Time |
Nick |
Message |
01:28 |
|
Pest joined #minetest |
01:30 |
|
I_am_6r1d joined #minetest |
01:50 |
|
Pie-jacker875 joined #minetest |
02:05 |
|
fluxflux joined #minetest |
02:39 |
|
MeVegan[m] joined #minetest |
02:40 |
|
silwol joined #minetest |
02:41 |
|
ullnrr joined #minetest |
02:41 |
|
Follpvosten[m] joined #minetest |
02:42 |
|
LoneWolfHT joined #minetest |
02:42 |
|
FrostRanger[m] joined #minetest |
02:42 |
|
bhree[m] joined #minetest |
02:53 |
|
ShadowBot joined #minetest |
02:54 |
|
ShadowNinja joined #minetest |
03:45 |
|
Hawk777 joined #minetest |
03:56 |
Verticen |
Is there any way to play minetest in simple sterioscopic 3d? Just a simple side-by-side screen split would be fine - I can handle the rest. Is there a mod out there that can do this? |
04:37 |
minduser00 |
Verticen: look at the minetest settings, menu Client/Graphics/Inside game/advanced/ |
04:39 |
minduser00 |
there is a setting 3d-mode |
04:55 |
Verticen |
<minduser00> Thank you! |
05:00 |
|
MTDiscord joined #minetest |
06:00 |
|
Flabb joined #minetest |
06:23 |
|
Edgy1 joined #minetest |
06:55 |
|
aheinecke joined #minetest |
06:56 |
tango_ |
Calinou: for moreblocks there is actually one more old recipe that needs updating, that would be the rails one. However the changes in default are considerably more extensive, so it probably needs more reasoning on how to “expand” it for moreblocks. shall I open an issue about this on github? |
07:21 |
|
Pie-jacker875 joined #minetest |
07:28 |
|
david0374 joined #minetest |
07:30 |
|
david0374 left #minetest |
08:00 |
|
ShadowNinja joined #minetest |
08:26 |
|
proller joined #minetest |
08:37 |
|
calcul0n joined #minetest |
08:42 |
|
ullnrr joined #minetest |
09:15 |
|
calcul0n_ joined #minetest |
09:44 |
|
Peppy joined #minetest |
10:36 |
|
olliy joined #minetest |
10:44 |
|
FeXoR joined #minetest |
11:10 |
Helenah |
I don't like the way the authentication systems work on Minetest. |
11:10 |
Helenah |
It's horrible when I want to control who can be a member and who can't. |
11:10 |
Helenah |
One can simply click "Register", type their password in again and voila... |
11:10 |
Helenah |
I installed NoNew mod, but it isn't the solution I want. |
11:11 |
Helenah |
I don't want one to create an account, the server kick them then purge their account, I don't see this as secure but rather hacky. |
11:12 |
Helenah |
What I'm wanting to do is disable the registration function in its entirety and I manually add users to a database. You see, my minetest server isn't for the public, it's for my club members to play with each other. |
11:12 |
tango_ |
Helenah: there are a couple of solutions |
11:12 |
tango_ |
Helenah: one way to do it is to set a default password |
11:12 |
tango_ |
then new users would have to know that password, or they will be rejected |
11:12 |
tango_ |
then you can either give the default password to your club members, or add them manually |
11:13 |
|
milkt joined #minetest |
11:14 |
Helenah |
tango_: So... user foo types "foo" install the username field and bar into the password field where bar is always the default password that was set? |
11:14 |
tango_ |
Helenah: they can change their password afterwards |
11:15 |
tango_ |
or if you add them manually just give them a different password and they'll login with that |
11:15 |
tango_ |
my friends are I are using this mechanism |
11:15 |
Helenah |
tango_: I want to add them manually. |
11:15 |
tango_ |
then don't give them the default password |
11:15 |
Helenah |
Okay |
11:17 |
Helenah |
tango_: What is rollback recording? |
11:18 |
tango_ |
Helenah: whtat? |
11:18 |
tango_ |
what? |
11:19 |
|
hecks joined #minetest |
11:19 |
Helenah |
tango_: A config option called enable_rollback_recording |
11:20 |
tango_ |
Helenah: not sure about the details, but it basically records the actions taken so that they can be rolled back in case of failures |
11:20 |
Helenah |
oh nice |
11:21 |
tango_ |
Helenah: eh, depends on which mods you use, |
11:21 |
tango_ |
see https://github.com/minetest/minetest/issues/2335 and https://github.com/minetest/minetest/issues/6577 |
11:25 |
|
LPKI_Ramen joined #minetest |
11:25 |
Helenah |
tango_: Read |
11:28 |
Helenah |
tango_: I might have put it in the wrong place, but minetest.conf has ignored "default_password |
11:28 |
Helenah |
I was able to get onto the server |
11:29 |
Helenah |
Oh, actually it works! So accounts are still created even with NoNew?! That's bad... that mod is gone now anyway. |
11:29 |
tango_ |
good |
11:30 |
Helenah |
tango_: How do I remove an account? I've found out how to create one. |
11:30 |
tango_ |
Helenah: no idea |
11:32 |
Helenah |
tango_: Apparently I've to edit auth.sqlite :/ |
11:33 |
Helenah |
I might write something |
11:34 |
Helenah |
I don't wanna manually mess around with a database... that's crazy. |
11:35 |
Helenah |
I found something that looked interesting though, a function to make minetest use a custom authentication handler. |
11:37 |
|
alex-resist joined #minetest |
11:56 |
|
Fixer joined #minetest |
12:13 |
rubenwardy |
[11:11] <558b2fHelenah> I don't want one to create an account, the server kick them then purge their account, I don't see this as secure but rather hacky |
12:13 |
rubenwardy |
This isn't how it worked. The account is never created |
12:14 |
rubenwardy |
[11:12] <Helenah> What I'm wanting to do is disable the registration function in its entirety and I manually add users to a database. You see, my minetest server isn't for the public, it's for my club members to play with each other. |
12:14 |
rubenwardy |
You can do this with a custom authentication handler |
12:14 |
rubenwardy |
Rejecting a player in Prejoin will mean their account is never created |
12:14 |
rubenwardy |
Although, they still see the form I guess |
12:15 |
rubenwardy |
With a custom auth handler, you would prevent them from seeing that form |
12:16 |
rubenwardy |
See register_auth_handler in lua_api |
12:17 |
rubenwardy |
Also, don't put your server on the serverlist if it's not for the public |
12:18 |
rubenwardy |
Sauth is an example of a custom auth handler backed by an sqlite database |
12:19 |
rubenwardy |
Actually, setting a default password would probably have a similar effect to this whilst keeping the existing database |
12:19 |
|
erlehmann joined #minetest |
12:24 |
rubenwardy |
Ok, it may actually create an auth row for the user but not a profile when rejected |
12:33 |
Helenah |
If I was to write a better authentication system for minetest, would you accept it? |
12:34 |
specing |
> Helenah | I don't wanna manually mess around with a database... that's crazy. |
12:34 |
specing |
well, actually |
12:34 |
specing |
you could make a nice webapp for manually adding users |
12:34 |
specing |
or an IRC bot |
12:35 |
Helenah |
specing: Yeah, I was thinking of writing something like that. |
12:35 |
Helenah |
rubenwardy: I've looked into the register_auth_handler already, it's nice. |
12:36 |
specing |
and, since it uses a db, you should be able to do it without touching MT source at all |
12:37 |
|
Scarecrow joined #minetest |
12:37 |
Helenah |
specing: Well for one, the auth system tells people why they were rejected ie "invalid password", you know that's a security vulnerability, right? |
12:38 |
Helenah |
That hints the person what to bruteforce allowing them to know they entered an existing username. |
12:38 |
Helenah |
This is bad. |
12:38 |
rubenwardy |
That's called user enumeration |
12:38 |
Helenah |
It should be changed to "access denied" or something like that |
12:38 |
Helenah |
That way they've to guess whether the username or the password is incorrect. |
12:38 |
rubenwardy |
You can usually user enumerate using user registration |
12:39 |
rubenwardy |
If that's possible, then there's no need to protect against username enumeration on login |
12:39 |
rubenwardy |
Well, registration could be disabled |
12:40 |
Helenah |
rubenwardy: Thing is... I set a default password but now I'm having to change the message to "access denied" cause when a user tries to register, they get "invalid password" and I don't want them figuring out what I did... |
12:40 |
Helenah |
rubenwardy: So how do I simply disable it? |
12:40 |
Helenah |
It isn't actually disabled when a default password is set. |
12:40 |
specing |
Helenah: How is that a vulnerability? |
12:40 |
specing |
it's not |
12:40 |
Helenah |
specing: How is it not? |
12:40 |
Helenah |
You are telling the person "invalid password" which is true. |
12:41 |
specing |
Helenah: you can scrape the master server list for usernames, and then bruteforce them when they are not logged in |
12:41 |
Helenah |
Surely you don't tell your attacker they got a password wrong but leave them in the lurk wondering what they did wrong. |
12:41 |
sfan5 |
it's a vulnerability if your scenario is to deny new users without leaking the info that they require a password |
12:41 |
Helenah |
sfan5: That's the point |
12:41 |
sfan5 |
..but that's not a common scenario |
12:41 |
Helenah |
and will be the point for a lot of people wanting a closed up server. |
12:41 |
Helenah |
Surely |
12:42 |
Helenah |
Lets say you got a website and a login feature, surely you don't tell the person attempting to sign in where they went wrong but rather just deny them and tell them they were denied but not why they were denied. |
12:42 |
rubenwardy |
Depends |
12:42 |
Helenah |
rubenwardy: On what? |
12:42 |
Calinou |
tango_: sure :) |
12:42 |
rubenwardy |
What information you're protecting against |
12:43 |
Helenah |
rubenwardy: The information I'm protecting against ofc! |
12:43 |
Helenah |
It's that simple |
12:43 |
rubenwardy |
ContentDB tells you if your username doesn't exist because you can already enumerate usernames publically |
12:43 |
Helenah |
surely |
12:43 |
Helenah |
rubenwardy: So allow them to think "Oh I need to enumerate" |
12:44 |
Helenah |
Don't like hint them into doing so as they might have not thought "Lets enumerate" |
12:44 |
rubenwardy |
With minetest accounts, you can enumerate if registration is enabled |
12:44 |
specing |
I wish there was a common auth db shared to all servers |
12:44 |
Calinou |
to be fair, the message could be changed to "invalid username or password" |
12:44 |
specing |
so I didn't have to register in every new server |
12:44 |
Calinou |
but I wouldn't go further than that |
12:44 |
Helenah |
specing: If people want it them yes |
12:44 |
rubenwardy |
I don't think it's a good idea to reduce user experience for the sake of security theatre |
12:44 |
Helenah |
But that should be a choice for the person hosting the server |
12:44 |
Helenah |
Not enforced |
12:45 |
specing |
Helenah: it should be enforced |
12:45 |
Helenah |
... |
12:45 |
Calinou |
I doubt anyone will go through the length of enumerating usernames to bruteforce their passwords on a game where no money is involved |
12:45 |
rubenwardy |
"ivalid username or password" makes sense if registration is disabled, which is something you want to support |
12:45 |
specing |
you log-in to the lobby, and then the lobby auths you to servers |
12:45 |
Calinou |
this isn't Steam account cracking, it's an open source game with no paid in-game items |
12:46 |
Helenah |
Why are we bringing open source vs proprietary vs real money into the discussion? |
12:46 |
rubenwardy |
The Minetest login system does need to change to separate register and login, because currently it's confusing |
12:51 |
Helenah |
rubenwardy: Also allow for a server to not accept registrations. |
12:51 |
Helenah |
With that, you'd hit the Register feature for that server within the client. |
12:52 |
Helenah |
*hide |
12:52 |
rubenwardy |
Exactly, you require that separation in order to properly disable it |
12:52 |
Helenah |
Now onto what specing was saying... |
12:53 |
Helenah |
If someone wants their server to be a member of a public lobby of servers |
12:53 |
Helenah |
Then they've to set it I think |
12:53 |
|
illwieckz joined #minetest |
12:54 |
Helenah |
One example is I like to log into Minetest servers as "Helenah" |
12:54 |
Helenah |
but I noticed on some of them, that username is taken cause of how simple it is. |
12:54 |
Helenah |
So I choose another one for those particular servers. |
12:54 |
specing |
I also wish for rules to be published somewhere before you register/login |
12:55 |
specing |
maybe as another json tag in the master list |
12:55 |
Helenah |
specing: Surely rules should be down to the admins of the server. |
12:55 |
Helenah |
Not the minetest community |
12:55 |
specing |
yes |
12:55 |
specing |
What I meant was a way for the rules to be published on the server list |
12:55 |
Helenah |
Ah, sorry I may have misunderstood that part. |
12:55 |
Helenah |
Yes, that would be good |
12:56 |
Helenah |
You register, and you've to agree to rules, like how WoW does it with their TOS and EULA but in this case, it would be server rules. |
12:56 |
Calinou |
"real money" is a big incentive for people cracking into accounts |
12:56 |
Helenah |
I'm for that feature |
12:56 |
Calinou |
it's why it's heavily advised to use 2FA for a Steam account :) |
12:56 |
specing |
Helenah: it could/should be before registration |
12:56 |
Calinou |
even Minecraft accounts aren't that cheap, with the game being sold for €26 |
12:57 |
Helenah |
specing: Yeah, that's a good point actually. |
12:57 |
specing |
Helenah: there was a server that presented me with a rules formspec when I joined. It even kicked me when I pressed disagree :P |
12:57 |
Calinou |
in other words, trust in https://xkcd.com/538 |
12:58 |
|
alex-resist joined #minetest |
12:59 |
rubenwardy |
I use such a formspec |
13:02 |
Helenah |
rubenwardy: Which formspec are you using? |
13:02 |
rubenwardy |
https://github.com/mt-ctf/rules |
13:06 |
Helenah |
"1. No swearing, dating, or other inappriopriate behaviour.", |
13:06 |
Helenah |
Lol "dating" haha |
13:06 |
Helenah |
Sorry.. I should laugh... |
13:06 |
Helenah |
Anyway, thank you for linking me to that rubenwardy :) |
13:06 |
rubenwardy |
Immature kids pretend to date |
13:06 |
Helenah |
*shouldn't |
13:06 |
rubenwardy |
It's annoying to everyone, so banned |
13:06 |
Helenah |
Ah |
13:08 |
Helenah |
rubenwardy: What's wrong with a bit of play though? |
13:08 |
Helenah |
I'm a kitty cat on my server! |
13:09 |
specing |
It's a dating sandbox! |
13:10 |
Helenah |
rubenwardy: Theres even the "courtyard of cock" |
13:10 |
Helenah |
Is there an offtopic channel? |
13:10 |
* Helenah |
checks topic |
13:10 |
Helenah |
No, there isn't, but I'll stop saying things like this. |
13:11 |
tango_ |
Calinou: https://github.com/minetest-mods/moreblocks/issues/162 tried to gather all the info I could |
13:11 |
rubenwardy |
This channel is basically offtopic |
13:11 |
rubenwardy |
It's unmoderated |
13:11 |
Helenah |
Oh phew |
13:11 |
Helenah |
phew |
13:11 |
rubenwardy |
Well, as in not a moderated strict chat. There are still moderators |
13:12 |
Helenah |
Anyway, outside the tower for trapping maidens, theres a signs adverting a job offer for anyone who wants to provide their titties. |
13:14 |
tango_ |
which is perfectly fine if that's what you want your server to be about |
13:14 |
tango_ |
otoh I can see why rubenwardy wouldn't want shenanigans on theirs |
13:15 |
rubenwardy |
The rules on CTF were quite lax to begin with, but then I had a few parents complain |
13:17 |
Helenah |
rubenwardy: Well that's fair enough if you intend for peoples kids to go on there as well as adults. |
13:17 |
Helenah |
Though mine is a private server and there will be no unauthorised people on there |
13:17 |
specing |
rubenwardy: parents? really? |
13:17 |
Helenah |
and the way my principles are is... we shouldn't be hiding children away from things so even if a 2 year old went on there and a parent complained to me that there was swearing or sex or whatever, I'd ignore it. |
13:20 |
rubenwardy |
I don't really play CTF, the rules and general management are handled by other people now |
13:23 |
rubenwardy |
If I were to make a new server, I wouldn't cater to kids quite so much - I'd still ban sexual behaviour and stuff but swearing is a big part of communication |
13:24 |
|
lisac joined #minetest |
13:24 |
rubenwardy |
You could also make the server less appealing to them. CTF is peak for that, given the trend for PvP |
13:24 |
Helenah |
rubenwardy: Yeah, as a 4 year old, I knew of terms like "fuck" and "shit" and "pedophile" and through knowing these terms as I young age I was then taught boundaries which I have as an adult. |
13:24 |
rubenwardy |
The code behind CTF was originally written to be used in a kingdom Vs kingdom game, where players make different castles or whatever |
13:25 |
Helenah |
If we hid children from this stuff until they were 18, they would be vulgar. |
13:25 |
Helenah |
Cause they'd have no boundaries with it. |
13:25 |
rubenwardy |
I don't think it's about hiding so much as not normalising quite so much |
13:33 |
|
gry joined #minetest |
14:00 |
|
turtleman joined #minetest |
14:05 |
|
erlehmann joined #minetest |
14:27 |
|
jluc joined #minetest |
14:35 |
|
kamdard joined #minetest |
14:42 |
|
hecks joined #minetest |
15:00 |
|
Cork joined #minetest |
15:18 |
|
lmat joined #minetest |
15:18 |
lmat |
I'm making a road way up in the sky. How should I make the offramps? I see that I can make roads:asphault_stairs, but galvanized fencing doesn't follow the steps down... any ideas? |
15:29 |
|
Jhalman joined #minetest |
16:02 |
|
fluxflux joined #minetest |
16:11 |
|
bingfengfsx joined #minetest |
16:20 |
|
SwissalpS joined #minetest |
16:20 |
Helenah |
How do I convert technic HV to MV and to LV? |
16:20 |
Helenah |
o.o |
16:20 |
Helenah |
It seems... transformers are built into the machines... |
16:20 |
Helenah |
But I don't wanna have to run all three cable types everywhere... |
16:21 |
SwissalpS |
converters is what they are called, iirc. input on top and output at bottom |
16:21 |
Helenah |
Oh, supply converter. |
16:21 |
Helenah |
SwissalpS: Can it... convert HV to LV? |
16:21 |
SwissalpS |
you can convert LV to HV too, yes that way too |
16:21 |
Helenah |
Sorry, there isn't much documentation. |
16:22 |
SwissalpS |
what some forget is to put switching station on both networks |
16:23 |
Helenah |
Wait... |
16:23 |
Helenah |
So lets say... |
16:23 |
Helenah |
I have an HV network and an LV network connected together, I've to put a switching station on both? o.o |
16:24 |
SwissalpS |
yes, one for HV and one for LV. The converters 'connect' |
16:24 |
Helenah |
So, converter between the two switching stations? |
16:25 |
SwissalpS |
I say converters bc mostly you want more than one. each can convert max 10kEU |
16:25 |
SwissalpS |
one SS on HV cable which is on top of converters, one SS on LV cable which is on bottom of converters |
16:32 |
|
jluc joined #minetest |
16:38 |
Helenah |
How do I pick up a mobs_animal? |
16:38 |
Helenah |
The documentation says they can be "picked up" but doesn't say "how". |
16:39 |
Helenah |
Oh it has to be tamed, right |
16:39 |
SwissalpS |
I've set up an extensive mobs tutorial on pandorabox.io |
16:40 |
SwissalpS |
oc only the mobs used there |
16:40 |
|
Taoki joined #minetest |
16:45 |
Helenah |
SwissalpS: Appareciated, I wanted to say the documentation is poor but I held back. |
16:47 |
SwissalpS |
yeah, kinda why I made an in-game tutorial |
16:47 |
|
Miner_48er joined #minetest |
16:58 |
|
ullnrr joined #minetest |
17:17 |
|
AndDT joined #minetest |
17:26 |
|
FeXoR joined #minetest |
17:27 |
|
Peppy joined #minetest |
17:29 |
|
antims joined #minetest |
17:31 |
|
I_am_6r1d joined #minetest |
17:36 |
|
appguru joined #minetest |
17:42 |
|
MadScientist joined #minetest |
17:48 |
|
I_am_6r1d joined #minetest |
17:49 |
|
jluc joined #minetest |
17:50 |
|
absurb joined #minetest |
18:15 |
Helenah |
Why is the AI in mobs_redo soo stupid? |
18:16 |
MTDiscord |
<Jonathon> give mobkit a chance? |
18:16 |
Helenah |
Okies |
18:17 |
Helenah |
Jonathon, mobs don't spawn in front of you and then despawn when you turn around, right? |
18:18 |
rubenwardy |
because it's naively implemented |
18:18 |
rubenwardy |
mobkit looks better, although the API is a mess |
18:20 |
|
Peppy joined #minetest |
18:20 |
Helenah |
rubenwardy: What about the behaviour of the AI? |
18:20 |
Helenah |
Does it stay spawned when you are around? |
18:21 |
rubenwardy |
the behaviour seems to be better |
18:21 |
Helenah |
I mean the other day I watched a crocodile turn into a shark, turned my back on it, it vanished... |
18:21 |
rubenwardy |
as for staying spawned, that's may be the engine killing mapblocks too quickly |
18:21 |
rubenwardy |
you can try increasing the active range |
18:21 |
rubenwardy |
it could also just be mobs redo |
18:23 |
Helenah |
rubenwardy: When I turned my back, I didn't mean I walked away, I mean I just turned |
18:23 |
Helenah |
so why would the mapblock become unloaded? |
18:23 |
rubenwardy |
I understand that - the engine uses your look direction to increase the load distance in that direction |
18:23 |
rubenwardy |
but that shouldn't unload things near you |
18:24 |
Helenah |
rubenwardy: I'd say the shark was 5 blocks away from me |
18:24 |
Helenah |
So it's probably mobs_redo then |
18:34 |
|
Hawk777 joined #minetest |
18:39 |
Helenah |
Jonathon: mobkit sounds to be incomplete. |
18:39 |
Helenah |
rubenwardy: ^ |
18:39 |
rubenwardy |
yes |
18:39 |
rubenwardy |
everything is incomplete |
18:40 |
rubenwardy |
mobkit is also just an API, there's mods that use it: https://content.minetest.net/metapackages/mobkit/ |
19:15 |
|
homthack joined #minetest |
19:37 |
|
specing_ joined #minetest |
19:38 |
|
homthack joined #minetest |
19:41 |
|
Edgy1 joined #minetest |
19:46 |
|
hecks joined #minetest |
19:48 |
hecks |
So how do you skin item slots in forms and the hud? Is that even possible? |
19:52 |
sfan5 |
gui_hotbar.png gui_hotbar_selected.png, dunno to which extent those are configurable |
19:57 |
hecks |
recommended size? |
19:58 |
hecks |
gui_hotbar provided by the game is somehow ignored |
19:59 |
|
I_am_Grid joined #minetest |
20:04 |
hecks |
oh it's api |
20:04 |
hecks |
hud_set_hotbar_image |
20:06 |
|
Scarecrow joined #minetest |
20:17 |
|
alex-resist joined #minetest |
20:22 |
|
Verticen joined #minetest |
20:47 |
|
awell joined #minetest |
20:52 |
|
WonderingDane9 joined #minetest |
21:10 |
|
I_am_Grid joined #minetest |
21:12 |
|
dabbill_ joined #minetest |
21:40 |
|
I_am_6r1d joined #minetest |
21:43 |
|
perrier joined #minetest |
21:47 |
perrier |
mob_chance_multiplier do higher numbers mean less mobs or more? |
21:52 |
|
fleeky_ joined #minetest |
22:04 |
|
proller joined #minetest |
22:13 |
tango_ |
cripes, getting rid of flowing water underwater is nontrivial |
22:14 |
perrier |
I think the update to unified inventory this morning deleted my bag. |
22:26 |
|
daiNoZord joined #minetest |
22:28 |
|
daiNoZord left #minetest |
22:37 |
|
Fixer_ joined #minetest |
22:45 |
|
milkt_ joined #minetest |
22:50 |
|
milkt joined #minetest |
23:09 |
|
Verticen joined #minetest |
23:20 |
|
I_am_6r1d joined #minetest |
23:26 |
|
ramirez joined #minetest |
23:54 |
SwissalpS |
perrier: it's 1 out of x chance |
23:55 |
SwissalpS |
so x = 1 would mean every time |
23:59 |
|
Pest|2 joined #minetest |