Ottoswap

Eorzea Time
 
 
 
Language: JP EN FR DE
Ffxivpro Yellow Box
2283 users online
Forum » FFXI » General » Ottoswap
Ottoswap
 Shiva.Paulu
Offline
Server: Shiva
Game: FFXI
User: Paulu
Posts: 802
By Shiva.Paulu 2026-07-20 19:49:20
Link | Quote | Reply
 
I used AI to edit the Meganman X4 "you got" screen and had this pop-up each time I learned blu magic. If you want it you just have to snip/save it. No need to access my internet database.


He's the fighting robot, cardi-mon.
[+]
Online
Posts: 21
By twochix 2026-07-21 03:11:15
Link | Quote | Reply
 
Odin.Elyvora said: »
Besides all the back and forth, I'll leave out my personal feelings about using vibecoding and AI usage in my professional field.

And maybe I just don't get the whole idea of this "addon" but from a quick glance, it seems just to be a webpage to display your sets? Could easily just been a local thing, included instructions to start this react/vue application without having to submit data over the internet? I dunno, just seems overengineered if that's all it does.

That's exactly how I first built it for myself and used it that way for some months. I dunno if the average FFXI player actually knows what they're doing when it comes to starting a dev server and how to do that though without a massive amount of hand holding. Already had some people come buy in the discord needing help just putting the addon in the right place

One of the nice things about the addon is it let's you see what items and augments you have.
Online
Posts: 21
By twochix 2026-07-21 03:13:55
Link | Quote | Reply
 
the addon got updated, instead of writing anything out as dictated by the relay after it's sanitization, it now does a similar process.
Offline
Posts: 1353
By Tarage 2026-07-21 06:00:04
Link | Quote | Reply
 
Bahamut.Bizarro said: »
Troll in the mirror? Yep, checks out.

Wait didnt you block me, go'way the adults are talking.

Can't help but notice you ignored my question you stupid ***.
Offline
By Shichishito 2026-07-21 07:29:01
Link | Quote | Reply
 
[+]
Offline
By GetHelpNerd 2026-07-21 08:10:41
Link | Quote | Reply
 
Dodik said: »
Can't help but notice OP is insisting on having an addon scan and load GS files, according to them so they can "read augments".

Which a `gs export all` will do just fine, not require an addon at all, and not expose users to the security risk of downloading GS files over the internet which are then loaded onto their machines.

Since this was pointed out to OP multiple times by multiple people, and only have OP's word that "sanitisation was added onto the backend", closed source backend which no one has seen, can only presume there is some reason other than reading augments OP is insisting on having such an addon.

Good luck to whomever is dumb enough to load this ***onto their machines.

i can't help but notice that you've made this same post like 14 times now in this thread. have you been tested? who are you looking for acknowledgement or validation from?
 Shiva.Thorny
Offline
Server: Shiva
Game: FFXI
User: Rairin
Posts: 4022
By Shiva.Thorny 2026-07-21 08:26:23
Link | Quote | Reply
 
Personally, I'm sad that I see new halfass vibe-coded projects on every FFXI community I'm part of on a near-daily basis. On some level, it bothers me that the work community members put into figuring out systems is just being absorbed by someone prompting Claude to present a visually appealing UI that adds no real functionality. It feels soulless and while it's not truly intellectual theft, it's definitely been detrimental to motivation among some in the community including myself.

I don't have any use for it, but I can see how the addon bridge could help some people. He's making efforts to fix the problems that have been pointed out. I can't see any reason to assume he has a hidden motive; he could have just as easily put a real-time RCE path into it and he'd still have a bunch of idiots trying it before anyone pointed it out (it was out a month before this discussion).

I don't know if he'll stick to it long term, but he's been very patient with a thread that has definitely trended toward hostile. It's probably time to step back and look at whether there are actual issues with his approach or you're just suffering from AI fatigue.
[+]
Offline
Posts: 109
By AegParm 2026-07-21 09:31:14
Link | Quote | Reply
 
Dodik said: »
Will not repeat myself regarding security risks.

You sure about that? (imagine the tim robinson meme here if I was more computer literate)

Dodik said: »
This is some AI generated slop again.

I mean.. use at your own risk is not enough of a disclaimer for ***like this.

Dodik said: »
On the OP - I stand by what I said. It's AI slop, and people using it are taking a huge risk.

Dodik said: »
OP is publishing dangerous tools with no express or explicit warning.

Do not use.

Do not ffffing use. Not saying this again.

Dodik said: »
Everyone else - this is a remote code execution engine. Do not *** use it.
.

Dodik said: »
You've implemented a remote code exploit and are busy making up excuses as to how it's safe because trust me bro.

Dodik said: »
No one should use your remote code exploit.

Dodik said: »
Good luck to whomever is dumb enough to load this ***onto their machines.
Online
Posts: 21
By twochix 2026-07-21 09:48:52
Link | Quote | Reply
 
Again not trying to start fires or fight fights with anyone, but here's an example today of a feature the addon makes possible just so you can see!

Since I have the addon able to read the packet data for items, I can see what items you have to create set suggestions. It's super powerful to have the items because instead of just simply saying 'this piece for this set is Bis' I can actually sort of create a progression system where players get assigned gear score values and are shown progression items based on what's achievable to them rather than a laundry list of items not obtainable.

Someone said this to me in a DM today

"The gap this fills is this

I have taken a 16 year break from this game, come back

Millions of new options but all online guides talk about best in slot only.

Meanwhile the path from 0 to BIS is what this app solves."

I spent some time trying to make more apparent and visible some of the security measures I've taken to lock down potential RCE issues. I'm happy to spend more time on that if anyone has any pointers!

I'm also happy to spend some time later today putting in an 'import gearswap' feature so you don't even need to use the syncing and still enjoy things like gear progression and visible augments on OD / Unity and other things.
 Carbuncle.Firebrandt
Offline
Server: Carbuncle
Game: FFXI
Posts: 21
By Carbuncle.Firebrandt 2026-07-21 13:01:13
Link | Quote | Reply
 
Dodik is definitely suffering from something.
 Carbuncle.Nynja
Offline
Server: Carbuncle
Game: FFXI
User: NynJa
Posts: 7764
By Carbuncle.Nynja 2026-07-21 13:25:24
Link | Quote | Reply
 
twochix said: »
Someone said this to me in a DM today

"The gap this fills is this

I have taken a 16 year break from this game, come back

Millions of new options but all online guides talk about best in slot only.

Meanwhile the path from 0 to BIS is what this app solves."

I think someone who took a "16 year break" (this puts their previous login back in 2010: pre ilvl, pre-SoA, level cap was still 90) would be better served with
https://www.bg-wiki.com/ffxi/Returning_to_Vana%27diel
Offline
Posts: 257
By zeta 2026-07-21 14:27:28
Link | Quote | Reply
 
twochix I am very curious about your workflow... I have been using GPT myself for my own personal files and addons and it took me a long time to figure out a good workflow.

Are you using a paid teir?
Do you have any basic understanding of lua/windower/gearswap/addon standards?
Are you trying to verify what the AI is providing is going to work and not cause harm? As in no packet injection/etc?

I have found that AI can/is very helpful if used right. The meatbag however needs to be willing to learn and adapt. Cant just throw vague prompts and hope for the best.
Online
Posts: 21
By twochix 2026-07-21 15:23:18
Link | Quote | Reply
 
zeta said: »
twochix I am very curious about your workflow... I have been using GPT myself for my own personal files and addons and it took me a long time to figure out a good workflow.

Are you using a paid teir?
Do you have any basic understanding of lua/windower/gearswap/addon standards?
Are you trying to verify what the AI is providing is going to work and not cause harm? As in no packet injection/etc?

I have found that AI can/is very helpful if used right. The meatbag however needs to be willing to learn and adapt. Cant just throw vague prompts and hope for the best.


Hey for sure, I'll explain what I can and feel free to DM me and we can chat in Discord if you wanna know more specifics.

I started like probably alot of people just going through the approved windower list of addons and cracking them open / making small changes to see how things worked.

I started working on a personal addon I maintain that's not public facing called otto around 2020ish. It's what I use to make multiboxing a little more accessible we'll say. I started hand-writing functionality before that well before any type of AI for about 5 years. Typically, my workflow was to create temporary debug sessions by writing raw file output in otto to files and viewing them live in VS code to see how lua structures and data looked and cross referenced table shapes with the ffxi functions windower docs. the libs for packets / data show with quite enough documentation how to hook into handlers to determine useful information in code. I spent alot of time doing this and when I use the AI to drive now it's usually with a pretty good knowledge of where to look for things that I'm doing or want to do, as well as some custom tooling I've built out for solving problems over the years.

Now a days, I use claude code and how I prompt and pay attention / debug is largely what it is i'm trying to do. An example would be if I tell it to write front end javascript for a website I basically don't give a single *** about how it's doing it within reason of it working and being performant. For larger decisions involving payloads, communication between processes and infrastructure I constantly check in with both it's reasoning about problems, make sure it doesn't shortcut research or file reads (fking grep), and check all it's output.

Specifically about your question regarding packet injection -- you can have a pretty good idea about what is and isn't packet injection by looking at those packets.lua / data.lua files bundled in windower. If you're setting up handlers to read incoming data you're probably not doing anything rule breaking. If you are intercepting outgoing packets, modifying their values and injecting them back into the game it becomes a much grayer area.

Ottoswap doesn't use any packet injection, it reads incoming packet data (items and a bit of character data like name and server) and sends it off to the website. I believe the topic most people are talking about heatedly here is RCE which stands for 'remote code execution' and is a different topic incase that wasn't clear. It doesn't have to do with the game but it's a concern about the way that ottoswap is packaging back the gearswap files to be consumed by gearswap.