There is a FAQ at the end of this post. Please read it before asking your own questions. You will probably have questions. I may have already answered them.
Hi everyone. We over here in TechComm have gotten clearance from Plotside to offer a bit of a new thing for the game. I am personally very excited about it, despite what you might infer from the numerous caveats and warnings below.
A bunch of you probably remember that last game I was over in the Science Center helping people out with passwords and such for the Autoforge, trying real hard not to break immersion, and everyone's wrists were about to fall off from all the handwaving we were doing trying to justify D-Trip hanging out and helping people. I'd like to avoid that this time. I would have handed it off to Thomas, but he's had horrible overtime hell at work and I've had similar levels of difficulty concentrating on anything that's not work or destressing from it.
So, sorry about that. Hopefully this will make up for it.
I've gotten clearance to put the Autoforge on-line, available over the normal Internet, for the next week, pre-game. We want to let everyone PC-side make sure they can access their AMPs and we want to allow you to look up how many resources you had deposited.
More to the point, I can't guarantee I will be up and at the site at a reasonable time Saturday morning, as I'm staying off-site. So if there is as much IT-related trouble next event as there was last event, I may not be able to help *at game*. And it was kind of silly the first time we did it. So I'm going to try to handle that stuff in the next week.
The autoforge is currently up and running at
macilnya.org:7000. It's serving HTTP over a nonstandard port, so some of you behind corporate firewalls may be SOL; sorry about that.
There are ways that this can be abused. Please don't. In fact, please don't even speculate hard on how this can be abused. If your intent is to "help" with security, send me a PM, don't post your speculation in a reply to this thread.
Here is what you are allowed to do:
1) Ensure you can login. To do this, if you have any problems with logging in, or if you never migrated your account, or you forgot your password, *send Jim Waldrop a Private Message*. You are communicating with me as Jim the guy working on the game's tech stuff, not as D-Trip the businessman; D-Trip does not get to know about the things in the Autoforge. If this arrangement is unsuitable, you can put in a Help Request, and some kind soul Castside may be able to play intermediary and anonymizer, but we don't guarantee that.
2) Check your balance.
3) Transfer resources to other people. This is legit right now. If Derek and Plot decide to disallow this, we will alter this message and roll back any changes; we have that capability.
4) Preview AMPs you can produce. To do this, go to the "Production" tab, and type in the name of the procedure, followed by AMP. The system does not know what skills you have, and as such will assume you are not cheating.
DO NOT ACTUALLY PRODUCE ANYTHING. You will at best make paper shoot out across my server room floor and at worst crash your connection as it determines that there is no running printserver, depending on whether I plug in the AMP printer to document any hilarity that might ensue when one of you invariably presses the button anyway. DO NOT PRESS THE PRODUCTION BUTTONS.
5) Preview experiments you can produce. If you had experiments last event, they came in a bottle with a code on the bottle. In the Autoforge, they are "Experiment ???0X-0105 AMP", where ??? is 3 or 4 letters, in all caps, corresponding to the first three characters of your character's last name, or your first initial plus the first three characters of your last name if you do not have a unique last name.
So for D-Trip, Experiment AMPs would be under "Experiment LON0X-0105 AMP".
For, say, Albrecht Detweiler, member of the large Detweiler clan, Experiment AMPs would be under "Experiment ADET0X-0105 AMP".
Again, don't press the production buttons.
Anyway! That's a lot of text, thank you for reading all the way to the bottom. I really hope that this works out cleanly and we can expand this a bit.
What is my password? Send Jim Waldrop a Private Message.
Was my Autoforge account ever imported from the old system? Send Jim Waldrop a Private Message.
Help, the Autoforge is down. Send Jim Waldrop a Private Message, or if you have other means of contacting me, do so. I will try to bring it back up. Do not contact me out of band for anything related to the Forge that is not "the site is down"; I am going to be keeping the PMs as sort of a paper trail.
Can I attempt to hack or break into the Autoforge? No. This is cheating. This not even "lulz let's see if my e-peen is longer than Jim's" level cheating, it's just entirely bad form. The Autoforge web app is not hardened against malicious, mischievious, or ill-advised penetration; I have no doubt you could find some way to get in, just as I am pretty sure I would see it happening. If someone tries to attack the Forge I will just shut it down, and everyone can deal with it in the science center like always. Don't ruin it for everyone else.
I couldn't help myself, and despite it being explicitly listed as cheating I went ahead and pentested the Autoforge! Oh my gosh your webapp is so insecure! How can anyone not have hacked it already!!1! Sure. OK. Great. If it is that earth-shattering, DO NOT post your findings or worries on this thread. Send Jim Waldrop a Private Message.
Can I just go poking around and seeing what it takes to make different AMPs? No. This is cheating. I will be going through and making sure that nobody has done this kind of exploration. If it is not on your character sheet, don't try to pull it up in the Production interface.
Has the Autoforge been hardened against present-day Internet traffic? No. It is a toy webapp, written in a very lightweight Python-based rapid web development framework. The only thing that matters is that your password is stored as a SHA256 hash, so even if we were dumb and the box gets owned and you were dumb and used the same password here as you used elsewhere, everything should still be fine.
Can I transfer resources to other people pre-game? Yes. Derek and Plot have *currently* signed off on that. In the unlikely event that we or they change our minds, I will simply roll back the DB to the state it was in at the end of the last event, and I will tell you here.