[Plugin] TIG-weld

TIG

when you log into the EW it will list the plugins (my plugins section) you have / use that isn't compatible with 2016, they're under a separate heading. Although I don't quite get it as they seem to install and work fine...
That's because ANY extension/plugin which worked in v2015 will also work in v2016M0 in 'Unrestricted' its Loading-Policy - signed or unsigned.
So Trimble are [currently] being disingenuous in 'blacklisting' any 'unsigned' RBZs.
But they have thus far handled this whole issue very shoddily [IMHO].

It takes not inconsiderable effort for authors to recast their plugins/extensions to be fully v2016 compatible, and then to get their RBZs signed by Trimble via the Extension-Warehouse.
Many of these are 'free' so there's little incentive for a quick fix.
Many are also not available through the EW - but only through other trusted outlets like the SketchUcation's PluginStore [aka ExtensionStore³] or Smustard.com.
But... after considerable 'behind-the-scenes' pressure "they" have thus-far agreed to provide the [default] 'Unrestricted' Policy, which allows v2016 to work much as v2015 in this regard.

So any Plugin/Extension which worked with v2015 will [probably***] work with v2016M0.
***There are some observer changes, which could break a very few extensions - but these will probably have been updated anyway...

The whole question of what protection/comfort a 'signed' extension gives to a user is illusory.
Trimble's smoke-and-mirrors.
Previously if a user got an RBZ from the Extension-Warehouse, SketchUcation's PluginStore [aka ExtensionStore³] or Smustard.com [let's called the a 'trusted-source'], then they could be assured that the RBZ's contents were 'kosher'.
These were only lodged on these sites after checks...
Now for v2016 use [unrestricted by the current Loading-Policy] SketchUp v2016 expects a 'signed' HASH RBZ.
BUT if you get a 'signed' RBZ for v2016, it is NO different in effect...
What 'comfort' does a user get from this HASH - no more than they had before - because the were getting their RBZ from an already trusted source.
BUT Trimble now shoot itself in the foot.
In v2016 a signed plugin/extension will 'break' and not load if its HASH does not exactly match its RB/RBS/RBE files within the signed RBZ [and also several other files like HTM/MTML/JS/CSS].
The likelihood of this happening with a file from a 'trusted-source' is ZERO.
It is very unlikely to contain 'malicious content'.

BUT let's assume an alternative scenario...

Some hacker ['hacks_are_us'] gets an RBZ and he changes it.
If someone downloads that RBZ from 'hacks_are_us', then that version if it has changed the shipped content will fail.
At least until they learn to hack the signed HASH file !
BUT if they are circumspect it can be made to contain malicious content, even today.
It relates only to "Extensions" - plain vanilla "Plugisns" are [ironically] exempt from such hacking !

It relies on the EW signing regime.
You must submit a set of files in the RBZ in RB format.
Encrypted files - RBS and the new RBE - are NOT accepted.
This is so the checkers can easily read what you submit.
An extension must specify the path to the file it first loads.
E.G. Aardvark.rb has a subfolder containing the main code,
E.G "Aardvark/Aardvark_code.rb"
This works if the file is NOT to be encrypted.
It is necessary when submitting RBZs to the EW, otherwise the not-yet-encrypted files will NOT load.
So authors will ship the RBZ with Aardvark.rb specifying the paths
"Aardvark/Aardvark_code"
Sketchup is clever enough to find a file that is .RB or .RBS and load that.
If the author chooses to do no encryption all is well [their IP is exposed, but they probably don't care that much].
If the author chooses to encrypt as .RBE [suitable for >= v2016] then in >=v2016, that RBE loads in preference to all other files it finds using the same 'basename'.
The newer RBE is strongly encrypted, and thus far it is un-hacked and protects authors' IP - but this protection is at the limitation of only working in >= v2016 - with the downside being that it limits the potential user-base...
BUT if the author chooses to encrypt as RBS [a format will limited protection from IP hacking. BUT on the up-side compatible with ALL SketchUp versions - including v2016 (despite what the signing-portal says!)] then it will load OK in all current versions of SketchUp.
It's susceptible to hacking, but if the extension is old its IP is already compromised !

Now the problem.
SketchUp - including v2016 - has a loading precedence - when a extension looks for Aardvark/Aardvark_code it finds a match.
Perhaps in >= v2016 it finds Aardvark_code.rbe, and loads that - in preference to all others.
But in v2016 [when there's no RBE], or other earlier versions, it finds Aardvark_code.rbs, and loads that.
BUT now the rub...
If there is a file named Aardvark_code.rb it loads that in preference to the RBS file that might be there.
But why would both files exist ?
When an author submits an RBZ for signing, then it is returned to him with either ALL RB files kept in the subfolder [no encryption], or ALL RB files in the subfolder encrypted as RBS*** - as he chose.
The signed HASH file reflects this, so ANY alterations to those files in that subfolder are flagged, and it is deemed invalid.
However, if the subfolder contains RBS files, the HASH checker [currently] has no way for spotting that a new RB file has been added to the RBZ and the 'loader' will load that instead.
So if my RBZ ' Aardvark.rbz' contained Aardvark.rbto load it and it's encrypted by EW to have Aardvark/Aardvark_code.rbs, then if a hacker adds Aardvark/Aardvark_code.rb then that loads in preference.
The added Aardvark_code.rb is not spotted in the [current] HASH check.
It can contain 'malicious content', the it can load Aardvark_code.rbs.
This the user has no idea what's happened - the tools works exactly as advertised.
BUT it could have done something bad in the background - hacking their system, passing details to unauthorized 3rd-parties etc...

This 'loophole' is a poor show by Trimble.
It'd be easily fixed if the SketchUp extension loader code only only allowed the files listed in the HASH to load - currently it does not.

Changing the load order to RBS before RB is of no real benefit either, because an RBS format file is easily made, and if added to the RBZ it would then supersede the RB [albeit in un-encrypted low-value plugins' RBZs]...

***An RBE file does load first, so that avoids the hacking issue, but limits authors to >=v2016 users only...

So the only supposed benefit of a signed RBZ is that it gives you comfort that it is 'genuine'.
But that is "illusory".
Getting it from a trusted source gives you that confidence.
Getting a signed RBZ from a dodgy site means nothing - unless it is only suited to >-v2016, then it could be hacked - but still seem to be perfect.
So sensible users, who getting their RBZs from trusted sources, have no more comfort than they had before [which was always 'considerable'].
BUT stupid users, who get their RBZs from less reputable sources. will only have themselves to blame, if they contain 'malware' etc: the signing process offers no real protection for them for that [<v2016 or in v2016's Unrestricted Policy].
BUT that begs the question, "Why do we worry about 'protecting' them anyway?"
It's a mess.

Grice

I take it all back... despite Trimble's plugin warehouse listing this plugin as not compatible with SU2016, I installed it anyway and it is working fine...

Looks like Trimble need to up their game in terms of keeping their customers satisfied. Isn't that what we pay our yearly subscription fees for?

TIG

Here's v2.0 http://sketchucation.com/pluginstore?pln=TIG-weld
It's made into an extension and is also signed, so it's fully compatible with all of v2016's 'Loading Policies'.

Note:
Because it needed a name change when becoming a compatible extension, note that if you have a old shortcut key set you to 'Tools/Weld' you need to reset it to it's new persona = 'Tools/TIG-weld'...

ericbartha

Hi - new to sketch up and SketchuNation. Trying to install your Weld extension, but I am getting an "Outdated Signature" error. Even in unrestricted mode it will not load, and my Google search did not help much. Any thoughts?

TIG

I should load in Unrestricted mode.
It installed and runs just fine for me too [PC v2017]
It's one of the one's that's not yet been re-signed for full v2017 compatibility.
Thanks for the reminder.
I'll get it re-signed and posted in the PluginStore...
Watch for an update today...

TIG

Here's v3.0 http://sketchucation.com/pluginstore?pln=TIG-weld It be re-signed for full v2017 compatibility in all loading-policies.

rastamannichk

It doesnt work in SK 2k15.

How do I install this .rb file?
I try to use the simple plugin installer but wont work and does appear in tool or extension the weld

TIG

@rastamannichk said:

It doesnt work in SK 2k15.
How do I install this .rb file?
I try to use the simple plugin installer but wont work and does appear in tool or extension the weld
Use the Dowmload link button, that's just two posts ago - this goes to its entry in the SketchUcation PluginStore.
Then Download its latest RBZ file from there.

It should work in v2015...

Use Preferences > Extensions > Install Extension... button
[Note that in v2017 this has changed to Window > Extension Manager... etc]

Find the downloaded RBZ and install it.

When it's installed 'TIG-weld' is an extension.
Check that it is activated in the Extensions dialog...

When installed and activated it has a menu item under:

Tools > TIG-weld

There is no Toolbar or context-menu entry for this tool.

You refer to a .rb file - if you mean the customized example RB attached to an earlier post please ignore that and get the last v3.0 RBZ from the link...
You should always get the latest RBZ from the PluginStore...

laughcry

Usefull and smart

laughcry

just tell me where i can download this usefull thing?

juju

@laughcry said:

just tell me where i can download this usefull thing?

just go to the pluginstore, search for weld, select the approriate option, download

JKsys

Does weld work in 8 make?

TIG

It should work in all current SketchUp versions [pro/free], including those which are no longer supported like v8.
Remember that v2017 Make is available if your OS can run it ?
That is the last free desktop version available for personal non-commercial use.
With v2018 its 'free' version is web-based, and currently does not support plugins/extensions...

JClements

Hi TIG:
Would there be a chance of upgrading TIG-Weld?

1- When welding, if there are two of more adjacent segments that are colinear/coplanar then have them changed into a single, straight segment. This would help in: the general cleanup of unnecessary geometry, lowering file size, and eliminating undesired snapping points.

I suppose there should be user-defined setting available for this option that would continue to be active unless the user decides later on to turn the option off.

2- Could it also appear in the Selection Context menu?

Thanks for your consideration,
John

TIG

Look at Fredo's toolset 'FredoTools' https://sketchucation.com/pluginstore?pln=FredoTools

RemoveLonelyVertices https://sketchucation.com/forums/viewtopic.php?p=332047#p332047
His tool already makes such edges into one edge...
[Don't forget to install LibFredo too]

JClements

Thank you.