• published the article Inactive E-mails

    There were many e-mails sent out regarding projects which were marked as inactive.

    These e-mails, in the format of:

    We're sorry, your project, <Project Name> (http://wow.curseforge.com/projects/project-1234/), has been marked as inactive on CurseForge/WowAce.

    Recently the site upgraded its project status component and as a result all projects which have been previously merged or deleted were marked as inactive again, causing the e-mail to be sent out. Your main projects have not been affected in any such way.

    -Note from Kaelten: Yea guys, we apologize for the mixup. We've already patched the cronjob so that such a thing won't happen again. Also for those of you who have many projects that were marked as inactive last night sorry for the span :)

    Posted in: Inactive E-mails
  • published the article Forum logins restored

    Sorry for the brief outage.

    The issue has been fixed, just click login in the top right as usual and the forums should log you in without issue.

    Posted in: Forum logins restored
  • published the article Merry Christmas!!!

    I hope everyone has had a great Christmas, or observation of choice. Sorry I didn't post it earlier, my internet is spotty atm.

    Anyway, blessed holidays to all!

    Posted in: Merry Christmas!!!
  • published the article Re: QuestHelper or CurseClient Keylogger Rumors

    There are a great number of people who are claiming that after downloading QuestHelper and/or the CurseClient that they are getting hacked, keylogged, or that their babies are being stolen by ninja mutant Elvises (or would it be Elvisi?).

    I'd like to point out that the first two are as likely as the last, providing that:

    • You're only using versions of the CurseClient that have been hosting on Curse/CurseForge or ones linked to you directly by myself or other staff members (aka alphas).
    • You're only getting QuestHelper from reputable addon sites, such as Curse.com, CurseForge.com, or WoWInterface.com. To my knowledge it's not been uploaded anywhere else by the authors.
    • You haven't paid a ninja mutant to dress up as Elvis and steal your baby.

    Sadly these type of rumors are often started and perpetuated by people looking to discredit others and most of the attacks I've seen recently are slanted as anti-Curse.

    There was recently a 24 page thread generated (in one freaking day!) on the official WoW forums. The instance of some of the posters there into ascribing guilt to various people and groups combined with some obvious misinformation makes me wonder if it's an intentional propaganda move. However, this is mere speculation as I have no evidence to support the thoughts as fact.

    As far as keyloggers go. Please keep in mind it's most likely not the last thing you did that got your account comprised. It is a fairly common practice for these the groups responsible for hacking your accounts to wait weeks or even months before attempting to use a password.

    Also, brute force attacks are not completely unheard of. So if your password is 'god', 'sex', or 'secret' please change it right away!

    Lastly, a few things to remember:

    • Curse does in no way support the keyloggers, account hijacking, or gold selling.
    • You can't get a keylogger from an addon as long as you just put the files contained therein in your addon directory. You'd have to run an executable somewhere!


    Posted in: Re: QuestHelper or CurseClient Keylogger Rumors
  • published the article Malicious Spammer Alert

    Hey guys,

    Another jerk or group of jerks took advantage of the holiday weekend to spam a few thousand comments on the website.

    These comments, due to a small security hole in one of the parsers, was able to embed an iframe on the page. It would then in turn try to target out of date versions of Flash.

    We've cleaned up any of the comments that we can find, prevented any further ones from rendering, and plugged the leak in the parsers.

    I'm not sure exactly what he was trying to install on machines, but I know it looks like it specifically targeted IE with Flash lower than 9 r124.

    We're doing what we can to ensure that this type of attack on our users is impossible in the future. Please check your flash version, if you have a vulnerable version please run a virus scanner and try to make sure all is good.

    If anyone discovers more information about what exactly they where trying to do, the effectiveness, and detection/cleanup techniques please post them in the comments.


    Posted in: Malicious Spammer Alert
  • published the article Explicit Terms of Use Agreement now Required

    Hey guys, as of a day or two ago we started requiring an explicit agreement to the Terms of Use for full usage of the site, this includes svn commits and (for curseforge) uploading of files.

    Please check out this link to accept the ToU.

    I apologize for not making this announcement sooner.


    Posted in: Explicit Terms of Use Agreement now Required
  • published the article NewsFlash: Incoming Improvements to the Curse Client

    The State of the Client

    I want to start out by stating that we're well aware of the issues. We're not deluded into thinking that the current state of the Curse Client is as good as it gets.

    Up until this point I've been on the sidelines of the Client, however I'm pleased to say that I'm taking over the project and will be leading product development on the client.

    I've spent a large portion of my time over the last several weeks reading forums and talking to people to get a better idea of what people want, need, and hate.

    We've recently broken 500,000 Client installs. While that is a very exciting number for us to reach, it also shows us the level of responsibility we have to making sure that the client is the best possible.

    The Big Issues

    It is the primary purpose of this announcement to help communicate what's going to be changing in the near future. But first let me recap some of the things that are definite issues(in no particular order). This is also not necessarily an all inclusive list.

    • Ignoring manual deletions
    • Installing over addons
    • Downgrading addons
    • UI feedback failures
    • Poorly worded options and button text
    • Too much automation in some places, too little automation in others
    • Lack of features that are considered defacto standards
    • General reliability

    Now I want to tell you what we're going to be doing in order to improve things.

    What we're going to do about it!

    UI Changes

    First we're giving the UI an overhaul. The overall goal here is to make sure that the interface is more intuitive, more usable, and that it gives better feedback about what it's doing. To that end we're taking the following steps:

    • In an effort to increase the usefulness of the listings we're making the bottom details pane shrinkable so that you can see more addons listed at a time. You'll be able to view it if you want, but if you prefer you'll be able to use the full size of the window for the listings. Long term you'll even be able to decide what portion of the window is taken up by the bottom pane.
    • We're taking and applying some background colors the listings in order to let you know what' s happening.
      • Gray - For svn, git, and mercurial working copies.
      • Yellow - Ignored addons.
      • Red - Addons that are out of date.
      • Green - Addons that have been updated recently.
      • Purple (maybe) - Addons with unrecognizable versions. (more on that later)

    In addition to the above colors we're going to be using sorting to help it make sense. All Yellows and Grays will be forced to the bottom of the listings. All Red and Purples(?) will be forced to the top for easy identification.

    • We're rewording the buttons to make things make more sense to the end user. Intuitiveness is a major concern.
    • Version numbers will be defaulted to instead of dates in the addon listings. We will provide an option for people who prefer dates.
    • Reorganization of the buttons and other controls so that the important ones are more obvious.

    We're also going to be enhancing the activity log panel, making some adjustments to the change log viewers, redoing the listing controls to allow you more options, adding more messages back to the user, etc.

    New Features

    Like I mentioned before we're missing de facto features. And we'll be moving quickly to add them.

    • Alternate Packages - Up until now we've called this disembedded support. It is coming back.
    • Dependency Resolution
    • Manual Deletion Detection
    • Alpha Support
    • Multiple Game Support - So you can manage your PTR or Beta installs separately of your main install
    • Version Pinning - Installation of a specific version.
    • Submodule support - For example you'll be able to selectively install or update to a specific sub folders of an addon.
    • Saved Variable Scrubber - This will be on demand clean up, it will NEVER run automatically.
    • Automated and Manual Backups - We will keep an automatic backup of addons on update. And you'll be able to manually backup and restore a full backup on command.
    • Real Configuration Box
    • Deletion before upgrade - This will probably be enabled by default, I'm open to feedback though. Keep in mind that with the new fingerprint system (outlined below) a dirty upgrade could break future updates.
    • Uninstalled Package Listing - We'll be showing you a new tab of all Unrecognized packs. Limited management will be available via this listing. You'll be able to remove them, and try to identify them.

    Several of these above features are considered to be advanced features and we will be labeling them as such.

    Changed Behaviors & Methods

    One of the larger problems we've faced is about it auto detecting the wrong addons and/or downgrading or otherwise installing things wrongly.

    We're taking a few steps to fixing these problems.

    Discovery and Detection of versions

    First, we're changing our auto detection code. In the next major release we're switching away from toc name based matching to instead use unique version fingerprints. We will both be fingerprinting individual files and packages as a whole in order to know for sure what version you're using.

    Because of the fact that this will allow us to know within a very high level of accuracy in identifying exactly what version of a addon you're using we'll be able to reliably recommend upgrades.

    The question shifted at that point to knowing what to do when we don't recognize the files. So we're changing the behavior some. For unrecognized packages we'll be displaying a special Unrecognized status. From that point on we won't update the addon until either a) you tell the client to or b) we learn for sure what version that is.

    This does have one potential issue, or in some cases a feature, for auto discovery. If you go in and edit an addon, add a file, remove a file, etc the fingerprint of the file will change and then the fingerprint of the whole package will change.

    In the case of initial discovery we won't be able to auto detect what project the files belong to. If we do know what project the file belongs to it becomes an Unrecognized version and will no longer be updated until you tell the client to do so. Down side, if you have some zombie files in your directory from unclean upgrades you'll need to manually match the project or tell it to upgrade.

    The current toc name based scanner will still be available for suggesting matches in the new Uninstalled Package Listings.

    Changes to Defaults

    We're changing a few default behaviors. We'll no longer be defaulting to fully automatic addons update as this seems to be counter to the majority of our users usage patterns. We'll be shifting the defaults throughout the client to match the default behaviors of our users.

    Popup Questions

    These annoying repetitive popup questions will be streamlined out of the client. Anytime we find ourselves saying "well we could ask the user...." we're going to smack ourselves and find away to do it without that.


    As a result of the above changes, if anything we'll be overly cautious about doing the wrong thing.

    The Mac Version

    Having a fully functional Client under Mac is very important to us. We know that it does not follow many of the standard conventions on macs at this time. We will be addressing as many of those as possible, however our first focus is on having a solid product with all the needed features. After we get there we will then focus on asethetics and the macesqueness of the client (is that a word?).

    Conclusion

    I'm very happy to be stepping up my participation with the Client. I hope that this massive wall of text I've posted has helped you realize just HOW serious we are about delivering the best possible updater.

    We will be continuing the free premium preview until we've gotten most of the things in this announcement out the way. We hope to have everything in this missive out to you guys in just a few short weeks.

    And as always, please give me as much feedback as possible. Any and all constructive feedback on the things outlined in this announcement is most certainly welcomed.

    It's a lot of work to do. We're making daily progress. And I'll keep you posted.


    Posted in: NewsFlash: Incoming Improvements to the Curse Client
  • published the article Warning: Another Trojan on wowui.worldofwar.net
    That's right three viruses in two days. Looks like the same people this time pretending to be the Curse Updater. Please don't be fooled into downloading this one either. F-Secure Client Security says:
    22 October 2008 16:28:25 - 16:28:28
    Computer name: ----
    Scanning type: Scan target
    Target: Addons\30000\CurseUpdaterzip-1224675514.zip
    Result: 1 malware found
    
    Trojan-Spy.Win32.Ardamax.n (virus)
    
    The relevant forum thread here is http://forums.wowace.com/showthread.php?t=14710...
    Just to clarify: NO ONE from Curse had anything to do with this, I've reported it to have it taken down.
    Posted in: Warning: Another Trojan on wowui.worldofwar.net
  • published the article Warning Trojan on WowUI.worldofwar.net

    Someone has uploaded a trojan on WoWUI.IncGamers.com masking it as a resurrected WowAceUpdater.

    Do Not DOWNLOAD!

    This file was in no way authorized by me or this site, and is a keylogger trojan.

    I repeat, DO NOT DOWNLOAD OR EXECUTE!

    This is a blatant attempt to steal passwords, please people don't fall ploy to it.

    People tried to upload this to our servers earlier and we blocked them. I've petitioned for WOWUI to take it down, however so far they have not.


    Posted in: Warning Trojan on WowUI.worldofwar.net
  • published the article Rest In Peace: files.wowace and WowAceUpdater

    As I'm sure many of you have heard or scene today marks the day where these services have been discontinued.


    Rest in Peace

    Today has marked the day where this page has been officially discontinued in favor of the newer systems that have recently been deployed.

    While I know not everyone is happy over the changed we're going through and the current state of them I want everyone to know that what has happened has had to happen. I apologize that we didn't have enough time to get everything 100% right, but we're working as hard as we can across the board to make things right. It however is an uphill fight.

    For those who don't know....

    A few months ago I posted a long forum post outlining the current state of WowAce and what had to be done to allow the services to continue. I talked to authors and users alike trying to come up with the best solutions possible. And now we're here.

    It's been a glorious if bumpy ride. The success we've experienced on this page and the updater have been an amazing accident, and we weren't prepared for it.

    A little over a year ago Curse.com started subsidizing our servers, and for a time that was enough to get us through the worst of it. But we just kept growing.

    Things reached a critical mass during 2.4. We filled up the entirety of the 1 gigabit connection we where using and ended up pushing out more than 300GB an hour. With more than 500k users downloading updates for every small change things just couldn't keep up financially.

    So that leads us to today.

    In Closing

    We encourage all users who are looking for updates for their addons to head over to Curse.com and look around. If you're looking for Beta and or Alpha releases and are part of our testing community please join us on the new site.

    If you're used to using WowAceUpdater or one of the other third party clients that used this page we encourage you to try out the new Curse Client. It's not as polished as we'd like and it will certainly receive a lot more work here in the new future.


    The above text appeared this morning on files.wowace.com.

    I do this with a heavy heart in many ways, but it has to be done, and not is all lost for there is much to be excited about as well. We have an exciting opportunity to reforge out past mistakes into something amazing. No it will not be pleasant, but yes we will succeed.

    I'm constantly amazed by our community and I ask you all one simple question.

    We're taking one step back so that we may take two steps forward, will you walk with me?


    Curse Client

    Curse Client for Mac

    Posted in: Rest In Peace: files.wowace and WowAceUpdater
  • published the article Today's Site Issues Recap

    Ok guys, I'm sure many of you have noticed a few outages.

    The first one was due to maxing out our rack's outbound trunk connection. We scrambled to have them run more capacity and now we're doing much better.

    The second was due to some cables being knocked loose during the fix for the first....

    We're sorry about them but I'm happy to say that things are looking good overall. I hope that tomorrow goes well. Wish us luck!

    Posted in: Today's Site Issues Recap
  • published the article Back from Raiding Blizzcon

    Hi guys!

    For those of you who haven't seen me lurking around trying to catch up to things and manage the site today I'm glad to be back from Blizzcon.

    I'm also sorry I couldn't get more done before the ready check came.

    While there I got some nice loot, participated in some great encounters, and all in all had a hell of a time. I wish I had met more of you guys there, and maybe next year more of us can meet together at the Hilton for A.M.F.s and make random jokes and bad gaming puns.

    First though, let's get through this week so we can move on to bigger and better things.

    Posted in: Back from Raiding Blizzcon
  • published the article The road ahead, or how I finally got the forums off of layaway.

    This is where we stand.

    • Repos are fully imported, and to my knowledge we have no open issues regarding them (please correct me if I'm wrong.)
    • Files import continues but should be finishing shortly. We've done a breadth scan in order to import files for all projects before doing depth imports.
    • Forum import is done, we've also reorganized the forums a few times, we hope it meets your satisfaction, and we hope that if there is some feedback that you'll share it :)
    • User accounts did import from the old forums, however there are still some random issues we've found that have a chance of messing things on occasion. A few things to note
      • It is possible to have your accounts renamed, please let me know if you want this. ( I do have a list of reqs that I'm going to try to knock out tomorrow.
      • If you're not able to log into the forums still let me know. Please confirm this though as we have fixed multiple issues that literally affected THOUSANDS of users each.
      • If you are logged into the forums but all your posts are on another account like 'yourname2' or 'user_134234' contact me and we'll get them merged into your main account.
    • As of yesterday afternoon projects began syndicating to Curse.com, and showing up in the Curse Client. However WAU will not officially be retired till we get a few more kinks worked out of the CC. We hope to be able to get new builds for PC AND MAC out on Monday. I've been using the mac client for the last few days and its been pretty stable and offers most of the core functionality from the windows version. If you want to help beta test drop my a PM on the forums :)

    Here are a few Q&A's that might help you along:

    Q: I miss the old "new posts since my last visit links" from SMF
    A: While not the same there are equivalent features. on the new forums. To see all new posts available on the forums since your last visit click 'New Posts' on the sub nav bar in the forums. To see new replies to your posts you'll have to have subscriptions on the ones you want to track. And can then see all new replies that way.
    Q: OMG! Fixed-width! EWEEEEE!
    A: ITs come to my attention that many of you aren't really a fan of the whole fixed width thing. Therefore I'm reviewing my options on making it optional. Expect something shortly.
    Q: Will/Does the new Curse Client support disembedded addons?
    A: No it does not currently. Yes it will soon.
    Q: What happened to the wiki and all its docs?
    A: It's still available at old.wowace.com. We will be importing articles as time goes on, and you're encouraged to do the same for your projects.
    Q: Where is my mac client! WHERE!! TELL ME NOW!!!!!
    A: First, please don't eat me! Second, right here. We've got the crashes out, and its working pretty well. A few things though
    • Back up your addons. Just in Case(tm).
    • Not all feature present in windows are 100% implemented, but the core ones are.
    • There are still a few known bugs, but we're squashing those daily.
    • Bad auto detections should be mostly fixed now, please advise us if you find any!
    • Again, disembedded support is not in yet, please be patient while we finish it.
    Q: Will the curse client continue to receive updates, or is it done?
    A: Nope, it will continue to receive updates and fixes, further refinement and features all for you guys for a long time to come.
    Q: How much will this whole, 'premium' thing cost?
    A: For authors? Nothing, we got you on this one. For users? No more than $3.00/month or as little as $20.00 a year. More info in the FAQ linked at the bottom.
    Q: Why should I pay that, or whats what money going towards?
    A: A few things:
    • Pay for the service. All that bandwidth fees was eating us alive.
    • Future development and services. We want to offer you guys more, A LOT MORE.
    • No ads, not that many of you don't block them, and that wowace even has any (anymore we used to, but not now). However, this will apply to the whole of the Curse Network.
    • AuthorRewards. Guys I can't stress how cool this is. For the first time authors will be able to reap something for all the hard work they've sown. The authors deserve this hands down. More info in the FAQ linked to below.

    We've also been responding to issues:

    • Forums
      • More than 10k people had issues logging in, this has been largely if not completely fixed. Please let me know if you're still not able to log in.
      • Originally it was announced that the forums would be shared with curseforge, turns out despite their quite at the time people didn't like the idea. So as promised the forums have been separated.
    • Usability & Accessibility
      • I've tried to make the site easy and intuitive to use. In some cases I've failed, especially for those with poor eyesight. I apologize.
      • I'll be adding the ability for the forum to optionally render in variable width mode.
      • Timestamps will soon be customizable, both in format and timezone.
      • Font sizes. I'm examining several other examples of cleaner typography and I plan to make some changes to this soon.
      • Colors. I wanted to keep the old site colors because it'd leave people with at least ONE thing that was familiar. Now that the site is out I will soon feel more free to experiment with them. I hope to eventually offer multiple color schemes, including high contrast, darker, and cool colors.
    • Template issues
      • Sometimes a really long title will cause things to wrap undesirably, thus forcing the sub nav off the sub nav bar. This is *bad*. I'll be truncating to fix it.
      • Diffs currently don't render properly in the change logs on some pages. They fly off the edge of the site.
      • Scroll bar when at 1280x1040. I'm aware, and do want to fix this. It's due to the images at the top right iirc.
    • Repos
      • The repositories had issues during the import, however we've fixed many(all?) of these. Please report any problems pronto and I'll beat it with a hammer until it works for you.
    • Accounts
      • When we imported accounts we imported them from the old forums, not from the svn accounts. Therefore the old svn accounts no longer work.
      • Some accounts need to be renamed and or merged on the forums. I'll be taking care of these over the next few days. Please notify me if you fall into one of these categories.

    I'll be rereading this after some much needed sleep, and make edits then.

    Posted in: The road ahead, or how I finally got the forums off of layaway.
  • published the article The New Wowace! (almost, the forums are on layaway)

    Hi guys I've went ahead and swapped the dns records since most of the site is now usable.

    So all of you should be seeing this soon.

    Here is the status update from the old forum page:

    Today is the day that the below plans go into action. Please be patient while we transition to the new site.

    While the transition is going on many questions can be answered in our knowledge base. Not all things are documented yet but we are working on it continually.

    I'm moving the status messages here, as I've locked the forums.

    A few months ago I outlined an massive site upgrade in [ this thread.] The date has moved several times as we've toiled and waited for the stars to align. However, I am pleased to announce that today is the day we carry out the announcement. As a result the site will be disabled in portions while we handle things. We ask for all of your patience as we work today to achieve the transition. We hope it will be a smooth day.

    I'll be updating this post and responding here through out the day.

    Status

    • Pulling fresh dumps on broken repos - 2:50pm CST
    • Importing users into the new forums! woot! Almost 1/2 way. - 2:50pm CST
    • Resuscitation of the web server :S - 1:00pm CST
    • Importing old forum accounts into the auth cloud. - 12:00pm CST
    • Back at it to get issues worked out and the damned forums fully imported! - 7:30am CST
    • Pausing all forum import until the morning, :( - 9:30pm CST
    • Dns change over, even though the forums aren't really done yet. - 7:30pm CST
    • Babysitting Impex..... le sigh - 6:50pm CST
    • Locking Forums - 6:45pm CST
    • Starting to do forums import - 5:20pm CST
    • Supplemental and post-processing done! - 5:15pm CST
    • Repo import script done! woot! - 4:45pm CST
    • Waiting for scripts to run... long script is long... - 11:50am CST
    • Started file import - 11:50am CST
    • Disabled fisheye - 11:30am CST
    • Disabled svn writes on dev.wowace.com - 10:20am CST
    • Project Import - 10:20am CST
    • Prepwork - 9:00am CST

    We're still working on the forum import so please be patient with that.

    Posted in: The New Wowace! (almost, the forums are on layaway)
  • published the article Downtime is over!

    We're back up!

    Posted in: Downtime is over!