SkinChangerMod

SkinChangerMod

4.2k Downloads

Internal mod integrity verification

boomboompower opened this issue ยท 0 comments

commented

Brief Summary:
Releases of SkinChanger will have jar file verification for official releases, this is part of the new Apagoge updater.

Usage:
N/A - End users will not see this change

Justification:
Proves a release is official and hasn't been tampered with. I don't want people bundling cheats within the mod and distributing it as an official binary. Yes, they can modify and remove the checks, however this will cause the updater to be non-functional, and will be an easy validator for a modified JAR when screensharing. Just check if the methods exist and check the integrity of the jar.

Steps:
Verification has a few steps

  • Verifying the signature of the binary
  • Verifying the integrity of updater files
  • Verifying the SHA of the file against a list of validated files.

If any of these fail the mod will simply be detected as unofficial, currently this means the updater terminates and doesn't bother update checking. More expansion in the future???