b/c I didn't want to 'install it' even though I think that just means it gets unloaded and moved to addons folder.

MLGProPlayer · July 2017

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

Santie's posts are the opposite of cringe-worthy. They're extremely clever and well executed.

Stormshaper · July 2017

PlagueSD wrote: »

No game addon should EVER have an .exe file. Addons are coded in a language called LUA. There should only be .lua, .txt, and .xml files in any addons you download.

https://wiki.esoui.com/Writing_your_first_addon

But doesn't Tamriel Trade Centre use one?

MLGProPlayer · July 2017

Darlgon wrote: »

Betheny wrote: »

S1ipperyJim wrote: »

Beware: My virus scan is detecting a virus in this addon: Gen:Variant.Zusy.245090]

Windows Defender and Malwarebytes Anti Malware detect no threats...what antivirus did you use? Probably a false positive.

Saying Windows Defender didnt detect it is like saying a day one med student didnt not diagnose brain cancer. That program has been trash since MS bought it at Walmart.

If you dont have the pay version of Malwarebytes, it only protects you when you use it to scan. Do you have the pay version, that includes the active protection? If not, it also is useless as a reference.

Always remember, if its free, you get the protection you paid for. And, yes, I use Vipre (paid) along side Spybot (free) and Malwarebytes (free). I scan with the other two once a week to make sure nothing got thru accidentally.

AdwCleaner is the best malware protection out there, and it's free.

There is also no reason to scan weekly if you have good browsing habits. I usually scan once a year (I use Avast, AdwCleaner, and Malwarebytes) and always come up clean.

Wreuntzylla · July 2017

MLGProPlayer wrote: »

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

Santie's posts are the opposite of cringe-worthy. They're extremely clever and well executed.

To most people, cringe worthy means RP on made up, social interactions. Santie is RPing a khajiit participating in the forums. Completely awesome implementation.

I wish there were 50 of him in different flavors. Except for elves. No elves.

MLGProPlayer · July 2017

Betheny wrote: »

DRXHarbinger wrote: »

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

Actually does it very well. Cringe away. Vast community population loves our dear Santie.

OT if this add on makes our toons automatically cod stuff isn't this open to us being robbed blind?

No you have to manually click a button for the addon to COD the items you listed...so it's the same as any COD order.

If this addon is legit it'll be awesome.

Hmmm, I could see it being unreliable as people with buyer's/seller's remorse renege on their proposed transaction, or players don't log on for a few days and forget to COD the items to buyers. People can also troll the auction house with absurd bids (since they don't have to actually commit to the bid).

Sigtric · July 2017

Stormshaper wrote: »

PlagueSD wrote: »

No game addon should EVER have an .exe file. Addons are coded in a language called LUA. There should only be .lua, .txt, and .xml files in any addons you download.

https://wiki.esoui.com/Writing_your_first_addon

But doesn't Tamriel Trade Centre use one?

It does, and that's incredibly risky.

Xvorg · July 2017

SteveCampsOut wrote: »

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

I don't personally RP myself but I Love Santi Claws posts!

We all love Santie, is the sun in our scales.

mrdiamond666 · July 2017

If only consoles got some kind of one...

PlagueSD · July 2017

Betheny wrote: »

InvitationNotFound wrote: »

Imho providing an addon which contains any sort of binary is an absolute no-go.

Would there be any other way of doing what he's trying to do?

Yes. Addons use all sorts of internal chat channels that are invisible to the end-user. There is ABSOLUTELY no reason this has to be done outside of the game.

See http://wowprogramming.com/docs/events/CHAT_MSG_SYSTEM for examples of this. Most addons either create their own channel, or use /whisper and hide output to the chat windows for communication between users.

PlagueSD · July 2017

Stormshaper wrote: »

PlagueSD wrote: »

No game addon should EVER have an .exe file. Addons are coded in a language called LUA. There should only be .lua, .txt, and .xml files in any addons you download.

https://wiki.esoui.com/Writing_your_first_addon

But doesn't Tamriel Trade Centre use one?

Yes, which is why I'll never use it. Anything that asks you to run a client BEFORE you log into game is a red-flag for possible keylogger activity. How do you know that once enough people are using this addon, he wont "update" the client.exe and turn it into a keylogger, or worse, a backdoor to your computer.

At least with LUA, I can see the source code and know EXACTLY what the addon is doing.

Belegnole · July 2017

MLGProPlayer wrote: »

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

Santie's posts are the opposite of cringe-worthy. They're extremely clever and well executed.

I would like to disagree. In fact I'm considering blocking all of his/her posts.

Darlon · July 2017

PlagueSD wrote: »

Stormshaper wrote: »

PlagueSD wrote: »

No game addon should EVER have an .exe file. Addons are coded in a language called LUA. There should only be .lua, .txt, and .xml files in any addons you download.

https://wiki.esoui.com/Writing_your_first_addon

But doesn't Tamriel Trade Centre use one?

Yes, which is why I'll never use it. Anything that asks you to run a client BEFORE you log into game is a red-flag for possible keylogger activity. How do you know that once enough people are using this addon, he wont "update" the client.exe and turn it into a keylogger, or worse, a backdoor to your computer.

At least with LUA, I can see the source code and know EXACTLY what the addon is doing.

This.. it might be working properly now, but anything with something like an updater.exe is an extreme risk... who knows in a few weeks an 'update' will be pushed that logs all your keystrokes....

Or even if it is legit, someone could hijack the addon and do the malicious 'update'

Betsararie · July 2017

So it turned out to be a scam? Jeez, I'm not surprised.

Can someone legitimate try something like this out, so we can actually see how the system works if implemented?

PikkonMG · July 2017

Blanco wrote: »

So it turned out to be a scam? Jeez, I'm not surprised.

Can someone legitimate try something like this out, so we can actually see how the system works if implemented?

Looks legit to me https://github.com/evan-sctg/NirnAuctionHouse-ServerLink

The_Art_of_Paw · July 2017

Giles.floydub17_ESO wrote: »

[It's also CoD. Trolls will come out and tie up some players goods for a few days until the mail is sent back to the sender.

This is pretty much what will happen. You will get people that just outbid the top items to tie them up in mail long enough for them to jack the price up for their own sales. Then once they have the gold come in, they could retrieve the items if they could make more or just let it sit till its worthless and ping it back to the sender.

Vipstaakki · July 2017

I think i will get a good laugh out of this when the people who are so desperate for their auction house get infected with a keylogger or worse.

PlagueSD · July 2017

Vipstaakki wrote: »

I think i will get a good laugh out of this when the people who are so desperate for their auction house get infected with a keylogger or worse.

Also, this is why those of us in the IT Security industry will ALWAYS have a job.

Betsararie · July 2017

PikkonMG wrote: »

Blanco wrote: »

So it turned out to be a scam? Jeez, I'm not surprised.

Can someone legitimate try something like this out, so we can actually see how the system works if implemented?

Looks legit to me https://github.com/evan-sctg/NirnAuctionHouse-ServerLink

I would prefer for it to be legit. I want to give this a try

But I don't want to be scammed !!

Tandor · July 2017

Vipstaakki wrote: »

I think i will get a good laugh out of this when the people who are so desperate for their auction house get infected with a keylogger or worse.

They may get the last laugh, given that the trading addons have the same vulnerability through the installation of .exe files.

Sigtric · July 2017

PlagueSD wrote: »

Vipstaakki wrote: »

I think i will get a good laugh out of this when the people who are so desperate for their auction house get infected with a keylogger or worse.

Also, this is why those of us in the IT Security industry will ALWAYS have a job.

This.

These people are the same reason my portion of the IT industry has great job security as well. Most people using computers, shouldn't.

InvitationNotFound · July 2017

PikkonMG wrote: »

Blanco wrote: »

So it turned out to be a scam? Jeez, I'm not surprised.

Can someone legitimate try something like this out, so we can actually see how the system works if implemented?

Looks legit to me https://github.com/evan-sctg/NirnAuctionHouse-ServerLink

Seems like the addon changed its state a few times. I think it was Version 0.0.8, 0.0.9 and then 0.0.9b

Yet, I do not see different version files (might have been deleted). Anyway, it was looking pretty strange...
The status from 0.0.8 to 0.0.9 changed from "contact an admin" to "pending" back to "contact an admin". I have no idea what this all means, but it looks quite strange.

This looks quite a bit suspicious to me. Did you simply change the download and removed the malware (in case there was some)? Can someone who downloaded the first version download the new one and compare the files (hash values of both files)?
Furthermore, the repository contains a lua.dll file. this is again a binary file. no source code has been provided. (and you still have no idea if the binaries are built from the source code in the repository)
In addition, you have no idea what the updater will install at a later point in time...

This still looks pretty suspicious to me and I wont touch it.

PlagueSD · July 2017

InvitationNotFound wrote: »

PikkonMG wrote: »

Blanco wrote: »

So it turned out to be a scam? Jeez, I'm not surprised.

Can someone legitimate try something like this out, so we can actually see how the system works if implemented?

Looks legit to me https://github.com/evan-sctg/NirnAuctionHouse-ServerLink

Seems like the addon changed its state a few times. I think it was Version 0.0.8, 0.0.9 and then 0.0.9b

Yet, I do not see different version files (might have been deleted). Anyway, it was looking pretty strange...
The status from 0.0.8 to 0.0.9 changed from "contact an admin" to "pending" back to "contact an admin". I have no idea what this all means, but it looks quite strange.

This looks quite a bit suspicious to me. Did you simply change the download and removed the malware (in case there was some)? Can someone who downloaded the first version download the new one and compare the files (hash values of both files)?
Furthermore, the repository contains a lua.dll file. this is again a binary file. no source code has been provided. (and you still have no idea if the binaries are built from the source code in the repository)
In addition, you have no idea what the updater will install at a later point in time...

This still looks pretty suspicious to me and I wont touch it.

Yep, any addon that includes anything except .lua, .txt, and .xml should be flagged as "suspicious".

helediron · July 2017

The client code in github is rather straight-forward application and is copying data between savedvariables and website.

The real issue is the server. Instead of using in-game trading, let's trust an unknown website, right? If i would ever write such system i would surely put some "interesting" code into the server for my advantage.

Now the server is essentially a black box that can manipulate data in every way it wants. There is no way to verify both ends of transactions. The server is a classical man-in-the-middle with all the risks it introduces.

If everybody had good intentions, this would be okay system. But currently it offers a great opportunity for abuse. All the concerns that pro-AH players have expressed, are here. If players feared being under control of guilds (which i have never noticed), here they would be under total control of single entity to which ZOS has absolutely no control.

The server can e.g.
- redirect all low price bids privately to preferred players.
- And autimatically re-bid with higher price to public.
- Inject automatically small varied bids from large array of accounts under gold seller's control.

@ZOS_GinaBruno , because of all the exploit possibilities it offers, i would watch this very closely.

ookami007 · July 2017

Wreuntzylla wrote: »

MLGProPlayer wrote: »

QUEZ420 wrote: »

I cringe whenever I read his posts. That RP life tho lulz...

Santie's posts are the opposite of cringe-worthy. They're extremely clever and well executed.

To most people, cringe worthy means RP on made up, social interactions. Santie is RPing a khajiit participating in the forums. Completely awesome implementation.

I wish there were 50 of him in different flavors. Except for elves. No elves.

I erect a spine of thankfulness to Santi Claws.

Yolokin_Swagonborn · July 2017

I hope this succeeds and proves once again that the will of the community can prevail over the myopic vision of ZOS that has crippled this game for so long.

kargen27 · July 2017

faerigirl wrote: »

Cadbury wrote: »

faerigirl wrote: »

sirinsidiator wrote: »

kargen27 wrote: »

Drachenfier wrote: »

sirinsidiator wrote: »

Betheny wrote: »

This better be legit, would be great to see the trade guilds lose their control over us.

You are quite mistaken. If we ever got a global auction house built into the game, you can be sure that trading guilds will have absolute control over the prices unlike how it works right now.

Yea, no. They wouldn't be able to keep up with the supply.

Maybe not on fish and Ta. The more rare the item though and the easier it is for just three or four people to control the price.

Exactly. It is not about the cheap stuff with infinite supply. You can be sure that prices on nirncrux, golden tempers, motifs, recipes, rare jewelry, sought-after equipment etc. would be several times of what they are now...

Only if people paid those prices.

Which they would.

Then the price would increase naturally, irrespective of the mode which it was being sold.

No because as it is now a few people can't easily control the market even on rare items. To many vendors out there that might have them listed. Central auction house though just a few people working together could buy all of a certain item then list them at a much higher price. By continuing to monitor the auction house they can nab the item if someone tries to under cut them and jack up the price. Not hard to do in a central system.