gargaj / conduit Goto Github PK

View Code? Open in Web Editor NEW

43.0 7.0 3.0 163 KB

Demo downloader and watching utility and browser plugin

Home Page: http://www.pouet.net/topic.php?which=11286

License: The Unlicense

C# 92.53% JavaScript 4.00% NSIS 3.46%

demoscene csharp browser plugin awesome realtime

conduit's Introduction

Conduit

Easy demowatching - a single click bringing you the finest in computer art!

How to use

Download and install Conduit via the handy dandy installer - this will install a handler for the conduit:// URL scheme
Optionally, run Conduit and use the options dialog to set the path where your demos will be downloaded - by default this will be the "Demos" folder in My Documents.
Install the browser plugins for Firefox or Chrome
Visit a page on Pouet or Demozoo and click the newly visible link to have the demo downloaded, unpacked and ran at your leisure.

Browser plugins

Supported

Platforms: Windows, OSX (with Mono), Linux (with Mono)
Sites: Pouet, Demozoo, CSDb
Unpackers: Anything that's supported by 7z
Runnable platforms: Windows, DOS (with DOSBox), C64 (with WinVICE), web browser (not yet autodetecting browser), PICO-8

Possible future expansions

Browsers: Edge
Runners: Amiga (with WinUAE), Atari (STeeM), other uses of WinVICE
Unpackers: LHA

Companion apps

Ultimate Launcher for one-click launching demos on an U1541-equipped C64

conduit's People

Contributors

Stargazers

Watchers

Forkers

cupe sacredbanana robcowell

conduit's Issues

Insecure Connections

Right now, if I'm running any cns demo, it is downloaded over HTTP. This can be an issue for numerous reasons and since there's no code signing / checksum verification taking place can be escalated into remote code execution on networks where an attacker can man-in-the-middle.

Here's some suggestions:

Warn the user if the file is downloaded over an insecure connection. Include file size.
Check the demo type and executable file size. Warn if it's way off from what it should be.
Include checksums whenever possible
Get TLS on conspiracy.hu. Seriously. Please.

This can be especially bad because the attacker can provoke the download to happen via the custom URL protocol (e.g. by blocking/redirecting traffic to trigger a captive portal site to load).

EDIT: Even api.pouet.net is not running over a secure connection. This makes it almost trivial to replace the download URL.

7-Zip support

while .zip still being dominant in the scene, it seems 7z gradually emerges on the scene.org file archive.

Simply having the support of 7-Zip (software) might be nice since it also decompresses RAR.

https://files.scene.org/search/?q=.7z

not working on some csdb urls

https://csdb.dk/release/?id=2771

support for demozoo/music/ and demozoo/graphics/

currently conduit only works for demozoo.org/productions/
would be nice if it would also work for /music/ and /graphics/, mostly for the c64 releases, where it's better to see hires images in action rather then the screenshot and the music usually has an animated screen.

Janeway demos and intros run-bar

Hi! What about coding a thing that you can run a production from Janeway/Bitworld/Kestra by just pasting the url of the production to a run-bar? Something like this https://www.neilb.net/n64wasm/ but instead of having a drag/drop window you'd just paste the production url and run it that way?