Skip to main content
All posts

New authentication and a Rust crash reporter

The first update of the 13th wave introduced time-based HMAC authentication, rewrote the crash reporter in Rust, and proxied the Steam API through the backend.

10.2.1 was a security and infrastructure release. Ascendara moved to a time-based HMAC authentication system, which means requests to Ascendara services are signed and short lived rather than relying on long lived secrets shipped in the app.

Crash reporting, rewritten

The crash reporter was rewritten in Rust as a cross-platform replacement, with launcher fixes for both Windows and Linux. Crashes are the one thing that has to keep working when everything else has stopped, and a small native binary is a much better fit for that job.

Less exposure, fewer moving parts

Steam API calls were moved behind the backend rather than being made directly from the client, and a long list of Linux path, dev tools and Proton detection issues were cleaned up in the same release.

  • Time-based HMAC authentication
  • Crash reporter rewritten in Rust
  • Steam API proxied through the backend
  • Linux path and Proton detection fixes