pbat

I was afraid the answer was sort of this. But because the hinge variant already has existed, I hoped it wouldn't be too hard for TLG to reintegrate it once more. I mean, they already had this part integrated, so it can't be too much work to offer it again, since they don't have to construct completely new stuff. However, I totally agree that a part needed in only one single set more than 20 years ago (6645) won't have highest prio either. But as the title of this thread isn't "What is the most important and likely parts to come with the next LDD update", but rather "Most wanted bricks..." I decided to request it here nonetheless. Actually there are some other old parts I sorely miss, such as the sunroof with glass (http://www.bricklink...Item.asp?P=2349, http://www.bricklink...tem.asp?P=2348a and http://www.bricklink...tem.asp?P=2348b) the appropriate roof holder 1 x 4 x 2 (http://www.bricklink...Item.asp?P=4214) the hinge bucket (http://www.bricklink...Item.asp?P=4626) the hinge hinge plate 1 x 6 with 2 and 3 fingers on its ends (http://www.bricklink...Item.asp?P=4504) the hinge hinge plate 1 x 6 with 2 and 3 fingers on its sides (http://www.bricklink...Item.asp?P=4507) the digger bucket holders (http://www.bricklink...Item.asp?P=3597 and http://www.bricklink...Item.asp?P=3315) the hinge bar 8L with 3 fingers and open end stud (http://www.bricklink...Item.asp?P=4319) the hinge bar 12L with 3 fingers and open end stud (http://www.bricklink...Item.asp?P=2375) the pantograph shoe holder (http://www.bricklink...Item.asp?P=2880) the boat mast 2 x 2 x 9 2/3 (http://www.bricklink...Item.asp?P=4318) the hinge brick 2 x 24 (http://www.bricklink...tem.asp?P=47978) the small fence gate 1 x 3 x 2 (http://www.bricklink...Item.asp?P=3358 and http://www.bricklink...Item.asp?P=3359) the utensil jack (http://www.bricklink...Item.asp?P=4627, http://www.bricklink...Item.asp?P=4628 and http://www.bricklink...Item.asp?P=4629) the bracket 2 x 2 - 1 x 4 (http://www.bricklink...Item.asp?P=2422) the technic rack 1 x 20 x 2/3 (http://www.bricklink...Item.asp?P=2428) and of course many old-style baseplates, both flat and raised (http://www.bricklink...m.asp?P=2361px1, http://www.bricklink...m.asp?P=2361px2, http://www.bricklink...em.asp?P=425p01, http://www.bricklink...em.asp?P=425p02, http://www.bricklink...m.asp?P=2359px2, http://www.bricklink...em.asp?P=309px1, http://www.bricklink...em.asp?P=309px2, http://www.bricklink...m.asp?P=4478px3, http://www.bricklink...Item.asp?P=6024, http://www.bricklink...tem.asp?P=3947b, http://www.bricklink...m.asp?P=6092px2, http://www.bricklink...m.asp?P=2552px6) None of these parts was used in sets of the recent years and almost every part was discontinued more than 10 years ago. Thus it becomes harder and harder to get any of these bricks in 'real life'. Hence it is desirable to have those old bricks as virtual LDD ones at least. May the prio be as low as it may be, hope dies last.

I'm a bit concerned about the security of LDD and its LXF files. Although I assume that the Eurobricks community consists mostly of friendly and honourable people, I noticed that the 'About' dialog of LDD 4.3.5 states that LDD currently uses libpng 1.2.8 and zlib 1.2.2. Both are from 2004 and are thus quite old. And as old software tends to be insecure software I dug a bit further and voilà: both are known to expose security holes. Libpng 1.2.8 suffers from various issues like CVE-2006-3334, CVE-2006-5793, CVE-2007-2445, CVE-2007-5266, CVE-2007-5268, CVE-2007-5269, CVE-2008-1382, CVE-2009-0040, CVE-2010-1205, CVE-2011-2690, CVE-2011-2692, CVE-2011-3026, CVE-2011-3048, CVE-2012-3386. These issues were fixed peu à peu between 2006 and 2012 (http://www.libpng.or...png/libpng.html). For zlib 1.2.2 its website (http://www.zlib.net/) says: "Version 1.2.3 (July 2005) eliminates potential security vulnerabilities in zlib 1.2.1 and 1.2.2, so all users of those versions should upgrade immediately." I'm unfortunately no expert in evaluating the practical severeness of such holes and I lack in any criminal intent, but as LXF files are simply renamed ZIP files containing a PNG thumbnail of the model, I wonder how easily a malicious LXF file might be crafted to exploit one or more of these holes. Especially when http://www.kb.cert.org/vuls/id/680620 states "This vulnerability only affects zlib versions 1.2.1 and 1.2.2. [...] A remote attacker be able to exploit this vulnerability by supplying the inflate() routine with specially crafted compressed data. [...] According to public reports, this vulnerability can be exploited to execute arbitrary code [...]" I get slightly nervous. Do I have to omit any LXF file from an untrusted online source like Eurobricks or Brickshelf for security reasons? How serious are those threats? Is this an attractive attack vector for malware currently used? Is there any official statement from TLG about this issue that Google doesn't find? Or do I panic with no cause? I would, however, feel more secure if the next update of LDD incorporates the latest releases of the respective third party libraries used.

In version 4.1.8 the shield box 2578 was included as the hinge variant (http://www.bricklink...tem.asp?P=2578b). It was later changed, so that in 4.3.5 we now have the towball variant (http://www.bricklink...tem.asp?P=2578a). I can't remember the exact time the change was made, but it must have been sometime in 2012, either at the January or the September update. Thus older LXF files created with the hinge variant will no longer load this piece, as the 'new' 2578 won't fit with the hinge plates like 3938. It might be a bit tricky that two distinct parts share the same number (and generally part 2578 wasn't used in that much sets in either version), however in order to being able building the street sweeper 6645 I want the old hinge variant back. But don't remove the towball variant, include them both, perhaps with new and distinct part numbers like 25781 and 25782 which are according to bricklink still free to use.

Hello. I'm not quite sure if it is a bug or not, as I have no physical bricks at hand to test if it's possible in 'real life', but shouldn't the flat tiles and plates like 2412, 59489, 3069, 3794, 87580, 63864, 2431, 6636, 4162, 3068, 2460, 6881 or 10202 slide into the slot of 2653? Currently only the plate 32028 and the lamellas 4218 and 4219 seem to attach properly to that slot. Although you can workaround it by using some helper constructions with 3794 and/or 87580, all flat tiles and plates should fit into 2653, shouldn't they? Can anyone confirm this to be a bug? (Sorry, as a newbie I'm apparently not yet allowed to attach images or LXF files to make this issue more obvious, but I hope you get the point nevertheless.)

Hello to everyone. Call me pbat. I'm from Germany and decided finally to join this great communtiy after doing some passive reading here on Eurobricks for about a year. Lacking proper space during army time and university, all my Lego got to the attic. When I read an article about the Unimog U400 (https://www.heise.de...ego-Unimog-U400), I became interested in Lego again. City, Pirates, Trains and Technic are my favorite themes, especially when they are from the late 80s. I'm open for newer stuff too, unless it's Ninjago or Herofactory, which I both can't stand for some reason. As I still lack proper space, however, I'm now focusing on LDD and other digital tools. You'll thus find me presumably in this section of Eurobricks.