Today I played some contest levels and suddenly wondered why NeoLemmix can display IchoTolot's Dune style levels, when I never ever downloaded this style. It turned out, that some update to NeoLemmix turned the Online features in the options menu on again (which I had turned off previously).
I can accept that I messed up with updating NeoLemmix and resetting my options to the default at some point, but I cannot accept
1) That NeoLemmix just downloads stuff from the internet and opens these files, while not informing me of anything. Malware does this, but no honest computer program!
2) That NeoLemmix does not ask me whether to download the missing style file. I expect some message box like
   "This level needs the style file WhateverTheStyleIsCalled.dat. Download this from www,neolemmix.com/old/styles and save it to filepath/styles/NeoLemmix?"
(or something like this) and two options "OK" and "Cancel".
3) That NeoLemmix does not save the style file in the correct directory, i.e. in  base_directory/styles/NeoLemmix instead of the wrong  base_directory/styles.

it sounds like a bug; upon updating, an option such as that shouldn't change automatically. Even if this is a harmless program, it's best to be on the safe side.

Quote from: Nepster on August 23, 2016, 05:11:27 PM

1) That NeoLemmix just downloads stuff from the internet and opens these files, while not informing me of anything. Malware does this, but no honest computer program!

That's not really true.  By that definition, Windows Update and Google Play (or insert your favorite software marketplace here) are malware too. That said, both do have settings to disable automatic download and installation of system/app updates.  Plus I guess technically, I think both do inform you discreetly (eg. balloon notifications in the system tray on the taskbar for Windows Update, Android notifications for Google Play app updates).

"Windows Update and Google Play are malware." I agree whole-heatedly

1) That NeoLemmix just downloads stuff from the internet and opens these files, while not informing me of anything. Malware does this, but no honest computer program!
2) That NeoLemmix does not ask me whether to download the missing style file. I expect some message box like
   "This level needs the style file WhateverTheStyleIsCalled.dat. Download this from www,neolemmix.com/old/styles and save it to filepath/styles/NeoLemmix?"
(or something like this) and two options "OK" and "Cancel".
3) That NeoLemmix does not save the style file in the correct directory, i.e. in  base_directory/styles/NeoLemmix instead of the wrong  base_directory/styles.

1. The option should be off by default. I'll have to look into what may have overriden or ignored the setting.
2. No. This would get annoying. I'm open to adding a third "Ask every time" option, but not to forcing such a thing on the user, especially considering that in the future this feature may be downloading lots of single pieces rather than one (occasionally more than one) graphic set.
3. <base_dir>/styles is the correct directory for the player. I can see a seperate issue here - that there's an inconsistency between what the player uses and what the editor uses - but as far as the player is concerned, <base_dir>/styles is correct.

I would strongly argue that most users who chose to turn on such an online feature is expecting and desiring automatic updates, and that if they don't want the feature, they would've just left it off.  I'm not oppose to some sort of "ask every time" but I would definitely be curious how much it'd be used compare to the other options.  (And to be honest, for that type of user, the desired experience is arguably not a dumb "ask every time", but much more likely a button to manually initiate a check, then be presented a list of available updates, and have an ability to select which specific updates to download [and likely an ability to hide certain updates from the list that the user knows will likely be ignored permanently].  It is clearly more work to build, so definitely makes sense to get an idea first of how many people would even need it.)

I don't really think any change needs to be made other than fixing this bug where the option got changed by itself.

It is only forced starting on Windows 10 and only on consumer editions I think.  Anyway, it is interesting to keep in mind that when the "software" is in the form of a web application somehow this suddenly is no longer an issue.  I guess because it's not physically on your machine?

I can stop using the web service. At worst, I have cookies left over.

I can stop using software that downloads and installs on its own. But that may have updated random libraries and broke compat with manually-installed old software that I rely on.

My only example is from reading internet news -- first Win10 demanded its own installation, then it BSODed on people's e-readers that worked perfectly in older Windowses. I'm sure the average experience is better than that.

I manually-install the bleeding edge of a few selected programs, and let everything else get old. Until it hurts after 5 years.

Google Play Services (and possibly also the Play Store itself) updates itself silently with no way for the user to control that aspect in any way, since it doesn't even show up as an app.

I don't use this either. >_> Nor Steam, nor any of these DRM package managers.

If Windows Update is malware, at least it is usually patching up a security issue, which is more than can be said for the dozens of apparent actual harmful malware

Yeah, the patches from Windows Update are more helpful than what malware hides in other programs' installers.

I have no problems if you can disable the updates in a straightforward way. If, for weird reasons, you don't want to patch your system, and happily risk becoming a malware vector, so be it. I felt the biggest problem in the mandatory Windows-10-updates.

Not to mention it's a little unbalanced anyway to be comparing level data and resources against executable code affecting core system functionalities.

It may overwrite my precious data or changes with old versions from the internet. If software updates break libraries, I can downgrade the libs, but I can't revert overwriting creative work.

I accept that this risk shouldn't be high. Creative projects belong under version control, and get backed up. Or the tool might have a purely-offline bug that eats my data, so I'm not 100 % safe either way.

-- Simon

My only example is from reading internet news -- first Win10 demanded its own installation, then it BSODed on people's e-readers that worked perfectly in older Windowses. I'm sure the average experience is better than that.

I also heard it caused a lot of people's webcams to stop working.  It may or may not be affecting too many people on average, but I'll concede that Win10 is rapidly making itself a poster child of forced updates gone very wrong.

Quote

As far as I know, Google Play Services (and possibly also the Play Store itself) updates itself silently with no way for the user to control that aspect in any way, since it doesn't even show up as an app.

I don't think this is correct, assuming you're meaning on Android.

From the Wikipedia article (emphasis added by me):

Adoption

Google Play Services is automatically updated through Google Play on devices with the Google Play Store application installed running Android 2.3 or newer. This means Google can do fast, silent rollouts of updates, providing new functionality to old devices without manufactures having to update the Android firmware itself, working around the fragmentation of the platform for which it had become infamous.

It is possible there may be a setting buried somewhere that allows me to opt out of this, but at the very least it's not like other regular app updates.  There is no entry for "Google Play Store" or "Google Play Services" in "my apps & games" to go to for manual control of updates of those things.

I know for a fact that on my phone Google Play Store itself had updated at least once as I recall seeing the icon on the launcher changed to something more aligned with their (then-new) "Material" graphics design.  The UI in the store had tweaked several times as well, though it's quite possible a lot of those changes do not need an app update to be delivered (ie. most of the UX could just be HTML served from their web service or similar).  Google Play Services is harder to track since it is mostly a UI-less background service, though I believe on occasions when I went into App Settings to see details of running apps and background services, I've seen the list of services under Google Play Services grew and changed over time.

There is a case that may seem somewhat overwrite-ish <snip>You then play the NXP. Even though the NXP contains stuff.dat V1.1, NeoLemmix would use V1.0 because the contents of the "styles" folder takes priority over the contents of the NXP.

This does seem a little weird.  I can maybe understand the case where the styles folder has V1.1 while NXP has V1.0 and V1.1 superceding V1.0, but the reversed case you brought up here seems especially problematic--it's hard to imagine a good reason to replace something designed using a newer version of a set with an older version.

I have to admit that having these cases pointed out, does make me more aware of the risks of a level being broken due to a bad graphics set update.  It makes sense to consider offering some additional means to help mitigate such risks without having to opt out of all online updates altogether.  (Though I need to point out that merely asking before updating does not feel like enough of a mitigation for this--there is no way for the user to tell beforehand if the update may cause problems or not, especially with levels they may not have yet gotten around to playing.)