Re:Tamper Chrome extension to modify requests in flight
by tomglynch on Tuesday April 25, 2017 @02:30AM
(#14191245)
Your blog post is very interesting, replicated it in a game against some of my friends too. Very easy.
Re:Tamper Chrome extension to modify requests in flight
by niilzon on Tuesday April 25, 2017 @08:34AM
(#14192821)
If you believe 2 years of CS are required to achieve this.. Anybody with a brain can exploit this classic, basic flaw, without any CS studies but just some curiosity. Sorry to put it blundly like this though.
Re:Tamper Chrome extension to modify requests in flight
by Gracana on Tuesday April 25, 2017 @10:53AM
(#14194038)
Does it require a CS degree to tell the author was joking, or can anyone with a brain do that, too?
Re:Tamper Chrome extension to modify requests in flight
by zulln on Tuesday April 25, 2017 @09:28AM
(#14193283)
Eh hm... are you sure you replied to the correct comment?
Re:Tamper Chrome extension to modify requests in flight
by DorothySim on Tuesday April 25, 2017 @11:06AM
(#14194159)
Probably yes. Sending scores in HTTP requests is such a low-hanging fruit for exploitation.
A friend of mine was responsible for scoring system on games. As they had some real awards (like bikes, tickets etc.) they captured the entire flow of the game with various statistics and later analyzed them for weird variations. That was in Flash and people used browser plugins to slow down the play, that was easy to spot. Of course it won't stop 100% of attacks, but it raises a bar sufficiently to thwart most attempts.
I was amazed at how simple it was to use. Pretty full-featured, as well.
[0]: http://kevinwang.us/cheating-a-guide-to-achieving-high-score...