The Open Ledger: Security and checksums

Every file the updater installs, weighed and sealed in the open. Check anything you like: nothing here asks you to take our word for it.

The current release: What is published now

Nothing published yet

The first release of the updater is being prepared. When it is published, this page lists every file it installs with its SHA-256, the antivirus reports and the signature, on the same day.

The updater is on its way

The seal: Signature and how to check

Each release comes with a manifest: the list of every file and its SHA-256. The team signs that manifest with a private key that never leaves our server. The updater carries the matching public key and refuses any manifest whose signature does not match, so a tampered file or a fake server is turned away.

Algorithm: ECDSA P-256 / SHA-256
Public key fingerprint (SHA-256): Published with the first release.

Check a file yourself

The updater itself

The updater’s .exe is not code-signed yet, so Windows SmartScreen may say “Windows protected your PC” the first times. That warning is about reputation (a new program few people have run), not about what the file contains. Check its SHA-256 below, then click More info, then Run anyway.

In Windows PowerShell, in the folder where the file is, run this and compare the result with the hash shown on this page:

Same for any installed file, for example the event module’s program:

Same letters and digits (capitals or not): it is the file we published.

On your PC: Does and never does

It does

Looks for Bannerlord where Steam, the Xbox app, Epic and GOG record it. It only reads those records.
Shows the exact plan first: every file it will add, replace or remove, in which folder, and how much it will download. Then it waits for your click.
Writes only inside the event’s own module folders, under the game’s Modules folder.Modules\LotRMPEvent
Checks the release’s signature, then the SHA-256 of every file, before a file is put in place. “Verify my install” re-checks everything later and can repair it.
Writes every step in plain words in a log window and in a daily text file you can open.
Keeps the previous version aside, so you can roll back in one click.
Keeps its own things (the program, a download cache, its logs, its settings) in one folder of your user profile. Uninstalling removes them and asks whether to keep the mod files.%LOCALAPPDATA%\LotRMPUpdater
Removes the “downloaded from the internet” mark from the files it installs, so the game can load them, as a manual copy would.

It never

Never asks for administrator rights. If the Modules folder is not writable, it explains how to fix it instead.
Never installs a Windows service, a scheduled task or a driver.
Never acts on its own: install, update, repair and uninstall all wait for your click. Only pre-downloading into its cache runs by itself, and you can turn it off.
Never touches the game’s own files, the launcher settings, the registry (beyond its own uninstall entry), other mods or your saves.
Never asks for an account or a password, Steam or otherwise.
Never sends usage statistics. It talks only to the addresses listed on the Security page, and its About screen lists them too.
Never sends your log unless you choose to: it shows you the whole text first, with your Windows user name masked.

Every road it takes: Network addresses

The complete list. The updater talks to this site and to nothing else.

GEThttps://middleearthevent.com/files/updater/latest.jsonAt start: is there a newer updater?
GEThttps://middleearthevent.com/files/releases/channels.jsonAt start: which release is current?
GEThttps://middleearthevent.com/files/releases/<release>/manifest.jsonThe list of files of that release, and…
GEThttps://middleearthevent.com/files/releases/<release>/manifest.json.sig…its signature, checked before anything else.
GEThttps://middleearthevent.com/files/releases/<release>/objects/…Only the files you are missing or that changed.
POSThttps://middleearthevent.com/api/queue/slot · /api/queue/heartbeat · /api/queue/releaseOnly while downloading LotRMPCore from our server: a place in the queue. Sends a random install id, nothing else.
POSThttps://middleearthevent.com/api/supportOnly when you press “Send log to support”, after reading it: the log, your user name masked. You get a one-time code (valid 72 h) to paste in a Discord ticket.

Nothing else: no analytics, no crash reporter, no third-party server. Updates of the updater itself come from the same address.

Open books: Source code

The updater’s source code will be published so anyone can read what it does and build it themselves. The link appears here on that day.

Read the source codeComing soon