dMZX Forums: Simple HTTP API -> Rejected Requests -> Tracker

I can implement this - the updater already has code for it.

Proposed API:

set "http://asiekierka.pl/test.zip" to "HTTP_DOWNLOAD"
Downloads a file at the specified URL.

set "test2.zip" to "HTTP_FILENAME"
Sets the output filename - reset after download.

A better API can be written later on. Id like to request this to be added in 2.84b because DoZ.

While this opens up interesting DLC-esque capabilities, and we're planning on doing something outside of robotic eventually (or at least 'were') for game downloading, I'm inclined to think this is a pretty big security risk to take.

If this does get implemented, my 2 cents is that when the command is called, the user should receive a prompt saying "This is trying to communicate outwards to download {URL}" with "Permit now" and a "Permit for this world" answers. Otherwise we may see some abuse of this.

How could it be abused? MZX doesnt directly run executable code or anything...

- Artifically inflating hits to an external site
- Downloading illegal content without the user's knowledge
- Overwriting key files (like the MZX executable or batch files)
- Corrupting competing games

... need I go on?

mzxgiant, on 11 June 2012 - 04:32 PM, said:

Can already be done, locally (I think one of them already was once, back in 2006-2007).

Quote

But those two are both perfectly valid reasons. Okay then.

Updating status to: Awaiting Feedback

Neither of the first two would work fortunately, MZX games aren't allowed parent directory access anymore and all games have their own folders in DoZs. Some general notes:

• New counter functions require a world version increment.
  
• "A better API can be written later on." No. The better API has to be the first one that goes in, otherwise we'll have to give compatibility support to every single old crappy API we just "had to have" until we get one that doesn't suck. The last thing we need is a complete set of BOARD_SCANs laying around, figuratively.
  
• I'm not sure I see the usefulness of using this for netplay -- you conveniently didn't mention it in this thread but it's all you were talking about last night -- as opposed to maybe giving MZXNet a server mode somewhere along the line. This works with the concept that was originally planned with the initial product working behind the running MZX world.
  
• KKairos already laid out guidelines for the DoZ that any netplay game would be judged on its 1P mode and would be judged poorly if it required an internet connection. So... what's the rush for getting this in before the DoZ?

Oh, nothing, just adding optional internet integration elements.

Updating status to: Fuck

Moving to: Rejected Requests