News for hackers. Stuff that matters.
Re:Never trust the client by golergka on Wednesday April 27, 2016 @06:50PM (#11585233)
Not every.

Right now I'm working on an app where we trust the client. We know that a hacker can compromise a client and send any kind of bogus data, we're just completely OK with it from business perspective.

Re:Never trust the client by andyburke on Wednesday April 27, 2016 @08:23PM (#11585747)
Can you give any more insight into this product? Curious what kind of product would have that be ok from a business perspective...
Re:Never trust the client by golergka on Thursday April 28, 2016 @03:37AM (#11587086)
Eye training app with server creating parameters of the next training session (based on the whole training history and some data analysis magic). If you want to get a training seasion that doesn't fir your real results — go ahead, we don't care.
Re:Never trust the client by bluejekyll on Wednesday April 27, 2016 @11:09PM (#11586337)
What I'm trying to figure out isn't the business option where it's ok, but the business where you actively are avoiding doing it.

I mean why not just do it the right way?

Re:Never trust the client by Ogre on Thursday April 28, 2016 @12:47AM (#11586607)
You can handle orders of magnitude more users with the same hardware if you don't have to run the game simulation on the server.
Re:Never trust the client by cmdrfred on Wednesday April 27, 2016 @09:12PM (#11585939)
Closed network with locked down terminals?