News for hackers. Stuff that matters.

A comment on Fast-Paced Multiplayer (Part I): Client-Server Game Architecture. Parent comment

Re:Fast-Paced Multiplayer (Part I): Client-Server Game Archi... by tshaddox on Tuesday October 26, 2021 @04:54PM (#29006120)
I'm not sure exactly what you mean. If it's a web API request from a web client that says "transfer $1,000 between account A and account B," then what choice do you have but to "trust" that number? Obviously you have to check whether the request is authenticated and is authorized to transfer between those accounts, and check if account A has $1,000, but what about the client origin of the request do you need to check?
[ Parent | on HN ]
Re:Fast-Paced Multiplayer (Part I): Client-Server Game Archi... by skipants on Tuesday October 26, 2021 @04:58PM (#29006164)
> and check if account A has $1,000

It was a convoluted example for examples sake, but I'm pretty much referring to them missing this important check here.

[ Parent | on HN ]
Re:Fast-Paced Multiplayer (Part I): Client-Server Game Archi... by Tainnor on Tuesday October 26, 2021 @05:21PM (#29006429)
I mean since we're talking about banking:

- Generate a transaction number and associate that number with the respective transaction details

- Send this number to the customer's mobile phone with all those details, or other configured device

- the transfer is only authorised if the customer has entered the transaction number

That way, the customer is very likely to have verified the details of the transfer.

[ Parent | on HN ]
Re:Fast-Paced Multiplayer (Part I): Client-Server Game Archi... by wibagusto on Tuesday October 26, 2021 @09:28PM (#29008604)
Do you really mean that?
[ Parent | on HN ]
Re:Fast-Paced Multiplayer (Part I): Client-Server Game Archi... by Tainnor on Wednesday October 27, 2021 @03:49AM (#29010598)
Yes of course.

This is the standard way online banking has been operating in, I believe, much of Europe since practically forever (although it used to be physical lists before smartphones were popular).

[ Parent | on HN ]
Re:Fast-Paced Multiplayer (Part I): Client-Server Game Archi... by nend on Tuesday October 26, 2021 @05:35PM (#29006595)
They're just saying to validate user input.
[ Parent | on HN ]