EM0.29b已经出来了，尝鲜ing……

缪发现有什么新功能

下载地址： http://www.emule-project.net/index.php?s=downloads
更新记录：
22.6.2003:

eMule v.29b is available!

bluecow: Dragstart of category-tabs not hypersensible anymore
Unk: Irc: Now detects UnderOps.
Unk: Desc ping to servers are now done less frequent.
Unk: Fixed a bug in the server ping time delays.
Unk: Fixed a small bug in the stats.
Ornis:Speedmeasurement tweaked [zz]
bluecow: Fixed bug with an deleted client instance which was used for the A4AF statistics value.
bluecow: Redid Ext. Settings dialog for more future options.
Ornis: Webinterface: Links are relative now
Ornis: improved UNC usage as shared folders
Ornis: Fixed known.met to be handled correctly in the config-folder
Ornis: better handling of the check which files to hash
.: Added a secure identification system (against userhash 'stealing') based on RSA encryption. For test reasons, it is disabled by default in this version, you can enable it in 'security settings'. Please check the FAQ for more informations about this system
.: Added first part of an advanced spamfilter which automatically detects and filters suspicious messages
Ornis: Webinterface: Improved Graphs, bigger, nicer, including the connection-graph [emule+]
Ornis: Webinterface: added button to remove completed files
Ornis: Sharedfileslist: Click with middle mouse button on an item opens the comment dialog of it
bluecow: Implemented ed2k protocol message OP_CHANGE_CLIENT_ID for better dealing with LowID sources.
bluecow: Fixed several issues in dealing with uninitialized memory contents [donq]
bluecow: Fixed problem with wrong file IDs received from clients.
bluecow: Workaround for strange socket deletion crashs which were experienced by WinXP users.
bluecow: Fixed several potential heap corruptions.
bluecow: Fixed problems with download data rate meassurement which may cause crashs on slower/Win98 systems.
bluecow: Fixed problem with processing an invalid OP_HELLO packet from a client.
bluecow: Added option 'CommitFiles' to select the level of commiting file data to disk (may be interesting for Win98 users) [idea SlugFiller]
bluecow: For modders only: Added the possibility to compile the sources for string based resource string identifiers (search for USE_STRING_IDS)
bluecow: Fixed bug in server message handler for OP_SERVERIDENT.
bluecow: More safety in handling server message OP_SERVERMESSAGE and client message OP_MESSAGE.
Ornis: saving location for own comments corrected (config-path)
Ornis: Webinterface: Categorysupport corrected for order by columns
bluecow: Fixed a potential problem with system tray icon on Win98 systems [Special thx to Ergol/donq]
bluecow: Reduced size of search expression

Added a secure identification system (against userhash 'stealing') based on RSA encryption. For test reasons, it is disabled by default in this version, you can enable it in 'security settings'. Please check the FAQ for more informations about this system

http://www.emule-project.net/faq/sechash.htm
Secure User Identification
Clients in the network are identified by a unique value called user hash. This user hash is stored in the preferences.dat file and is used to grant earned credits with other users.
eMule can use an asymmetric encryption to avoid exploiting or manipulating other users hash values. The method uses a private and a public key to secure the user hash and to ensure a proper identification on other clients.

Secure User Identification can be turned on in Preferences -> Security. It is recommended to use it.

How secure user identification works:



Client A wants to make sure that his credits are safe and only used by him. He creates a private 384 bit RSA key and stores it in the cryptkey.dat file.
This private key is created when the encryption is used for the first time. Losing this key means Client A loses all his credits since he is no longer able to prove that he is the valid owner of them.



When two encryption supporting clients exchange data for the first time they both send a public key together with a random value to their partner. Each stores the other ones key in its clients.met file. Only the key is saved, the random value is generated new each following connection.



Does client A wants to identify himself on client B at a later time he creates a digital signature and sends it to B. This signature is from his private key, the public key of B and a random value. It is valid until client A changes his IP or client B closes eMule.



After receiving A's signature client B checks if it is created from his public key B and the correct random value. If it also fits client A's public key, then client A is correctly identified.

Notes:
> If the cryptkey.dat file is lost or deleted, the preferences.dat file has to be also deleted or no new credits can be collected on already known clients.
> When switching to secure user identification all old, "unsecured" credits will be lost. For security reasons, there is now way to transfer these credits to the secure system.


嘿嘿，終於出手了。觀望ing~~~:D:D:D

果然使用了防止userhash 偷窃系统， 还真的使用了非对称加密（asymmetric encryption）呢，这个基本上没有给冒充的可能性存在了，但是其他的client都不支持...

还是不知道是怎么反盗窃的。能反那种把别人的EM拿来用的盗窃法吗？

正在用
現在鬱悶中……
怎麽在我這下的人越來越少呢……

下面文件是天国天使说的.29b新加的安全认证系统，将会更新到FAQ中，先给大家看看好了。

增加了一个基于RSA加密的安全认证系统(对抗userhash窃贼），因为测试的原因，这个功能在该版本是默认关闭的，你可以在“安全设置”中打开它。关于本系统的更多信息请参阅FAQ。

http://www.emule-project.net/faq/sechash.htm

安全用户认证
ED网络中的用户是通过一个叫user hash的唯一数值来识别的。这个user hash保存在preferences.dat文件中用来承认其他用户赚取的积分。
eMule可以使用非对称加密系统来避免偷窃或使用其他用户的user hash。本方法通过一个私钥和公钥来保护user hash，保证与其他用户进行正确的验证。

安全用户验证可以在参数选择－安全中打开，建议用户使用这个设置。

安全用户验证工作方式：

用户A想要保证自己的积分安全，只让自己使用。他创建了一个私有的 384位密钥将其保存在cryptkey.dat文件中。
这个私钥是在第一次使用安全系统时创建的，丢失它意味着用户A会丢失自己所有的积分，因为他无法证明他是积分的合法主人。

当两个支持加密系统的用户第一次交换数据时他们都将自己的公钥和一个随机数一起发送给对方，双方都将对方的的公钥保存在clients.met文件中，只有在公钥保存后，后面的每次连接都生成随机数。

如果用户A以后想要对用户B证明自己的时候，他创建一个数字签名将其发送给B。数字签名是用他的私钥，B的公钥和一个随机数生成。除非用户A改变了自己的IP或用户B关闭了eMule，否则A的证明都是一直有效的。

当用户B接到A的签名后他会检查是否是以B的公钥创建的和随机数是否正确，如果签名也符合用户A的公钥，A的身份就得到验证。

注意：
>如果cryptkey.dat文件丢失或删除后，preferences.dat 也必须删除，否则所有已知用户的积分都不能再次积累。
>当切换到安全用户验证后，所有旧的，“不安全的”积分会丧失。因为安全的原因，没有办法将这些积分转移到新的安全系统。

em的自动lowid检测好像根本没用........
我还是等++