News for hackers. Stuff that matters.
Re:Google is shutting down Stadia by shadowgovt on Thursday September 29, 2022 @01:54PM (#33024616)
No problem. So in general: yes, it's not always trivial to crack a locally-hosted binary but it's generally possible. It can often be done by actually modifying the binary itself (it's just machine code; if, for example, the entire check is evaluated by one "Call out to the server to find out if we're authorized" function that returns a boolean, you can just replace the first few bytes in its machine code with "LDA $FF # true ; RETURN" and the function will think you're always registered. If it's more complicated, you could maybe run a proxy server locally that pretends to be the check server and always returns "authorized" for the query.

Assuming everyone's playing by the rules, I can see how an NFT could be used to indicate when someone has an ownership license to play a game (but not the mechanics of how that right would be enforced were someone to patch their local copy to just ignore the rights check). If the game is cloud-hosted, this is easier to enforce.

Re:Google is shutting down Stadia by kinakomochidayo on Thursday September 29, 2022 @02:05PM (#33024776)
Ooh very interesting, thanks for explaining!

From reading others replies too, it does looks like client-only mechanism on its own is weak compared to having checks on both the client and server..