Security update for Nexus Mod Manager

  • Comment

Today we are releasing some security updates for the Nexus Mod Manager to bring us in line with the new EU GDPR rules coming into force next month.

NMM has been "end-of-line" since 2016, which means we no longer provide any official support for the software, but we thought it was prudent to spend the time and money to release this update so our users could continue to use the software's online services while ensuring we're compliant with the new regulations. We also did not want people to think we were using the GDPR as an excuse to force people on to our new mod manager, Vortex, either. The alternative was to simply turn off the old services completely, essentially making NMM, and any other software using our old login services, offline only.

To prevent any drama with this process, we've even patched up version 0.52.3 of NMM (the last version before the profile functionality was added) so there are no complaints.

In order to be compliant, we need to turn off our old, less secure login to the web services completely. We plan to do this on Tuesday the 8th of May. This will mean anyone who does not update their NMM will no longer be able to use NMM online. This will prevent you from being able to login, check for new file versions or download mods from the site directly in to NMM. This will also affect any other software that uses the old login destination and method, for example, Mod Organizer. We do not officially support Mod Organizer, nor is it made, updated or maintained by us, so any updates needed to ensure it works with our new login service will need to be handled by the team behind Mod Organizer. If you are currently a coder with software making use of the old Nexus login system, please do get in contact via PM or Discord and I will put you through to the appropriate person to help you get on to the newer system as soon as possible.

For convenience, both updated versions of NMM can be found on a new file page setup to make this a little easier. Remember, download 0.65.0 if you are using a version of NMM that is 0.60.x or later. Download 0.52.4 if you are using version 0.52.3 of NMM.

Apologies for the inconvenience caused, but it's 8 year old code now and, at some point, this was going to happen!

403 comments

  1. mejille
    mejille
    • member
    • 31 posts
    • 0 kudos
    06/20/2018 / 9:25am / NMM 65.2 with this page security update added. Skyrim Downloaded SkyUI. 9 OK ) Now click green check to install . ( Here is what I get). > A pop-up window, that says : An exception occured in the script. click Ok or see details: details say > System. Reflection. TargetInvocationException: Exception has been thrown by target of an invocation--> System.SecurityException: Request for permission, EnviromentPermission,mscorlib, Version=4.0.0.0, Culture=nutral, PublicKey Token=b77a5c561934e089' failed, Server stack trace: at System,Security,CodeAccessSewcurityEngine,Check (Object demand, StackCrawlMark& stackMark,Boolean isPermSet) at System.Security.CodeAccessPermission.Demand0 at System.IO.Path.Get TempPath0 at Nexus.Client.EnviromentInfo.get_TemporaryPath 0 at Nexus.Client.Mods.Format.FOMod.GetFileSteam (String p_strFile) at Nexus.Clirnt. ModManagement.ModFileInstaller.InstallFileFromMod(String p_strModFilePath, String p_strinstallPath) at Nexus,Client, ModManagement,BasicInstallTask,DoWork (Object[] p_objArgs) at Nexus.Client, ThreadedBackgroundTask.Run ThreadedWork(Object p_objArgs at System.Runtime.Remoting Messaging.StackBuilderSink_PrivateProcessMessage(IntPtr md, Object[] args, Object server, Object[]&outArgs at System, Runtime. Remoting. Messaging. SackBuilderSink.AsyncProcessMessage(IMessage msg. IMessageSink.replySink) Exception rethrown at [0]: at System,Runtime,Remoting,Proxies,RealProxy.EndInvokeHelper(Message regMsg, Boolean bProxyCase) at System.Runtime. Remoting, Proxies.RemotingProxy.Invoke(Obkect NotUsed, MessageData&msgData) at System,Func'2.EndInvoke(IAsyncResult,result)at Nexus.Clint. ThreadedBackgroundTask.StartWait(Boolean p_booRunInBackground, Object[]p_objArgs at Nexus.Client, ModManagement,BasicInstallTask,Excute O at Nexus,ClientModManagement.Scripting,ScriptFunctionProxy.PerformBasicInstall 0 at System,Runtime.Remoting.Messaging.StackBuilderSink_PrivateProcessMessage(IntPtr md. Object[] args, Object server, Object[]&outArgs)at System RuntimeRemoting Messaging.StackBuilderSink,SyncProcessMessage(IMessage msg) Exception rethrown at [1]:at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage regMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageDatya& msgData, Int 32type) at Nexus.Client.ModManagement.Scripting.CSharpScript.CSharpBaseScript.ExecuteMethod[T](Func'1 p_fncMethod)at Script.OnActivate0 The Action that failed was Demand The type of the first permission that failed was System,Security, Permission, EnvironmentPermission.>>>> SO How do I Solve all this to Install SKYUI and many other top mods that get this pop-up with Nexus Mod manager and will not enable? Like I said they (SkyUI) will download into Nmm, but it will not activate or enable.as many other top mods get the same pop-up . and will not enable.. Please give me the solution to this. Ty. and yes I have Archive Invalidation active..
    1. mejille
      mejille
      • member
      • 31 posts
      • 0 kudos
      Got it working .
    2. pkingbandos
      pkingbandos
      • member
      • 2 posts
      • 0 kudos
      how did you get it to work?
    3. hooppenn
      hooppenn
      • premium
      • 80 posts
      • 0 kudos
      After hours of research, window 10 64 bit pro; and the new win 10 security update , along with NMM security update. : Open Nexus Mod manager : At top left where you see the wheels between the Folder and light bulb click onto the wheels and in (General) check mark all top (Association) 3 boxes , make sure all are enabled.. After I did that All works ok now . I do not get security issue with SkYUI and it will. install and enable now...Unlike before where I could install SkyUI but when trying to enable the mod, it would not enable. It works ok Now. That is all I did. after Hours upon Hours of looking for answers....
    4. songbird1337
      songbird1337
      • member
      • 1 posts
      • 0 kudos
      you are a damn saint
  2. kenshin6
    kenshin6
    • member
    • 27 posts
    • 0 kudos


     
    In response to post #61116297. #61118342, #61119892 are all replies on the same post.


    Spoiler:  
    Show

    Services may be for free, But As you see I am a premium. I did pay, what for now, I am not sure. All I no is, I have a reciept to PROVE I paid NMM. Site. Thank You ..
     


    With all due respect, you paid for exactly what the premium membership page says, no advertisements and uncapped download speed.  When you agreed to pay for premium membership, you knew what you were getting into.
    1. mejille
      mejille
      • member
      • 31 posts
      • 0 kudos
      U no , u r right. That is not the point I was Making. The point is I Paid. Money out of my pocket, not anyone else's. Maybe one day u can spend your money on premium , instead of Member. Thank U ..
  3. TheGreatFalro
    TheGreatFalro
    • supporter
    • 484 posts
    • 14 kudos


     
    In response to post #61083792. #61084482 is also a reply to the same post.


    Spoiler:  
    Show

    SO as a payer of NMM if we did pay for a non fuctional NMM by Law, why in the heck was that not mentioned when we paid for it ? Or was that in the Small corner print of the agreement so small no one could read. Why are We premium payers left without a functioning Mod manager ?
     


    You didn't "pay" for anything.  You gave a completely option donation to help with the upkeep of the site.  You're not a customer, and you're not owed anything.
     
    BTW, both NMM and Vortex still work perfectly fine, so really your entire argument is crap.
    1. hooppenn
      hooppenn
      • premium
      • 80 posts
      • 0 kudos
      Your Answer is pure Sit. NMM and Vortex DOES NOT WORK FINE> that is a pure LIE. Get your BS together. IF it works so dam fine, why than does NMM and Vortex not install over Half of the most famous used Mods, SkyUI, just one of Many, many Mods that can JUST install, But will not activate at all . Security Script Error every time you try to enable them. Many many Mods are like that. ..Period. It's nice to see that some NMM so called maybe Reps cannot even give a civil answer , but instead, has to be a Smart As, with a un-logical answer..Period
    2. TheGreatFalro
      TheGreatFalro
      • supporter
      • 484 posts
      • 14 kudos
      Have you posted a bug report on the NMM Github? I suggest you do that if you've found an issue.

      EDIT: And what, exactly is the problem with Vortex? NMM may have issues, but as far as I know, VX does not.

      EDIT2: BTW, I do not represent the Nexus or NMM in any way. I'm just a disgruntled user like you who's fed up with people slinging crap when they receive these services FOR FREE.
    3. hooppenn
      hooppenn
      • premium
      • 80 posts
      • 0 kudos
      Services may be for free, But As you see I am a premium. I did pay, what for now, I am not sure. All I no is, I have a reciept to PROVE I paid NMM. Site. Thank You ..
  4. EugeneSolario
    EugeneSolario
    • member
    • 75 posts
    • 0 kudos
    I guess with NMM Being Broken, It gives me a reason to Use FOMM.
  5. Jishkah
    Jishkah
    • premium
    • 58 posts
    • 0 kudos


     
    BTW, both NMM and Vortex still work perfectly fine, so really your entire argument is crap.
     


    Try to install New Vegas Anti-Crash for Fallout: New Vegas under Nexus Mod Manager.
     
    I'll wait.
    1. hooppenn
      hooppenn
      • premium
      • 80 posts
      • 0 kudos
      Yess and if it works so perfectly, try to also install SkyUI for Skyrim. through Nmm.
  6. Jishkah
    Jishkah
    • premium
    • 58 posts
    • 0 kudos
    The current "official" mod manager of Nexus Mods (y'know, the one that's advertised and linked to on the front page) is broken, and its replacement - Vortex - is currently in open alpha and not officially stable enough for general use. That leaves absolutely zero Nexus Mods-sponsored/developed mod managers in working, stable condition, and it's been left this way for almost two months.
     
    What the hell is going on?
     
    I know that there are replacements, such as Mod Organizer, Mod Organizer 2, Fallout Mod Manager, et cetera, but do you mean to tell me that Nexus Mods doesn't currently have a fully-functional, "recommended", feature-complete mod manager at all? Better yet, the version of Nexus Mod Manager being linked to on the front page before the GDPR patch was applied worked perfectly - which means that the GDPR patch (which, I assume, wouldn't have been what's causing all of these issues) was probably applied to a later internal version (or a version hosted on Github, at least) that was borked somewhere along the line. Why even do that? Why not just patch the existing linked version?
     
    I don't get it. Honestly, I use Nexus Mod Manager for convenience and ease of use. I could use Mod Organizer 2, but I don't want to take the time out of my day learning how to use something new when Nexus Mod Manager, for all intents and purposes, got the job done for me in the past with zero issues. I get that it's eventually going to be phased out in favor of Vortex, but until the little button on the top of the front page links to Vortex and not Nexus Mod Manager, that time hasn't yet officially come - so to leave it linked to, frankly, a broken version of Nexus Mod Manager is ridiculous, especially after having paid ~$67 for a premium pass to support the site and its services.
     
    As a (literal) paying customer, get your s*** together.
    1. Dark0ne
      Dark0ne
      • Site Owner
      • 19,657 posts
      • 2,200 kudos
      but do you mean to tell me that Nexus Mods doesn't currently have a fully-functional, "recommended", feature-complete mod manager at all?


      I think you might be confused, we've never had a fully-functional or feature-complete mod manager at Nexus Mods.

      The rest is a bit of a moot point because, frankly, we were under no obligation ("paying customer" or not) to try and patch up NMM to work within the bounds of the law, as we discontinued support for NMM years ago. It would have been far easier for us to simply turn off the NMM server, save a boatload of time and money, and simply tell people to install their mods via drag-and-drop in NMM until Vortex is ready. And frankly, nothing is stopping you from going back to an old "working" version of NMM if you don't approve of the latest version. All you'd need to change in your modding habits is to download mods manually and then drag and drop them into NMM.

      The pathetic vitriol shown by some elements of this community really isn't making me want to keep NMM services running for much longer.

      get your s*** together


      Mhmm. Pot, kettle.
    2. hooppenn
      hooppenn
      • premium
      • 80 posts
      • 0 kudos
      SO as a payer of NMM if we did pay for a non fuctional NMM by Law, why in the heck was that not mentioned when we paid for it ? Or was that in the Small corner print of the agreement so small no one could read. Why are We premium payers left without a functioning Mod manager ?
  7. hooppenn
    hooppenn
    • premium
    • 80 posts
    • 0 kudos
    Well Dark0ne tell me where we can get an old version of NMM that works ? So far Gethub has old ones that you cannot even download. Ones with no download, 63.19, - 64.0 - 64.1 -64.2 - 64.3 - and 65.4 you can download but does not work does not accept any login at all,No login detected. it says= error says server off line..Now, 65.2 - 65.3 - 65.4 - 65.5 - and 65.6 you can download But Many Mods from Skyrim, including SkyUI will download, but when you go to install it, it has Security script error and will not install via, Manual install or Download NMM green check mark to install . Same for many, many other Skyrim Mods, Fallout 4 mods and many other game mods. yes even Fallout 3 Mods. All same problem. Guess I need to learn Mod organizer, does anyone no if it works with Skyrim, Fallout 4 and Fallout 3 , and Elder-Srolls online ? or just wait til Fallout 76 comes out.
  8. hooppenn
    hooppenn
    • premium
    • 80 posts
    • 0 kudos
    Skyrim - SkyUI will not work even if you install manual. I tried both ways and still get error security script error, even I turned off firewall and antivirus. it will not install at all . Ho Hum..I'll just wait for Fallout 76... Money is for nothing, and NMM was not free, I helped pay for it, as many others DID. I last when i checked, that is why it says premium.
  9. SweMrB
    SweMrB
    • member
    • 5 posts
    • 0 kudos
    My main problem with Vortex Is the size. I don't need a weird interface, and while 60MB isn't a large download, it is still 10 times that of NMM. Not to mention that the installed package is 230MB vs not even 30MB. Really?
    1. BlueFlamedLords
      BlueFlamedLords
      • member
      • 2 posts
      • 0 kudos
      I mean if size of something so small is an issue, you may as well go all the way, and get a command line interface, instead of your graphical user interface as you don't "need a weird interface", so may as well go back to Windows 98.

      I look forward to hearing about the results of getting rid of your unnecessarily large file for your GUI and telling me how well a CLI goes. Much love. <3
  10. Jishkah
    Jishkah
    • premium
    • 58 posts
    • 0 kudos


     
    In response to post #61083792.


    Spoiler:  
    Show


    but do you mean to tell me that Nexus Mods doesn't currently have a fully-functional, "recommended", feature-complete mod manager at all?

    I think you might be confused, we've never had a fully-functional or feature-complete mod manager at Nexus Mods.

    The rest is a bit of a moot point because, frankly, we were under no obligation ("paying customer" or not) to try and patch up NMM to work within the bounds of the law, as we discontinued support for NMM years ago. It would have been far easier for us to simply turn off the NMM server, save a boatload of time and money, and simply tell people to install their mods via drag-and-drop in NMM until Vortex is ready. And frankly, nothing is stopping you from going back to an old "working" version of NMM if you don't approve of the latest version. All you'd need to change in your modding habits is to download mods manually and then drag and drop them into NMM.

    The pathetic vitriol shown by some elements of this community really isn't making me want to keep NMM services running for much longer.


    get your s*** together

    Mhmm. Pot, kettle.
     


    Nexus Mod Manager has always been in public beta, but it's always worked. Likewise, it has always been linked to on the front page - indicating that it's the "official" mod manager of Nexus Mods, albeit currently unsupported. Even though it hasn't had any major updates in quite some time, it was stable enough for general use, justifying its continued presence on the front page, and has remained so until only recently.
     
    Vortex is still in public alpha, and whilst it's considered to be the official mod manager of Nexus Mods by site staff, it's not yet recommended for general use. Which is okay; alpha is alpha. But I really do think that it's disingenuous to continue to have a currently non-functioning version of Nexus Mod Manager linked on the front page. If it's not officially supported, and currently has glaring bugs that prevents a wide assortment of crucial mods from being installed, why even link to it on the front page as a recommended mod manager to use? And that's ignoring the fact that there is no currently recommended replacement, should Nexus Mod Manager be dropped, entirely. That's where I'm coming from with my frustrations - the fact that we were at least left with a stable "default" before the GDPR patch was implemented, and now we have none - and have had none for quite some time.
     
    I appreciate the time being taken to continue to update Nexus Mod Manager, regardless, after being officially unsupported, but when the current version has glaring bugs that break crucial functionality that were introduced only recently and Vortex is still in an alpha state that isn't recommended for general use, that leaves the current state of things in a really frustrating place for me and many other users.
REPORT BUG
Top