Jump to content
The Dark Mod Forums

more chechsum options?

melkor

By melkor
in TDM Tech Support

 Share

Recommended Posts

melkor

melkor

Posted
Posted

Greetings! After a long time without playing, after seeing the improvements, I decided to come back. I'm a little anxious to start playing...

But the installer stopped me.

I don't mean to criticize how you deliver your software, nor do I mean to be rude. What you did, and what you're doing now, is truly great.

Two things are stopping me from using the installer:

  • The hash.txt is included with the executable, in the zip file, which, in my opinion, shouldn't be the case; it should be on the official website, somewhere easy to find.

 

  • The hash uses zsMH, which isn't natively included in Kubuntu. Investigating this forum, I found this:

What I mean is, I'm forced to rely on an external application to perform the checksum, when using Kubuntu, it includes: MD5, SHA1, SHA256, SHA512.

I'm a bit paranoid, and most of my software is installed come from the "Software Center" on my OS, so I'm not really interested in installing this. I wish there was an alternative to perform the checksum.

 

Again, thanks for this MOD. I hope you can help me get back to playing this great game.

OrbWeaver

OrbWeaver

Posted
Posted

Don't mean to be rude, but did you read the thread you linked to?

It pretty clearly states (1) the hash is for the self-update process, and isn't intended for manual checking, and (2) if you do want to check it yourself, you can use the command line tool b2sum (on my Debian system this is installed by default as part of the coreutils package, so I assume it is available on xUbuntu as well).

The hash has nothing to do with security. If you don't trust the installer you downloaded from the official website, you also shouldn't trust anything you read on that site, including hashes. Anyone who can compromise the installer can compromise anything else on the website.

Using a hash to confirm a download is only useful if the hash comes from a separate, more trustworthy source than the download (e.g. downloading an Ubuntu ISO from a random mirror, but looking at the official Ubuntu website to get the correct hash).

  • Thanks 1

DarkRadiant homepage ⋄ DarkRadiant user guide ⋄ OrbWeaver's Dark Ambients ⋄ Blender export scripts

chakkman

chakkman

Posted
Posted
On 7/16/2025 at 3:02 AM, melkor said:

Again, thanks for this MOD. I hope you can help me get back to playing this great game.

The only thing that stands in your way seems to be yourself.

stgatilov

stgatilov

Posted
Posted

Actually... a new user finds the installer link on the TDM website, and downloads it over HTTPS from the same domain. So it seems that verifying checksum does not achieve anything.

On the related note, I started thinking that maybe I should add some SSL library to the installer and do at least critical donwloads over HTTPS. Theoretically, someone might intercept player's traffic and provide him different installation.

stgatilov

stgatilov

Posted
Posted
1 hour ago, datiswous said:

(Maybe somewhat unrelated) but I think that all the mirrors for missions should be https? Currently mirror 5 is http instead.

This is not important actually, because missions are SHA-checked on download.
It is important to get the listing of the missions with hashes via HTTPS though... but now the game gets it over HTTP.

And tdm_installer is completely independent, but has the same problem.
It verifies cryptographic hash for everything it downloads, but the download of the hashes should be over HTTPS, and it is not.

At least all these important downloads always use TDM main server instead of mirrors...

  • Like 1
freyk

freyk

Posted
Posted (edited)
On 7/18/2025 at 11:16 PM, chakkman said:

The only thing that stands in your way seems to be yourself.

Thats so true, because,..

If you want to do the way of the topicstarter: he can download the full standalone package from moddb (md5sum on the page), download the missions from the missions list seppartly on our site, extract the files to a folder and then run the tdm linux binary. To update TDM, follow the steps above. (This way exclude almost all the - to us trusted - file-mirrors)

If you want to download TDM from linux software centers, you are a bit out of luck. There are some, but they only offer only the TDM installer or  the game binary (and not the gamefiles).

Check our wiki article for some repo sources:

https://wiki.thedarkmod.com/index.php?title=Installer_and_Manual_Installation#Linux

--

Instead of hashes, how about comparing filesizes (in bytes, for example)?

Edited by freyk

.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing

  • Recent Status Updates

    • datiswous

      datiswous

      (I just write this down, because it's on my mind)
      I think it's time somebody makes the city hub fm 😉
      Technically I see 2 possible ways.
      1. One is where everything takes place inside one mission and you teleport to different enclosed areas of the map to do subquests.
      2. Another is a campaign style mission. You start inside the cityhub. When you do a subquest, the mission ends, but the next mission you load the specific quest-map. This questmap you load is depended on what subquest you choose to start inside the map. Afterwards you load the 3th mission in the campaign which will be the cityhub map again, but via persistant info, changes some things inside the map (for example, you can't do the same subquest twice) and you have more gold maybe, etc, etc. So if the cityhub has 5 subquest missions that can be played in any order, the total amount of missions in the campaign would be 10, but the amount of map files 6. Because if you start in the cityhub map, after each subquest mission, you return to the cityhub map again, except for the last mission. When you make missions later you can add them to the cityhub again and make it bigger.
      (This seems all possible with changes made in TDM 2.13 , but I'm not 100% sure. It's at least an interesting project to work on)
      · 0 replies
    • datiswous

      datiswous

      I started using Unexpected Keyboard for Android phone.
      It's pretty cool, because it has an actual Ctrl key, which you can use to do cut, copy and paste actions via x, c and v. pretty handy in the forums, to move quoted text around for example.
      · 0 replies
    • STiFU

      STiFU

      New home, who dis? 🙂
      · 3 replies
    • Xolvix

      Xolvix

      Dammit there are too many missions available now. That's what I get for being away for so long. Such a first-world problem.
      · 1 reply
    • DeTeEff

      DeTeEff

      The best thing about not mapping more than like every other year is the awesome feeling to see how far TDM has gotten in all appartments. I can just create some parallaxing cobblestones and walk to and fro and just let the jaw drop
      · 2 replies
×
×
  • Create New...