• published the article Premium Subscriptions Temporarily Disabled (FIXED)

    I just wanted to let everyone know that we've had to temporarily disable subscription signups for premium. There is a issue with PayPal and we'll have this worked out as soon as possible. Anyone who mistakingly received a canceled subscription email from PayPal will still receive uninterrupted Premium Service for the remainder of your subscription term.

    Again, we apologize for any inconvenience and I'll keep you guys updated as things continue.

    (UPDATE) This was fixed on saturday, again we apologize for any inconvenience anyone has had.

    Posted in: Premium Subscriptions Temporarily Disabled (FIXED)
  • published the article Future Plans for the Curse Client

    A few months ago myself and Adamar took over the actual development of the Curse Client. In that time we've taken it a long way, bugs have been squashed, ui's have been polished, and the experience has been streamlined.

    However, we are by no means satisfied.

    We've listened to the feedback brought to us by our users, we've examined them, and we've studied our options. In the next major release we're going to be doing a lot of things.

    Some of these things include:

    • New features, such as UI Synchronization between computers.
    • Cleaner, more intuitive, interfaces.
    • Bugs will be squashed and problem code will be eliminated
    • No more popup progress bars!
    • Enhanced support for firewalls and proxies.

    For our Mac users we'll also be bringing:

    • PPC Support
    • 10.4 Support
    • A true, native feeling custom UI.

    We are dedicated to the client as one of our most important products and will be investing as much time, energy, and caffeine as is needed to address the needs of our users.

    I'll be keeping you guys updated as we progress including screenshots, screencasts, and further announcements.

    Posted in: Future Plans for the Curse Client
  • published the article Curse and WoWInterface working together to help protect our authors and other site-users

    Recently Curse and WoWInterface got together to come up with a solution for an ongoing problem. The problem in question is WowMatrix. The reasons they are a problem are many:

    • WowMatrix violates author copyright and intellectual property rights:
      • They redistribute addons without authors' permissions;
      • When they first started they would scrape the legimate sites for addons then upload them to their own site in addition to deep-linking from the sites;
      • They edited authors' files to remove donation requests and links to their home sites, etc.; and
      • They have failed on many occasions to honour authors' requests to remove addons from their application;
    • In a lot of cases the files served to users have been many versions out of date. This leads to authors having users complain about bugs, bugs that were fixed days or weeks ago in versions that are available on the legitimate sites, causing problems for both the authors and for the end-users;
    • Until the community raised a hue and cry, WowMatrix didn't even supply the authors' names as to who wrote the addon, let alone provide a link to where the addon was legitimately hosted;
    • WowMatrix leeches from the legitimate hosting sites without permission, let alone compensation. Originally, they scraped our sites so they could upload addons to their own site without permission, in addition to deeplinking from our sites. They have finally stopped hosting the addons on their own site, but they still deeplink from our sites, using our resources to run their program. Curse and WoWInterface use a lot of bandwidth every month which costs a lot of money. The way we pay our bills is through site ads, which are directly dependent on users viewing them, and premium memberships. WowMatrix bypasses our download pages, and, as a result, people are not viewing the ads. Of course, this means the ads aren't generating any revenue to pay for the bandwidth. At the rate they were going, if they were allowed to continue using our resources without any compensation, they were going to drive us right out of business. Not only are they stealing our bandwidth and preventing us from being able to recoup that loss, they also have their own ads all over their site and application. They are directly profiting from the stolen bandwidth; and
    • Due to the massive resource drains they put on our sites, we have all experienced heightened loads and weaker performance, especially on patch days. During those days they download so much from our sites that sometimes we have a hard time keeping up to the demands; thus causing legitimate users to experience problems accessing our sites. That's just flat out unacceptable.

    For months now, both sites and multiple authors have been trying to come up with solutions to the problems caused by WowMatrix. However, WowMatrix just keeps ignoring authors' requests to remove their addons from their application, working around the protections we have put in place, and proving repeatedly that they have no intention of ever becoming responsible, legitimate members of the community. Instead, they choose to continue to leech off the community. Well we, Curse and WowInterface, have gotten together and between us we believe we may have found a solution to prevent them from pulling authors' addons from our sites to redistribute without permission and stealing our bandwidth any longer. Unfortunately we cannot release details on the solution, so as to keep it viable.

    "Yeah yeah yeah, blah blah, get to the important question: What does this mean for me, your sites' user?" For the majority of users it should be completely transparent, you should not notice any difference whatsoever, other than improved site responsiveness during patch days. We hope that we will be able to revert the changes made to our sites eventually, if WowMatrix ever stops violating authors' copyright and ceases stealing our bandwidth and other resources.

    If you were previously using WowMatrix to keep your addons updated, please use our official updaters (Curse, WoWInterface). You may also mark addons as favorites on both WoWInterface and Curse in order to be alerted when they are updated.

    Kaelten
    Administrator, Curse & WowAce

    Cairenn
    Administrator, WoWInterface

    Posted in: Curse and WoWInterface working together to help protect our authors and other site-users
  • published the article Donation links on Curse.com

    As just about everyone knows, recently Blizzard released a new policy that covers standards addon developers must adhere to in order to ensure their addons will not be blocked from running in the game. Part of this policy said that you cannot solicit donations from within the game as it is considered to be a form of advertising.

    Yesterday, we pushed an update to Curse.com that displays donation info on the addon details page and download pages to support authors who have spent their free time enriching the gaming experience for everyone.

    For Users
    Not everyone is able to donate, and even if you can doesn't mean you have to by any means. However, for those of you who can afford and are inclined to donate I'd recommend asking yourself a simple question:

    When you setup a new copy of WoW or clear all your addons. What addons must you have before you're willing to play?

    Those are the addons I'd personally consider donating to.

    For Authors

    To setup donation info just follow the steps below.

    1. Go to your project's page on CurseForge or WowAce
    2. From the actions select "Edit donation info"
    3. Complete the form and hit the "Edit donation info" button

    From all of us at Curse.com, I'd like to thank all the addon authors out there who spend so much time developing addons that makes all of our gaming experiances that much better.

    Happy Coding!

    Posted in: Donation links on Curse.com
  • published the article Curse Client 3.0 Release & New Mac Beta

    Curse Client 3.0 Release

    I just wanted to take out a few moments and let everyone know that friday we released the 3.0 client to our entire userbase. It's been a long time coming, but I feel it fixes the majority of issues people have raised.

    Some of the highlights:

    • Redesigned User Interface
    • More accurate addon identification
    • Revaluated Defaults settings
    • More features (including whether or not to use embedded libraries)
    • Numerous bug fixes and stability improvements

    Not only that but....

    Mac Client 3.0 Beta Release!

    We managed to get you a mac client beta out on Friday as well! This was a personal victory for me as I'm now actively working on the code for the mac client. In addition to the above changes we are happy to announce that updates are now done through Sparkle (same update mechanism used by Adium, Textmate and many other mac apps).

    We are still in beta here as wxWidgets' implementations can drastically differ on mac vs pc, as a result we're working hard to iron out issues, and will be putting out updates all this week until we're at a more stable point.

    However, there are a few...

    Known Issues

    Upload mistakes

    Over the last week we've had a few authors mistakenly upload either the wrong file or files with invalid layouts that have caused the client's fingerprinting to mistake people's folders for the wrong addon.

    Two known examples of this are Ace3 and Auctioneer getting flagged as Tournament Realm Spy and epgp. We've fixed it server side however the client won't just 'forget'. You'll need to remove the false match and in some cases reinstall the new correct match.

    Mac Issues

    • A crash that can happen on load in the sort routine
    • A soft crash where the client stops displaying data and buttons fail to do anything
    • Menu options being decidedly 'unmacish'

    Reporting Issues & Discussion

    Windows

    Mac

    General

    Posted in: Curse Client 3.0 Release & New Mac Beta
  • published the article Forum and Site email fixes

    We've had a bug in the forum's login script that was accidently clearing emails from accounts. This would prevent people from receiving emails or any other notifications.

    Also I've revamped several chunks of our dns records, reverse dns, and spf records.

    This should help increase the reliability of receiving email in general.


    Posted in: Forum and Site email fixes
  • published the article Heads up! We're giving away a Reactor

    Just wanted to make sure all of our authors had a chance to signup to win the Reactor by Hardcore Computers we're giving away on curse.com.

    I've signed up, but I'm probably not eligible :(

    Anywho, signup here if you're interested.


    Posted in: Heads up! We're giving away a Reactor
  • published the article Curse Client 2.1 RC1 Release!
    I know it's been a while since I posted my last status update for the project. I apologize for the silence, but we're nearing payday! So now, after several months of intensive development I want to bring to you guys the first release candidate for the 2.1 line.

    What's New‽

    Well, almost everything! Well, almost.

    What were the issues again?

    Here is a brief recap of what I posted in my last announcement as some of the major issues.
       * Ignoring manual deletions
       * Installing over addons
       * Downgrading addons
       * UI feedback failures
       * Poorly worded options and button text
       * Too much automation in some places, too little automation in others
       * Lack of features that are considered defacto standards
       * General reliability 
    
    Now let's talk about what we did about them.

    What we did about them!

    UI Changes

    The UI has gone through some major overhauls. Hrm, how can I explain this......

    The old client

    The new client

    There are more changes than can be seen in that screenshot, but I think it gives a rough idea.

    New Features

    Well we didn't get everything I talked about in the last message done. Here's the list. I've struck through things we've finished. Things that are works in progress I'm marking with italics.
       * Alternate Packages - It's back!
       * Dependency Resolution
       * Manual Deletion Detection
       * Alpha Support
       * Multiple Game Support - Even over network drives!
       * Version Pinning
       * Submodule support 
       * Saved Variable Scrubber - It's not 100% tested and polished yet.
       * Automated and Manual Backups 
       * Real Configuration Box - The game manager takes the place of most options.
       * Deletion before upgrade
       * Uninstalled Package Listing - It's the unknown addon listing.
    
    We'll be finishing things up as soon as possible.

    Changed Behaviors & Methods

    Discovery and Detection of versions
    If anything we're too conservative now. We've gone through extraordinary pains to make sure that we know exactly which version of the addon you're using. If we don't know, we don't touch it. It can still get a little confused sometimes, mainly if an addon is shared by more than one project. We'll be working out a tweak for that situation shortly.
    Changes to Defaults
    Yep they got changed. You may not like some of them, but you shouldn't find them offensive!
    Popup Questions
    Well, 99% of the time you'll never see a popup question. Unless you're doing something that you can't undo. Like deleting an addon. We don't want a misclick to make you a sad panda...

    The Mac Version

    Do you want the good or the bad news first? I'll start with the bad. It's not here. The good news is, we're now actively getting it ready for it's first night out. I can't promise exactly when just yet, but Soon has never been so close. I hope to start leaking alphas out next week, but again I can promise nothing!

    Conclusion

    The one thing I don't think anyone can argue with is that this client is hands down superior to it's predecessor. There is not a doubt in my mind regarding that. Is it perfect? Of course not. Are there bugs? Sadly, yes I'm sure there are. However, there was no way we could justify continuing to hold back this update and letting people continue to use the old version. We're looking for feedback as we're getting ready to put this out there to all 700k+ users in the next few weeks. Please use the ticket tracker I'm going to link below to report any feedback. But please, try and see if the ticket already exists. I also want to apologize to all you guys who've been struggling with the 2.0.0.14 client for so long. Support on it has been weak to non existent, I'm going to be keeping a tabs on things much much closer with the new client in order to ensure that the same backlog doesn't happen with this one. So guys, last thing I'm going to tell you is how to get the new client. So make sure to check the link section below!
    • 2.1 Installer: Use this link to get the latest client installer.
    • Feedback Tracker: Please try not to put up a bunch of repeats!
    • Forum Thread: I'm keeping the old thread, also linking to the current page. not the first one.
    Posted in: Curse Client 2.1 RC1 Release!
  • published the article Inactive E-mails

    There were many e-mails sent out regarding projects which were marked as inactive.

    These e-mails, in the format of:

    We're sorry, your project, <Project Name> (http://wow.curseforge.com/projects/project-1234/), has been marked as inactive on CurseForge/WowAce.

    Recently the site upgraded its project status component and as a result all projects which have been previously merged or deleted were marked as inactive again, causing the e-mail to be sent out. Your main projects have not been affected in any such way.

    -Note from Kaelten: Yea guys, we apologize for the mixup. We've already patched the cronjob so that such a thing won't happen again. Also for those of you who have many projects that were marked as inactive last night sorry for the span :)

    Posted in: Inactive E-mails
  • published the article Forum logins restored

    Sorry for the brief outage.

    The issue has been fixed, just click login in the top right as usual and the forums should log you in without issue.

    Posted in: Forum logins restored
  • published the article Merry Christmas!!!

    I hope everyone has had a great Christmas, or observation of choice. Sorry I didn't post it earlier, my internet is spotty atm.

    Anyway, blessed holidays to all!

    Posted in: Merry Christmas!!!
  • published the article Re: QuestHelper or CurseClient Keylogger Rumors

    There are a great number of people who are claiming that after downloading QuestHelper and/or the CurseClient that they are getting hacked, keylogged, or that their babies are being stolen by ninja mutant Elvises (or would it be Elvisi?).

    I'd like to point out that the first two are as likely as the last, providing that:

    • You're only using versions of the CurseClient that have been hosting on Curse/CurseForge or ones linked to you directly by myself or other staff members (aka alphas).
    • You're only getting QuestHelper from reputable addon sites, such as Curse.com, CurseForge.com, or WoWInterface.com. To my knowledge it's not been uploaded anywhere else by the authors.
    • You haven't paid a ninja mutant to dress up as Elvis and steal your baby.

    Sadly these type of rumors are often started and perpetuated by people looking to discredit others and most of the attacks I've seen recently are slanted as anti-Curse.

    There was recently a 24 page thread generated (in one freaking day!) on the official WoW forums. The instance of some of the posters there into ascribing guilt to various people and groups combined with some obvious misinformation makes me wonder if it's an intentional propaganda move. However, this is mere speculation as I have no evidence to support the thoughts as fact.

    As far as keyloggers go. Please keep in mind it's most likely not the last thing you did that got your account comprised. It is a fairly common practice for these the groups responsible for hacking your accounts to wait weeks or even months before attempting to use a password.

    Also, brute force attacks are not completely unheard of. So if your password is 'god', 'sex', or 'secret' please change it right away!

    Lastly, a few things to remember:

    • Curse does in no way support the keyloggers, account hijacking, or gold selling.
    • You can't get a keylogger from an addon as long as you just put the files contained therein in your addon directory. You'd have to run an executable somewhere!


    Posted in: Re: QuestHelper or CurseClient Keylogger Rumors
  • published the article Malicious Spammer Alert

    Hey guys,

    Another jerk or group of jerks took advantage of the holiday weekend to spam a few thousand comments on the website.

    These comments, due to a small security hole in one of the parsers, was able to embed an iframe on the page. It would then in turn try to target out of date versions of Flash.

    We've cleaned up any of the comments that we can find, prevented any further ones from rendering, and plugged the leak in the parsers.

    I'm not sure exactly what he was trying to install on machines, but I know it looks like it specifically targeted IE with Flash lower than 9 r124.

    We're doing what we can to ensure that this type of attack on our users is impossible in the future. Please check your flash version, if you have a vulnerable version please run a virus scanner and try to make sure all is good.

    If anyone discovers more information about what exactly they where trying to do, the effectiveness, and detection/cleanup techniques please post them in the comments.


    Posted in: Malicious Spammer Alert
  • published the article Explicit Terms of Use Agreement now Required

    Hey guys, as of a day or two ago we started requiring an explicit agreement to the Terms of Use for full usage of the site, this includes svn commits and (for curseforge) uploading of files.

    Please check out this link to accept the ToU.

    I apologize for not making this announcement sooner.


    Posted in: Explicit Terms of Use Agreement now Required
  • published the article NewsFlash: Incoming Improvements to the Curse Client

    The State of the Client

    I want to start out by stating that we're well aware of the issues. We're not deluded into thinking that the current state of the Curse Client is as good as it gets.

    Up until this point I've been on the sidelines of the Client, however I'm pleased to say that I'm taking over the project and will be leading product development on the client.

    I've spent a large portion of my time over the last several weeks reading forums and talking to people to get a better idea of what people want, need, and hate.

    We've recently broken 500,000 Client installs. While that is a very exciting number for us to reach, it also shows us the level of responsibility we have to making sure that the client is the best possible.

    The Big Issues

    It is the primary purpose of this announcement to help communicate what's going to be changing in the near future. But first let me recap some of the things that are definite issues(in no particular order). This is also not necessarily an all inclusive list.

    • Ignoring manual deletions
    • Installing over addons
    • Downgrading addons
    • UI feedback failures
    • Poorly worded options and button text
    • Too much automation in some places, too little automation in others
    • Lack of features that are considered defacto standards
    • General reliability

    Now I want to tell you what we're going to be doing in order to improve things.

    What we're going to do about it!

    UI Changes

    First we're giving the UI an overhaul. The overall goal here is to make sure that the interface is more intuitive, more usable, and that it gives better feedback about what it's doing. To that end we're taking the following steps:

    • In an effort to increase the usefulness of the listings we're making the bottom details pane shrinkable so that you can see more addons listed at a time. You'll be able to view it if you want, but if you prefer you'll be able to use the full size of the window for the listings. Long term you'll even be able to decide what portion of the window is taken up by the bottom pane.
    • We're taking and applying some background colors the listings in order to let you know what' s happening.
      • Gray - For svn, git, and mercurial working copies.
      • Yellow - Ignored addons.
      • Red - Addons that are out of date.
      • Green - Addons that have been updated recently.
      • Purple (maybe) - Addons with unrecognizable versions. (more on that later)

    In addition to the above colors we're going to be using sorting to help it make sense. All Yellows and Grays will be forced to the bottom of the listings. All Red and Purples(?) will be forced to the top for easy identification.

    • We're rewording the buttons to make things make more sense to the end user. Intuitiveness is a major concern.
    • Version numbers will be defaulted to instead of dates in the addon listings. We will provide an option for people who prefer dates.
    • Reorganization of the buttons and other controls so that the important ones are more obvious.

    We're also going to be enhancing the activity log panel, making some adjustments to the change log viewers, redoing the listing controls to allow you more options, adding more messages back to the user, etc.

    New Features

    Like I mentioned before we're missing de facto features. And we'll be moving quickly to add them.

    • Alternate Packages - Up until now we've called this disembedded support. It is coming back.
    • Dependency Resolution
    • Manual Deletion Detection
    • Alpha Support
    • Multiple Game Support - So you can manage your PTR or Beta installs separately of your main install
    • Version Pinning - Installation of a specific version.
    • Submodule support - For example you'll be able to selectively install or update to a specific sub folders of an addon.
    • Saved Variable Scrubber - This will be on demand clean up, it will NEVER run automatically.
    • Automated and Manual Backups - We will keep an automatic backup of addons on update. And you'll be able to manually backup and restore a full backup on command.
    • Real Configuration Box
    • Deletion before upgrade - This will probably be enabled by default, I'm open to feedback though. Keep in mind that with the new fingerprint system (outlined below) a dirty upgrade could break future updates.
    • Uninstalled Package Listing - We'll be showing you a new tab of all Unrecognized packs. Limited management will be available via this listing. You'll be able to remove them, and try to identify them.

    Several of these above features are considered to be advanced features and we will be labeling them as such.

    Changed Behaviors & Methods

    One of the larger problems we've faced is about it auto detecting the wrong addons and/or downgrading or otherwise installing things wrongly.

    We're taking a few steps to fixing these problems.

    Discovery and Detection of versions

    First, we're changing our auto detection code. In the next major release we're switching away from toc name based matching to instead use unique version fingerprints. We will both be fingerprinting individual files and packages as a whole in order to know for sure what version you're using.

    Because of the fact that this will allow us to know within a very high level of accuracy in identifying exactly what version of a addon you're using we'll be able to reliably recommend upgrades.

    The question shifted at that point to knowing what to do when we don't recognize the files. So we're changing the behavior some. For unrecognized packages we'll be displaying a special Unrecognized status. From that point on we won't update the addon until either a) you tell the client to or b) we learn for sure what version that is.

    This does have one potential issue, or in some cases a feature, for auto discovery. If you go in and edit an addon, add a file, remove a file, etc the fingerprint of the file will change and then the fingerprint of the whole package will change.

    In the case of initial discovery we won't be able to auto detect what project the files belong to. If we do know what project the file belongs to it becomes an Unrecognized version and will no longer be updated until you tell the client to do so. Down side, if you have some zombie files in your directory from unclean upgrades you'll need to manually match the project or tell it to upgrade.

    The current toc name based scanner will still be available for suggesting matches in the new Uninstalled Package Listings.

    Changes to Defaults

    We're changing a few default behaviors. We'll no longer be defaulting to fully automatic addons update as this seems to be counter to the majority of our users usage patterns. We'll be shifting the defaults throughout the client to match the default behaviors of our users.

    Popup Questions

    These annoying repetitive popup questions will be streamlined out of the client. Anytime we find ourselves saying "well we could ask the user...." we're going to smack ourselves and find away to do it without that.


    As a result of the above changes, if anything we'll be overly cautious about doing the wrong thing.

    The Mac Version

    Having a fully functional Client under Mac is very important to us. We know that it does not follow many of the standard conventions on macs at this time. We will be addressing as many of those as possible, however our first focus is on having a solid product with all the needed features. After we get there we will then focus on asethetics and the macesqueness of the client (is that a word?).

    Conclusion

    I'm very happy to be stepping up my participation with the Client. I hope that this massive wall of text I've posted has helped you realize just HOW serious we are about delivering the best possible updater.

    We will be continuing the free premium preview until we've gotten most of the things in this announcement out the way. We hope to have everything in this missive out to you guys in just a few short weeks.

    And as always, please give me as much feedback as possible. Any and all constructive feedback on the things outlined in this announcement is most certainly welcomed.

    It's a lot of work to do. We're making daily progress. And I'll keep you posted.


    Posted in: NewsFlash: Incoming Improvements to the Curse Client