Tamper Chrome extension to modify requests in flight

Re:Tamper Chrome extension to modify requests in flight by niilzon on Tuesday April 25, 2017 @08:34AM (#14192821)

If you believe 2 years of CS are required to achieve this.. Anybody with a brain can exploit this classic, basic flaw, without any CS studies but just some curiosity. Sorry to put it blundly like this though.

[ Parent | on HN ]

Re:Tamper Chrome extension to modify requests in flight by Gracana on Tuesday April 25, 2017 @10:53AM (#14194038)

Does it require a CS degree to tell the author was joking, or can anyone with a brain do that, too?

[ Parent | on HN ]

Re:Tamper Chrome extension to modify requests in flight by zulln on Tuesday April 25, 2017 @09:28AM (#14193283)

Eh hm... are you sure you replied to the correct comment?

[ Parent | on HN ]

Re:Tamper Chrome extension to modify requests in flight by DorothySim on Tuesday April 25, 2017 @11:06AM (#14194159)

Probably yes. Sending scores in HTTP requests is such a low-hanging fruit for exploitation.

A friend of mine was responsible for scoring system on games. As they had some real awards (like bikes, tickets etc.) they captured the entire flow of the game with various statistics and later analyzed them for weird variations. That was in Flash and people used browser plugins to slow down the play, that was easy to spot. Of course it won't stop 100% of attacks, but it raises a bar sufficiently to thwart most attempts.

[ Parent | on HN ]