Live data from Hacker News

Show HN: I'm open-sourcing my game engine

github.com

81–90 of 94 posts

Re: Show HN: I'm open-sourcing my game engine

#81
post #36
post #32

Earlier quoted context omitted.

IO game is a catch all term for these types of mechanically simple, multiplayer, web-based games . The name comes from the fact that many of these games are hosted on .io domains. Well known examples are agar.io and slither.io.

And the biggest platform for them all, itch.io.

Maybe this was meant as joke, but this isn't true at all.

Re: Show HN: I'm open-sourcing my game engine

#82
post #69

I'm trying to make NPCs out of AI agents so this would be really useful to me. Thanks for open sourcing the work!

Oh, I've already done this! Happy to help. Feel free to DM me here on Discord. (I should probably make a YouTube tutorial for this)

I couldn't figure out how to DM you on HN, so I'll send you an email. Thanks!

Re: Show HN: I'm open-sourcing my game engine

#83
post #51

Earlier quoted context omitted.

Maybe not a great example, you can make a simple blog from scratch in like 20 lines of PHP/MySQL. I did this as a young teenager by copy-pasting some example code from Tizag's MySQL tutorial (which amazingly is still up, in its original condition![0]) (I wish I could share the original code, but I don't have it here.) [0] http://www.tizag.com/mysqlTutorial/

A blog engine!

A selfhostable blogging platform!

Re: Show HN: I'm open-sourcing my game engine

#84

The android app sign up page seems to want me to enter my Google username and password _inside the app,_ in what looks like a web form, but as a user I have no way to tell if the app is snooping on my password. It seems like Apps usually navigate away to a sign in, and then navigate back. Is that pattern hard to implement? Is the issue about cross platform support? Thanks

This is called OAuth 2.0 and is trivial to implement with something like Okta.

Why would you need Okta for a simple Google sign in? A simple traditional Google OAuth flow should work just fine.

Re: Show HN: I'm open-sourcing my game engine

#85

Earlier quoted context omitted.

Or we could not encourage depending on a constantly-breached centralized “security” authority. https://hn.algolia.com/?q=okta

This feels a bit like NIH syndrome to me. Maintaining your own authentication solution is not trivial, especially for small/one-person operation. Edit: Re-reading, I guess this is specifically targeted at Okta, who have had their share of problems.

Yeah it is known that one should use a library for authentication. It's also observed that they keep getting breached. The two sentiments "Best practice is use Okta" and "Okta keeps falling over" are inconsistent but the industry doesn't seem to have worked out what to do about this yet.

Re: Show HN: I'm open-sourcing my game engine

#86

Earlier quoted context omitted.

Is there really a better alternative? Using a centralized service is certainly more secure than every company implementing a bespoke auth system. Also, there are super strong incentives to hack Okta, so naturally more people will try to hack Okta.

I always thought it would be cool to have everybody carry around a private key on some device, and that key signs all data to prove authenticity. Instead of creating user accounts on a forum, posts would be signed with a key and a hash would be appended to the username, so you know that this John Smith is the same one as the last post because he has the same hash appended. Kind of like what 4chan does with tripcodes

You'd instantly have to deal with people losing their keys, people damaging their keys, people's pets eating, digesting and defecating the keys, fire/floodwater/storms/earthquakes/other natural or man-made disasters destroying the keys, keys getting damaged by ESD or cosmic radiation, people stealing other people's keys for extortion or abuse... spread any technology over millions of people and you will experience all sorts of failure modes that you haven't even thought of.

All of these failure modes need some sort of "customer support" to work out, otherwise they'll not be used by users at all or they'll lead to shitstorms when people are locked out of their identity. And if the customer support makes errors or gets bribed, you'll get shitstormed too.

And allowing people to back-up their keys isn't an option either because that defeats the purpose of why you have an HSM anyway.

Security is hard, PKI is even harder.

Re: Show HN: I'm open-sourcing my game engine

#87

Earlier quoted context omitted.

This is called OAuth 2.0 and is trivial to implement with something like Okta.

Or we could not encourage depending on a constantly-breached centralized “security” authority. https://hn.algolia.com/?q=okta

Rolling your own is rolling the dice, but using something like Okta is guranteed (to leak).

Re: Show HN: I'm open-sourcing my game engine

#88

Earlier quoted context omitted.

I always thought it would be cool to have everybody carry around a private key on some device, and that key signs all data to prove authenticity. Instead of creating user accounts on a forum, posts would be signed with a key and a hash would be appended to the username, so you know that this John Smith is the same one as the last post because he has the same hash appended. Kind of like what 4chan does with tripcodes

You'd instantly have to deal with people losing their keys, people damaging their keys, people's pets eating, digesting and defecating the keys, fire/floodwater/storms/earthquakes/other natural or man-made disasters destroying the keys, keys getting damaged by ESD or cosmic radiation, people stealing other people's keys for extortion or abuse... spread any technology over millions of people and you will experience al…

I also personally believe identity online should be transient. Getting locked out of your identity should be as simply fixed as creating a new identity

Re: Show HN: I'm open-sourcing my game engine

#89
post #45

Unless it’s as advanced as Unity, is it possible to even sell an engine these days? Something like this is expected to be free

It's an extremely bad idea to go and build from scratch a do-everything game engine with AAA 3D capabilities, but there is absolutely space for engines with a very specific focus. If you want to make a VN, would you rather open up a blank project in Unity or just use Ren'Py? In the commercial space, RPG Maker and GameMaker continue to exist.

[deleted]

Re: Show HN: I'm open-sourcing my game engine

#90

The android app sign up page seems to want me to enter my Google username and password _inside the app,_ in what looks like a web form, but as a user I have no way to tell if the app is snooping on my password. It seems like Apps usually navigate away to a sign in, and then navigate back. Is that pattern hard to implement? Is the issue about cross platform support? Thanks

I should have started out by saying this looks really neat, which is why I downloaded it to try out on my phone! :) thanks for sharing! Sorry my only comment was a criticism/question.

Looking forward to trying it out on the computer instead!

Post reply on HN