798 replies to this topic

[Creator]

Would binaries allow someone to break out of the sandbox?

[apemanzilla]

Creator, on 06 February 2016 - 08:14 PM, said:

Would binaries allow someone to break out of the sandbox?

No, binary loading loads the string as Lua bytecode instead of Lua code.

It actually will load either as long as you pass nil or "t", despite "b" being disabled.

[FUNCTION MAN!]

apemanzilla, on 06 February 2016 - 08:29 PM, said:

Creator, on 06 February 2016 - 08:14 PM, said:

Would binaries allow someone to break out of the sandbox?

No, binary loading loads the string as Lua bytecode instead of Lua code.

It actually will load either as long as you pass nil or "t", despite "b" being disabled.

Or if you pass "bananas". It's a == check.

[cyanisaac]

apemanzilla, on 06 February 2016 - 08:29 PM, said:

Creator, on 06 February 2016 - 08:14 PM, said:

Would binaries allow someone to break out of the sandbox?

No, binary loading loads the string as Lua bytecode instead of Lua code.

It actually will load either as long as you pass nil or "t", despite "b" being disabled.

What's bad about Lua bytecode though?

[apemanzilla]

cyanisaac, on 07 February 2016 - 12:46 AM, said:

apemanzilla, on 06 February 2016 - 08:29 PM, said:

Creator, on 06 February 2016 - 08:14 PM, said:

Would binaries allow someone to break out of the sandbox?

No, binary loading loads the string as Lua bytecode instead of Lua code.

It actually will load either as long as you pass nil or "t", despite "b" being disabled.

What's bad about Lua bytecode though?

Absolutely nothing. Creator was under the impression that it would allow users to escape the sandbox, but it doesn't. It's just another form of Lua code.

[SquidDev]

apemanzilla, on 07 February 2016 - 01:26 AM, said:

cyanisaac, on 07 February 2016 - 12:46 AM, said:

What's bad about Lua bytecode though?

Absolutely nothing. Creator was under the impression that it would allow users to escape the sandbox, but it doesn't. It's just another form of Lua code.

IIRC there is a lack of verification in the C implementation of the Lua VM which means you can access locals outside your function. However no such bugs exist in the LuaJ implementation.

[Creeper9207]

Someone tell the skype team at microsoft!

[Bomb Bloke]

Context.

To be fair, it does sound like the sort of thing you could wrap a loading screen around, but on the other hand it also sounds like the sort of thing where you shouldn't have to resort to browsing through bug reports to determine the cause of the behaviour.

[Creeper9207]

New grain!

Edited by Creeper9207, 05 March 2016 - 01:38 AM.

[wilcomega]

how much time was in between the first and the second, and the second and the third? maybe we can estimate a release date! or whatever its couting down to

[Konlab]

wilcomega, on 05 March 2016 - 04:11 PM, said:

how much time was in between the first and the second, and the second and the third? maybe we can estimate a release date! or whatever its couting down to

~2 months = Something will happen ~14 months later.

[Creator]

Konlab, on 20 March 2016 - 09:01 AM, said:

wilcomega, on 05 March 2016 - 04:11 PM, said:

how much time was in between the first and the second, and the second and the third? maybe we can estimate a release date! or whatever its couting down to

~2 months = Something will happen ~14 months later.

I think that it should be a bit faster. Not saying your guess is wrong, just HOPING it is.

[Elttob]

16 colours are definitely enough to work with.

I present to you this palette:



It contains 6 shades of grey, 6 shades of any colour (in this case r=0, g=0, b=255), black, white, and one colour spare (useful if you want a close button on an operating system.)
Very useful for any anti-aliasing you may want to do; I used it on the back button in the images below, but I could've done it for all the text too.

Here's a few examples of different colours on an interface:

[Konlab]

Creator, on 20 March 2016 - 07:37 PM, said:

Konlab, on 20 March 2016 - 09:01 AM, said:

wilcomega, on 05 March 2016 - 04:11 PM, said:

how much time was in between the first and the second, and the second and the third? maybe we can estimate a release date! or whatever its couting down to

~2 months = Something will happen ~14 months later.

I think that it should be a bit faster. Not saying your guess is wrong, just HOPING it is.

One year is not a long time, I also hope that CC for minecraft eventually gets diamond computers that run CO 2.0.

[H4X0RZ]

Konlab, on 03 April 2016 - 06:03 PM, said:

Creator, on 20 March 2016 - 07:37 PM, said:

Konlab, on 20 March 2016 - 09:01 AM, said:

wilcomega, on 05 March 2016 - 04:11 PM, said:

how much time was in between the first and the second, and the second and the third? maybe we can estimate a release date! or whatever its couting down to

~2 months = Something will happen ~14 months later.

I think that it should be a bit faster. Not saying your guess is wrong, just HOPING it is.

One year is not a long time, I also hope that CC for minecraft eventually gets diamond computers that run CO 2.0.

But what is it isn't written in Java?

[SquidDev]

H4X0RZ, on 03 April 2016 - 08:29 PM, said:

But what is it isn't written in Java?

I can't find the tweet, but I'm pretty sure it is using .Net instead of Java.

Edit: Found it

SquidDev, on 07 January 2016 - 09:01 PM, said:

No "new features", but some interesting implementation detail: these three tweets suggest there is some .Net/C/Lua interop going on, which implies that the core is written in .Net, with a conventional Lua VM (rather than a pure Java or .Net implementation). If its written in .Net there might be some scope for plugins, but we will have to see .

Much later edit:
Also this recent tweet

Edited by SquidDev, 31 May 2016 - 07:05 AM.

[Bomb Bloke]

Elttob, on 03 April 2016 - 03:06 PM, said:

It contains 6 shades of grey, 6 shades of any colour (in this case r=0, g=0, b=255), black, white, and one colour spare (useful if you want a close button on an operating system.)

Doesn't that only account for fifteen colours?

[Elttob]

Bomb Bloke, on 03 April 2016 - 09:15 PM, said:

Elttob, on 03 April 2016 - 03:06 PM, said:

It contains 6 shades of grey, 6 shades of any colour (in this case r=0, g=0, b=255), black, white, and one colour spare (useful if you want a close button on an operating system.)

Doesn't that only account for fifteen colours?

Looking at it now, you're right! But that's not a bad thing; it's better than going over the limit

[Elttob]

Back again with another example to show you the power of antialiasing. Notice how few colours you need to do it!


EDIT: Wow, nobody's here! I'll just throw out another mock up of an antialiased interface. The text was.. interesting but I did it with only 8 colours.

Edited by Elttob, 06 April 2016 - 03:23 PM.

[Creeper9207]

YES!