CREATE YOUR AI CUM SLUT ON CANDY.AI TRY FOR FREE
x

BlackDays

Active Member
Jan 30, 2021
542
593
Guys, lol no. As far as i've seen, besides the save file and script.rpy stuff, i didn't see any other malicious code for clients.
That said it's still kinda bad to do that. They should have just tested it first with the "you don't download a car" blah blah text alone and see if it works and observe people, before anything else.

The scary stuff is, that it (the "drm") could be turned against them too.

And i got a feeling someone might just have done that already.
 

KnowNoHope

Well-Known Member
Apr 16, 2020
1,104
1,429
Guys, lol no. As far as i've seen, besides the save file and script.rpy stuff, i didn't see any other malicious code for clients.
That said it's still kinda bad to do that. They should have just tested it first with the "you don't download a car" blah blah text alone and see if it works and observe people, before anything else.

The scary stuff is, that it (the "drm") could be turned against them too.

And i got a feeling someone might just have done that already.
oh... scary for them. that sucks
a bit relieved though.
 

Bingoogus

Engaged Member
Sep 5, 2021
3,555
9,307
Guys, lol no. As far as i've seen, besides the save file and script.rpy stuff, i didn't see any other malicious code for clients.
That said it's still kinda bad to do that. They should have just tested it first with the "you don't download a car" blah blah text alone and see if it works and observe people, before anything else.

The scary stuff is, that it (the "drm") could be turned against them too.

And i got a feeling someone might just have done that already.
Ah ok, so more like, the DRM sending requests to their server is open to exploitation and certain forms of attack have an in? That's hilarious.
 

BlackDays

Active Member
Jan 30, 2021
542
593
Ah ok, so more like, the DRM sending requests to their server is open to exploitation and certain forms of attack have an in? That's hilarious.
You're on the right path, yes.
Obviously i don't know how things are handled server side, just checked if his host provider has at least the bare minimum countermeasurements in place, which they have.
And i really don't want to shite on any other devs work, and there's still a chance that im wrong with my assumption, but the whole situation looks kinda dire to me.

Let's just say that if i was a dick, i at least knew an angle to put a lever on.
And if this all is good for at least something, i hope it creates some awareness on Sels side, even if it puts me in a bad position here.
 
  • Thinking Face
Reactions: LuisD and Bingoogus

worthlesspeon

Member
Jun 10, 2017
193
457
Ah ok, so more like, the DRM sending requests to their server is open to exploitation and certain forms of attack have an in? That's hilarious.
I do think the idea of a porn game phoning home without explicit permission is a bit worrisome. Especially one with content as questionable as this one. I'm curious how much data could be collected if they were inclined to do so. Especially since Sel has threatened legal action in the past. Even if ren'py is fairly sandboxed and can't just go collecting data from the entire host, the logs do still reveal some information about the host. Not to mention he'll have an association with real IP addresses. Even if the content of the game is legal (which is probably not true in all countries), many of us would risk our jobs if it came out we play this game.

Additionally, the more I think about it, the DRM as it is may well violate the EU's GDPR law. Specifically the data processing regulations.
 

graz150

Newbie
May 26, 2020
15
50
I do think the idea of a porn game phoning home without explicit permission is a bit worrisome. Especially one with content as questionable as this one. I'm curious how much data could be collected if they were inclined to do so. Especially since Sel has threatened legal action in the past. Even if ren'py is fairly sandboxed and can't just go collecting data from the entire host, the logs do still reveal some information about the host. Not to mention he'll have an association with real IP addresses. Even if the content of the game is legal (which is probably not true in all countries), many of us would risk our jobs if it came out we play this game.

Additionally, the more I think about it, the DRM as it is may well violate the EU's GDPR law. Specifically the data processing regulations.
Yes, all this.
I don't know what it would entails, as I'm a noob about these things, but it might be worth it to only share a "cleaned up" version of the game here in the future. Just in case some malicious content get added to random files in future updates.

I'm sure even subscribers might be interested in getting a safe version of the game.
Or maybe more knowledgeable guys could share tips on how to prevent future damages?
 
Last edited by a moderator:

b7512966

Newbie
Aug 11, 2019
37
138
I don't know what it would entails, as I'm a noob about these things, but it might be worth it to only share a "cleaned up" version of the game here in the future. Just in case some malicious content get added to random files in future updates.

I'm sure even subscribers might be interested in getting a safe version of the game.
Or maybe more knowledgeable guys could share tips on how to prevent future damages?
That is not difficult at all.
It is really easy to make a metadata cleaning script + using git to check the differences between version of his game to know what he is changing on the code. Even if he does decide to share only rpyc files, or rpas, it is really easy to decompress and deobfuscate them.
 
  • Like
Reactions: graz150

Axismundi

Member
Jul 14, 2018
348
794
I'm sure even subscribers might be interested in getting a safe version of the game.
It should be possible to upload a "fixed" version, but I'm sure you'd need to talk to the moderators on this site so they don't update the front page every time a new release gets leaked here. But now that I think about it, this game doesn't appear on the recently updated page anymore, right? So I guess it's only an issue for the people sticking around.
 

chronox42

Newbie
May 1, 2020
45
206
It's seriously unethical for a program to call out over the internet without the knowledge or consent of the people using it. This is especially true when the program has never done so before and does not present itself as such. The incident we've all been experiencing points out Renpy's insecurity and the ease of foisting abusive behavior on trusting players. Selebus's choice to deceive LiL's entire player base without warning is disturbing. What might he do next? Renpy has the potential to collect extensive information about your computer and send it off for their perusal.

Everyone who plays Lessons in Love should consider their options for running the game with no internet access, or better yet, in a sandbox where it can access only certain files. This goes for all similar games as well, but now we've seen that Selebus is actually willing to start down the path of distributing thinly disguised malware.

This is a frustrating situation for me because Lessons in Love is my favorite work of fiction. The story is a joy to experience and I want to see it completed under good conditions. Selebus is an excellent author, and I don't want him to lose his social or financial motivation to keep working on the game. Unfortunately, I will never financially support his work as long as he shows contempt for the people who use the program he distributes.

Some here have suggested that things would be better for everyone if Selebus behaved as if this site did not exist; I agree. His obsession with "piracy" hurts all with a stake in LiL's success. Selebus: focus on your work, let the grudge go, and you will continue to enjoy the prosperity you've created for yourself with this amazing story. Everyone else: be careful out there.
 

worthlesspeon

Member
Jun 10, 2017
193
457
It's seriously unethical for a program to call out over the internet without the knowledge or consent of the people using it. This is especially true when the program has never done so before and does not present itself as such. The incident we've all been experiencing points out Renpy's insecurity and the ease of foisting abusive behavior on trusting players. Selebus's choice to deceive LiL's entire player base without warning is disturbing. What might he do next? Renpy has the potential to collect extensive information about your computer and send it off for their perusal.
yeah the more I think about it, any future plays should probably be in an isolated VM with no internet access. This goes for pirates and subscribers alike.
 

skwada

Member
Feb 13, 2020
115
392
Now I get an error msg "setLoveandLust not defined"

Does this mod not work anymore?
Hi sorry for the late reply, been quite busy with IRL stuff. I downloaded the latest version of the game and installed the mod from scratch and it works fine for me so I think the issue is with your installation. The error message you posted implies the mod file was not correctly loaded so could you ensure you have the file named as z_set_love_lust.rpy and placed it in the game/ subfolder?
 

alex2011

Conversation Conqueror
Feb 28, 2017
7,716
4,461
To you and anyone else put out by the DRM, Selly has been selling seashells his gross loli shit on gumroad, which doesn't allow porn.





Their report link is broken but you can "Contact Us" at the bottom of the page:



The link is in the game - it'd be a real shame if it broke for the entire month until the next update :unsure:
You're only hurting non-subscriber avenues for obtaining them this way, this won't do much to Sel if anything.

I do think the idea of a porn game phoning home without explicit permission is a bit worrisome. Especially one with content as questionable as this one. I'm curious how much data could be collected if they were inclined to do so. Especially since Sel has threatened legal action in the past. Even if ren'py is fairly sandboxed and can't just go collecting data from the entire host, the logs do still reveal some information about the host. Not to mention he'll have an association with real IP addresses. Even if the content of the game is legal (which is probably not true in all countries), many of us would risk our jobs if it came out we play this game.

Additionally, the more I think about it, the DRM as it is may well violate the EU's GDPR law. Specifically the data processing regulations.
It isn't, it is illegal in places with archaic laws that ban even written word depictions, but that doesn't really matter developer side since he is admittedly in a country that does not hold such archaic views of fiction. As far as GDPR, this is again user side as he isn't trying to go for the EU specifically as an audience, there are just EU players possible. All he would have to do is block EU distribution through official channels and he could then blame it on pirates for any case of the game in the EU. A lot of the EU fits into the first part about legality of certain content anyway, so players in the EU may already be risking criminal possession of illegal content.

Also, not a porn game, an adult VN with porn as side content. He could strip out the porn and it would stand on its own. It has been that way since 0.8.0 if not earlier.

It's seriously unethical for a program to call out over the internet without the knowledge or consent of the people using it. This is especially true when the program has never done so before and does not present itself as such. The incident we've all been experiencing points out Renpy's insecurity and the ease of foisting abusive behavior on trusting players. Selebus's choice to deceive LiL's entire player base without warning is disturbing. What might he do next? Renpy has the potential to collect extensive information about your computer and send it off for their perusal.

Everyone who plays Lessons in Love should consider their options for running the game with no internet access, or better yet, in a sandbox where it can access only certain files. This goes for all similar games as well, but now we've seen that Selebus is actually willing to start down the path of distributing thinly disguised malware.

This is a frustrating situation for me because Lessons in Love is my favorite work of fiction. The story is a joy to experience and I want to see it completed under good conditions. Selebus is an excellent author, and I don't want him to lose his social or financial motivation to keep working on the game. Unfortunately, I will never financially support his work as long as he shows contempt for the people who use the program he distributes.

Some here have suggested that things would be better for everyone if Selebus behaved as if this site did not exist; I agree. His obsession with "piracy" hurts all with a stake in LiL's success. Selebus: focus on your work, let the grudge go, and you will continue to enjoy the prosperity you've created for yourself with this amazing story. Everyone else: be careful out there.
He's not showing contempt for people who use his program generally speaking, he's showing understandable contempt for the ones not following the methods he tried to lay out for non-subscribers to give them a fair avenue to obtain the game with no monetary cost or content restrictions.

It was a matter of two weeks between subscriber and public release, a small price to pay for a game this good, and over the years the game has been uploaded on unofficial channels at points before those weeks ranging from days, to hours, and on at least one occasion even minutes from subscriber release, when the wait timer started for public release.

Then he tried to give subscribers back some of the benefit they lost to this decreasing time frame between releases and those got leaked as well.

As far as how it should be handled, I do agree, but that's easier said than done when things like what I said above are happening.
 
Last edited by a moderator:

KodomoNoDragon

New Member
Jul 26, 2021
7
2
Hope you don't mind; but I cleaned up your Reset Solutions file, and put each reset in order and added reset #3 along with Titling each reset with event names and happy event names as well. Should probably have the "Puzzle Guide" link point to this file and post until the next reset event update and update of the txt file.

View attachment 2478988

Saw on Discord that the DRM shit is Something that Sel himself is telling all to avoid. So its probably a fuck up since the "legit" people are being affected as well! Not sure if that been said before on here. So much has been said since I was on here last (think @ least 10 pages of post worth)

FYI to anyone who is playing with the Guide MOD, don't know if this is known/said or not with previous versions, I got an error while playing a save file that the MOD was used on. Fixed that by putting in the current MOD into 0.29 and played on then because DRM shit I decided to put in all CPs now the game/save file is corrupted? -ish. I've finished the playthrough but any Event replay beyond the Beachmus event いないいない。。。ばあ!is NOT viewable or seen in the menus. Is this fixable or will be fixable with the 0.29 Guide MOD update? Or is my Save file pooched?
View attachment 2478989 View attachment 2478990 View attachment 2478991 View attachment 2478992 View attachment 2478993
Even Title Screen is Different
View attachment 2478994 vs View attachment 2479002
I've had the same problem. Save files I created before the guide mod was installed work fine, but the ones made with it give an error message. However, loading a pre-guide mod save file then saving again, then porting it to 0.29.0 is still a functional save file for whatever reason, even with changed hints settings (I thought that might be it, but nope).

Using the guide mod in 0.29.0 fixed the problem for me, too. My title screen is like yours, but the event list seems to work fine.
All in all, very weird.
 
  • Like
Reactions: Wardtnaci

Wardtnaci

Member
Jun 12, 2022
196
637
Saw this on Discord and don't know how to screen capture with my PC, I'm Dumb! I know, so I Copy/Paste it, glad it came out the same as it is on there...

Lessons in Love 0.32.0:

Total Events: 0/19 Complete

Main Events: 0/2 Complete
Io Events: 0/4 Complete
Yasu Events: 0/4 Complete
Haruka Events: 0/3 Complete
Maki Events: 0/3 CompleteC


É̶͒v̴̔͌e̴̔͆n̴̍̀ẗ̵́̇s̵̽̓:̶̊͂ 0/3 Complete <- Who is This?

Animations: 0/2 Complete
Character Profile: 0/1 Complete
Programming: 0/19 Complete
Proofreading/Editing: 0/19 Complete


Estimated Release Date: 7/1/23
 

skwada

Member
Feb 13, 2020
115
392
I've had the same problem. Save files I created before the guide mod was installed work fine, but the ones made with it give an error message. However, loading a pre-guide mod save file then saving again, then porting it to 0.29.0 is still a functional save file for whatever reason, even with changed hints settings (I thought that might be it, but nope).

Using the guide mod in 0.29.0 fixed the problem for me, too. My title screen is like yours, but the event list seems to work fine.
All in all, very weird.
An alternative to the guide mod is this tool:
I think it's better than the guide mod because it has links to the wiki for all events, it can be open on a separate monitor instead of having to go to guide menu in-game every few minutes, and you just need to change one line of the code to make it work for the latest updates, whereas the guide mod only works for latest public release (can probably edit guide mod code too but been a while since I tried and I found it to be tedious)

I do think the idea of a porn game phoning home without explicit permission is a bit worrisome. Especially one with content as questionable as this one. I'm curious how much data could be collected if they were inclined to do so. Especially since Sel has threatened legal action in the past. Even if ren'py is fairly sandboxed and can't just go collecting data from the entire host, the logs do still reveal some information about the host. Not to mention he'll have an association with real IP addresses. Even if the content of the game is legal (which is probably not true in all countries), many of us would risk our jobs if it came out we play this game.

Additionally, the more I think about it, the DRM as it is may well violate the EU's GDPR law. Specifically the data processing regulations.
Yea that'd be pretty fucked. But there's plenty of people on here who could disable shit like that in a few mins so I'd say no need to worry unless you explicitly grant the game network access; on Windows it'll ask you "Do you want to allow this app to run on public/private networks?", just immediately close any game from this site if it does that
 
Last edited:
4.10 star(s) 313 Votes