DC++ 0.883 is out

This year’s new DC++ release has just been put out. It is primarily a bugfix release, addressing some minor but rather complex problems that have existed in the client for several years.

The changelog in the DC++ help lists the important bug fixes, with links to the official bug tracker entries where all the sympthoms and reasons behind the fixes are explained in detail.

The following are the most notable additional, user-visible changes:

  • From now on, DC++ supports connecting to secure NMDC (with nmdcs:// URI in the address) hubs but still doesn’t, and likely never will, support secure NMDC client-to-client connections. The reasoning behind the decision, as to why so and why now, is available and discussed in this bug entry and in particular, in this comment.
  • Some public hublists allow hub owners to specify an alternative, secure hub address beside the main one (mostly for having an option to connect to the same hub using an encrypted connection). With this release, DC++ starts supporting this feature by displaying the more secure address option in the hub lists, when it is available.
  • The MiniUPnPc port mapper gets a Broad device detection option, introduced mainly as a response to this support conversation. The mapper code now also returns better identification of the device to the logs, which can be used to determine exactly which device a port-mapping operation happens on.

For complete information on all of the fixes, please refer to the list of commits. As usual, DC++ 0.883 will be advertised as a testing release first for a small set of the userbase, starting today. This new version should go stable later, in case no problems are reported in the testing period of roughly two weeks.

Launchpad to discontinue Bazaar code hosting

In a rather hasty and not-so-widely-publicised announcement, Launchpad, the infrastructure behind the development of Ubuntu Linux, informs its users that code hosting in Bazaar, their self-developed, once-default version control system, will be out of support soon.

They recommend all existing Bazaar branches to be converted to Git format by a close deadline. Git has been available for a while, and by now the default code hosting format of the portal, They still do not provide automated tools to do the branch conversion, tough. The post links only instructions (or rather just an example) of how to convert an existing code base to the target Git format.

How does this affect Direct Connect development?

DC++ and other Direct Connect projects had been using Bazaar repositories for more than a decade in the past, but hosting and development of the active projects were moved a long time ago to Mercurial repositories hosted by SourceForge.

There is one exception though : DC++ is still using the Launchpad translation interface for localization. This requires language templates to be committed to the old DC++ Bazaar repository at Launchpad. The end-of-support announcement does not mention this, but from some of the comments it is clear that processing language templates from Git repositories currently does not work at Launchpad.

So this is a breaking change – something that they promise to fix in due course (again, see the comments), and will probably happen sooner than later since Canonical, the company behind Launchpad and Ubuntu, use the same system for localization of their flagship product.

After the conversion to Mercurial the commit history of the projects’ code still remained in the old Bazaar repository at Launchpad. Checking old commits and investigating how and when features came and went over the years is pretty useful for the development – something that often saves time and helps fixing problems or realizing new ideas. Launchpad’s now-defunct code browsing interface for bzr, called Loggerhead, provided a very useful functionality to do this (a function called ‘Blame’ in modern VCS systems). This will be missed since the SourceForge’s Mercurial commit browser user interface does not provide such a feature, from now only the CLI or possibly some other local tools are available to do this.

All in all, the immediate effect of this end of bzr service does not appear to be severe on our development process, but there are other considerations:

ADCH++ have a few forks—abandoned, but technically interesting and containing valuable ideas—that began to demonstrate the extensibility potential behind the barebones structure of the original project. These branches are also hosted on Launchpad in bzr format. In the future, if someone wants to pick up ADCH++ development, the achievements already present in these forked branches could be quite useful.

Additionally, there are branches with additional tools, essential scripts and plugins for both DC++ and ADCH++, source code that is referenced alongside binary downloads, and are otherwise unavailable elsewhere.

One of the biggest question marks remaining is that the announcement doesn’t say a word about what will happen when the bzr code branches will be phased out. Will there be a download provided for code bases that haven’t been converted by the deadline? If so, in what format?

Since we don’t have the answers to these questions yet, it is essential to make a backup all of the branches by the specified deadline, in Bazaar or Breezy (the successor VCS) format. Once that is done, we can decide later how, when, and where they can be made available to the public again.

The following forks and other code branches could be considered to back up:

All the four DC related projects from : https://code.launchpad.net/~poy converted, available at GitLab and LP

From project ADCH++ :
https://code.launchpad.net/~lanowen/adchpp/pyIadchpp converted, available at GitLab and LP
https://code.launchpad.net/~klondike/adchpp/adchpp converted, available at GitLab, Codeberg and LP
(adchpp-hbri has already been moved to GitHub)

From project ADCH++ Lan :
https://code.launchpad.net/~dc4lan/adchpp-lan/trunk converted, available at GitLab, Codeberg and LP

From project ADCH++ GUI :
https://code.launchpad.net/~sulan80/adchppgui/trunk converted, available at GitLab and LP
https://code.launchpad.net/~lanowen/adchppgui/plus converted, available at GitLab and LP

The original DC++ and ADCH++ bzr repositories, in their current state, might also be worth saving, as they could serve as a partial historical backup in case issues arise when converting the up-to-date Mercurial repositories—possibly due to similar future announcements from SourceForge.

If you think anything are missing from the above list, please add them to the comments.

Edit: all the listed repositories are now successfully converted, big thanks goes out to klondike who helped us out with his time and research on the proper conversion process and configured tools what he used to convert his own code repository and then eventually all the rest. Well done!

ADC 1.0.4 and ADC Extensions 1.0.9 have been released

A new version of the base ADC protocol, version 1.0.4 and ADC Extensions, version 1.0.9 is now released.

The base protocol document has been updated with smaller additions that had remained unreleased for quite a while. The extensions document received a few similar updates and now also includes the final draft of the CCPM (client to client private messages) extension.

Both documents have undergone an extensive editorial revision to eliminate typos, mistakes and broken links.

For the complete list of changes please refer to the Version history within each document or visit the ADC project’s home website.

DC++ 0.882 is out

A new version of DC++ has been released today, wrapping up a year of fixes and improvements.

The following are the notable changes that’s been made in the user interface:

  • The Find text function within contents of hub and private chat windows now offers selected or at-the-cursor text by default to search for
  • Similarly a “Search in hubs” by text and TTH context menu function has been added to most textual content windows for easy searching all connected hubs for chat contents
  • From now you have a quick way to copy and share magnet links of freshly indexed files, right from the System Log entry by using a new item in the window’s context menu
  • A popular request has been filled with adding an option to disable DC++ window previews in the taskbar rather than using the global setting of the operating system

Some under the hood improvements:

  • Implemented the ADC encrypted active search results feature (SUDP). The feature is enabled by default on all secure ADCS hubs for search and result transfers between the newest DC++ versions
  • More secure processing of XML files coming from foreign sources
  • No loss of partially downloaded data in case of an operating system shutdown during non-segmented downloading of large files
  • More efficient hash data rebuilding
  • Segmented download initial chunk sizes has been tweaked to align with current average internet connection speeds. Please note that due to the special nature of the algorythm DC++ has for multi-source downloads, this change should effectively disable segmenting for the second chunk and on for downloads having only one source in most cases, due to the high bandwitdth availability of most of today’s internet connections. This change might also help you dealing better with those anti-segment evangelists – a few are still around after 25 years…

For a complete list of fixes, as always, please refer to the changelog or the list of commits. As usual, the release availability will be advertised only for a small set of the userbase for now. If no problems are reported, DC++ 0.882 will be set as a stable release within a few weeks.

Vulnerability disclosure: remote code execution in Scripting Plugin

A new version of the Scripting DC Plugin has been released today fixing a serious vulnerability that allows attackers to remotely execute any code in the host system running any DC client compatible with DC Plugins, such as DC++. The nature of this vulnerability can cause various security issues, for example it makes the attacker possible to aquire any files from the host’s mounted filesystems.

For successful exploitation, Scripting Plugin version 1.0 should be installed AND enabled in any DC client / versions that support DC Plugins. DC clients having this particular plugin not installed (or installed but as long as the plugin is in disabled state) are NOT vulnerable.

For users running Scripting Plugin version 1.0 it is highly recommended to upgrade to version 1.10 as soon as possible to get protected from this vulnerability.

Please note that a vulnerable function named LuaExec has been completly removed from the plugin’s scripting API and that this release also updates the internal Lua engine to the latest version, both of which changes may cause incompatibilities with existing customly created Lua user scripts.

We’d like to thank RoLex of Team Elite for reporting, sharing proof of concept and recommending fixes for this issue.

DC++ 0.881 is out

A new DC++ release has been made available to download this week. Version 0.881 continues to be a largely code maintenance release, however, this time it also comes with some improvements on the user interface as well.

First and foremost with this release DC++ is moved to a modern compiler platform that produces an executable that shoud be considered secure and acceptable by modern Windows versions long term, with their default security settings. Since these defaults can change and go stricter at anytime it is highly recommended for users running Windows 11 to upgrade their DC++ to version 0.881.

There’s also a revamp of many icons throughout the user interface which makes DC++ more fit visually to modern Windows themes. An away status indicator overlay is also added to the taskbar icon. The look of the list of users and their details in the Users window has been modernized as well; more of this kind of improvements to come in the next release.

The optimized (64-bit) build is now compiled with use of SSE4.2 CPU instructions making further improvements in performance for those with capable hardware. We still provide a legacy (32-bit) build for users with older computers.

Plenty of supporting libraries that DC++ has built in have also been upgraded to the latest and greatest versions, improving security and stability.

There are also many less important or unlisted improvements; for a complete list of fixes as always please refer to the changelog or the list of commits.

As usual, the availability of this new testing release will be advertised at the start of the program for a small set of the userbase from now. If no bigger problems are reported, DC++ 0.881 will be set as a stable release within a few weeks.

DC++ 0.880 is out

The first DC++ release that brings a few notable changes since last fall’s version 0.870 has been made available to download this week. Version 0.880 marks the start of a new era, an active maintenance mode if you like, that we announced roughly a year ago. Along with that line there are no new significant functional improvements to be expected in the foreseeable future – we focus on possible speed and resource optimizations, bug fixes, compatibility as well as to keep the program up-to-date security wise. So finally you get the first pack of those improvements with DC++ 0.880.

Here are the most important changes, the already announced ones listed first:

  • DC++ is being released under GPLv3 from now.
  • Binary distributions split to optimized and legacy with according hardware requirements
  • Used a new updated compiler version for better performance that allowed optimizations for speed, compatibilty with modern Windows versions and more.
  • This version introduces a new stable hublist server.
  • Fully restored the use of an up-to-date GeoIP country database service, the one allows you to see what country a DC user is from, determined by their IP address. Country info display was absent or has relied on a pretty outdated static database in the last few years so this goes back to normal from now.
  • Hublists caching have changed according to the joint proposal of all hublist server owners: downloaded cached lists are set to expire in 24 hours from now by default. But this simple method alone would break the original purpose of the hublist caching function which has been introduced years ago to help users finding public DC hubs when hublists providers are out of service. So now we implemented a change with the original purpose in mind: cached lists are deleted only if a hublist refresh is successful. When a hublist download attempt fails or the resulting list is invalid the proper cached copy of hublists are being kept (even indefinitely e.g. when the source server is discontinued).
  • Added a safeguard to attempt outgoing ADC connections on IPv4 only if there’s no IPv6 connectivity available. So far this decision was based only on information coming from hubs which, in case of improper IP address information supply, could break transfers and searches in DC++. There is at least one ADC hubsoftware that has such a buggy behavior triggering the issue so this change actually fixes existing problems already experienced in the wild.

There’s also a few less important or unlisted fixes improving security, stability and usability; for a complete list of fixes as always please refer to the changelog or the list of commits.

The availability of this new testing release will be advertised for a smaller set of users who are running the latest stable release of DC++. If no severe issues arise, DC++ 0.880 will be marked as stable within a few weeks.

DC++ license change

A quick but important notice: from version 0.880 (release imminent) and on DC++ will come with General Public License version 3. The license upgrade has been done with the written approval of Jacek Sieka, the original author and copyright holder of DC++.

This change is important for the future maintainability of DC++ since some external data sources and (future versions of) libraries (will) require a compatible license. The change should be equally important to projects using code from DC++ for the same reason.

DC++ 0.880 will introduce new build names, require SSSE3

DC++ has already introduced CPU opcode feature requirements in the past when those features were widespread enough in various PC hardware the program had been used on. We already require SSE3 since DC++ version 0.863 and SSE2 since 0.861. They have brought siginificant advantages and optimizations to the code as you see in the linked posts in detail. We added those optimizations carefully back then, knowing all the features in case had been already widely introduced in all CPUs manufactured in the previous 10 years or more so it shouldn’t have caused issues for the vast majority of users who care to keep their system and software up to date.

The obvious step forward is to require SSSE3 to gain more advantages but there’s a caveat: while Intel introduced this feature in its client CPUs in 2006, AMD has added it only surprisingly later, in 2011. Aging of PCs are knowlingly slowed down in the recent years so requiring this feature would make the latest versions of DC++ unusable on many old but still working PCs and we’d like to avoid that. At the same time, if we decide to require at most ~10 year old CPUs now then we can go much further with optimizations as there are plenty of other new CPU opcodes are supported by the processors that has been manufactured in this timeframe.

Therefore we decided to make a difference in optimizations between the two available builds of DC++: the 64-bit build, named “Optimized” from now, will require a CPU that is manufactured in the last 10 years going forward whereas we plan to make the 32-bit build (now called “Legacy”) remain usable on pretty old (currently 15+ year old) computers and 32-bit client editions of Windows. We plan to release this build as long as there’s some form of official support of 32-bit Windows editions exist.

As a first step foward the Optimized build of DC++ 0.880 will require an SSSE3-capable 64-bit CPU, which is basically anything newer than Core2 from Intel and FX series (Bulldozer architecture) from AMD. We plan to add more feasible CPU opcode optimizations in the subsequent releases of DC++.

This also means that from version 0.880 and on, users running 64-bit Windows versions on older, non-SSSE3-capable hardware will have to use the 32-bit Legacy build of DC++, even on 64-bit CPUs.

We added an automatic, completely seamless mechanism to the installer of DC++ that decides what build is best for the users’ system and that will be offered by default in the options at install time. Those, however, who like to use the portable releases have to be cautious. We’ll update the informative readme file in the download folders for help the decision of what build to download.

We release these two builds from now as predictably there would be not much demand for 64-bit releases targeting older CPUs, even less for 32-bit ones targeting newer processors. However, if you’re in this unlikey situation for some reason then do speak up in the dev hub and your request won’t be denied.

ADC? No, cancelled…

Back in the end of 2000’s when the 1.0 version of the ADC protocol was ready and the implementation had started to taking shape the protocol maintainers thought it’s a good idea to add information about the distinct new protocol of DC to Wikipedia. Besides linking to the technicals a brief description of what and why is ADC was added to the new Advanced Direct Connect Protocol page.

The page, professional and made according to the best Wikipedia standards, had been improved over time and stayed there for many years – until the end of last year when someone requested a complete removal, an uncontroversial deletion. This action was requested to be reverted (thanks to klondike) which means that per the Wikipedia rules the page itself cannot be requested to be removed again. However, a few weeks later, another admin made a lawnmover style deletion of the best part of the content of the page citing that the source of information, this very blog, where the most of the content are from the ADC protocol’s designers, maintainers and implementators, is unreliable.

Of course Wikipedia has its own rules and they have been controversial all the time. This time they’re clearly followed the rules unwisely and I guess it’s not worth to engage into an add/remove style fight with them anymore. Who knows, maybe cancel culture has reached Wikipedia as well or it’s just another attempt at making Wikipedia worse for technical purposes.

In any case we decided to preserve the removed document, originally added by Fredrik Ullner, here:


Advanced Direct Connect (ADC) is a peer-to-peer file sharing and chat protocol, using the same network topology, concepts and terminology as the Direct Connect (DC) protocol.

“ADC” unofficially an acronym for “Advanced Direct Connect”.[1]

Contents

  • 1 History
  • 2 Design and features
  • 3 Protocol
  • 4 See also
  • 5 References
  • 6 External links

History

ADC was created to allow an extensible protocol and to address some shortcomings of the Direct Connect protocol. It was initiated by Jacek Sieka, under the influence of Jan Vidar Krey’s DCTNG draft.[2] The first revision of ADC came in 2004 and the first official version in 2007-12-01.

Design and features

ADC is structured around clients that connect to a central hub, where the clients (users) can chat and download files from other clients (users). The hub provides routing between clients for chat, searches and requests for connections. The actual file transfers are between clients.

The protocol itself is split in two parts: a base protocol that every client and hub respectively must follow and extensions that are optional. The protocols allow signalling of protocol features (such as bloom filters), and messages can be constructed to only be routed to those who support that particular feature.

Each hub has their own rules and are commonly governed by hub operators.[3] Hubs may define different capabilities for hub operators. The hubs themselves do not regulate discussion and files, but the hub operators. The hub regulate minimum share and maximum amount of simultaneous hubs; things that are sent by the client, rather than the user.

Lists of hubs [4] exist where a hub’s name, description, address and rules are specified. With the hub list, users can choose hubs that are similar according to the user’s liking of discussion topics and files.

The peer-to-peer part of the protocol is based on a concept of “slots” [5] (similar to number of open positions for a job). These slots denote the number of people that are allowed to download from a user at any time. The slots are controlled by the user of respective client.

ADC require that all text must be sent in UTF-8, which means that users with different system encoding (say, Russian and Chinese) are able to chat with respective native characters.

The protocol natively supports IPv6.

There are two modes a user can be in: “active” or “passive”. Clients in active mode can download from anyone else on the network. Passive mode users can only download from active users. Passive clients will be sent search results through the hub, while active clients will receive the results directly. An active searcher will receive (at most) 10 results per user and a passive searcher will receive (at most) 5 results per user. NAT traversal exist as a protocol extension,[6] which allow passive users to connect to other passive users.

The base protocol does not require encryption, but extensions exist to provide encryption with TLS.[7]

Files in client connections are identified by their hash, most commonly the Tiger Tree Hash. The hash algorithm is negotiated with the hub and used throughout the client-hub session, as well as subsequent client-client connections.

Protocol

The ADC protocol is a text-based protocol, where commands and their information are sent in clear text, except during password negotiation. The client-server (as well as client-client, where one acts as a “server”) aspect of the protocol stipulates that the client speak first when a connection has been made. For example, when a client connects to a hub’s socket, the client is the first to talk to the hub.

The protocol requires that all text must be sent as UTF-8 encoded Unicode, normalized in form C.

There are no port defaults, for hubs or clients.

Hub addresses are in the following form: adc://example.com:411, where 411 is the port.

During hub-client protocol information exchange, the client offers a set of hashes it supports. The hub will select one of these hashes, and that hash will be used throughout the hub-client session. If the hub deems that the client doesn’t support an (arbitrary) appropriate hash set, an error is raised.

The global identification scheme is based on the hash set producing two end-hashes, where one of them depends on the output of the other. During hub-client information exchange, the client will send these end-hashes, encoded with base32, which the hub will confirm to match. One of these base32 encoded hashes will be further sent to other clients in the network. The global identification scheme is this last string. The client may change its end-hashes on a hub-to-hub basis.

Each user, during a hub session, is assigned a hash that only lasts that particular session. This hash will be used for all client references in that hub. There is no dependency on nicks.

Each client information notification is incrementally sent.

An incoming request for a client-client connection is linked to an actual connection, with the use of a token.

Searches use a token, as well, to identify each result of a search.

There is no out-of-the-box ability for a client to kick or redirect another client from a hub. The hub, however, can kick and redirect arbitrarily. The hub can also require that all other clients in the hub must terminate their transfers with the kicked/redirected client. If a client is redirected to another hub, the redirecting client must use a referrer, similar to the HTTP referrer. The kicked/redirected client is not required to receive a notification message.

The peer-to-peer part of the protocol is based on a concept of “slots” (similar to number of open positions for a job). These slots denote the number of people that are allowed to download from a user at any time. These slots are controlled by the client. Automatic slot allocation is supported by the protocol.

The token in the client-client connection decides who should be allowed to download first.

Downloads are transported using TCP. Searches can be transported using TCP or UDP.

An active client has a listening port for TCP and another for UDP, though the ports don’t depend on each other.

Protocol delimiters are ‘\n’ and ‘ ‘ (space). The character ‘\’ is used as an escape sequence. Allowed escape sequences are “\n” (new line), “\s” (space) and “\\” (backslash).

The protocol allows for extensions such as compression with bzip2 or encryption with TLS.[8] While the protocol does not mandate that these extensions be implemented, hubs may require them.

See also

References

  1. Fredrik Ullner (March 2007). “ADC: The run down”. DC++: Just These Guys, Ya Know? blog. Retrieved 2010-12-13.

2. Jan Vidar Krey (August 2006). “ADC: Protocol simplicity”.

3. Jan Vidar Krey. Archived from the original on 2013-01-30. Retrieved 2006-09-23.

4. Fredrik Ullner (March 2006). “Power + Person = Operator”. DC++: Just These Guys, Ya Know? blog. Retrieved 2010-12-13.

5. Fredrik Ullner (January 2007). “The parts of a hub list”. DC++: Just These Guys, Ya Know? blog. Retrieved 2010-12-13.

6. Fredrik Ullner (March 2006). “Slots, slots, slots…”. DC++: Just These Guys, Ya Know? blog. Retrieved 2010-12-13.

7. Fredrik Ullner (December 2010). “ADC Extensions – NATT – NAT traversal”. ADC Project. Retrieved 2010-12-13.

8. Fredrik Ullner (December 2010). “ADC Extensions – ADCS – Symmetrical Encryption in ADC”. ADC Project. Retrieved 2010-12-13.

9. En_Dator (March 2009). “TLS and Encryption”. ADCPortal. Archived from the original on 2011-07-07. Retrieved 2009-03-01.

External links


Click here to see how the original Wikipedia page looked like before the content removal.

We’ve once had a very good overview of ADC at Wikipedia, a brief explanation of what it is all about so interested people can go further, contact, etc…. Now we have almost nothing. To compensate that I’ll also try to preserve this document another way by adding it to the ADC project site later.

May people with the powers to destruct valid and current information sleep better after each time they’re acting so.

Design a site like this with WordPress.com
Get started